Free Essay

Wireshark Tcp Output

In: Computers and Technology

Submitted By dogunbode
Words 113549
Pages 455
No.

Time 1 0.000000

Source Hewlett- 69:b3:1a

Destination Broadcast

Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 1: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 2 0.000000 Source 192.168.1.109 Destination 239.255.255.250 Protocol Length Info SSDP 175 M-SEARCH * HTTP/1.1

Frame 2: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: IntelCor 56:de:52 (88:53:2e:56:de:52), Dst: IPv4mcast 7f:ff:fa (01:00:5e:7f:ff:fa Internet Protocol Version 4, Src: 192.168.1.109 (192.168.1.109), Dst: 239.255.255.250 (239.255.255. User Datagram Protocol, Src Port: 57629 (57629), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time 3 0.000000 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 90 Application Data

Frame 3: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17396 (17396), Dst Port: imaps (993), Seq: 1, Ack: 1, Len: Source port: 17396 (17396) Destination port: imaps (993) [Stream index: 1] Sequence number: 1 (relative sequence number) [Next sequence number: 37 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65425 [Calculated window size: 65425] [Window size scaling factor: -1 (unknown)] Checksum: 0x5455 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 4 0.060952 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 114 Application Data

Frame 4: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17396 (17396), Seq: 4294967237, Ack Source port: imaps (993) Destination port: 17396 (17396) [Stream index: 1] Sequence number: 4294967237 (relative sequence number) [Next sequence number: 1 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -1 (unknown)] Checksum: 0x9cc4 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 5 0.000107 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 66 [TCP Dup ACK 3#1] 1

Frame 5: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10

Transmission Control Protocol, Src Port: 17396 (17396), Dst Port: imaps (993), Seq: 37, Ack: 1, Len Source port: 17396 (17396) Destination port: imaps (993) [Stream index: 1] Sequence number: 37 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 65425 [Calculated window size: 65425] [Window size scaling factor: -1 (unknown)] Checksum: 0xfc7b [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 6 0.219423 Source HonHaiPr 14:0e:06 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 6: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 7 0.608434 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 7: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 8 0.622594 Source Cisco be:41:f9 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 8: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 9 0.625174 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17396 [ACK]

Frame 9: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17396 (17396), Seq: 1, Ack: 37, Len Source port: imaps (993) Destination port: 17396 (17396) [Stream index: 1] Sequence number: 1 (relative sequence number) Acknowledgement number: 37 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -1 (unknown)] Checksum: 0x14e9 [validation disabled] [SEQ/ACK analysis] No. Time 10 0.104098 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 10: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time Source Destination Protocol Length Info

11 0.160053

HonHaiPr 14:0e:06

Broadcast

ARP

60

Who has 192.168.1.1

Frame 11: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 12 0.172925 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 96 Application Data

Frame 12: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17396 (17396), Seq: 1, Ack: 37, Len Source port: imaps (993) Destination port: 17396 (17396) [Stream index: 1] Sequence number: 1 (relative sequence number) [Next sequence number: 43 (relative sequence number)] Acknowledgement number: 37 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -1 (unknown)] Checksum: 0xdceb [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 13 0.000274 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 90 Application Data

Frame 13: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17396 (17396), Dst Port: imaps (993), Seq: 37, Ack: 43, Len Source port: 17396 (17396) Destination port: imaps (993) [Stream index: 1] Sequence number: 37 (relative sequence number) [Next sequence number: 73 (relative sequence number)] Acknowledgement number: 43 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65383 [Calculated window size: 65383] [Window size scaling factor: -1 (unknown)] Checksum: 0x5d68 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 14 0.250620 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17396 > imaps [FIN,

Frame 14: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17396 (17396), Dst Port: imaps (993), Seq: 73, Ack: 43, Len Source port: 17396 (17396) Destination port: imaps (993) [Stream index: 1] Sequence number: 73 (relative sequence number) Acknowledgement number: 43 (relative ack number) Header length: 20 bytes Flags: 0x11 (FIN, ACK) Window size value: 65383 [Calculated window size: 65383]

[Window size scaling factor: -1 (unknown)] Checksum: 0x5402 [validation disabled] No. Time 15 0.008695 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 62 17397 > imaps [SYN]

Frame 15: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 0, Len: 0 Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) Window size value: 8192 [Calculated window size: 8192] Checksum: 0x9509 [validation disabled] Options: (8 bytes) No. Time 16 0.142731 Source 192.168.1.110 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 16: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: HonHaiPr_13:b9:3a (94:39:e5:13:b9:3a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.110 (192.168.1.110), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 17 0.147397 Source 192.168.1.110 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 17: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: HonHaiPr_13:b9:3a (94:39:e5:13:b9:3a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.110 (192.168.1.110), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 18 0.147914 Source 192.168.1.110 Destination 192.168.1.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 18: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: HonHaiPr_13:b9:3a (94:39:e5:13:b9:3a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.110 (192.168.1.110), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 19 0.148242 Source 192.168.1.110 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 19: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: HonHaiPr_13:b9:3a (94:39:e5:13:b9:3a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.110 (192.168.1.110), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 20 0.148677 Source 192.168.1.110 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 20: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: HonHaiPr_13:b9:3a (94:39:e5:13:b9:3a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.110 (192.168.1.110), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol

No.

Time 21 0.156657

Source Cisco 29:49:0f

Destination PVST+

Protocol Length Info STP 64 Conf. Root = 32768/

Frame 21: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 22 0.171474 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 22: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 23 0.392863 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17396 [ACK]

Frame 23: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17396 (17396), Seq: 43, Ack: 73, Len Source port: imaps (993) Destination port: 17396 (17396) [Stream index: 1] Sequence number: 43 (relative sequence number) Acknowledgement number: 73 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -1 (unknown)] Checksum: 0x149b [validation disabled] [SEQ/ACK analysis] No. Time 24 0.216326 Source 192.168.1.24 Destination 239.255.255.250 Protocol Length Info SSDP 175 M-SEARCH * HTTP/1.1

Frame 24: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: CompalIn e9:cd:c3 (00:23:5a:e9:cd:c3), Dst: IPv4mcast 7f:ff:fa (01:00:5e:7f:ff:fa Internet Protocol Version 4, Src: 192.168.1.24 (192.168.1.24), Dst: 239.255.255.250 (239.255.255.25 User Datagram Protocol, Src Port: 57485 (57485), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time 25 0.217121 Source 169.254.134.253 Destination 239.255.255.250 Protocol Length Info SSDP 175 M-SEARCH * HTTP/1.1

Frame 25: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: HonHaiPr 13:4b:e5 (00:25:56:13:4b:e5), Dst: IPv4mcast 7f:ff:fa (01:00:5e:7f:ff:fa Internet Protocol Version 4, Src: 169.254.134.253 (169.254.134.253), Dst: 239.255.255.250 (239.255. User Datagram Protocol, Src Port: 57484 (57484), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time 26 0.221478 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 89 Application Data

Frame 26: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17396 (17396), Seq: 43, Ack: 73, Len Source port: imaps (993) Destination port: 17396 (17396) [Stream index: 1] Sequence number: 43 (relative sequence number) [Next sequence number: 78 (relative sequence number)]

Acknowledgement number: 73 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -1 (unknown)] Checksum: 0x956c [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 27 0.000092 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17396 > imaps [RST,

Frame 27: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17396 (17396), Dst Port: imaps (993), Seq: 74, Ack: 78, Len Source port: 17396 (17396) Destination port: imaps (993) [Stream index: 1] Sequence number: 74 (relative sequence number) Acknowledgement number: 78 (relative ack number) Header length: 20 bytes Flags: 0x14 (RST, ACK) Window size value: 0 [Calculated window size: 0] [Window size scaling factor: -1 (unknown)] Checksum: 0x5343 [validation disabled] [SEQ/ACK analysis] No. Time 28 0.065097 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 28: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 29 0.102680 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 29: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 30 0.113215 Source HonHaiPr 14:0e:06 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 30: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 31 0.129910 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17396 [FIN,

Frame 31: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17396 (17396), Seq: 78, Ack: 74, Len Source port: imaps (993) Destination port: 17396 (17396) [Stream index: 1] Sequence number: 78 (relative sequence number) Acknowledgement number: 74 (relative ack number) Header length: 20 bytes

Flags: 0x11 (FIN, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -1 (unknown)] Checksum: 0x1476 [validation disabled] [SEQ/ACK analysis] No. Time 32 0.001622 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 62 imaps > 17397 [SYN,

Frame 32: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 0, Ack: 1, Len: Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) Window size value: 1430 [Calculated window size: 1430] Checksum: 0x416e [validation disabled] Options: (8 bytes) [SEQ/ACK analysis] No. Time 33 0.000189 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17397 > imaps [ACK]

Frame 33: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 1, Ack: 1, Len: Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x739b [validation disabled] [SEQ/ACK analysis] No. Time 34 0.000700 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 204 Client Hello

Frame 34: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 1, Ack: 1, Len: Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 1 (relative sequence number) [Next sequence number: 151 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x61b5 [validation disabled]

[SEQ/ACK analysis] Secure Sockets Layer No. Time 35 0.334861 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 62 imaps > 17397 [SYN,

Frame 35: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 0, Ack: 1, Len: Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) Window size value: 1260 [Calculated window size: 1260] Checksum: 0x4218 [validation disabled] Options: (8 bytes) No. Time 36 0.000108 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 66 [TCP Dup ACK 34#1]

Frame 36: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 151, Ack: 1, Len Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 151 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x621c [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 37 0.454465 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17397 [ACK]

Frame 37: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 1, Ack: 151, Len Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 1 (relative sequence number) Acknowledgement number: 151 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 15008 [Calculated window size: 15008] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3856 [validation disabled] [SEQ/ACK analysis] No. Time 38 0.012226 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 1314 Server Hello

Frame 38: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 1, Ack: 151, Len Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 1 (relative sequence number) [Next sequence number: 1261 (relative sequence number)] Acknowledgement number: 151 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 15008 [Calculated window size: 15008] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4c12 [validation disabled] [SEQ/ACK analysis] TCP segment data (1170 bytes) Secure Sockets Layer No. Time 39 0.001365 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 39: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 40 0.004281 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 503 Certificate, Server

Frame 40: 503 bytes on wire (4024 bits), 503 bytes captured (4024 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 1261, Ack: 151, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 1261 (relative sequence number) [Next sequence number: 1710 (relative sequence number)] Acknowledgement number: 151 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 15008 [Calculated window size: 15008] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe1f4 [validation disabled] [SEQ/ACK analysis] TCP segment data (449 bytes) [2 Reassembled TCP Segments (1619 bytes): #38(1170), #40(449)] Secure Sockets Layer No. Time 41 0.000162 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17397 > imaps [ACK]

Frame 41: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 151, Ack: 1710, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 151 (relative sequence number) Acknowledgement number: 1710 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520

[Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6c58 [validation disabled] [SEQ/ACK analysis] No. Time 42 0.001030 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 240 Client Key Exchange

Frame 42: 240 bytes on wire (1920 bits), 240 bytes captured (1920 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 151, Ack: 1710, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 151 (relative sequence number) [Next sequence number: 337 (relative sequence number)] Acknowledgement number: 1710 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd42d [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 43 0.094218 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 43: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 44 0.129628 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 44: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 45 0.186809 Source 192.168.1.109 Destination 239.255.255.250 Protocol Length Info SSDP 175 M-SEARCH * HTTP/1.1

Frame 45: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: IntelCor 56:de:52 (88:53:2e:56:de:52), Dst: IPv4mcast 7f:ff:fa (01:00:5e:7f:ff:fa Internet Protocol Version 4, Src: 192.168.1.109 (192.168.1.109), Dst: 239.255.255.250 (239.255.255. User Datagram Protocol, Src Port: 57629 (57629), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time 46 0.414910 Source 192.168.1.17 Destination 192.168.1.255

Protocol Length Info BROWSER 243 Host Announcement LA

Frame 46: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: CompalIn_e9:cc:c8 (00:23:5a:e9:cc:c8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.17 (192.168.1.17), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol

No.

Time 47 0.415804

Source 192.168.1.102

Destination 192.168.1.255

Protocol Length Info BROWSER 243 Host Announcement LA

Frame 47: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits) Ethernet II, Src: HonHaiPr_13:49:11 (00:25:56:13:49:11), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.102 (192.168.1.102), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time 48 0.601324 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 48: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 49 0.621034 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 49: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 50 0.751945 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 101 Change Cipher Spec,

Frame 50: 101 bytes on wire (808 bits), 101 bytes captured (808 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 1710, Ack: 337, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 1710 (relative sequence number) [Next sequence number: 1757 (relative sequence number)] Acknowledgement number: 337 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xbe87 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 51 0.001803 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 151 Application Data

Frame 51: 151 bytes on wire (1208 bits), 151 bytes captured (1208 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 1757, Ack: 337, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 1757 (relative sequence number) [Next sequence number: 1854 (relative sequence number)] Acknowledgement number: 337 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080

[Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb5da [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 52 0.000172 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17397 > imaps [ACK]

Frame 52: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 337, Ack: 1854, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 337 (relative sequence number) Acknowledgement number: 1854 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65376 [Calculated window size: 65376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6b9e [validation disabled] [SEQ/ACK analysis] No. Time 53 0.002205 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 96 Application Data

Frame 53: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 337, Ack: 1854, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 337 (relative sequence number) [Next sequence number: 379 (relative sequence number)] Acknowledgement number: 1854 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65376 [Calculated window size: 65376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9671 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 54 0.086860 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 54: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 55 0.239538 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 55: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 56 0.381632 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 56: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 57 0.432376 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 57: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 58 0.550464 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 252 Application Data

Frame 58: 252 bytes on wire (2016 bits), 252 bytes captured (2016 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 1854, Ack: 379, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 1854 (relative sequence number) [Next sequence number: 2052 (relative sequence number)] Acknowledgement number: 379 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x31ae [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 59 0.000956 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 114 Application Data

Frame 59: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 379, Ack: 2052, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 379 (relative sequence number) [Next sequence number: 439 (relative sequence number)] Acknowledgement number: 2052 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65178 [Calculated window size: 65178] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x23c7 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 60 0.285249 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 60: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service

No.

Time 61 0.785323

Source 173.194.67.109

Destination 192.168.1.125

Protocol Length Info TCP 60 imaps > 17397 [ACK]

Frame 61: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 2052, Ack: 439, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 2052 (relative sequence number) Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2b03 [validation disabled] [SEQ/ACK analysis] No. Time 62 0.076216 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 62: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 63 0.095460 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 63: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 64 0.256593 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 262 Application Data

Frame 64: 262 bytes on wire (2096 bits), 262 bytes captured (2096 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 2052, Ack: 439, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 2052 (relative sequence number) [Next sequence number: 2260 (relative sequence number)] Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4cfb [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 65 0.000676 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 90 Application Data

Frame 65: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 439, Ack: 2260, Source port: 17397 (17397) Destination port: imaps (993)

[Stream index: 3] Sequence number: 439 (relative sequence number) [Next sequence number: 475 (relative sequence number)] Acknowledgement number: 2260 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64970 [Calculated window size: 64970] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0eef [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 66 0.251236 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 66: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 67 0.267132 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 67: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 68 0.510212 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17397 [ACK]

Frame 68: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 2260, Ack: 475, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 2260 (relative sequence number) Acknowledgement number: 475 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2a0f [validation disabled] [SEQ/ACK analysis] No. Time 69 0.136673 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 69: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 70 0.252784 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 89 Application Data

Frame 70: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 2260, Ack: 475, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3]

Sequence number: 2260 (relative sequence number) [Next sequence number: 2295 (relative sequence number)] Acknowledgement number: 475 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7833 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 71 0.000428 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 85 Application Data

Frame 71: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 475, Ack: 2295, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 475 (relative sequence number) [Next sequence number: 506 (relative sequence number)] Acknowledgement number: 2295 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64935 [Calculated window size: 64935] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf34b [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 72 0.061540 Source 192.168.1.109 Destination 239.255.255.250 Protocol Length Info SSDP 175 M-SEARCH * HTTP/1.1

Frame 72: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: IntelCor 56:de:52 (88:53:2e:56:de:52), Dst: IPv4mcast 7f:ff:fa (01:00:5e:7f:ff:fa Internet Protocol Version 4, Src: 192.168.1.109 (192.168.1.109), Dst: 239.255.255.250 (239.255.255. User Datagram Protocol, Src Port: 57629 (57629), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time 73 0.074754 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 73: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 74 0.855999 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17397 [ACK]

Frame 74: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 2295, Ack: 506, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 2295 (relative sequence number) Acknowledgement number: 506 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080]

[Window size scaling factor: -2 (no window scaling used)] Checksum: 0x29cd [validation disabled] [SEQ/ACK analysis] No. Time 75 0.028276 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 75: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 76 0.142922 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 114 Application Data

Frame 76: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 2295, Ack: 506, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 2295 (relative sequence number) [Next sequence number: 2355 (relative sequence number)] Acknowledgement number: 506 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5292 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 77 0.000859 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 112 Application Data

Frame 77: 112 bytes on wire (896 bits), 112 bytes captured (896 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 506, Ack: 2355, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 506 (relative sequence number) [Next sequence number: 564 (relative sequence number)] Acknowledgement number: 2355 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64875 [Calculated window size: 64875] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3c35 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 78 0.018779 Source 192.168.1.24 Destination 239.255.255.250 Protocol Length Info SSDP 175 M-SEARCH * HTTP/1.1

Frame 78: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: CompalIn e9:cd:c3 (00:23:5a:e9:cd:c3), Dst: IPv4mcast 7f:ff:fa (01:00:5e:7f:ff:fa Internet Protocol Version 4, Src: 192.168.1.24 (192.168.1.24), Dst: 239.255.255.250 (239.255.255.25 User Datagram Protocol, Src Port: 57485 (57485), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time 79 0.019116 Source 169.254.134.253 Destination 239.255.255.250 Protocol Length Info SSDP 175 M-SEARCH * HTTP/1.1

Frame 79: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: HonHaiPr 13:4b:e5 (00:25:56:13:4b:e5), Dst: IPv4mcast 7f:ff:fa (01:00:5e:7f:ff:fa Internet Protocol Version 4, Src: 169.254.134.253 (169.254.134.253), Dst: 239.255.255.250 (239.255. User Datagram Protocol, Src Port: 57484 (57484), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time 80 0.036977 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 80: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 81 0.288361 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 81: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 82 0.491875 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 82: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 83 0.503589 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 83: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 84 0.689763 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17397 [ACK]

Frame 84: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 2355, Ack: 564, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 2355 (relative sequence number) Acknowledgement number: 564 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2957 [validation disabled] [SEQ/ACK analysis] No. Time 85 0.056139 Source 192.168.1.128 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 85: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: Hewlett-_42:4a:82 (9c:8e:99:42:4a:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff)

Internet Protocol Version 4, Src: 192.168.1.128 (192.168.1.128), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 86 0.062859 Source 192.168.1.128 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 86: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: Hewlett-_42:4a:82 (9c:8e:99:42:4a:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.128 (192.168.1.128), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 87 0.063229 Source 192.168.1.128 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 87: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: Hewlett-_42:4a:82 (9c:8e:99:42:4a:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.128 (192.168.1.128), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 88 0.063382 Source 192.168.1.128 Destination 192.168.1.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 88: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: Hewlett-_42:4a:82 (9c:8e:99:42:4a:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.128 (192.168.1.128), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 89 0.081322 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 383 Application Data

Frame 89: 383 bytes on wire (3064 bits), 383 bytes captured (3064 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 2355, Ack: 564, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 2355 (relative sequence number) [Next sequence number: 2684 (relative sequence number)] Acknowledgement number: 564 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd644 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 90 0.002177 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 100 Application Data

Frame 90: 100 bytes on wire (800 bits), 100 bytes captured (800 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 564, Ack: 2684, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 564 (relative sequence number) [Next sequence number: 610 (relative sequence number)] Acknowledgement number: 2684 (relative ack number)

Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64546 [Calculated window size: 64546] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xaa27 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 91 0.000498 Source 192.168.1.2 Destination 192.168.1.125 Protocol Length Info ICMP 70 Redirect

Frame 91: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 192.168.1.2 (192.168.1.2), Dst: 192.168.1.125 (192.168.1.125) Internet Control Message Protocol No. Time 92 0.308398 Source Cisco_29:49:0f Destination Cisco_29:49:0f Protocol Length Info LOOP 60 Reply

Frame 92: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_29:49:0f (00:24:f7:29:49:0f), Dst: Cisco_29:49:0f (00:24:f7:29:49:0f) Configuration Test Protocol (loopback) Data (40 bytes) 0000 0010 0020 No. 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Time 93 0.524798 Source 192.168.1.117 Destination 224.0.0.251 ................ ................ ........ Protocol Length Info MDNS 81 Standard query A re

Frame 93: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 94 0.777692 Source 192.168.1.125 Destination 172.24.68.170 Protocol Length Info SNMP 120 get-request 1.3.6.1

Frame 94: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 172.24.68.170 (172.24.68.170) User Datagram Protocol, Src Port: 49169 (49169), Dst Port: snmp (161) Simple Network Management Protocol No. Time 95 0.777836 Source 192.168.1.125 Destination 172.24.68.170 Protocol Length Info SNMP 120 get-request 1.3.6.1

Frame 95: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 172.24.68.170 (172.24.68.170) User Datagram Protocol, Src Port: 49169 (49169), Dst Port: snmp (161) Simple Network Management Protocol No. Time 96 0.777989 Source 192.168.1.125 Destination 172.24.68.170 Protocol Length Info SNMP 120 get-request 1.3.6.1

Frame 96: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 172.24.68.170 (172.24.68.170) User Datagram Protocol, Src Port: 49169 (49169), Dst Port: snmp (161) Simple Network Management Protocol No. Time Source Destination Protocol Length Info

97 0.778186

Toshiba ef:70:26

Broadcast

ARP

42

Who has 192.168.1.14

Frame 97: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 98 0.814871 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17397 [ACK]

Frame 98: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 2684, Ack: 610, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 2684 (relative sequence number) Acknowledgement number: 610 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x27e0 [validation disabled] [SEQ/ACK analysis] No. Time 99 0.065859 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 117 Application Data

Frame 99: 117 bytes on wire (936 bits), 117 bytes captured (936 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 2684, Ack: 610, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 2684 (relative sequence number) [Next sequence number: 2747 (relative sequence number)] Acknowledgement number: 610 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe774 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 100 0.000428 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 112 Application Data

Frame 100: 112 bytes on wire (896 bits), 112 bytes captured (896 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 610, Ack: 2747, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 610 (relative sequence number) [Next sequence number: 668 (relative sequence number)] Acknowledgement number: 2747 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64483 [Calculated window size: 64483] [Window size scaling factor: -2 (no window scaling used)]

Checksum: 0xb0ab [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 101 0.004998 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 62 17398 > http [SYN]

Frame 101: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 0, Len: 0 Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) Window size value: 8192 [Calculated window size: 8192] Checksum: 0x22b9 [validation disabled] Options: (8 bytes) No. Time 102 0.251129 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 62 17399 > http [SYN]

Frame 102: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17399 (17399), Dst Port: http (80), Seq: 0, Len: 0 Source port: 17399 (17399) Destination port: http (80) [Stream index: 10] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) Window size value: 8192 [Calculated window size: 8192] Checksum: 0xb689 [validation disabled] Options: (8 bytes) No. Time 103 0.163598 Source 192.168.1.109 Destination 239.255.255.250 Protocol Length Info SSDP 175 M-SEARCH * HTTP/1.1

Frame 103: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: IntelCor 56:de:52 (88:53:2e:56:de:52), Dst: IPv4mcast 7f:ff:fa (01:00:5e:7f:ff:fa Internet Protocol Version 4, Src: 192.168.1.109 (192.168.1.109), Dst: 239.255.255.250 (239.255.255. User Datagram Protocol, Src Port: 57629 (57629), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time 104 0.364958 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 104: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 105 0.365271 Source Toshiba ef:70:26 Destination Broadcast

Protocol Length Info ARP 42 Who has 192.168.1.14

Frame 105: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info

106 0.397043

128.119.245.12

192.168.1.125

TCP

62

http > 17398 [SYN, A

Frame 106: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 0, Ack: 1, Len: 0 Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) Window size value: 1460 [Calculated window size: 1460] Checksum: 0xb2c1 [validation disabled] Options: (8 bytes) [SEQ/ACK analysis] No. Time 107 0.000167 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 54 17398 > http [ACK]

Frame 107: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe50c [validation disabled] [SEQ/ACK analysis] No. Time 108 0.001183 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 108: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 1, Ack: 1, Len: 1 Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 1 (relative sequence number) [Next sequence number: 1261 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x238c [validation disabled] [SEQ/ACK analysis] TCP segment data (1260 bytes) No. Time 109 0.034126 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 109: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb

Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 110 0.082030 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17397 [ACK]

Frame 110: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 2747, Ack: 668, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 2747 (relative sequence number) Acknowledgement number: 668 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2767 [validation disabled] [SEQ/ACK analysis] No. Time 111 0.076711 Source 128.119.245.12 Destination 192.168.1.125

Protocol Length Info TCP 62 http > 17399 [SYN, A

Frame 111: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17399 (17399), Seq: 0, Ack: 1, Len: 0 Source port: http (80) Destination port: 17399 (17399) [Stream index: 10] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) Window size value: 1460 [Calculated window size: 1460] Checksum: 0x6197 [validation disabled] Options: (8 bytes) [SEQ/ACK analysis] No. Time 112 0.000150 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 54 17399 > http [ACK]

Frame 112: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17399 (17399), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 Source port: 17399 (17399) Destination port: http (80) [Stream index: 10] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x93e2 [validation disabled] [SEQ/ACK analysis] No. Time 113 0.019895 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 113: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 114 0.036702 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 114: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 115 0.051242 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 145 Application Data

Frame 115: 145 bytes on wire (1160 bits), 145 bytes captured (1160 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 2747, Ack: 668, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 2747 (relative sequence number) [Next sequence number: 2838 (relative sequence number)] Acknowledgement number: 668 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xad13 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 116 0.001149 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 112 Application Data

Frame 116: 112 bytes on wire (896 bits), 112 bytes captured (896 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 2838, Ack: 668, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 2838 (relative sequence number) [Next sequence number: 2896 (relative sequence number)] Acknowledgement number: 668 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc934 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 117 0.000122 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17397 > imaps [ACK]

Frame 117: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 668, Ack: 2896, Source port: 17397 (17397)

Destination port: imaps (993) [Stream index: 3] Sequence number: 668 (relative sequence number) Acknowledgement number: 2896 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 64334 [Calculated window size: 64334] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6a53 [validation disabled] [SEQ/ACK analysis] No. Time 118 0.001007 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 112 Application Data

Frame 118: 112 bytes on wire (896 bits), 112 bytes captured (896 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 2896, Ack: 668, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 2896 (relative sequence number) [Next sequence number: 2954 (relative sequence number)] Acknowledgement number: 668 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc99c [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 119 0.001350 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 112 Application Data

Frame 119: 112 bytes on wire (896 bits), 112 bytes captured (896 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 2954, Ack: 668, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 2954 (relative sequence number) [Next sequence number: 3012 (relative sequence number)] Acknowledgement number: 668 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4a6e [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 120 0.000069 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17397 > imaps [ACK]

Frame 120: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 668, Ack: 3012, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3]

Sequence number: 668 (relative sequence number) Acknowledgement number: 3012 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x653d [validation disabled] [SEQ/ACK analysis] No. Time 121 0.001077 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 145 Application Data

Frame 121: 145 bytes on wire (1160 bits), 145 bytes captured (1160 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 3012, Ack: 668, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 3012 (relative sequence number) [Next sequence number: 3103 (relative sequence number)] Acknowledgement number: 668 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x36a8 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 122 0.001233 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 112 Application Data

Frame 122: 112 bytes on wire (896 bits), 112 bytes captured (896 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 3103, Ack: 668, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 3103 (relative sequence number) [Next sequence number: 3161 (relative sequence number)] Acknowledgement number: 668 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6262 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 123 0.000033 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17397 > imaps [ACK]

Frame 123: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 668, Ack: 3161, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 668 (relative sequence number) Acknowledgement number: 3161 (relative ack number)

Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65371 [Calculated window size: 65371] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x653d [validation disabled] [SEQ/ACK analysis] No. Time 124 0.001214 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 112 Application Data

Frame 124: 112 bytes on wire (896 bits), 112 bytes captured (896 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 3161, Ack: 668, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 3161 (relative sequence number) [Next sequence number: 3219 (relative sequence number)] Acknowledgement number: 668 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x28ce [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 125 0.001265 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 114 Application Data

Frame 125: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 3219, Ack: 668, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 3219 (relative sequence number) [Next sequence number: 3279 (relative sequence number)] Acknowledgement number: 668 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3436 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 126 0.000054 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17397 > imaps [ACK]

Frame 126: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 668, Ack: 3279, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 668 (relative sequence number) Acknowledgement number: 3279 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK)

Window size value: 65253 [Calculated window size: 65253] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x653d [validation disabled] [SEQ/ACK analysis] No. Time 127 0.041463 Source HonHaiPr 14:0e:06 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 127: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 128 0.089247 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 1111 Application Data

Frame 128: 1111 bytes on wire (8888 bits), 1111 bytes captured (8888 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 3279, Ack: 668, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 3279 (relative sequence number) [Next sequence number: 4336 (relative sequence number)] Acknowledgement number: 668 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0804 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 129 0.004633 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 90 Application Data

Frame 129: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 668, Ack: 4336, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 668 (relative sequence number) [Next sequence number: 704 (relative sequence number)] Acknowledgement number: 4336 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf1a9 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 130 0.135914 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 130: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 1261, Len Source port: http (80) Destination port: 17398 (17398)

[Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 1261 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 7560 [Calculated window size: 7560] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc289 [validation disabled] [SEQ/ACK analysis] No. Time 131 0.000132 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 131: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 1261, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 1261 (relative sequence number) [Next sequence number: 2521 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9abc [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 132 0.000043 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 132: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 2521, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 2521 (relative sequence number) [Next sequence number: 3781 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf597 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 133 0.000019 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 133: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 3781, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80)

[Stream index: 9] Sequence number: 3781 (relative sequence number) [Next sequence number: 5041 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa34c [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 134 0.260827 Source 192.168.1.24 Destination 239.255.255.250 Protocol Length Info SSDP 175 M-SEARCH * HTTP/1.1

Frame 134: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: CompalIn e9:cd:c3 (00:23:5a:e9:cd:c3), Dst: IPv4mcast 7f:ff:fa (01:00:5e:7f:ff:fa Internet Protocol Version 4, Src: 192.168.1.24 (192.168.1.24), Dst: 239.255.255.250 (239.255.255.25 User Datagram Protocol, Src Port: 57485 (57485), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time 135 0.261624 Source 169.254.134.253 Destination 239.255.255.250 Protocol Length Info SSDP 175 M-SEARCH * HTTP/1.1

Frame 135: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: HonHaiPr 13:4b:e5 (00:25:56:13:4b:e5), Dst: IPv4mcast 7f:ff:fa (01:00:5e:7f:ff:fa Internet Protocol Version 4, Src: 169.254.134.253 (169.254.134.253), Dst: 239.255.255.250 (239.255. User Datagram Protocol, Src Port: 57484 (57484), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time 136 0.264467 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 136: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 137 0.519063 Source Toshiba ef:70:26 Destination Broadcast

Protocol Length Info ARP 42 Who has 192.168.1.14

Frame 137: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 138 0.599249 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 138: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 139 0.632025 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17397 [ACK]

Frame 139: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 4336, Ack: 704, Source port: imaps (993) Destination port: 17397 (17397)

[Stream index: 3] Sequence number: 4336 (relative sequence number) Acknowledgement number: 704 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x210e [validation disabled] [SEQ/ACK analysis] No. Time 140 0.041351 Source 192.168.1.125 Destination 67.195.186.174

Protocol Length Info YMSG 86 Keep Alive (status=D

Frame 140: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 67.195.186.174 (67.195.186.174 Transmission Control Protocol, Src Port: 17278 (17278), Dst Port: mmcc (5050), Seq: 1, Ack: 1, Len: Source port: 17278 (17278) Destination port: mmcc (5050) [Stream index: 11] Sequence number: 1 (relative sequence number) [Next sequence number: 33 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64656 [Calculated window size: 64656] [Window size scaling factor: -1 (unknown)] Checksum: 0x9ac3 [validation disabled] [SEQ/ACK analysis] [PDU Size: 32] Yahoo YMSG Messenger Protocol (Keep Alive) No. Time 141 0.127907 Source HonHaiPr 14:0e:06 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 141: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 142 0.133326 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 89 Application Data

Frame 142: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 4336, Ack: 704, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 4336 (relative sequence number) [Next sequence number: 4371 (relative sequence number)] Acknowledgement number: 704 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9c38 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 143 0.003041 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 85 Application Data

Frame 143: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 704, Ack: 4371, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 704 (relative sequence number) [Next sequence number: 735 (relative sequence number)] Acknowledgement number: 4371 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65485 [Calculated window size: 65485] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd182 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 144 0.204787 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 144: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 145 0.486586 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 145: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 146 0.777144 Source 67.195.186.174 Destination 192.168.1.125 Protocol Length Info TCP 60 mmcc > 17278 [ACK]

Frame 146: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 67.195.186.174 (67.195.186.174), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: mmcc (5050), Dst Port: 17278 (17278), Seq: 1, Ack: 33, Len Source port: mmcc (5050) Destination port: 17278 (17278) [Stream index: 11] Sequence number: 1 (relative sequence number) Acknowledgement number: 33 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -1 (unknown)] Checksum: 0x89ab [validation disabled] [SEQ/ACK analysis] No. Time 147 0.142921 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 147: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 148 0.158418 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 148: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 149 0.209276 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Retransmission

Frame 149: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 1261, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 1261 (relative sequence number) [Next sequence number: 2521 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9abc [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 150 0.005219 Source HonHaiPr 14:0e:06 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 150: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 151 0.085943 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 85 [TCP Retransmission

Frame 151: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 704, Ack: 4371, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 704 (relative sequence number) [Next sequence number: 735 (relative sequence number)] Acknowledgement number: 4371 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65485 [Calculated window size: 65485] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd182 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 152 0.234545 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 89 [TCP Retransmission

Frame 152: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 4336, Ack: 704, Source port: imaps (993) Destination port: 17397 (17397)

[Stream index: 3] Sequence number: 4336 (relative sequence number) [Next sequence number: 4371 (relative sequence number)] Acknowledgement number: 704 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9c38 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 153 0.000075 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 66 [TCP Dup ACK 151#1]

Frame 153: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 735, Ack: 4371, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 735 (relative sequence number) Acknowledgement number: 4371 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 65485 [Calculated window size: 65485] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2ce3 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 154 0.007077 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 154: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 155 0.117559 Source 192.168.1.125 Destination 255.255.255.255 Protocol Length Info UDP 178 Source port: 58314

Frame 155: 178 bytes on wire (1424 bits), 178 bytes captured (1424 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: 58314 (58314), Dst Port: groove-dpp (1211) Data (136 bytes) 0000 0010 0020 0030 0040 0050 0060 0070 0080 No. 01 63 71 61 fe fe 31 6c 01 03 7a 6e 00 a9 a9 32 e6 01 80 33 36 bc 7c 2f 36 fe 0a 64 78 35 09 b0 00 00 a9 01 70 7a 66 c0 fe 51 07 01 14 70 39 6b 07 a9 2a 01 7c 97 3a 38 64 7d 7f 48 7d b0 fe 2f 79 61 01 01 0f 01 fe a9 2f 34 6a a8 a8 31 a8 a9 2f 34 65 c0 c0 34 c0 01 66 6d 68 01 02 2c 01 7f 33 71 68 1f 01 31 01 01 71 66 75 a8 01 2c 1f a8 77 35 66 c0 0a 30 a8 c0 6d 69 6a 6c 14 2c c0 01 66 78 67 e6 97 36 01 02 ...dpp:///f3qwmf cz3xz98y44mqf5ix qn65fkdajehhufjg a.....}.......l. ..|............. ../.Q*H.14,1,0,6 126...}......... l....|.......... ........ Protocol Length Info YMSG 121 Unknown Service: 27

Time 156 0.357381

Source 67.195.187.150

Destination 192.168.1.114

Frame 156: 121 bytes on wire (968 bits), 121 bytes captured (968 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: LiteonTe_be:fe:42 (d0:df:9a:be:fe:42) Internet Protocol Version 4, Src: 67.195.187.150 (67.195.187.150), Dst: 192.168.1.114 (192.168.1.114

Transmission Control Protocol, Src Port: mmcc (5050), Dst Port: 49492 (49492), Seq: 1, Ack: 1, Len: Source port: mmcc (5050) Destination port: 49492 (49492) [Stream index: 12] Sequence number: 1 (relative sequence number) [Next sequence number: 68 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 2205 [Calculated window size: 2205] [Window size scaling factor: -1 (unknown)] Checksum: 0x7601 [validation disabled] [SEQ/ACK analysis] [PDU Size: 67] Yahoo YMSG Messenger Protocol (Unknown) No. Time 157 0.000462 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 157: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 2521, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 2521 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 10080 [Calculated window size: 10080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb3c5 [validation disabled] [SEQ/ACK analysis] No. Time 158 0.000092 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 158: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 5041, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 5041 (relative sequence number) [Next sequence number: 6301 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x87ee [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 159 0.000035 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 159: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1

Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 6301, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 6301 (relative sequence number) [Next sequence number: 7561 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2811 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 160 0.130272 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17397 [ACK]

Frame 160: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 4371, Ack: 735, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 4371 (relative sequence number) Acknowledgement number: 735 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x20cc [validation disabled] [SEQ/ACK analysis] No. Time 161 0.114134 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 114 Application Data

Frame 161: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 4371, Ack: 735, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 4371 (relative sequence number) [Next sequence number: 4431 (relative sequence number)] Acknowledgement number: 735 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2030 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 162 0.000441 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 90 Application Data

Frame 162: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 735, Ack: 4431,

Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 735 (relative sequence number) [Next sequence number: 771 (relative sequence number)] Acknowledgement number: 4431 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65425 [Calculated window size: 65425] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa59f [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 163 0.389034 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 157#1]

Frame 163: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 2521, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 2521 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 10080 [Calculated window size: 10080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc6e2 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 164 0.000078 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Retransmission

Frame 164: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 2521, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 2521 (relative sequence number) [Next sequence number: 3781 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf597 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 165 0.000029 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Retransmission

Frame 165: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 3781, Ack: 1, Len

Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 3781 (relative sequence number) [Next sequence number: 5041 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa34c [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 166 0.014792 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 166: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 167 0.021641 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 157#2]

Frame 167: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 2521, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 2521 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 10080 [Calculated window size: 10080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc1f6 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 168 0.131309 Source 192.168.1.24 Destination 239.255.255.250 Protocol Length Info SSDP 175 M-SEARCH * HTTP/1.1

Frame 168: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: CompalIn e9:cd:c3 (00:23:5a:e9:cd:c3), Dst: IPv4mcast 7f:ff:fa (01:00:5e:7f:ff:fa Internet Protocol Version 4, Src: 192.168.1.24 (192.168.1.24), Dst: 239.255.255.250 (239.255.255.25 User Datagram Protocol, Src Port: 57485 (57485), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time 169 0.131605 Source 169.254.134.253 Destination 239.255.255.250 Protocol Length Info SSDP 175 M-SEARCH * HTTP/1.1

Frame 169: 175 bytes on wire (1400 bits), 175 bytes captured (1400 bits) Ethernet II, Src: HonHaiPr 13:4b:e5 (00:25:56:13:4b:e5), Dst: IPv4mcast 7f:ff:fa (01:00:5e:7f:ff:fa Internet Protocol Version 4, Src: 169.254.134.253 (169.254.134.253), Dst: 239.255.255.250 (239.255. User Datagram Protocol, Src Port: 57484 (57484), Dst Port: ssdp (1900) Hypertext Transfer Protocol No. Time 170 0.233172 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17397 [ACK]

Frame 170: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)

Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 4431, Ack: 771, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 4431 (relative sequence number) Acknowledgement number: 771 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x206c [validation disabled] [SEQ/ACK analysis] No. Time 171 0.123897 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 96 Application Data

Frame 171: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 4431, Ack: 771, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 4431 (relative sequence number) [Next sequence number: 4473 (relative sequence number)] Acknowledgement number: 771 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3853 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 172 0.000848 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 90 Application Data

Frame 172: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 771, Ack: 4473, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 771 (relative sequence number) [Next sequence number: 807 (relative sequence number)] Acknowledgement number: 4473 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65383 [Calculated window size: 65383] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7c2e [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 173 0.131240 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 173: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251)

User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 174 0.241327 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 174: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 175 0.250829 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17397 > imaps [FIN,

Frame 175: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 807, Ack: 4473, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 807 (relative sequence number) Acknowledgement number: 4473 (relative ack number) Header length: 20 bytes Flags: 0x11 (FIN, ACK) Window size value: 65383 [Calculated window size: 65383] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5f85 [validation disabled] No. Time 176 0.006047 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 176: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 177 0.007034 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 62 17400 > imaps [SYN]

Frame 177: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 0, Len: 0 Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) Window size value: 8192 [Calculated window size: 8192] Checksum: 0x2172 [validation disabled] Options: (8 bytes) No. Time 178 0.012647 Source HonHaiPr 14:0e:06 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 178: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 179 0.114170 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 179: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 180 0.133749 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 http > 17398 [ACK]

Frame 180: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 3781, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 3781 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 12600 [Calculated window size: 12600] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb332 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 181 0.032422 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 181: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 7561, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 7561 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 15120 [Calculated window size: 15120] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8c65 [validation disabled] [SEQ/ACK analysis] No. Time 182 0.000216 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 182: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 7561, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 7561 (relative sequence number) [Next sequence number: 8821 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8ea7 [validation disabled]

[SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 183 0.000046 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 183: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 8821, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 8821 (relative sequence number) [Next sequence number: 10081 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6fad [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 184 0.000014 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 184: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 10081, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 10081 (relative sequence number) [Next sequence number: 11341 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf961 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 185 0.000014 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 185: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 11341, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 11341 (relative sequence number) [Next sequence number: 12601 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520

[Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb4a7 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 186 0.014804 Source 192.168.1.117 Destination 239.192.0.0 Protocol Length Info UDP 157 Source port: plysrv

Frame 186: 157 bytes on wire (1256 bits), 157 bytes captured (1256 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 40:00:00 (01:00:5e:40:00:00 Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 239.192.0.0 (239.192.0.0) User Datagram Protocol, Src Port: plysrv-https (6771), Dst Port: plysrv-https (6771) Data (115 bytes) 0000 0010 0020 0030 0040 0050 0060 0070 No. 42 2f 31 72 61 34 43 0a 54 31 39 74 73 35 32 0d 2d 2e 32 3a 68 33 37 0a 53 31 2e 20 3a 43 38 45 0d 30 35 20 43 32 41 0a 2e 33 41 41 42 52 48 30 38 45 44 39 43 6f 3a 34 32 44 36 48 73 36 31 41 42 42 20 74 37 0d 35 30 34 2a 3a 37 0a 42 36 34 20 20 31 49 39 39 31 48 32 0d 6e 31 37 44 54 33 0a 66 46 30 0d 54 39 50 6f 34 36 0a 50 2e 6f 68 32 36 0d BT-SEARCH * HTTP /1.1..Host: 239. 192.0.0:6771..Po rt: 53841..Infoh ash: AE2A5B91F42 453CCADDB0697066 C2782B96B441D... ... Protocol Length Info TCP 60 imaps > 17397 [ACK]

Time 187 0.220543

Source 173.194.67.109

Destination 192.168.1.125

Frame 187: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 4473, Ack: 807, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 4473 (relative sequence number) Acknowledgement number: 807 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x201e [validation disabled] [SEQ/ACK analysis] No. Time 188 0.077097 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 89 Application Data

Frame 188: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 4473, Ack: 807, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 4473 (relative sequence number) [Next sequence number: 4508 (relative sequence number)] Acknowledgement number: 807 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x22e2 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer

No.

Time 189 0.000104

Source 192.168.1.125

Destination 173.194.67.109

Protocol Length Info TCP 54 17397 > imaps [RST,

Frame 189: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17397 (17397), Dst Port: imaps (993), Seq: 808, Ack: 4508, Source port: 17397 (17397) Destination port: imaps (993) [Stream index: 3] Sequence number: 808 (relative sequence number) Acknowledgement number: 4508 (relative ack number) Header length: 20 bytes Flags: 0x14 (RST, ACK) Window size value: 0 [Calculated window size: 0] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5ec6 [validation disabled] [SEQ/ACK analysis] No. Time 190 0.085840 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 190: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 191 0.091109 Source HonHaiPr 14:0e:06 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 191: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 192 0.196617 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 62 imaps > 17400 [SYN,

Frame 192: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 0, Ack: 1, Len: Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) Window size value: 1430 [Calculated window size: 1430] Checksum: 0x8ad5 [validation disabled] Options: (8 bytes) [SEQ/ACK analysis] No. Time 193 0.000117 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17400 > imaps [ACK]

Frame 193: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 1, Ack: 1, Len: Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 1 (relative sequence number)

Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xbd02 [validation disabled] [SEQ/ACK analysis] No. Time 194 0.000433 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 204 Client Hello

Frame 194: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 1, Ack: 1, Len: Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 1 (relative sequence number) [Next sequence number: 151 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7a2d [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 195 0.000025 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17397 [FIN,

Frame 195: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17397 (17397), Seq: 4508, Ack: 808, Source port: imaps (993) Destination port: 17397 (17397) [Stream index: 3] Sequence number: 4508 (relative sequence number) Acknowledgement number: 808 (relative ack number) Header length: 20 bytes Flags: 0x11 (FIN, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1ff9 [validation disabled] [SEQ/ACK analysis] No. Time 196 0.007424 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 196: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 8821, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 8821 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 17640

[Calculated window size: 17640] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7da1 [validation disabled] [SEQ/ACK analysis] No. Time 197 0.000060 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 197: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 12601, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 12601 (relative sequence number) [Next sequence number: 13861 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf9ee [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 198 0.007591 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 198: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 10081, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 10081 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 20160 [Calculated window size: 20160] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6edd [validation disabled] [SEQ/ACK analysis] No. Time 199 0.000062 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 199: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 13861, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 13861 (relative sequence number) [Next sequence number: 15121 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)]

Checksum: 0x9366 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 200 0.000678 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 200: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 11341, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 11341 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 22680 [Calculated window size: 22680] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6019 [validation disabled] [SEQ/ACK analysis] No. Time 201 0.000025 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 201: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 15121, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 15121 (relative sequence number) [Next sequence number: 16381 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc0d9 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 202 0.025497 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 202: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 12601, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 12601 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 25200 [Calculated window size: 25200] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5155 [validation disabled]

[SEQ/ACK analysis] No. Time 203 0.000117 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 203: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 16381, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 16381 (relative sequence number) [Next sequence number: 17641 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdaa2 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 204 0.000044 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 204: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 17641, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 17641 (relative sequence number) [Next sequence number: 18901 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x48e2 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 205 0.118287 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 62 imaps > 17400 [SYN,

Frame 205: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 0, Ack: 1, Len: Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) Window size value: 1260 [Calculated window size: 1260] Checksum: 0x8b7f [validation disabled] Options: (8 bytes)

No.

Time 206 0.000122

Source 192.168.1.125

Destination 173.194.67.109

Protocol Length Info TCP 66 [TCP Dup ACK 194#1]

Frame 206: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 151, Ack: 1, Len Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 151 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2581 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 207 0.147441 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 54 17399 > http [FIN, A

Frame 207: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17399 (17399), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 Source port: 17399 (17399) Destination port: http (80) [Stream index: 10] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x11 (FIN, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x93e1 [validation disabled] No. Time 208 0.159440 Source Destination fe80::d816:9eae:28a6:7e71 ff02::1:2 Protocol Length Info DHCPv6 157 Solicit XID: 0x

Frame 208: 157 bytes on wire (1256 bits), 157 bytes captured (1256 bits) Ethernet II, Src: Toshiba ef:70:26 (e8:9d:87:ef:70:26), Dst: IPv6mcast 00:01:00:02 (33:33:00:01:00: Internet Protocol Version 6, Src: fe80::d816:9eae:28a6:7e71 (fe80::d816:9eae:28a6:7e71), Dst: ff02: User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547) DHCPv6 No. Time 209 0.159981 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 209: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 210 0.210341 Source Destination fe80::7978:9af:e736:9610 ff02::1:ff11:89dc

Protocol Length Info ICMPv6 86 Neighbor Solicita

Frame 210: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv6mcast ff:11:89:dc (33:33:ff:11:89 Internet Protocol Version 6, Src: fe80::7978:9af:e736:9610 (fe80::7978:9af:e736:9610), Dst: ff02::1 Internet Control Message Protocol v6

No.

Time 211 0.233415

Source 173.194.67.109

Destination 192.168.1.125

Protocol Length Info TCP 60 imaps > 17400 [ACK]

Frame 211: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 1, Ack: 151, Len Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 1 (relative sequence number) Acknowledgement number: 151 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 15008 [Calculated window size: 15008] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x81bd [validation disabled] [SEQ/ACK analysis] No. Time 212 0.025227 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 1314 Server Hello

Frame 212: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 1, Ack: 151, Len Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 1 (relative sequence number) [Next sequence number: 1261 (relative sequence number)] Acknowledgement number: 151 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 15008 [Calculated window size: 15008] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x26d5 [validation disabled] [SEQ/ACK analysis] TCP segment data (1170 bytes) Secure Sockets Layer No. Time 213 0.004025 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 503 Certificate, Server

Frame 213: 503 bytes on wire (4024 bits), 503 bytes captured (4024 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 1261, Ack: 151, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 1261 (relative sequence number) [Next sequence number: 1710 (relative sequence number)] Acknowledgement number: 151 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 15008 [Calculated window size: 15008] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2b5c [validation disabled] [SEQ/ACK analysis] TCP segment data (449 bytes) [2 Reassembled TCP Segments (1619 bytes): #212(1170), #213(449)]

Secure Sockets Layer No. Time 214 0.000152 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17400 > imaps [ACK]

Frame 214: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 151, Ack: 1710, Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 151 (relative sequence number) Acknowledgement number: 1710 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb5bf [validation disabled] [SEQ/ACK analysis] No. Time 215 0.001103 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 240 Client Key Exchange

Frame 215: 240 bytes on wire (1920 bits), 240 bytes captured (1920 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 151, Ack: 1710, Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 151 (relative sequence number) [Next sequence number: 337 (relative sequence number)] Acknowledgement number: 1710 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf7d6 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 216 0.036245 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 216: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 13861, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 13861 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 27720 [Calculated window size: 27720] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4291 [validation disabled] [SEQ/ACK analysis] No. Time 217 0.000095 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 217: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 18901, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 18901 (relative sequence number) [Next sequence number: 20161 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7602 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 218 0.054247 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 218: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 15121, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 15121 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 30240 [Calculated window size: 30240] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x33cd [validation disabled] [SEQ/ACK analysis] No. Time 219 0.000119 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 219: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 20161, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 20161 (relative sequence number) [Next sequence number: 21421 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf0f1 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 220 0.000678 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 220: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 16381, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 16381 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 32760 [Calculated window size: 32760] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2509 [validation disabled] [SEQ/ACK analysis] No. Time 221 0.000082 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 221: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 21421, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 21421 (relative sequence number) [Next sequence number: 22681 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf6f3 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 222 0.054298 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 222: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 223 0.071013 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 223: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 17641, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 17641 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 35280 [Calculated window size: 35280] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1645 [validation disabled]

[SEQ/ACK analysis] No. Time 224 0.000090 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 224: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 22681, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 22681 (relative sequence number) [Next sequence number: 23941 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xba66 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 225 0.034855 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 225: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 226 0.037465 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 226: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 18901, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 18901 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 37800 [Calculated window size: 37800] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0781 [validation disabled] [SEQ/ACK analysis] No. Time 227 0.000095 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 227: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 23941, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 23941 (relative sequence number) [Next sequence number: 25201 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes

Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9b9d [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 228 0.000039 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 228: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 25201, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 25201 (relative sequence number) [Next sequence number: 26461 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x890e [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 229 0.063211 Source 128.119.245.12 Destination 192.168.1.125

Protocol Length Info TCP 60 http > 17399 [FIN, A

Frame 229: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17399 (17399), Seq: 1, Ack: 2, Len: 0 Source port: http (80) Destination port: 17399 (17399) [Stream index: 10] Sequence number: 1 (relative sequence number) Acknowledgement number: 2 (relative ack number) Header length: 20 bytes Flags: 0x11 (FIN, ACK) Window size value: 5840 [Calculated window size: 5840] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7d01 [validation disabled] [SEQ/ACK analysis] No. Time 230 0.000165 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 54 17399 > http [ACK]

Frame 230: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17399 (17399), Dst Port: http (80), Seq: 2, Ack: 2, Len: 0 Source port: 17399 (17399) Destination port: http (80) [Stream index: 10] Sequence number: 2 (relative sequence number) Acknowledgement number: 2 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK)

Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x93e0 [validation disabled] [SEQ/ACK analysis] No. Time 231 0.059093 Source HonHaiPr 14:0e:06 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 231: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 232 0.353331 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 232: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 20161, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 20161 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 40320 [Calculated window size: 40320] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf8bc [validation disabled] [SEQ/ACK analysis] No. Time 233 0.000053 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 233: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 26461, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 26461 (relative sequence number) [Next sequence number: 27721 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8b2a [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 234 0.103105 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 101 Change Cipher Spec,

Frame 234: 101 bytes on wire (808 bits), 101 bytes captured (808 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 1710, Ack: 337, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13]

Sequence number: 1710 (relative sequence number) [Next sequence number: 1757 (relative sequence number)] Acknowledgement number: 337 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc6bc [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 235 0.001554 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 149 Application Data

Frame 235: 149 bytes on wire (1192 bits), 149 bytes captured (1192 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 1757, Ack: 337, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 1757 (relative sequence number) [Next sequence number: 1852 (relative sequence number)] Acknowledgement number: 337 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3873 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 236 0.000123 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17400 > imaps [ACK]

Frame 236: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 337, Ack: 1852, Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 337 (relative sequence number) Acknowledgement number: 1852 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65378 [Calculated window size: 65378] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb505 [validation disabled] [SEQ/ACK analysis] No. Time 237 0.003402 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 96 Application Data

Frame 237: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 337, Ack: 1852, Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 337 (relative sequence number) [Next sequence number: 379 (relative sequence number)]

Acknowledgement number: 1852 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65378 [Calculated window size: 65378] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5902 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 238 0.025736 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 238: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 239 0.041264 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 239: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 240 0.076599 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 240: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 22681, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 22681 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 45360 [Calculated window size: 45360] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdb34 [validation disabled] [SEQ/ACK analysis] No. Time 241 0.000242 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 241: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 27721, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 27721 (relative sequence number) [Next sequence number: 28981 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x178a [validation disabled] [SEQ/ACK analysis]

[Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 242 0.000082 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 242: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 28981, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 28981 (relative sequence number) [Next sequence number: 30241 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3eef [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 243 0.018821 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 243: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 244 0.020508 Source Destination fe80::7978:9af:e736:9610 ff02::1:ff11:89dc

Protocol Length Info ICMPv6 86 Neighbor Solicita

Frame 244: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv6mcast ff:11:89:dc (33:33:ff:11:89 Internet Protocol Version 6, Src: fe80::7978:9af:e736:9610 (fe80::7978:9af:e736:9610), Dst: ff02::1 Internet Control Message Protocol v6 No. Time 245 0.064145 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 245: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 23941, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 23941 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 47880 [Calculated window size: 47880] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xcc70 [validation disabled] [SEQ/ACK analysis] No. Time 246 0.000073 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 246: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 30241, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 30241 (relative sequence number) [Next sequence number: 31501 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9839 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 247 0.014685 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 247: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 248 0.077631 Source 192.168.1.117 Destination 239.192.0.0 Protocol Length Info UDP 157 Source port: plysrv

Frame 248: 157 bytes on wire (1256 bits), 157 bytes captured (1256 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 40:00:00 (01:00:5e:40:00:00 Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 239.192.0.0 (239.192.0.0) User Datagram Protocol, Src Port: plysrv-https (6771), Dst Port: plysrv-https (6771) Data (115 bytes) 0000 0010 0020 0030 0040 0050 0060 0070 No. 42 2f 31 72 61 37 43 0a 54 31 39 74 73 43 35 0d 2d 2e 32 3a 68 34 44 0a 53 31 2e 20 3a 38 45 45 0d 30 35 20 36 34 41 0a 2e 33 37 38 34 52 48 30 38 43 44 39 43 6f 3a 34 35 33 46 48 73 36 31 42 42 31 20 74 37 0d 42 44 39 2a 3a 37 0a 34 46 39 20 20 31 49 35 43 43 48 32 0d 6e 41 37 41 54 33 0a 66 43 41 0d 54 39 50 6f 41 30 0a 50 2e 6f 68 45 42 0d BT-SEARCH * HTTP /1.1..Host: 239. 192.0.0:6771..Po rt: 53841..Infoh ash: 7C5BB45ACAE 7C4868D3BDFC7A0B C5DE449F199CA... ... Protocol Length Info TCP 60 http > 17398 [ACK]

Time 249 0.079529

Source 128.119.245.12

Destination 192.168.1.125

Frame 249: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 25201, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 25201 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 50400 [Calculated window size: 50400] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xbdac [validation disabled] [SEQ/ACK analysis]

No.

Time 250 0.000079

Source 192.168.1.125

Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 250: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 31501, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 31501 (relative sequence number) [Next sequence number: 32761 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xbc1f [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 251 0.000027 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1077 [TCP segment of a re

Frame 251: 1077 bytes on wire (8616 bits), 1077 bytes captured (8616 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 32761, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 32761 (relative sequence number) [Next sequence number: 33784 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9bcd [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1023 bytes) No. Time 252 0.200748 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 252: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 253 0.251355 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 253: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 254 0.277170 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 249#1]

Frame 254: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26)

Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 25201, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 25201 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 50400 [Calculated window size: 50400] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2971 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 255 0.000067 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 255: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 33784, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 33784 (relative sequence number) [Next sequence number: 35044 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xee02 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 256 0.011066 Source HonHaiPr 65:de:f8 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.2

Frame 256: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_65:de:f8 (90:4c:e5:65:de:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 257 0.346909 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 257: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 258 0.398238 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 249#2]

Frame 258: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 25201, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number)

Acknowledgement number: 25201 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 50400 [Calculated window size: 50400] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2485 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 259 0.000093 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 259: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 35044, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 35044 (relative sequence number) [Next sequence number: 36304 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xba18 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 260 0.000847 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 249#3]

Frame 260: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 25201, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 25201 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 50400 [Calculated window size: 50400] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1f99 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 261 0.000069 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Fast Retransmi

Frame 261: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 25201, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 25201 (relative sequence number) [Next sequence number: 26461 (relative sequence number)]

Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x890e [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 262 0.042151 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 250 Application Data

Frame 262: 250 bytes on wire (2000 bits), 250 bytes captured (2000 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 1852, Ack: 379, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 1852 (relative sequence number) [Next sequence number: 2048 (relative sequence number)] Acknowledgement number: 379 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x564d [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 263 0.000729 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 114 Application Data

Frame 263: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 379, Ack: 2048, Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 379 (relative sequence number) [Next sequence number: 439 (relative sequence number)] Acknowledgement number: 2048 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65182 [Calculated window size: 65182] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xedc5 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 264 0.141565 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 74 [TCP Dup ACK 249#4]

Frame 264: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 25201, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number)

Acknowledgement number: 25201 (relative ack number) Header length: 40 bytes Flags: 0x10 (ACK) Window size value: 50400 [Calculated window size: 50400] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x682e [validation disabled] Options: (20 bytes) [SEQ/ACK analysis] No. Time 265 0.000093 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 265: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 36304, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 36304 (relative sequence number) [Next sequence number: 37564 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5537 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 266 0.016070 Source Destination fe80::7978:9af:e736:9610 ff02::1:ff11:89dc

Protocol Length Info ICMPv6 86 Neighbor Solicita

Frame 266: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv6mcast ff:11:89:dc (33:33:ff:11:89 Internet Protocol Version 6, Src: fe80::7978:9af:e736:9610 (fe80::7978:9af:e736:9610), Dst: ff02::1 Internet Control Message Protocol v6 No. Time 267 0.086938 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 267: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 268 0.232608 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Retransmission

Frame 268: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 25201, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 25201 (relative sequence number) [Next sequence number: 26461 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520

[Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x890e [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 269 0.157714 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 269: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 270 0.172744 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 74 [TCP Dup ACK 249#5]

Frame 270: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 25201, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 25201 (relative ack number) Header length: 40 bytes Flags: 0x10 (ACK) Window size value: 50400 [Calculated window size: 50400] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6342 [validation disabled] Options: (20 bytes) [SEQ/ACK analysis] No. Time 271 0.017185 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 http > 17398 [ACK]

Frame 271: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 30241, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 30241 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 52920 [Calculated window size: 52920] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xcdc6 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 272 0.000093 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 272: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 37564, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9]

Sequence number: 37564 (relative sequence number) [Next sequence number: 38824 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4ae0 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 273 0.000030 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 273: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 38824, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 38824 (relative sequence number) [Next sequence number: 40084 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x579e [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 274 0.090390 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 274: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 275 0.099020 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 271#1]

Frame 275: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 30241, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 30241 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 52920 [Calculated window size: 52920] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc8da [validation disabled] Options: (12 bytes) [SEQ/ACK analysis]

No.

Time 276 0.000095

Source 192.168.1.125

Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP Retransmission

Frame 276: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 30241, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 30241 (relative sequence number) [Next sequence number: 31501 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9839 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 277 0.000035 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Retransmission

Frame 277: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 31501, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 31501 (relative sequence number) [Next sequence number: 32761 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xbc1f [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 278 0.000014 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Retransmission

Frame 278: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 32761, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 32761 (relative sequence number) [Next sequence number: 34021 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa323 [validation disabled] [SEQ/ACK analysis]

[Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 279 0.071540 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17400 [ACK]

Frame 279: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2048, Ack: 439, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2048 (relative sequence number) Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x746e [validation disabled] [SEQ/ACK analysis] No. Time 280 0.054254 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 74 [TCP Dup ACK 271#2]

Frame 280: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 30241, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 30241 (relative ack number) Header length: 40 bytes Flags: 0x10 (ACK) Window size value: 52920 [Calculated window size: 52920] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x547e [validation disabled] Options: (20 bytes) [SEQ/ACK analysis] No. Time 281 0.281211 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 262 Application Data

Frame 281: 262 bytes on wire (2096 bits), 262 bytes captured (2096 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2048, Ack: 439, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2048 (relative sequence number) [Next sequence number: 2256 (relative sequence number)] Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8898 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer

No.

Time 282 0.000659

Source 192.168.1.125

Destination 173.194.67.109

Protocol Length Info TLSv1 90 Application Data

Frame 282: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 439, Ack: 2256, Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 439 (relative sequence number) [Next sequence number: 475 (relative sequence number)] Acknowledgement number: 2256 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64974 [Calculated window size: 64974] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xac25 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 283 0.000214 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 271#3]

Frame 283: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 30241, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 30241 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 52920 [Calculated window size: 52920] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc3ee [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 284 0.014066 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 284: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 285 0.017015 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 271#4]

Frame 285: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 30241, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 30241 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 52920

[Calculated window size: 52920] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xbf02 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 286 0.002443 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 286: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 287 0.012677 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 287: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 288 0.170054 Source 192.168.1.117 Destination 239.192.0.0 Protocol Length Info UDP 157 Source port: plysrv

Frame 288: 157 bytes on wire (1256 bits), 157 bytes captured (1256 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 40:00:00 (01:00:5e:40:00:00 Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 239.192.0.0 (239.192.0.0) User Datagram Protocol, Src Port: plysrv-https (6771), Dst Port: plysrv-https (6771) Data (115 bytes) 0000 0010 0020 0030 0040 0050 0060 0070 No. 42 2f 31 72 61 44 32 0a 54 31 39 74 73 32 32 0d 2d 2e 32 3a 68 43 32 0a 53 31 2e 20 3a 34 33 45 0d 30 35 20 32 33 41 0a 2e 33 33 38 42 52 48 30 38 37 37 32 43 6f 3a 34 44 44 36 48 73 36 31 35 33 31 20 74 37 0d 35 44 33 2a 3a 37 0a 33 38 38 20 20 31 49 30 42 35 48 32 0d 6e 35 30 41 54 33 0a 66 42 45 0d 54 39 50 6f 42 44 0a 50 2e 6f 68 45 44 0d BT-SEARCH * HTTP /1.1..Host: 239. 192.0.0:6771..Po rt: 53841..Infoh ash: 37D55305BBE D2C4287D3D8B0EDD 22233B261385A... ...

Time 289 0.191080

Source Destination fe80::7978:9af:e736:9610 ff02::1:ff11:89dc

Protocol Length Info ICMPv6 86 Neighbor Solicita

Frame 289: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv6mcast ff:11:89:dc (33:33:ff:11:89 Internet Protocol Version 6, Src: fe80::7978:9af:e736:9610 (fe80::7978:9af:e736:9610), Dst: ff02::1 Internet Control Message Protocol v6 No. Time 290 0.307858 Source Destination Protocol Length Info fe80::e4ff:1364:eadc:8125 ff02::1:ff78:6ee9 ICMPv6 86 Neighbor Solici

Frame 290: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast ff:78:6e:e9 (33:33:ff:78:6e Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 291 0.321715 Source HonHaiPr 65:de:f8 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.2

Frame 291: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_65:de:f8 (90:4c:e5:65:de:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 292 0.324016 Source Destination fe80::e4ff:1364:eadc:8125 ff02::16

Protocol Length Info ICMPv6 90 Multicast Listen

Frame 292: 90 bytes on wire (720 bits), 90 bytes captured (720 bits)

Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:00:00:16 (33:33:00:00:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 293 0.337769 Source Destination fe80::e4ff:1364:eadc:8125 ff02::16

Protocol Length Info ICMPv6 90 Multicast Listen

Frame 293: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:00:00:16 (33:33:00:00:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 294 0.368059 Source Destination fe80::e4ff:1364:eadc:8125 ff02::16

Protocol Length Info ICMPv6 90 Multicast Listen

Frame 294: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:00:00:16 (33:33:00:00:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 295 0.371027 Source 128.119.245.12 Destination 192.168.1.125

Protocol Length Info TCP 60 http > 17399 [FIN, A

Frame 295: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17399 (17399), Seq: 1, Ack: 2, Len: 0 Source port: http (80) Destination port: 17399 (17399) [Stream index: 10] Sequence number: 1 (relative sequence number) Acknowledgement number: 2 (relative ack number) Header length: 20 bytes Flags: 0x11 (FIN, ACK) Window size value: 5840 [Calculated window size: 5840] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7d01 [validation disabled] No. Time 296 0.000088 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 54 [TCP ZeroWindow] 17

Frame 296: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17399 (17399), Dst Port: http (80), Seq: 2, Ack: 2, Len: 0 Source port: 17399 (17399) Destination port: http (80) [Stream index: 10] Sequence number: 2 (relative sequence number) Acknowledgement number: 2 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 0 [Calculated window size: 0] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x93d1 [validation disabled] [SEQ/ACK analysis] No. Time 297 0.000954 Source HonHaiPr 65:de:f8 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.2

Frame 297: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_65:de:f8 (90:4c:e5:65:de:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request)

No.

Time 298 0.012459

Source Destination fe80::e4ff:1364:eadc:8125 ff02::1:3

Protocol Length Info LLMNR 85 Standard query A

Frame 298: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:01:00:03 (33:33:00:01:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: User Datagram Protocol, Src Port: 54968 (54968), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 299 0.013469 Source 192.168.1.105 Destination 224.0.0.252

Protocol Length Info LLMNR 65 Standard query ANY H

Frame 299: 65 bytes on wire (520 bits), 65 bytes captured (520 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv4mcast 00:00:fc (01:00:5e:00:00:fc Internet Protocol Version 4, Src: 192.168.1.105 (192.168.1.105), Dst: 224.0.0.252 (224.0.0.252) User Datagram Protocol, Src Port: 53333 (53333), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 300 0.032357 Source HonHaiPr 65:de:f8 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.2

Frame 300: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_65:de:f8 (90:4c:e5:65:de:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 301 0.063567 Source HonHaiPr 65:de:f8 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.2

Frame 301: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_65:de:f8 (90:4c:e5:65:de:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 302 0.115856 Source Destination fe80::e4ff:1364:eadc:8125 ff02::1:3

Protocol Length Info LLMNR 85 Standard query A

Frame 302: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:01:00:03 (33:33:00:01:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: User Datagram Protocol, Src Port: 54968 (54968), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 303 0.116449 Source 192.168.1.105 Destination 224.0.0.252

Protocol Length Info LLMNR 65 Standard query ANY H

Frame 303: 65 bytes on wire (520 bits), 65 bytes captured (520 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv4mcast 00:00:fc (01:00:5e:00:00:fc Internet Protocol Version 4, Src: 192.168.1.105 (192.168.1.105), Dst: 224.0.0.252 (224.0.0.252) User Datagram Protocol, Src Port: 53333 (53333), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 304 0.227831 Source Cisco_29:49:0f Destination Cisco_29:49:0f Protocol Length Info LOOP 60 Reply

Frame 304: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_29:49:0f (00:24:f7:29:49:0f), Dst: Cisco_29:49:0f (00:24:f7:29:49:0f) Configuration Test Protocol (loopback) Data (40 bytes) 0000 0010 0020 No. 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Source 173.194.67.109 Destination 192.168.1.125 ................ ................ ........ Protocol Length Info TCP 60 imaps > 17400 [ACK]

Time 305 0.230290

Frame 305: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)

Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2256, Ack: 475, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2256 (relative sequence number) Acknowledgement number: 475 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x737a [validation disabled] [SEQ/ACK analysis] No. Time 306 0.060512 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Retransmission

Frame 306: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 30241, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 30241 (relative sequence number) [Next sequence number: 31501 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9839 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 307 0.048678 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 89 Application Data

Frame 307: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2256, Ack: 475, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2256 (relative sequence number) [Next sequence number: 2291 (relative sequence number)] Acknowledgement number: 475 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf27c [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 308 0.000418 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 85 Application Data

Frame 308: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5)

Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 475, Ack: 2291, Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 475 (relative sequence number) [Next sequence number: 506 (relative sequence number)] Acknowledgement number: 2291 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64939 [Calculated window size: 64939] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9f97 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 309 0.128020 Source Destination Protocol Length Info fe80::e4ff:1364:eadc:8125 ff02::1:ff78:6ee9 ICMPv6 86 Neighbor Solici

Frame 309: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast ff:78:6e:e9 (33:33:ff:78:6e Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 310 0.135797 Source Destination fe80::e4ff:1364:eadc:8125 ff02::16

Protocol Length Info ICMPv6 90 Multicast Listen

Frame 310: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:00:00:16 (33:33:00:00:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 311 0.180766 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 311: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 312 0.357972 Source Destination fe80::7978:9af:e736:9610 ff02::1:ff11:89dc

Protocol Length Info ICMPv6 86 Neighbor Solicita

Frame 312: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv6mcast ff:11:89:dc (33:33:ff:11:89 Internet Protocol Version 6, Src: fe80::7978:9af:e736:9610 (fe80::7978:9af:e736:9610), Dst: ff02::1 Internet Control Message Protocol v6 No. Time 313 0.549631 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 http > 17398 [ACK]

Frame 313: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 31501, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 31501 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 55440 [Calculated window size: 55440] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb03e [validation disabled]

Options: (12 bytes) [SEQ/ACK analysis] No. Time 314 0.000141 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 314: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 40084, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 40084 (relative sequence number) [Next sequence number: 41344 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0b9e [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 315 0.000044 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 315: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 41344, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 41344 (relative sequence number) [Next sequence number: 42604 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe298 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 316 0.010029 Source 192.168.1.105 Destination 255.255.255.255 Protocol Length Info DHCP 342 DHCP Inform

- Tran

Frame 316: 342 bytes on wire (2736 bits), 342 bytes captured (2736 bits) Ethernet II, Src: HonHaiPr_65:de:f8 (90:4c:e5:65:de:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.105 (192.168.1.105), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67) Bootstrap Protocol No. Time 317 0.071055 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17400 [ACK]

Frame 317: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2291, Ack: 506, Source port: imaps (993)

Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2291 (relative sequence number) Acknowledgement number: 506 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7338 [validation disabled] [SEQ/ACK analysis] No. Time 318 0.164036 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 114 Application Data

Frame 318: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2291, Ack: 506, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2291 (relative sequence number) [Next sequence number: 2351 (relative sequence number)] Acknowledgement number: 506 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7743 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 319 0.002272 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 107 Application Data

Frame 319: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 506, Ack: 2351, Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 506 (relative sequence number) [Next sequence number: 559 (relative sequence number)] Acknowledgement number: 2351 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64879 [Calculated window size: 64879] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8871 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 320 0.210044 Source 192.168.1.125 Destination 172.24.68.170 Protocol Length Info SNMP 120 get-request 1.3.6.1

Frame 320: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 172.24.68.170 (172.24.68.170) User Datagram Protocol, Src Port: 49169 (49169), Dst Port: snmp (161) Simple Network Management Protocol No. Time Source Destination Protocol Length Info

321 0.210278

192.168.1.125

172.24.68.170

SNMP

120

get-request 1.3.6.1

Frame 321: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 172.24.68.170 (172.24.68.170) User Datagram Protocol, Src Port: 49169 (49169), Dst Port: snmp (161) Simple Network Management Protocol No. Time 322 0.210377 Source 192.168.1.125 Destination 172.24.68.170 Protocol Length Info SNMP 120 get-request 1.3.6.1

Frame 322: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 172.24.68.170 (172.24.68.170) User Datagram Protocol, Src Port: 49169 (49169), Dst Port: snmp (161) Simple Network Management Protocol No. Time 323 0.210546 Source Toshiba ef:70:26 Destination Broadcast

Protocol Length Info ARP 42 Who has 192.168.1.14

Frame 323: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 324 0.338012 Source Destination Protocol Length Info fe80::e4ff:1364:eadc:8125 ff02::1:ff78:6ee9 ICMPv6 86 Neighbor Solici

Frame 324: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast ff:78:6e:e9 (33:33:ff:78:6e Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 325 0.392714 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 325: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 326 0.435369 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 326: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 327 0.478077 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 313#1]

Frame 327: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 31501, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 31501 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 55440 [Calculated window size: 55440] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xab52 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis]

No.

Time 328 0.000097

Source 192.168.1.125

Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP Retransmission

Frame 328: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 31501, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 31501 (relative sequence number) [Next sequence number: 32761 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xbc1f [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 329 0.000035 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Retransmission

Frame 329: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 32761, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 32761 (relative sequence number) [Next sequence number: 34021 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa323 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 330 0.002934 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 313#2]

Frame 330: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 31501, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 31501 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 55440 [Calculated window size: 55440] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa666 [validation disabled] Options: (12 bytes)

[SEQ/ACK analysis] No. Time 331 0.025242 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 331: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 332 0.033365 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 332: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 333 0.089700 Source Destination fe80::7978:9af:e736:9610 ff02::1:ff11:89dc

Protocol Length Info ICMPv6 86 Neighbor Solicita

Frame 333: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv6mcast ff:11:89:dc (33:33:ff:11:89 Internet Protocol Version 6, Src: fe80::7978:9af:e736:9610 (fe80::7978:9af:e736:9610), Dst: ff02::1 Internet Control Message Protocol v6 No. Time 334 0.110195 Source HonHaiPr 65:de:f8 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.2

Frame 334: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_65:de:f8 (90:4c:e5:65:de:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 335 0.145191 Source HonHaiPr 65:de:f8 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.2

Frame 335: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_65:de:f8 (90:4c:e5:65:de:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 336 0.169112 Source Destination fe80::e4ff:1364:eadc:8125 ff02::16

Protocol Length Info ICMPv6 90 Multicast Listen

Frame 336: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:00:00:16 (33:33:00:00:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 337 0.170328 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 337: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 338 0.201822 Source 192.168.1.117 Destination 239.192.0.0 Protocol Length Info UDP 157 Source port: plysrv

Frame 338: 157 bytes on wire (1256 bits), 157 bytes captured (1256 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 40:00:00 (01:00:5e:40:00:00 Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 239.192.0.0 (239.192.0.0) User Datagram Protocol, Src Port: plysrv-https (6771), Dst Port: plysrv-https (6771) Data (115 bytes)

0000 0010 0020 0030 0040 0050 0060 0070 No.

42 2f 31 72 61 36 43 0a

54 31 39 74 73 44 33 0d

2d 2e 32 3a 68 30 42 0a

53 31 2e 20 3a 43 44

45 0d 30 35 20 46 37

41 0a 2e 33 34 35 36

52 48 30 38 34 32 36

43 6f 3a 34 34 37 37

48 73 36 31 39 41 44

20 74 37 0d 42 34 36

2a 3a 37 0a 38 42 46

20 20 31 49 35 31 36

48 32 0d 6e 31 41 41

54 33 0a 66 36 45 0d

54 39 50 6f 39 42 0a

50 2e 6f 68 44 44 0d

BT-SEARCH * HTTP /1.1..Host: 239. 192.0.0:6771..Po rt: 53841..Infoh ash: 4449B85169D 6D0CF527A4B1AEBD C3BD7667D6F6A... ...

Time 339 0.209244

Source Destination fe80::e4ff:1364:eadc:8125 ff02::16

Protocol Length Info ICMPv6 90 Multicast Listen

Frame 339: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:00:00:16 (33:33:00:00:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 340 0.216001 Source Destination fe80::e4ff:1364:eadc:8125 ff02::1:3

Protocol Length Info LLMNR 85 Standard query A

Frame 340: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:01:00:03 (33:33:00:01:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: User Datagram Protocol, Src Port: 57179 (57179), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 341 0.217205 Source 192.168.1.105 Destination 224.0.0.252

Protocol Length Info LLMNR 65 Standard query ANY H

Frame 341: 65 bytes on wire (520 bits), 65 bytes captured (520 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv4mcast 00:00:fc (01:00:5e:00:00:fc Internet Protocol Version 4, Src: 192.168.1.105 (192.168.1.105), Dst: 224.0.0.252 (224.0.0.252) User Datagram Protocol, Src Port: 53498 (53498), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 342 0.224138 Source HonHaiPr 65:de:f8 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.2

Frame 342: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_65:de:f8 (90:4c:e5:65:de:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 343 0.243124 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17400 [ACK]

Frame 343: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2351, Ack: 559, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2351 (relative sequence number) Acknowledgement number: 559 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x72c7 [validation disabled] [SEQ/ACK analysis] No. Time 344 0.066490 Source Toshiba ef:70:26 Destination Broadcast

Protocol Length Info ARP 42 Who has 192.168.1.14

Frame 344: 42 bytes on wire (336 bits), 42 bytes captured (336 bits)

Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 345 0.073775 Source Destination fe80::e4ff:1364:eadc:8125 ff02::1:3

Protocol Length Info LLMNR 85 Standard query A

Frame 345: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:01:00:03 (33:33:00:01:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: User Datagram Protocol, Src Port: 57179 (57179), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 346 0.074445 Source 192.168.1.105 Destination 224.0.0.252

Protocol Length Info LLMNR 65 Standard query ANY H

Frame 346: 65 bytes on wire (520 bits), 65 bytes captured (520 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv4mcast 00:00:fc (01:00:5e:00:00:fc Internet Protocol Version 4, Src: 192.168.1.105 (192.168.1.105), Dst: 224.0.0.252 (224.0.0.252) User Datagram Protocol, Src Port: 53498 (53498), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 347 0.117125 Source Destination fe80::e4ff:1364:eadc:8125 ff02::16

Protocol Length Info ICMPv6 90 Multicast Listen

Frame 347: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:00:00:16 (33:33:00:00:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 348 0.153003 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 377 Application Data

Frame 348: 377 bytes on wire (3016 bits), 377 bytes captured (3016 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2351, Ack: 559, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2351 (relative sequence number) [Next sequence number: 2674 (relative sequence number)] Acknowledgement number: 559 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe16c [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 349 0.001340 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 99 Application Data

Frame 349: 99 bytes on wire (792 bits), 99 bytes captured (792 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 559, Ack: 2674, Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 559 (relative sequence number) [Next sequence number: 604 (relative sequence number)] Acknowledgement number: 2674 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK)

Window size value: 64556 [Calculated window size: 64556] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3591 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 350 0.005322 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 350: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 351 0.030683 Source HonHaiPr 65:de:f8 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.2

Frame 351: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_65:de:f8 (90:4c:e5:65:de:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 352 0.119652 Source Destination fe80::e4ff:1364:eadc:8125 ff02::16

Protocol Length Info ICMPv6 90 Multicast Listen

Frame 352: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:00:00:16 (33:33:00:00:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 353 0.122436 Source Destination fe80::e4ff:1364:eadc:8125 ff02::16

Protocol Length Info ICMPv6 90 Multicast Listen

Frame 353: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:00:00:16 (33:33:00:00:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 354 0.124575 Source Destination fe80::e4ff:1364:eadc:8125 ff02::1:3

Protocol Length Info LLMNR 85 Standard query A

Frame 354: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:01:00:03 (33:33:00:01:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: User Datagram Protocol, Src Port: 56023 (56023), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 355 0.125225 Source 192.168.1.105 Destination 224.0.0.252

Protocol Length Info LLMNR 65 Standard query ANY H

Frame 355: 65 bytes on wire (520 bits), 65 bytes captured (520 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv4mcast 00:00:fc (01:00:5e:00:00:fc Internet Protocol Version 4, Src: 192.168.1.105 (192.168.1.105), Dst: 224.0.0.252 (224.0.0.252) User Datagram Protocol, Src Port: 53939 (53939), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 356 0.222418 Source Destination fe80::e4ff:1364:eadc:8125 ff02::1:3

Protocol Length Info LLMNR 85 Standard query A

Frame 356: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:01:00:03 (33:33:00:01:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: User Datagram Protocol, Src Port: 56023 (56023), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query)

No.

Time 357 0.228434

Source 192.168.1.105

Destination 224.0.0.252

Protocol Length Info LLMNR 65 Standard query ANY H

Frame 357: 65 bytes on wire (520 bits), 65 bytes captured (520 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv4mcast 00:00:fc (01:00:5e:00:00:fc Internet Protocol Version 4, Src: 192.168.1.105 (192.168.1.105), Dst: 224.0.0.252 (224.0.0.252) User Datagram Protocol, Src Port: 53939 (53939), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 358 0.269618 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 http > 17398 [ACK]

Frame 358: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 32761, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 32761 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 54180 [Calculated window size: 54180] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa666 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 359 0.024434 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 http > 17398 [ACK]

Frame 359: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 42604, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 42604 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 52920 [Calculated window size: 52920] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa666 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 360 0.000263 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 360: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 42604, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 42604 (relative sequence number) [Next sequence number: 43864 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK)

Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd495 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 361 0.000076 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 361: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 43864, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 43864 (relative sequence number) [Next sequence number: 45124 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0357 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 362 0.000028 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 362: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 45124, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 45124 (relative sequence number) [Next sequence number: 46384 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9590 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 363 0.000073 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 363: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 46384, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 46384 (relative sequence number) [Next sequence number: 47644 (relative sequence number)]

Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x44a7 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 364 0.164550 Source Destination Protocol Length Info fe80::e4ff:1364:eadc:8125 ff02::1:ff78:6ee9 ICMPv6 86 Neighbor Solici

Frame 364: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast ff:78:6e:e9 (33:33:ff:78:6e Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 365 0.166988 Source Destination fe80::e4ff:1364:eadc:8125 ff02::16

Protocol Length Info ICMPv6 90 Multicast Listen

Frame 365: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:00:00:16 (33:33:00:00:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 366 0.262076 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 366: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 367 0.330666 Source HonHaiPr 14:0e:06 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 367: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 368 0.510806 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17400 [ACK]

Frame 368: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2674, Ack: 604, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2674 (relative sequence number) Acknowledgement number: 604 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7157 [validation disabled] [SEQ/ACK analysis] No. Time 369 0.007088 Source Destination fe80::e4ff:1364:eadc:8125 ff02::1:3

Protocol Length Info LLMNR 84 Standard query A

Frame 369: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:01:00:03 (33:33:00:01:00

Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: User Datagram Protocol, Src Port: 52267 (52267), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 370 0.007756 Source 192.168.1.105 Destination 224.0.0.252

Protocol Length Info LLMNR 64 Standard query A wpa

Frame 370: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv4mcast 00:00:fc (01:00:5e:00:00:fc Internet Protocol Version 4, Src: 192.168.1.105 (192.168.1.105), Dst: 224.0.0.252 (224.0.0.252) User Datagram Protocol, Src Port: 59708 (59708), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 371 0.013859 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 371: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 43864, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 43864 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 57960 [Calculated window size: 57960] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x573d [validation disabled] [SEQ/ACK analysis] No. Time 372 0.000109 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 372: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 47644, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 47644 (relative sequence number) [Next sequence number: 48904 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xeb77 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 373 0.063718 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 373: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 45124, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9]

Sequence number: 1 (relative sequence number) Acknowledgement number: 45124 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 60480 [Calculated window size: 60480] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4879 [validation disabled] [SEQ/ACK analysis] No. Time 374 0.000104 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 374: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 48904, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 48904 (relative sequence number) [Next sequence number: 50164 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7dfe [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 375 0.028982 Source Toshiba ef:70:26 Destination Broadcast

Protocol Length Info ARP 42 Who has 192.168.1.14

Frame 375: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 376 0.029285 Source Destination fe80::e4ff:1364:eadc:8125 ff02::1:3

Protocol Length Info LLMNR 84 Standard query A

Frame 376: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:01:00:03 (33:33:00:01:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: User Datagram Protocol, Src Port: 52267 (52267), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 377 0.030001 Source 192.168.1.105 Destination 224.0.0.252

Protocol Length Info LLMNR 64 Standard query A wpa

Frame 377: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv4mcast 00:00:fc (01:00:5e:00:00:fc Internet Protocol Version 4, Src: 192.168.1.105 (192.168.1.105), Dst: 224.0.0.252 (224.0.0.252) User Datagram Protocol, Src Port: 59708 (59708), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 378 0.073900 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 378: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 46384, Len Source port: http (80)

Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 46384 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x39b5 [validation disabled] [SEQ/ACK analysis] No. Time 379 0.000091 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 379: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 50164, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 50164 (relative sequence number) [Next sequence number: 51424 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5610 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 380 0.000037 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 380: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 51424, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 51424 (relative sequence number) [Next sequence number: 52684 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb1b8 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 381 0.022011 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 381: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 47644, Len Source port: http (80)

Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 47644 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x34c9 [validation disabled] [SEQ/ACK analysis] No. Time 382 0.000060 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 382: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 52684, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 52684 (relative sequence number) [Next sequence number: 53944 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8f41 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 383 0.014081 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 116 Application Data

Frame 383: 116 bytes on wire (928 bits), 116 bytes captured (928 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2674, Ack: 604, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2674 (relative sequence number) [Next sequence number: 2736 (relative sequence number)] Acknowledgement number: 604 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd72d [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 384 0.001374 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 112 Application Data

Frame 384: 112 bytes on wire (896 bits), 112 bytes captured (896 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 604, Ack: 2736, Source port: 17400 (17400) Destination port: imaps (993)

[Stream index: 13] Sequence number: 604 (relative sequence number) [Next sequence number: 662 (relative sequence number)] Acknowledgement number: 2736 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64494 [Calculated window size: 64494] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3b80 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 385 0.027723 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 385: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 386 0.118978 Source 192.168.1.105 Destination 192.168.1.255 Protocol Length Info NBNS 92 Name query NB WPAD<

Frame 386: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_65:de:f8 (90:4c:e5:65:de:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.105 (192.168.1.105), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 387 0.199507 Source HonHaiPr 14:0e:06 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 387: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 388 0.470979 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 388: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 48904, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 48904 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2fdd [validation disabled] [SEQ/ACK analysis] No. Time 389 0.000071 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 389: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 53944, Ack: 1, Len Source port: 17398 (17398)

Destination port: http (80) [Stream index: 9] Sequence number: 53944 (relative sequence number) [Next sequence number: 55204 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4dcb [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 390 0.000624 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 390: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 50164, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 50164 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2af1 [validation disabled] [SEQ/ACK analysis] No. Time 391 0.000044 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 391: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 55204, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 55204 (relative sequence number) [Next sequence number: 56464 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7f27 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 392 0.069867 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 392: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 51424, Len Source port: http (80)

Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 51424 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2605 [validation disabled] [SEQ/ACK analysis] No. Time 393 0.000114 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 393: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 56464, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 56464 (relative sequence number) [Next sequence number: 57724 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6a06 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 394 0.012290 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 394: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 52684, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 52684 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2119 [validation disabled] [SEQ/ACK analysis] No. Time 395 0.000308 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 395: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 57724, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 57724 (relative sequence number)

[Next sequence number: 58984 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0484 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 396 0.000140 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 396: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 58984, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 58984 (relative sequence number) [Next sequence number: 60244 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0a70 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 397 0.007375 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 397: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 398 0.071787 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 398: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 399 0.091816 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 399: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 400 0.149970 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 400: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 53944, Len Source port: http (80)

Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 53944 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1c2d [validation disabled] [SEQ/ACK analysis] No. Time 401 0.000059 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 401: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 60244, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 60244 (relative sequence number) [Next sequence number: 61504 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0787 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 402 0.067128 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17400 [ACK]

Frame 402: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2736, Ack: 662, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2736 (relative sequence number) Acknowledgement number: 662 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x70df [validation disabled] [SEQ/ACK analysis] No. Time 403 0.082446 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 125 Application Data

Frame 403: 125 bytes on wire (1000 bits), 125 bytes captured (1000 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2736, Ack: 662, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2736 (relative sequence number)

[Next sequence number: 2807 (relative sequence number)] Acknowledgement number: 662 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x14b7 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 404 0.002106 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 90 Application Data

Frame 404: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 662, Ack: 2807, Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 662 (relative sequence number) [Next sequence number: 698 (relative sequence number)] Acknowledgement number: 2807 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64423 [Calculated window size: 64423] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8325 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 405 0.013719 Source 192.168.1.105 Destination 192.168.1.255 Protocol Length Info NBNS 92 Name query NB WPAD<

Frame 405: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_65:de:f8 (90:4c:e5:65:de:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.105 (192.168.1.105), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 406 0.127275 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 406: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 407 0.214793 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 407: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 408 0.278413 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 408: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12

Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 55204, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 55204 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1741 [validation disabled] [SEQ/ACK analysis] No. Time 409 0.000223 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 409: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 61504, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 61504 (relative sequence number) [Next sequence number: 62764 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7f40 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 410 0.063030 Source HonHaiPr 14:0e:06 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 410: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 411 0.118816 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 411: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 57724, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 57724 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0d69 [validation disabled] [SEQ/ACK analysis] No. Time 412 0.000103 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 412: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 62764, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 62764 (relative sequence number) [Next sequence number: 64024 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xed89 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 413 0.000035 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 413: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 64024, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 64024 (relative sequence number) [Next sequence number: 65284 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xec9a [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 414 0.000015 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 942 [TCP segment of a re

Frame 414: 942 bytes on wire (7536 bits), 942 bytes captured (7536 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 65284, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 65284 (relative sequence number) [Next sequence number: 66172 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x10b2 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (888 bytes)

No.

Time 415 0.004813

Source 128.119.245.12

Destination 192.168.1.125

Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 415: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 58984, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 58984 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x087d [validation disabled] [SEQ/ACK analysis] No. Time 416 0.000073 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 416: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 66172, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 66172 (relative sequence number) [Next sequence number: 67432 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x345c [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 417 0.000810 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 417: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 60244, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 60244 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0391 [validation disabled] [SEQ/ACK analysis] No. Time 418 0.000048 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 418: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 67432, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 67432 (relative sequence number) [Next sequence number: 68692 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd71a [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 419 0.220379 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 419: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 61504, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 61504 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xfea4 [validation disabled] [SEQ/ACK analysis] No. Time 420 0.000153 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 420: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 68692, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 68692 (relative sequence number) [Next sequence number: 69952 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x98fd [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 421 0.091818 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 421: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 422 0.101296 Source 98.138.26.42 Destination 192.168.1.114 Protocol Length Info TCP 60 https > 49545 [ACK]

Frame 422: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: LiteonTe_be:fe:42 (d0:df:9a:be:fe:42) Internet Protocol Version 4, Src: 98.138.26.42 (98.138.26.42), Dst: 192.168.1.114 (192.168.1.114) Transmission Control Protocol, Src Port: https (443), Dst Port: 49545 (49545), Seq: 1, Ack: 1, Len: Source port: https (443) Destination port: 49545 (49545) [Stream index: 22] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 551 [Calculated window size: 551] [Window size scaling factor: -1 (unknown)] Checksum: 0xf9af [validation disabled] No. Time 423 0.038352 Source 192.168.1.105 Destination 192.168.1.255 Protocol Length Info NBNS 92 Name query NB WPAD<

Frame 423: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_65:de:f8 (90:4c:e5:65:de:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.105 (192.168.1.105), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 424 0.152187 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 424: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 425 0.175167 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 89 Application Data

Frame 425: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2807, Ack: 698, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2807 (relative sequence number) [Next sequence number: 2842 (relative sequence number)] Acknowledgement number: 698 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x13ab [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 426 0.000488 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 85 Application Data

Frame 426: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 698, Ack: 2842, Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 698 (relative sequence number) [Next sequence number: 729 (relative sequence number)] Acknowledgement number: 2842 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64388 [Calculated window size: 64388] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf024 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 427 0.136483 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 427: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 62764, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 62764 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf9b8 [validation disabled] [SEQ/ACK analysis] No. Time 428 0.000055 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 428: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 69952, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 69952 (relative sequence number) [Next sequence number: 71212 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa16d [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 429 0.060257 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 429: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 65284, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 65284 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xefe0 [validation disabled] [SEQ/ACK analysis] No. Time 430 0.000114 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 430: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 71212, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 71212 (relative sequence number) [Next sequence number: 72472 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1b4f [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 431 0.000043 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 431: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 72472, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 72472 (relative sequence number) [Next sequence number: 73732 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe011 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 432 0.001594 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 432: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 66172, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 66172 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xec68 [validation disabled] [SEQ/ACK analysis] No. Time 433 0.000095 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 433: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 73732, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 73732 (relative sequence number) [Next sequence number: 74992 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x25ea [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 434 0.104079 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 432#1]

Frame 434: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 66172, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 66172 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0e3e [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 435 0.000114 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 435: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5)

Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 74992, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 74992 (relative sequence number) [Next sequence number: 76252 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2482 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 436 0.025027 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 436: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 437 0.365502 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17400 [ACK]

Frame 437: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2842, Ack: 729, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2842 (relative sequence number) Acknowledgement number: 729 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7032 [validation disabled] [SEQ/ACK analysis] No. Time 438 0.001435 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 432#2]

Frame 438: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 66172, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 66172 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0952 [validation disabled] Options: (12 bytes)

[SEQ/ACK analysis] No. Time 439 0.000081 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 439: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 76252, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 76252 (relative sequence number) [Next sequence number: 77512 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1281 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 440 0.002677 Source Destination Protocol Length Info fe80::e4ff:1364:eadc:8125 ff02::1:ff78:6ee9 ICMPv6 86 Neighbor Solici

Frame 440: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast ff:78:6e:e9 (33:33:ff:78:6e Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 441 0.055294 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 441: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 442 0.103049 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 114 Application Data

Frame 442: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2842, Ack: 729, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2842 (relative sequence number) [Next sequence number: 2902 (relative sequence number)] Acknowledgement number: 729 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdba7 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 443 0.000323 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 90 Application Data

Frame 443: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 729, Ack: 2902, Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 729 (relative sequence number) [Next sequence number: 765 (relative sequence number)] Acknowledgement number: 2902 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64328 [Calculated window size: 64328] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2832 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 444 0.000361 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 432#3]

Frame 444: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 66172, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 66172 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0466 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 445 0.000061 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Fast Retransmi

Frame 445: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 66172, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 66172 (relative sequence number) [Next sequence number: 67432 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x345c [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 446 0.000031 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Retransmission

Frame 446: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 67432, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 67432 (relative sequence number) [Next sequence number: 68692 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd71a [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 447 0.000937 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 432#4]

Frame 447: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 66172, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 66172 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xff79 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 448 0.000085 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 448: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 77512, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 77512 (relative sequence number) [Next sequence number: 78772 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdf5a [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time Source Destination Protocol Length Info

449 0.000680

128.119.245.12

192.168.1.125

TCP

66

[TCP Dup ACK 432#5]

Frame 449: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 66172, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 66172 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xfa8d [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 450 0.000053 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 450: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 78772, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 78772 (relative sequence number) [Next sequence number: 80032 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6d44 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 451 0.039251 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 451: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 452 0.093133 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 452: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 453 0.093668 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 453: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info

454 0.109080

Cisco 29:49:0f

PVST+

STP

64

Conf. Root = 32768/

Frame 454: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 455 0.266597 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 432#6]

Frame 455: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 66172, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 66172 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf5a1 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 456 0.000082 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 456: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 80032, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 80032 (relative sequence number) [Next sequence number: 81292 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd8f1 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 457 0.020877 Source Destination fe80::7978:9af:e736:9610 ff02::1:ff11:89dc

Protocol Length Info ICMPv6 86 Neighbor Solicita

Frame 457: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv6mcast ff:11:89:dc (33:33:ff:11:89 Internet Protocol Version 6, Src: fe80::7978:9af:e736:9610 (fe80::7978:9af:e736:9610), Dst: ff02::1 Internet Control Message Protocol v6 No. Time 458 0.164484 Source Destination Protocol Length Info fe80::e4ff:1364:eadc:8125 ff02::1:ff78:6ee9 ICMPv6 86 Neighbor Solici

Frame 458: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast ff:78:6e:e9 (33:33:ff:78:6e Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6

No.

Time 459 0.208564

Source 192.168.1.125

Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP Retransmission

Frame 459: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 66172, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 66172 (relative sequence number) [Next sequence number: 67432 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x345c [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 460 0.032665 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 432#7]

Frame 460: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 66172, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 66172 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf0b5 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 461 0.167468 Source 128.119.245.12 Destination 192.168.1.125

Protocol Length Info TCP 60 http > 17399 [FIN, A

Frame 461: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17399 (17399), Seq: 1, Ack: 2, Len: 0 Source port: http (80) Destination port: 17399 (17399) [Stream index: 10] Sequence number: 1 (relative sequence number) Acknowledgement number: 2 (relative ack number) Header length: 20 bytes Flags: 0x11 (FIN, ACK) Window size value: 5840 [Calculated window size: 5840] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7d01 [validation disabled] No. Time 462 0.000065 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 54 [TCP ZeroWindow] 17

Frame 462: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17399 (17399), Dst Port: http (80), Seq: 2, Ack: 2, Len: 0 Source port: 17399 (17399) Destination port: http (80) [Stream index: 10] Sequence number: 2 (relative sequence number) Acknowledgement number: 2 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 0 [Calculated window size: 0] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x93d1 [validation disabled] [SEQ/ACK analysis] No. Time 463 0.049492 Source IntelCor 56:de:52 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 463: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_56:de:52 (88:53:2e:56:de:52), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 464 0.079759 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 http > 17398 [ACK]

Frame 464: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 67432, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 67432 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 61740 [Calculated window size: 61740] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf0b5 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 465 0.000096 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 465: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 81292, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 81292 (relative sequence number) [Next sequence number: 82552 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xca82 [validation disabled] [SEQ/ACK analysis]

[Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 466 0.000031 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 466: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 82552, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 82552 (relative sequence number) [Next sequence number: 83812 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x24cc [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 467 0.001631 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 467: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 77512, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 77512 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 52920 [Calculated window size: 52920] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe77c [validation disabled] [SEQ/ACK analysis] No. Time 468 0.000057 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 468: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 83812, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 83812 (relative sequence number) [Next sequence number: 85072 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb1ec [validation disabled] [SEQ/ACK analysis]

[Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 469 0.000027 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 469: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 85072, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 85072 (relative sequence number) [Next sequence number: 86332 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd58c [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 470 0.016920 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 470: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 78772, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 78772 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xbb30 [validation disabled] [SEQ/ACK analysis] No. Time 471 0.002224 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17400 [ACK]

Frame 471: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2902, Ack: 765, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2902 (relative sequence number) Acknowledgement number: 765 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6fd2 [validation disabled] [SEQ/ACK analysis]

No.

Time 472 0.000990

Source 128.119.245.12

Destination 192.168.1.125

Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 472: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 80032, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 80032 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb644 [validation disabled] [SEQ/ACK analysis] No. Time 473 0.038350 Source Destination fe80::e4ff:1364:eadc:8125 ff02::1:3

Protocol Length Info LLMNR 84 Standard query A

Frame 473: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:01:00:03 (33:33:00:01:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: User Datagram Protocol, Src Port: 56007 (56007), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 474 0.038805 Source 192.168.1.105 Destination 224.0.0.252

Protocol Length Info LLMNR 64 Standard query A wpa

Frame 474: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv4mcast 00:00:fc (01:00:5e:00:00:fc Internet Protocol Version 4, Src: 192.168.1.105 (192.168.1.105), Dst: 224.0.0.252 (224.0.0.252) User Datagram Protocol, Src Port: 56751 (56751), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 475 0.137903 Source Destination fe80::e4ff:1364:eadc:8125 ff02::1:3

Protocol Length Info LLMNR 84 Standard query A

Frame 475: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast 00:01:00:03 (33:33:00:01:00 Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: User Datagram Protocol, Src Port: 56007 (56007), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 476 0.143824 Source 192.168.1.105 Destination 224.0.0.252

Protocol Length Info LLMNR 64 Standard query A wpa

Frame 476: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv4mcast 00:00:fc (01:00:5e:00:00:fc Internet Protocol Version 4, Src: 192.168.1.105 (192.168.1.105), Dst: 224.0.0.252 (224.0.0.252) User Datagram Protocol, Src Port: 56751 (56751), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 477 0.152245 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 477: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 81292, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9]

Sequence number: 1 (relative sequence number) Acknowledgement number: 81292 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb158 [validation disabled] [SEQ/ACK analysis] No. Time 478 0.007832 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 96 Application Data

Frame 478: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2902, Ack: 765, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2902 (relative sequence number) [Next sequence number: 2944 (relative sequence number)] Acknowledgement number: 765 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x90ff [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 479 0.000380 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 90 Application Data

Frame 479: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 765, Ack: 2944, Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 765 (relative sequence number) [Next sequence number: 801 (relative sequence number)] Acknowledgement number: 2944 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64286 [Calculated window size: 64286] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdb05 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 480 0.051909 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 480: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 481 0.101518 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 481: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff)

Address Resolution Protocol (request) No. Time 482 0.178859 Source 192.168.1.105 Destination 192.168.1.255 Protocol Length Info NBNS 92 Name query NB WPAD<

Frame 482: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_65:de:f8 (90:4c:e5:65:de:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.105 (192.168.1.105), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 483 0.227693 Source Destination fe80::7978:9af:e736:9610 ff02::1:ff11:89dc

Protocol Length Info ICMPv6 86 Neighbor Solicita

Frame 483: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv6mcast ff:11:89:dc (33:33:ff:11:89 Internet Protocol Version 6, Src: fe80::7978:9af:e736:9610 (fe80::7978:9af:e736:9610), Dst: ff02::1 Internet Control Message Protocol v6 No. Time 484 0.250783 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17400 > imaps [FIN,

Frame 484: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 801, Ack: 2944, Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 801 (relative sequence number) Acknowledgement number: 2944 (relative ack number) Header length: 20 bytes Flags: 0x11 (FIN, ACK) Window size value: 64286 [Calculated window size: 64286] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb334 [validation disabled] No. Time 485 0.024050 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 62 17401 > imaps [SYN]

Frame 485: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 0, Len: 0 Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) Window size value: 8192 [Calculated window size: 8192] Checksum: 0x619f [validation disabled] Options: (8 bytes) No. Time 486 0.065364 Source IntelCor 56:de:52 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 486: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_56:de:52 (88:53:2e:56:de:52), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 487 0.080566 Source HonHaiPr 14:0e:06 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 487: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 488 0.212727 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 488: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 82552, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 82552 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xac6c [validation disabled] [SEQ/ACK analysis] No. Time 489 0.000143 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 489: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 86332, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 86332 (relative sequence number) [Next sequence number: 87592 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x55ca [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 490 0.005956 Source Destination Protocol Length Info fe80::e4ff:1364:eadc:8125 ff02::1:ff78:6ee9 ICMPv6 86 Neighbor Solici

Frame 490: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast ff:78:6e:e9 (33:33:ff:78:6e Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 491 0.075612 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 491: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 86332, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number)

Acknowledgement number: 86332 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9da8 [validation disabled] [SEQ/ACK analysis] No. Time 492 0.000140 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 492: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 87592, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 87592 (relative sequence number) [Next sequence number: 88852 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xedfc [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 493 0.000047 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 493: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 88852, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 88852 (relative sequence number) [Next sequence number: 90112 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x903d [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 494 0.000032 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 494: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 90112, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 90112 (relative sequence number)

[Next sequence number: 91372 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x59ba [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 495 0.000017 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 495: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 91372, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 91372 (relative sequence number) [Next sequence number: 92632 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8e60 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 496 0.272425 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17400 [ACK]

Frame 496: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2944, Ack: 801, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2944 (relative sequence number) Acknowledgement number: 801 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6f84 [validation disabled] [SEQ/ACK analysis] No. Time 497 0.054015 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17400 [FIN,

Frame 497: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17400 (17400), Seq: 2944, Ack: 802, Source port: imaps (993) Destination port: 17400 (17400) [Stream index: 13] Sequence number: 2944 (relative sequence number)

Acknowledgement number: 802 (relative ack number) Header length: 20 bytes Flags: 0x11 (FIN, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6f82 [validation disabled] [SEQ/ACK analysis] No. Time 498 0.000085 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17400 > imaps [ACK]

Frame 498: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17400 (17400), Dst Port: imaps (993), Seq: 802, Ack: 2945, Source port: 17400 (17400) Destination port: imaps (993) [Stream index: 13] Sequence number: 802 (relative sequence number) Acknowledgement number: 2945 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 64286 [Calculated window size: 64286] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb333 [validation disabled] [SEQ/ACK analysis] No. Time 499 0.000635 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 62 imaps > 17401 [SYN,

Frame 499: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 0, Ack: 1, Len: Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) Window size value: 1430 [Calculated window size: 1430] Checksum: 0x95bf [validation disabled] Options: (8 bytes) [SEQ/ACK analysis] No. Time 500 0.000115 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17401 > imaps [ACK]

Frame 500: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 1, Ack: 1, Len: Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)]

Checksum: 0xc7ec [validation disabled] [SEQ/ACK analysis] No. Time 501 0.000472 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 204 Client Hello

Frame 501: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 1, Ack: 1, Len: Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25] Sequence number: 1 (relative sequence number) [Next sequence number: 151 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xfd9e [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 502 0.037662 Source 192.168.1.105 Destination 192.168.1.255 Protocol Length Info NBNS 92 Name query NB WPAD<

Frame 502: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_65:de:f8 (90:4c:e5:65:de:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.105 (192.168.1.105), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 503 0.157898 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 503: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 504 0.167678 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 504: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 87592, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 87592 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x98bc [validation disabled] [SEQ/ACK analysis] No. Time 505 0.000318 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 505: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5)

Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 92632, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 92632 (relative sequence number) [Next sequence number: 93892 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd0d3 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 506 0.079803 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 506: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 88852, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 88852 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x93d0 [validation disabled] [SEQ/ACK analysis] No. Time 507 0.000103 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 507: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 93892, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 93892 (relative sequence number) [Next sequence number: 95152 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0b26 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 508 0.021769 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 508: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet

Logical-Link Control Spanning Tree Protocol No. Time 509 0.024317 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 509: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 90112, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 90112 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8ee4 [validation disabled] [SEQ/ACK analysis] No. Time 510 0.000195 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 510: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 95152, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 95152 (relative sequence number) [Next sequence number: 96412 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb7db [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 511 0.007154 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 511: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 512 0.023945 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 512: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 91372, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 91372 (relative ack number)

Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x89f8 [validation disabled] [SEQ/ACK analysis] No. Time 513 0.000099 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 513: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 96412, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 96412 (relative sequence number) [Next sequence number: 97672 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf427 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 514 0.000039 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1173 [TCP segment of a re

Frame 514: 1173 bytes on wire (9384 bits), 1173 bytes captured (9384 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 97672, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 97672 (relative sequence number) [Next sequence number: 98791 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe03d [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1119 bytes) No. Time 515 0.000574 Source 192.168.1.2 Destination 192.168.1.125 Protocol Length Info ICMP 70 Redirect

Frame 515: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 192.168.1.2 (192.168.1.2), Dst: 192.168.1.125 (192.168.1.125) Internet Control Message Protocol No. Time 516 0.039462 Source Destination fe80::7978:9af:e736:9610 ff02::1:ff11:89dc

Protocol Length Info ICMPv6 86 Neighbor Solicita

Frame 516: 86 bytes on wire (688 bits), 86 bytes captured (688 bits)

Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv6mcast ff:11:89:dc (33:33:ff:11:89 Internet Protocol Version 6, Src: fe80::7978:9af:e736:9610 (fe80::7978:9af:e736:9610), Dst: ff02::1 Internet Control Message Protocol v6 No. Time 517 0.039745 Source HonHaiPr 14:0e:06 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 517: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 518 0.059349 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 518: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 92632, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 92632 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x850c [validation disabled] [SEQ/ACK analysis] No. Time 519 0.000092 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 519: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 98791, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 98791 (relative sequence number) [Next sequence number: 100051 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x24ce [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 520 0.082695 Source IntelCor 56:de:52 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 520: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_56:de:52 (88:53:2e:56:de:52), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 521 0.360075 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17401 [ACK]

Frame 521: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26)

Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 1, Ack: 151, Len Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 1 (relative sequence number) Acknowledgement number: 151 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 15008 [Calculated window size: 15008] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8ca7 [validation disabled] [SEQ/ACK analysis] No. Time 522 0.012351 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 1314 Server Hello

Frame 522: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 1, Ack: 151, Len Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 1 (relative sequence number) [Next sequence number: 1261 (relative sequence number)] Acknowledgement number: 151 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 15008 [Calculated window size: 15008] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xde48 [validation disabled] [SEQ/ACK analysis] TCP segment data (1170 bytes) Secure Sockets Layer No. Time 523 0.004049 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 503 Certificate, Server

Frame 523: 503 bytes on wire (4024 bits), 503 bytes captured (4024 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 1261, Ack: 151, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 1261 (relative sequence number) [Next sequence number: 1710 (relative sequence number)] Acknowledgement number: 151 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 15008 [Calculated window size: 15008] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3646 [validation disabled] [SEQ/ACK analysis] TCP segment data (449 bytes) [2 Reassembled TCP Segments (1619 bytes): #522(1170), #523(449)] Secure Sockets Layer No. Time 524 0.000111 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17401 > imaps [ACK]

Frame 524: 54 bytes on wire (432 bits), 54 bytes captured (432 bits)

Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 151, Ack: 1710, Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25] Sequence number: 151 (relative sequence number) Acknowledgement number: 1710 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc0a9 [validation disabled] [SEQ/ACK analysis] No. Time 525 0.000740 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 240 Client Key Exchange

Frame 525: 240 bytes on wire (1920 bits), 240 bytes captured (1920 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 151, Ack: 1710, Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25] Sequence number: 151 (relative sequence number) [Next sequence number: 337 (relative sequence number)] Acknowledgement number: 1710 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1b8d [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 526 0.009736 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 526: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 527 0.053739 Source 192.168.1.105 Destination 192.168.1.255 Protocol Length Info NBNS 92 Name query NB WPAD<

Frame 527: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_65:de:f8 (90:4c:e5:65:de:f8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.105 (192.168.1.105), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 528 0.073783 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 528: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 93892, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9]

Sequence number: 1 (relative sequence number) Acknowledgement number: 93892 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8020 [validation disabled] [SEQ/ACK analysis] No. Time 529 0.000076 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 529: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 100051, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 100051 (relative sequence number) [Next sequence number: 101311 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x91b6 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 530 0.018249 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 530: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 95152, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 95152 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7b34 [validation disabled] [SEQ/ACK analysis] No. Time 531 0.000068 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 531: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 101311, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 101311 (relative sequence number) [Next sequence number: 102571 (relative sequence number)] Acknowledgement number: 1 (relative ack number)

Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x73d9 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 532 0.001266 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 532: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 96412, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 96412 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7648 [validation disabled] [SEQ/ACK analysis] No. Time 533 0.000040 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 533: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 102571, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 102571 (relative sequence number) [Next sequence number: 103831 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8667 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 534 0.012201 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 532#1]

Frame 534: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 96412, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 96412 (relative ack number) Header length: 32 bytes

Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xacf6 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 535 0.000070 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 535: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 103831, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 103831 (relative sequence number) [Next sequence number: 105091 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1a17 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 536 0.096998 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 536: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 537 0.190798 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 537: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 538 0.430027 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 101 Change Cipher Spec,

Frame 538: 101 bytes on wire (808 bits), 101 bytes captured (808 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 1710, Ack: 337, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 1710 (relative sequence number) [Next sequence number: 1757 (relative sequence number)] Acknowledgement number: 337 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xfd6e [validation disabled]

[SEQ/ACK analysis] Secure Sockets Layer No. Time 539 0.002017 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 150 Application Data

Frame 539: 150 bytes on wire (1200 bits), 150 bytes captured (1200 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 1757, Ack: 337, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 1757 (relative sequence number) [Next sequence number: 1853 (relative sequence number)] Acknowledgement number: 337 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3b8f [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 540 0.000101 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17401 > imaps [ACK]

Frame 540: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 337, Ack: 1853, Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25] Sequence number: 337 (relative sequence number) Acknowledgement number: 1853 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65377 [Calculated window size: 65377] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xbfef [validation disabled] [SEQ/ACK analysis] No. Time 541 0.001016 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 96 Application Data

Frame 541: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 337, Ack: 1853, Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25] Sequence number: 337 (relative sequence number) [Next sequence number: 379 (relative sequence number)] Acknowledgement number: 1853 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65377 [Calculated window size: 65377] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x615d [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer

No.

Time 542 0.062926

Source HonHaiPr 14:0e:06

Destination Broadcast

Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 542: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 543 0.097104 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 532#2]

Frame 543: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 96412, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 96412 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa80a [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 544 0.000094 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 544: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 105091, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 105091 (relative sequence number) [Next sequence number: 106351 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd0b8 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 545 0.040657 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 532#3]

Frame 545: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 96412, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 96412 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK)

Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa31e [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 546 0.000100 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Fast Retransmi

Frame 546: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 96412, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 96412 (relative sequence number) [Next sequence number: 97672 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf427 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 547 0.000045 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1173 [TCP Retransmission

Frame 547: 1173 bytes on wire (9384 bits), 1173 bytes captured (9384 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 97672, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 97672 (relative sequence number) [Next sequence number: 98791 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe03d [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1119 bytes) No. Time 548 0.000027 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 548: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 106351, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 106351 (relative sequence number) [Next sequence number: 107611 (relative sequence number)] Acknowledgement number: 1 (relative ack number)

Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x58d1 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 549 0.013939 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 532#4]

Frame 549: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 96412, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 96412 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9e32 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 550 0.000087 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 550: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 107611, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 107611 (relative sequence number) [Next sequence number: 108871 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1d54 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 551 0.062731 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 532#5]

Frame 551: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 96412, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 96412 (relative ack number)

Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9946 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 552 0.000092 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 552: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 108871, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 108871 (relative sequence number) [Next sequence number: 110131 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf1f9 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 553 0.063051 Source Destination Protocol Length Info fe80::e4ff:1364:eadc:8125 ff02::1:ff78:6ee9 ICMPv6 86 Neighbor Solici

Frame 553: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast ff:78:6e:e9 (33:33:ff:78:6e Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 554 0.223667 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Retransmission

Frame 554: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 96412, Ack: 1, Len Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 96412 (relative sequence number) [Next sequence number: 97672 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf427 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 555 0.240274 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 555: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 556 0.318797 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 556: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 557 0.330357 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 532#6]

Frame 557: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 96412, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 96412 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x945a [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 558 0.002523 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 251 Application Data

Frame 558: 251 bytes on wire (2008 bits), 251 bytes captured (2008 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 1853, Ack: 379, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 1853 (relative sequence number) [Next sequence number: 2050 (relative sequence number)] Acknowledgement number: 379 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5766 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 559 0.000805 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 114 Application Data

Frame 559: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 379, Ack: 2050, Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25]

Sequence number: 379 (relative sequence number) [Next sequence number: 439 (relative sequence number)] Acknowledgement number: 2050 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65180 [Calculated window size: 65180] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0fa6 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 560 0.057648 Source Destination Protocol Length Info fe80::e4ff:1364:eadc:8125 ff02::1:ff78:6ee9 ICMPv6 86 Neighbor Solici

Frame 560: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast ff:78:6e:e9 (33:33:ff:78:6e Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 561 0.208824 Source HonHaiPr 08:65:ab Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.2

Frame 561: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_08:65:ab (00:26:5e:08:65:ab), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 562 0.219137 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 562: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 563 0.238286 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 563: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 564 0.251337 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 http > 17398 [ACK]

Frame 564: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 97672, Len Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 97672 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 61740 [Calculated window size: 61740] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x945a [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 565 0.000218 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 565: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 110131, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 110131 (relative sequence number) [Next sequence number: 111391 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x55a9 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 566 0.000076 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 566: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 111391, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 111391 (relative sequence number) [Next sequence number: 112651 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xfd1d [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 567 0.016652 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 567: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 106351, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 106351 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 54180 [Calculated window size: 54180] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x71e9 [validation disabled] [SEQ/ACK analysis] No. Time 568 0.000122 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 568: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 112651, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 112651 (relative sequence number) [Next sequence number: 113911 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf74f [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 569 0.000039 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 569: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 113911, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 113911 (relative sequence number) [Next sequence number: 115171 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2456 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 570 0.036256 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Window Update]

Frame 570: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 106351, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 106351 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x413b [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time Source Destination Protocol Length Info

571 0.014647

128.119.245.12

192.168.1.125

TCP

66

[TCP Dup ACK 570#1]

Frame 571: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 106351, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 106351 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3c4f [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 572 0.010383 Source Destination fe80::3830:48a8:ccdc:530f ff02::1:2

Protocol Length Info DHCPv6 154 Solicit XID: 0xb

Frame 572: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: Hewlett- 42:4a:82 (9c:8e:99:42:4a:82), Dst: IPv6mcast 00:01:00:02 (33:33:00:01:00 Internet Protocol Version 6, Src: fe80::3830:48a8:ccdc:530f (fe80::3830:48a8:ccdc:530f), Dst: ff02: User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547) DHCPv6 No. Time 573 0.413770 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17401 [ACK]

Frame 573: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2050, Ack: 439, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2050 (relative sequence number) Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7f56 [validation disabled] [SEQ/ACK analysis] No. Time 574 0.091210 Source Cisco_29:49:0f Destination Cisco_29:49:0f Protocol Length Info LOOP 60 Reply

Frame 574: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_29:49:0f (00:24:f7:29:49:0f), Dst: Cisco_29:49:0f (00:24:f7:29:49:0f) Configuration Test Protocol (loopback) Data (40 bytes) 0000 0010 0020 No. 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Source 128.119.245.12 Destination 192.168.1.125 ................ ................ ........ Protocol Length Info TCP 66 [TCP Dup ACK 570#2]

Time 575 0.104254

Frame 575: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26)

Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 106351, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 106351 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3763 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 576 0.027474 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 570#3]

Frame 576: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 106351, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 106351 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3277 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 577 0.000094 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Fast Retransmi

Frame 577: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 106351, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 106351 (relative sequence number) [Next sequence number: 107611 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x58d1 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 578 0.000044 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 578: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1

Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 115171, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 115171 (relative sequence number) [Next sequence number: 116431 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd439 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 579 0.022932 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 579: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 580 0.045539 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 570#4]

Frame 580: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 106351, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 106351 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2d8b [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 581 0.000094 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 581: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 116431, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 116431 (relative sequence number) [Next sequence number: 117691 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2a22 [validation disabled]

[SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 582 0.000715 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 570#5]

Frame 582: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 106351, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 106351 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x289f [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 583 0.000064 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 583: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 117691, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 117691 (relative sequence number) [Next sequence number: 118951 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x453a [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 584 0.058223 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 584: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 585 0.073694 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 585: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 586 0.073980 Source 192.168.1.109 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 196 Dropbox LAN sync

Frame 586: 196 bytes on wire (1568 bits), 196 bytes captured (1568 bits) Ethernet II, Src: IntelCor_56:de:52 (88:53:2e:56:de:52), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.109 (192.168.1.109), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 587 0.081227 Source 192.168.1.109 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 196 Dropbox LAN sync

Frame 587: 196 bytes on wire (1568 bits), 196 bytes captured (1568 bits) Ethernet II, Src: IntelCor_56:de:52 (88:53:2e:56:de:52), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.109 (192.168.1.109), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 588 0.082106 Source 192.168.1.109 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 196 Dropbox LAN sync

Frame 588: 196 bytes on wire (1568 bits), 196 bytes captured (1568 bits) Ethernet II, Src: IntelCor_56:de:52 (88:53:2e:56:de:52), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.109 (192.168.1.109), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 589 0.082434 Source 192.168.1.109 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 196 Dropbox LAN sync

Frame 589: 196 bytes on wire (1568 bits), 196 bytes captured (1568 bits) Ethernet II, Src: IntelCor_56:de:52 (88:53:2e:56:de:52), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.109 (192.168.1.109), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 590 0.082616 Source 192.168.1.109 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 196 Dropbox LAN sync

Frame 590: 196 bytes on wire (1568 bits), 196 bytes captured (1568 bits) Ethernet II, Src: IntelCor_56:de:52 (88:53:2e:56:de:52), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.109 (192.168.1.109), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 591 0.082995 Source 192.168.1.109 Destination 192.168.1.255 Protocol Length Info DB-LSP-DISC 196 Dropbox LAN sync

Frame 591: 196 bytes on wire (1568 bits), 196 bytes captured (1568 bits) Ethernet II, Src: IntelCor_56:de:52 (88:53:2e:56:de:52), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.109 (192.168.1.109), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 592 0.083185 Source 192.168.1.109 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 196 Dropbox LAN sync

Frame 592: 196 bytes on wire (1568 bits), 196 bytes captured (1568 bits) Ethernet II, Src: IntelCor_56:de:52 (88:53:2e:56:de:52), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.109 (192.168.1.109), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 593 0.110658 Source HonHaiPr 08:65:ab Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.2

Frame 593: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_08:65:ab (00:26:5e:08:65:ab), Dst: Broadcast (ff:ff:ff:ff:ff:ff)

Address Resolution Protocol (request) No. Time 594 0.138720 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 262 Application Data

Frame 594: 262 bytes on wire (2096 bits), 262 bytes captured (2096 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2050, Ack: 439, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2050 (relative sequence number) [Next sequence number: 2258 (relative sequence number)] Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xcaf7 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 595 0.000624 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 90 Application Data

Frame 595: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 439, Ack: 2258, Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25] Sequence number: 439 (relative sequence number) [Next sequence number: 475 (relative sequence number)] Acknowledgement number: 2258 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64972 [Calculated window size: 64972] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2292 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 596 0.006955 Source Destination Protocol Length Info fe80::e4ff:1364:eadc:8125 ff02::1:ff78:6ee9 ICMPv6 86 Neighbor Solici

Frame 596: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast ff:78:6e:e9 (33:33:ff:78:6e Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 597 0.109628 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Retransmission

Frame 597: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 106351, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 106351 (relative sequence number) [Next sequence number: 107611 (relative sequence number)]

Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x58d1 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 598 0.264838 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 598: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 115171, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 115171 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 54180 [Calculated window size: 54180] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4f75 [validation disabled] [SEQ/ACK analysis] No. Time 599 0.000116 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 599: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 118951, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 118951 (relative sequence number) [Next sequence number: 120211 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6a0b [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 600 0.000042 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 600: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 120211, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 120211 (relative sequence number) [Next sequence number: 121471 (relative sequence number)]

Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x41f9 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 601 0.002472 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 601: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 116431, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 116431 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2815 [validation disabled] [SEQ/ACK analysis] No. Time 602 0.000101 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 602: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 121471, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 121471 (relative sequence number) [Next sequence number: 122731 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7a1d [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 603 0.000038 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 603: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 122731, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 122731 (relative sequence number) [Next sequence number: 123991 (relative sequence number)]

Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc370 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 604 0.061683 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 604: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 117691, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 117691 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2329 [validation disabled] [SEQ/ACK analysis] No. Time 605 0.076085 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 605: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 118951, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 118951 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1e3d [validation disabled] [SEQ/ACK analysis] No. Time 606 0.070070 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 606: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 607 0.186844 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17401 [ACK]

Frame 607: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12

Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2258, Ack: 475, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2258 (relative sequence number) Acknowledgement number: 475 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7e62 [validation disabled] [SEQ/ACK analysis] No. Time 608 0.038755 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 605#1]

Frame 608: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 118951, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 118951 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x19db [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 609 0.009137 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 609: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 610 0.032766 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 89 Application Data

Frame 610: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2258, Ack: 475, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2258 (relative sequence number) [Next sequence number: 2293 (relative sequence number)] Acknowledgement number: 475 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xcfc2 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 611 0.000736 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 85 Application Data

Frame 611: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 475, Ack: 2293, Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25] Sequence number: 475 (relative sequence number) [Next sequence number: 506 (relative sequence number)] Acknowledgement number: 2293 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64937 [Calculated window size: 64937] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf504 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 612 0.117658 Source 192.168.1.125 Destination 172.24.68.170 Protocol Length Info SNMP 120 get-request 1.3.6.1

Frame 612: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 172.24.68.170 (172.24.68.170) User Datagram Protocol, Src Port: 49169 (49169), Dst Port: snmp (161) Simple Network Management Protocol No. Time 613 0.117748 Source 192.168.1.125 Destination 172.24.68.170 Protocol Length Info SNMP 120 get-request 1.3.6.1

Frame 613: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 172.24.68.170 (172.24.68.170) User Datagram Protocol, Src Port: 49169 (49169), Dst Port: snmp (161) Simple Network Management Protocol No. Time 614 0.117799 Source 192.168.1.125 Destination 172.24.68.170 Protocol Length Info SNMP 120 get-request 1.3.6.1

Frame 614: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 172.24.68.170 (172.24.68.170) User Datagram Protocol, Src Port: 49169 (49169), Dst Port: snmp (161) Simple Network Management Protocol No. Time 615 0.117879 Source Toshiba ef:70:26 Destination Broadcast

Protocol Length Info ARP 42 Who has 192.168.1.14

Frame 615: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 616 0.150461 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 616: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 120211, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 120211 (relative ack number)

Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1951 [validation disabled] [SEQ/ACK analysis] No. Time 617 0.000137 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 617: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 123991, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 123991 (relative sequence number) [Next sequence number: 125251 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0c40 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 618 0.007468 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 618: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 619 0.011962 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 619: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 121471, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 121471 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1465 [validation disabled] [SEQ/ACK analysis] No. Time 620 0.000080 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 620: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1

Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 125251, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 125251 (relative sequence number) [Next sequence number: 126511 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd5d9 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 621 0.002273 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 621: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 122731, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 122731 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0f79 [validation disabled] [SEQ/ACK analysis] No. Time 622 0.000076 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 622: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 126511, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 126511 (relative sequence number) [Next sequence number: 127771 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf514 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 623 0.002562 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 623: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12

Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 123991, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 123991 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0a8d [validation disabled] [SEQ/ACK analysis] No. Time 624 0.000083 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 624: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 127771, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 127771 (relative sequence number) [Next sequence number: 129031 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1928 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 625 0.002499 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 625: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 626 0.030421 Source HonHaiPr 08:65:ab Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.2

Frame 626: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_08:65:ab (00:26:5e:08:65:ab), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 627 0.226381 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 627: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 628 0.241990 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 628: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol

No.

Time 629 0.370151

Source Destination fe80::29e2:10f:9139:6fa9 ff02::1:3

Protocol Length Info LLMNR 86 Standard query A

Frame 629: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: CompalIn e9:cd:c3 (00:23:5a:e9:cd:c3), Dst: IPv6mcast 00:01:00:03 (33:33:00:01:00 Internet Protocol Version 6, Src: fe80::29e2:10f:9139:6fa9 (fe80::29e2:10f:9139:6fa9), Dst: ff02::1 User Datagram Protocol, Src Port: 61493 (61493), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 630 0.370791 Source 192.168.1.24 Destination 224.0.0.252

Protocol Length Info LLMNR 66 Standard query A isa

Frame 630: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: CompalIn e9:cd:c3 (00:23:5a:e9:cd:c3), Dst: IPv4mcast 00:00:fc (01:00:5e:00:00:fc Internet Protocol Version 4, Src: 192.168.1.24 (192.168.1.24), Dst: 224.0.0.252 (224.0.0.252) User Datagram Protocol, Src Port: 57076 (57076), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 631 0.393467 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 631: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 632 0.472136 Source Destination fe80::29e2:10f:9139:6fa9 ff02::1:3 Protocol Length Info LLMNR 86 Standard query A

Frame 632: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: CompalIn e9:cd:c3 (00:23:5a:e9:cd:c3), Dst: IPv6mcast 00:01:00:03 (33:33:00:01:00 Internet Protocol Version 6, Src: fe80::29e2:10f:9139:6fa9 (fe80::29e2:10f:9139:6fa9), Dst: ff02::1 User Datagram Protocol, Src Port: 61493 (61493), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 633 0.472495 Source Destination fe80::a52f:a229:6792:86fd ff02::1:3

Protocol Length Info LLMNR 86 Standard query A

Frame 633: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 13:4b:e5 (00:25:56:13:4b:e5), Dst: IPv6mcast 00:01:00:03 (33:33:00:01:00 Internet Protocol Version 6, Src: fe80::a52f:a229:6792:86fd (fe80::a52f:a229:6792:86fd), Dst: ff02: User Datagram Protocol, Src Port: 61493 (61493), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 634 0.472647 Source 192.168.1.24 Destination 224.0.0.252

Protocol Length Info LLMNR 66 Standard query A isa

Frame 634: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: CompalIn e9:cd:c3 (00:23:5a:e9:cd:c3), Dst: IPv4mcast 00:00:fc (01:00:5e:00:00:fc Internet Protocol Version 4, Src: 192.168.1.24 (192.168.1.24), Dst: 224.0.0.252 (224.0.0.252) User Datagram Protocol, Src Port: 57076 (57076), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 635 0.473629 Source 169.254.134.253 Destination 224.0.0.252

Protocol Length Info LLMNR 66 Standard query A isa

Frame 635: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: HonHaiPr 13:4b:e5 (00:25:56:13:4b:e5), Dst: IPv4mcast 00:00:fc (01:00:5e:00:00:fc Internet Protocol Version 4, Src: 169.254.134.253 (169.254.134.253), Dst: 224.0.0.252 (224.0.0.252) User Datagram Protocol, Src Port: 57076 (57076), Dst Port: llmnr (5355) Link-local Multicast Name Resolution (query) No. Time 636 0.527940 Source Toshiba ef:70:26 Destination Broadcast

Protocol Length Info ARP 42 Who has 192.168.1.14

Frame 636: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 637 0.593471 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17401 [ACK]

Frame 637: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2293, Ack: 506, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2293 (relative sequence number) Acknowledgement number: 506 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7e20 [validation disabled] [SEQ/ACK analysis] No. Time 638 0.000746 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 638: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 125251, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 125251 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x05a1 [validation disabled] [SEQ/ACK analysis] No. Time 639 0.000072 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 639: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 129031, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 129031 (relative sequence number) [Next sequence number: 130291 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6660 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718]

TCP segment data (1260 bytes) No. Time 640 0.000035 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 640: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 130291, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 130291 (relative sequence number) [Next sequence number: 131551 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7dff [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 641 0.025828 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 641: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 642 0.079445 Source 192.168.1.24 Destination 192.168.1.255 Protocol Length Info NBNS 92 Name query NB ISATA

Frame 642: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: CompalIn_e9:cd:c3 (00:23:5a:e9:cd:c3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.24 (192.168.1.24), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 643 0.079811 Source 169.254.134.253 Destination 169.254.255.255 Protocol Length Info NBNS 92 Name query NB ISATA

Frame 643: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_13:4b:e5 (00:25:56:13:4b:e5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 169.254.134.253 (169.254.134.253), Dst: 169.254.255.255 (169.254. User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 644 0.103476 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 644: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 126511, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 126511 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000]

[Window size scaling factor: -2 (no window scaling used)] Checksum: 0x00b5 [validation disabled] [SEQ/ACK analysis] No. Time 645 0.000097 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 645: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 131551, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 131551 (relative sequence number) [Next sequence number: 132811 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5586 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 646 0.001063 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 114 Application Data

Frame 646: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2293, Ack: 506, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2293 (relative sequence number) [Next sequence number: 2353 (relative sequence number)] Acknowledgement number: 506 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa1ef [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 647 0.000490 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 110 Application Data

Frame 647: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 506, Ack: 2353, Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25] Sequence number: 506 (relative sequence number) [Next sequence number: 562 (relative sequence number)] Acknowledgement number: 2353 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64877 [Calculated window size: 64877]

[Window size scaling factor: -2 (no window scaling used)] Checksum: 0x13a4 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 648 0.000290 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 648: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 127771, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 127771 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xfbc8 [validation disabled] [SEQ/ACK analysis] No. Time 649 0.000065 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 649: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 132811, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 132811 (relative sequence number) [Next sequence number: 134071 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x407a [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 650 0.049458 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 650: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 129031, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 129031 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf6dc [validation disabled]

[SEQ/ACK analysis] No. Time 651 0.000096 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 651: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 134071, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 134071 (relative sequence number) [Next sequence number: 135331 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb9dc [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 652 0.253041 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 652: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 653 0.489234 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 653: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 130291, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 130291 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf1f0 [validation disabled] [SEQ/ACK analysis] No. Time 654 0.000096 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 654: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 135331, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 135331 (relative sequence number) [Next sequence number: 136591 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes

Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x071a [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 655 0.014111 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 655: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 131551, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 131551 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xed04 [validation disabled] [SEQ/ACK analysis] No. Time 656 0.000109 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 656: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 136591, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 136591 (relative sequence number) [Next sequence number: 137851 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6d7f [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 657 0.000034 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 657: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 137851, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 137851 (relative sequence number) [Next sequence number: 139111 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes

Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdbd9 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 658 0.127281 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 658: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 132811, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 132811 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe818 [validation disabled] [SEQ/ACK analysis] No. Time 659 0.000066 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 659: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 139111, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 139111 (relative sequence number) [Next sequence number: 140371 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xfe30 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 660 0.042721 Source 169.254.134.253 Destination 169.254.255.255 Protocol Length Info NBNS 92 Name query NB ISATA

Frame 660: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_13:4b:e5 (00:25:56:13:4b:e5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 169.254.134.253 (169.254.134.253), Dst: 169.254.255.255 (169.254. User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 661 0.043106 Source 192.168.1.24 Destination 192.168.1.255 Protocol Length Info NBNS 92 Name query NB ISATA

Frame 661: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: CompalIn_e9:cd:c3 (00:23:5a:e9:cd:c3), Dst: Broadcast (ff:ff:ff:ff:ff:ff)

Internet Protocol Version 4, Src: 192.168.1.24 (192.168.1.24), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 662 0.064977 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 658#1]

Frame 662: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 132811, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 132811 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0b26 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 663 0.000115 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 663: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 140371, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 140371 (relative sequence number) [Next sequence number: 141631 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4456 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 664 0.082603 Source Toshiba ef:70:26 Destination Broadcast

Protocol Length Info ARP 42 Who has 192.168.1.14

Frame 664: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 665 0.174781 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 665: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 666 0.352622 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 658#2]

Frame 666: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)

Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 132811, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 132811 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x063a [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 667 0.000093 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 667: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 141631, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 141631 (relative sequence number) [Next sequence number: 142891 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe023 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 668 0.029717 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 658#3]

Frame 668: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 132811, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 132811 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x014e [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 669 0.000100 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Fast Retransmi

Frame 669: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5)

Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 132811, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 132811 (relative sequence number) [Next sequence number: 134071 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x407a [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 670 0.000044 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 670: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 142891, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 142891 (relative sequence number) [Next sequence number: 144151 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc783 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 671 0.000566 Source 192.168.1.2 Destination 192.168.1.125 Protocol Length Info ICMP 70 Redirect

Frame 671: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 192.168.1.2 (192.168.1.2), Dst: 192.168.1.125 (192.168.1.125) Internet Control Message Protocol No. Time 672 0.000261 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 658#4]

Frame 672: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 132811, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 132811 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)]

Checksum: 0xfc61 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 673 0.000055 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 673: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 144151, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 144151 (relative sequence number) [Next sequence number: 145411 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe92b [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 674 0.090099 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 110 [TCP Retransmission

Frame 674: 110 bytes on wire (880 bits), 110 bytes captured (880 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 506, Ack: 2353, Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25] Sequence number: 506 (relative sequence number) [Next sequence number: 562 (relative sequence number)] Acknowledgement number: 2353 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64877 [Calculated window size: 64877] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x13a4 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 675 0.083353 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 675: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 676 0.171921 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 658#5]

Frame 676: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 132811, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9]

Sequence number: 1 (relative sequence number) Acknowledgement number: 132811 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf775 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 677 0.000134 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 677: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 145411, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 145411 (relative sequence number) [Next sequence number: 146671 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb51a [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 678 0.075586 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 658#6]

Frame 678: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 132811, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 132811 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf289 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 679 0.000128 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 679: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 146671, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 146671 (relative sequence number)

[Next sequence number: 147931 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2977 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 680 0.006322 Source 169.254.134.253 Destination 169.254.255.255 Protocol Length Info NBNS 92 Name query NB ISATA

Frame 680: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_13:4b:e5 (00:25:56:13:4b:e5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 169.254.134.253 (169.254.134.253), Dst: 169.254.255.255 (169.254. User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 681 0.006712 Source 192.168.1.24 Destination 192.168.1.255 Protocol Length Info NBNS 92 Name query NB ISATA

Frame 681: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: CompalIn_e9:cd:c3 (00:23:5a:e9:cd:c3), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.24 (192.168.1.24), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 682 0.063756 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 682: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 683 0.076077 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 683: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 684 0.082469 Source 192.168.1.110 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 684: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: HonHaiPr_13:b9:3a (94:39:e5:13:b9:3a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.110 (192.168.1.110), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 685 0.084641 Source 192.168.1.110 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 685: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: HonHaiPr_13:b9:3a (94:39:e5:13:b9:3a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.110 (192.168.1.110), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 686 0.086073 Source 192.168.1.110 Destination 192.168.1.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 686: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: HonHaiPr_13:b9:3a (94:39:e5:13:b9:3a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.110 (192.168.1.110), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 687 0.086317 Source 192.168.1.110 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 687: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: HonHaiPr_13:b9:3a (94:39:e5:13:b9:3a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.110 (192.168.1.110), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 688 0.086533 Source 192.168.1.110 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 688: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: HonHaiPr_13:b9:3a (94:39:e5:13:b9:3a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.110 (192.168.1.110), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 689 0.201544 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 114 [TCP Retransmission

Frame 689: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2293, Ack: 506, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2293 (relative sequence number) [Next sequence number: 2353 (relative sequence number)] Acknowledgement number: 506 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 2860 [Calculated window size: 2860] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd593 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 690 0.000100 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 66 [TCP Dup ACK 674#1]

Frame 690: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 562, Ack: 2353, Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25] Sequence number: 562 (relative sequence number) Acknowledgement number: 2353 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 64877 [Calculated window size: 64877] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xab77 [validation disabled] Options: (12 bytes)

[SEQ/ACK analysis] No. Time 691 0.020838 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Retransmission

Frame 691: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 132811, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 132811 (relative sequence number) [Next sequence number: 134071 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x407a [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 692 0.009090 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 114 [TCP Retransmission

Frame 692: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2293, Ack: 506, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2293 (relative sequence number) [Next sequence number: 2353 (relative sequence number)] Acknowledgement number: 506 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa1ef [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 693 0.000091 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 66 [TCP Dup ACK 674#2]

Frame 693: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 562, Ack: 2353, Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25] Sequence number: 562 (relative sequence number) Acknowledgement number: 2353 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 64877 [Calculated window size: 64877] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xab77 [validation disabled] Options: (12 bytes)

[SEQ/ACK analysis] No. Time 694 0.206085 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 658#7]

Frame 694: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 132811, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 132811 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 63000 [Calculated window size: 63000] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xed9d [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 695 0.013239 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 695: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 142891, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 142891 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb6e0 [validation disabled] [SEQ/ACK analysis] No. Time 696 0.000131 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 696: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 147931, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 147931 (relative sequence number) [Next sequence number: 149191 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd13f [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes)

No.

Time 697 0.000043

Source 192.168.1.125

Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 697: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 149191, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 149191 (relative sequence number) [Next sequence number: 150451 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xfb3c [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 698 0.013195 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 698: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 144151, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 144151 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb1e5 [validation disabled] [SEQ/ACK analysis] No. Time 699 0.000302 Source 192.168.1.125 Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 699: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 150451, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 150451 (relative sequence number) [Next sequence number: 151711 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x20b2 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes)

No.

Time 700 0.000067

Source 192.168.1.125

Destination 128.119.245.12

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 700: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 151711, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 151711 (relative sequence number) [Next sequence number: 152971 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x914c [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 701 0.069111 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 698#1]

Frame 701: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 144151, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 144151 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7c5a [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 702 0.003455 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17401 [ACK]

Frame 702: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2353, Ack: 562, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2353 (relative sequence number) Acknowledgement number: 562 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7dac [validation disabled] [SEQ/ACK analysis] No. Time 703 0.001649 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 698#2]

Frame 703: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 144151, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 144151 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x776e [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 704 0.027640 Source 192.168.1.125 Destination 255.255.255.255 Protocol Length Info UDP 178 Source port: 58314

Frame 704: 178 bytes on wire (1424 bits), 178 bytes captured (1424 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: 58314 (58314), Dst Port: groove-dpp (1211) Data (136 bytes) 0000 0010 0020 0030 0040 0050 0060 0070 0080 No. 01 63 71 61 fe fe 31 6c 01 03 7a 6e 00 a9 a9 32 e6 01 80 33 36 bc 7c 2f 36 fe 0a 64 78 35 09 b0 00 00 a9 01 70 7a 66 c0 fe 51 07 01 14 70 39 6b 07 a9 2a 01 7c 97 3a 38 64 7d 7f 48 7d b0 fe 2f 79 61 01 01 0f 01 fe a9 2f 34 6a a8 a8 31 a8 a9 2f 34 65 c0 c0 34 c0 01 66 6d 68 01 02 2c 01 7f 33 71 68 1f 01 31 01 01 71 66 75 a8 01 2c 1f a8 77 35 66 c0 0a 30 a8 c0 6d 69 6a 6c 14 2c c0 01 66 78 67 e6 97 36 01 02 ...dpp:///f3qwmf cz3xz98y44mqf5ix qn65fkdajehhufjg a.....}.......l. ..|............. ../.Q*H.14,1,0,6 126...}......... l....|.......... ........ Protocol Length Info TLSv1 379 Application Data

Time 705 0.147758

Source 173.194.67.109

Destination 192.168.1.125

Frame 705: 379 bytes on wire (3032 bits), 379 bytes captured (3032 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2353, Ack: 562, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2353 (relative sequence number) [Next sequence number: 2678 (relative sequence number)] Acknowledgement number: 562 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb753 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 706 0.004184 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 90 Application Data

Frame 706: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10

Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 562, Ack: 2678, Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25] Sequence number: 562 (relative sequence number) [Next sequence number: 598 (relative sequence number)] Acknowledgement number: 2678 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64552 [Calculated window size: 64552] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x39ed [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 707 0.148997 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 707: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 708 0.154673 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 708: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 709 0.191062 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 74 [TCP Dup ACK 698#3]

Frame 709: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 144151, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 144151 (relative ack number) Header length: 40 bytes Flags: 0x10 (ACK) Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xba5a [validation disabled] Options: (20 bytes) [SEQ/ACK analysis] No. Time 710 0.000096 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 1314 [TCP Fast Retransmi

Frame 710: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 144151, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 144151 (relative sequence number) [Next sequence number: 145411 (relative sequence number)] Acknowledgement number: 1 (relative ack number)

Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe92b [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 718] TCP segment data (1260 bytes) No. Time 711 0.175277 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 711: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 712 0.180489 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 698#4]

Frame 712: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 144151, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 144151 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7282 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 713 0.027140 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 698#5]

Frame 713: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 144151, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 144151 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6d96 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 714 0.100824 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 698#6]

Frame 714: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26)

Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 144151, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 144151 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x68aa [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 715 0.039579 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 66 [TCP Dup ACK 698#7]

Frame 715: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 144151, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 144151 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x63be [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 716 0.191956 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17401 [ACK]

Frame 716: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2678, Ack: 598, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2678 (relative sequence number) Acknowledgement number: 598 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7c43 [validation disabled] [SEQ/ACK analysis] No. Time 717 0.029889 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 717: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 152971, Le Source port: http (80) Destination port: 17398 (17398)

[Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 152971 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8f71 [validation disabled] [SEQ/ACK analysis] No. Time 718 0.000101 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info HTTP 69 POST /ethereal-labs

Frame 718: 69 bytes on wire (552 bits), 69 bytes captured (552 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 152971, Ack: 1, Le Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 152971 (relative sequence number) [Next sequence number: 152986 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2422 [validation disabled] [SEQ/ACK analysis] TCP segment data (15 bytes) [145 Reassembled TCP Segments (152985 bytes): #108(1260), #131(1260), #149(1260), #132(1260), #164( Hypertext Transfer Protocol MIME Multipart Media Encapsulation, Type: multipart/form-data, Boundary: "------------------------No. Time 719 0.065837 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 89 Application Data

Frame 719: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2678, Ack: 598, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2678 (relative sequence number) [Next sequence number: 2713 (relative sequence number)] Acknowledgement number: 598 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1154 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 720 0.000362 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 85 Application Data

Frame 720: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 598, Ack: 2713, Source port: 17401 (17401)

Destination port: imaps (993) [Stream index: 25] Sequence number: 598 (relative sequence number) [Next sequence number: 629 (relative sequence number)] Acknowledgement number: 2713 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64517 [Calculated window size: 64517] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb38f [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 721 0.327197 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 721: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 722 0.343043 Source Toshiba ef:70:26 Destination Cisco 17:a6:c5 Protocol Length Info ARP 42 Who has 192.168.1.2

Frame 722: 42 bytes on wire (336 bits), 42 bytes captured (336 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Address Resolution Protocol (request) No. Time 723 0.343588 Source Cisco 17:a6:c5 Destination Toshiba ef:70:26 Protocol Length Info ARP 60 192.168.1.2 is at 0

Frame 723: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Address Resolution Protocol (reply) No. Time 724 0.428530 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17398 [ACK]

Frame 724: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 152986, Le Source port: http (80) Destination port: 17398 (17398) [Stream index: 9] Sequence number: 1 (relative sequence number) Acknowledgement number: 152986 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8f62 [validation disabled] [SEQ/ACK analysis] No. Time 725 0.112668 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 725: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 726 0.118987 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 726: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 727 0.130259 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 727: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 728 0.162357 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17401 [ACK]

Frame 728: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2713, Ack: 629, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2713 (relative sequence number) Acknowledgement number: 629 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7c01 [validation disabled] [SEQ/ACK analysis] No. Time 729 0.118523 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 114 Application Data

Frame 729: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2713, Ack: 629, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2713 (relative sequence number) [Next sequence number: 2773 (relative sequence number)] Acknowledgement number: 629 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x70e8 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 730 0.000518 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 90 Application Data

Frame 730: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 629, Ack: 2773, Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25]

Sequence number: 629 (relative sequence number) [Next sequence number: 665 (relative sequence number)] Acknowledgement number: 2773 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64457 [Calculated window size: 64457] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd589 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 731 0.279994 Source Destination Protocol Length Info fe80::e4ff:1364:eadc:8125 ff02::1:ff78:6ee9 ICMPv6 86 Neighbor Solici

Frame 731: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast ff:78:6e:e9 (33:33:ff:78:6e Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 732 0.450384 Source HonHaiPr 14:0e:06 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 732: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 733 0.617224 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 733: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 734 0.684284 Source IntelCor 56:de:52 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 734: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_56:de:52 (88:53:2e:56:de:52), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 735 0.706753 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17401 [ACK]

Frame 735: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2773, Ack: 665, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2773 (relative sequence number) Acknowledgement number: 665 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7ba1 [validation disabled] [SEQ/ACK analysis] No. Time 736 0.074637 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 736: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff)

Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 737 0.117092 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 737: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 738 0.124026 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 96 Application Data

Frame 738: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2773, Ack: 665, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2773 (relative sequence number) [Next sequence number: 2815 (relative sequence number)] Acknowledgement number: 665 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa154 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 739 0.000420 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 90 Application Data

Frame 739: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 665, Ack: 2815, Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25] Sequence number: 665 (relative sequence number) [Next sequence number: 701 (relative sequence number)] Acknowledgement number: 2815 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64415 [Calculated window size: 64415] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x65c3 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 740 0.174025 Source 128.119.245.12 Destination 192.168.1.125 Protocol Length Info HTTP 772 HTTP/1.1 200 OK

(te

Frame 740: 772 bytes on wire (6176 bits), 772 bytes captured (6176 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 128.119.245.12 (128.119.245.12), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17398 (17398), Seq: 1, Ack: 152986, Le Source port: http (80) Destination port: 17398 (17398)

[Stream index: 9] Sequence number: 1 (relative sequence number) [Next sequence number: 719 (relative sequence number)] Acknowledgement number: 152986 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8fc0 [validation disabled] [SEQ/ACK analysis] Hypertext Transfer Protocol Line-based text data: text/html No. Time 741 0.039393 Source 192.168.1.125 Destination 8.8.8.8 Protocol Length Info DNS 84 Standard query A ap

Frame 741: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 8.8.8.8 (8.8.8.8) User Datagram Protocol, Src Port: 53849 (53849), Dst Port: domain (53) Domain Name System (query) No. Time 742 0.076010 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17401 > imaps [FIN,

Frame 742: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 701, Ack: 2815, Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25] Sequence number: 701 (relative sequence number) Acknowledgement number: 2815 (relative ack number) Header length: 20 bytes Flags: 0x11 (FIN, ACK) Window size value: 64415 [Calculated window size: 64415] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xbe82 [validation disabled] No. Time 743 0.003781 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 62 17402 > imaps [SYN]

Frame 743: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17402 (17402), Dst Port: imaps (993), Seq: 0, Len: 0 Source port: 17402 (17402) Destination port: imaps (993) [Stream index: 31] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) Window size value: 8192 [Calculated window size: 8192] Checksum: 0xaf85 [validation disabled] Options: (8 bytes) No. Time 744 0.050235 Source 192.168.1.125 Destination 23.63.101.50 Protocol Length Info TCP 62 17403 > http [SYN]

Frame 744: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.63.101.50 (23.63.101.50)

Transmission Control Protocol, Src Port: 17403 (17403), Dst Port: http (80), Seq: 0, Len: 0 Source port: 17403 (17403) Destination port: http (80) [Stream index: 32] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) Window size value: 8192 [Calculated window size: 8192] Checksum: 0x64fe [validation disabled] Options: (8 bytes) No. Time 745 0.034633 Source Destination Protocol Length Info fe80::e4ff:1364:eadc:8125 ff02::1:ff78:6ee9 ICMPv6 86 Neighbor Solici

Frame 745: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast ff:78:6e:e9 (33:33:ff:78:6e Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 746 0.069960 Source 192.168.1.125 Destination 128.119.245.12 Protocol Length Info TCP 54 17398 > http [ACK]

Frame 746: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 128.119.245.12 (128.119.245.1 Transmission Control Protocol, Src Port: 17398 (17398), Dst Port: http (80), Seq: 152986, Ack: 719, Source port: 17398 (17398) Destination port: http (80) [Stream index: 9] Sequence number: 152986 (relative sequence number) Acknowledgement number: 719 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 64802 [Calculated window size: 64802] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8f71 [validation disabled] [SEQ/ACK analysis] No. Time 747 0.177643 Source 192.168.1.125 Destination 23.63.101.50 Protocol Length Info TCP 62 17404 > http [SYN]

Frame 747: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.63.101.50 (23.63.101.50) Transmission Control Protocol, Src Port: 17404 (17404), Dst Port: http (80), Seq: 0, Len: 0 Source port: 17404 (17404) Destination port: http (80) [Stream index: 33] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) Window size value: 8192 [Calculated window size: 8192] Checksum: 0x1ddd [validation disabled] Options: (8 bytes) No. Time 748 0.021053 Source HonHaiPr 14:0e:06 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 748: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info

749 0.077036

Hewlett- 69:b3:1a

Broadcast

ARP

60

Who has 192.168.1.4

Frame 749: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 750 0.133165 Source IntelCor 56:de:52 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 750: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_56:de:52 (88:53:2e:56:de:52), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 751 0.147936 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 751: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 752 0.287016 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 89 Application Data

Frame 752: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2815, Ack: 701, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2815 (relative sequence number) [Next sequence number: 2850 (relative sequence number)] Acknowledgement number: 701 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4239 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 753 0.000094 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17401 > imaps [RST,

Frame 753: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17401 (17401), Dst Port: imaps (993), Seq: 702, Ack: 2850, Source port: 17401 (17401) Destination port: imaps (993) [Stream index: 25] Sequence number: 702 (relative sequence number) Acknowledgement number: 2850 (relative ack number) Header length: 20 bytes Flags: 0x14 (RST, ACK) Window size value: 0 [Calculated window size: 0] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb9fb [validation disabled] [SEQ/ACK analysis] No. Time 754 0.044142 Source 23.63.101.50 Destination 192.168.1.125

Protocol Length Info TCP 62 http > 17403 [SYN, A

Frame 754: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 23.63.101.50 (23.63.101.50), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17403 (17403), Seq: 0, Ack: 1, Len: 0 Source port: http (80) Destination port: 17403 (17403) [Stream index: 32] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) Window size value: 1460 [Calculated window size: 1460] Checksum: 0x7268 [validation disabled] Options: (8 bytes) [SEQ/ACK analysis] No. Time 755 0.000219 Source 192.168.1.125 Destination 23.63.101.50 Protocol Length Info TCP 54 17403 > http [ACK]

Frame 755: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.63.101.50 (23.63.101.50) Transmission Control Protocol, Src Port: 17403 (17403), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 Source port: 17403 (17403) Destination port: http (80) [Stream index: 32] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa4b3 [validation disabled] [SEQ/ACK analysis] No. Time 756 0.000599 Source 192.168.1.125 Destination 23.63.101.50 Protocol Length Info HTTP 492 GET /loaders/1242/l

Frame 756: 492 bytes on wire (3936 bits), 492 bytes captured (3936 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.63.101.50 (23.63.101.50) Transmission Control Protocol, Src Port: 17403 (17403), Dst Port: http (80), Seq: 1, Ack: 1, Len: 4 Source port: 17403 (17403) Destination port: http (80) [Stream index: 32] Sequence number: 1 (relative sequence number) [Next sequence number: 439 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x557a [validation disabled] [SEQ/ACK analysis] Hypertext Transfer Protocol No. Time 757 0.000787 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17401 [FIN,

Frame 757: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12

Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17401 (17401), Seq: 2850, Ack: 702, Source port: imaps (993) Destination port: 17401 (17401) [Stream index: 25] Sequence number: 2850 (relative sequence number) Acknowledgement number: 702 (relative ack number) Header length: 20 bytes Flags: 0x11 (FIN, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7b2e [validation disabled] [SEQ/ACK analysis] No. Time 758 0.000460 Source 8.8.8.8 Destination 192.168.1.125

Protocol Length Info DNS 100 Standard query respo

Frame 758: 100 bytes on wire (800 bits), 100 bytes captured (800 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 8.8.8.8 (8.8.8.8), Dst: 192.168.1.125 (192.168.1.125) User Datagram Protocol, Src Port: domain (53), Dst Port: 53849 (53849) Domain Name System (response) No. Time 759 0.008725 Source 192.168.1.125 Destination 64.79.93.146 Protocol Length Info TCP 62 17405 > http [SYN]

Frame 759: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 64.79.93.146 (64.79.93.146) Transmission Control Protocol, Src Port: 17405 (17405), Dst Port: http (80), Seq: 0, Len: 0 Source port: 17405 (17405) Destination port: http (80) [Stream index: 34] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) Window size value: 8192 [Calculated window size: 8192] Checksum: 0x0e94 [validation disabled] Options: (8 bytes) No. Time 760 0.016812 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 62 imaps > 17402 [SYN,

Frame 760: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17402 (17402), Seq: 0, Ack: 1, Len: Source port: imaps (993) Destination port: 17402 (17402) [Stream index: 31] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) Window size value: 1430 [Calculated window size: 1430] Checksum: 0x396d [validation disabled] Options: (8 bytes) [SEQ/ACK analysis] No. Time 761 0.000204 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17402 > imaps [ACK]

Frame 761: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5)

Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17402 (17402), Dst Port: imaps (993), Seq: 1, Ack: 1, Len: Source port: 17402 (17402) Destination port: imaps (993) [Stream index: 31] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6b9a [validation disabled] [SEQ/ACK analysis] No. Time 762 0.001059 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 204 Client Hello

Frame 762: 204 bytes on wire (1632 bits), 204 bytes captured (1632 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17402 (17402), Dst Port: imaps (993), Seq: 1, Ack: 1, Len: Source port: 17402 (17402) Destination port: imaps (993) [Stream index: 31] Sequence number: 1 (relative sequence number) [Next sequence number: 151 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xef99 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 763 0.089508 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 763: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 764 0.092039 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 764: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 765 0.107485 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 765: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 766 0.232886 Source 192.168.1.125 Destination 8.8.8.8 Protocol Length Info DNS 84 Standard query A ap

Frame 766: 84 bytes on wire (672 bits), 84 bytes captured (672 bits)

Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 8.8.8.8 (8.8.8.8) User Datagram Protocol, Src Port: 50763 (50763), Dst Port: domain (53) Domain Name System (query) No. Time 767 0.300721 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 62 imaps > 17402 [SYN,

Frame 767: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17402 (17402), Seq: 0, Ack: 1, Len: Source port: imaps (993) Destination port: 17402 (17402) [Stream index: 31] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) Window size value: 1260 [Calculated window size: 1260] Checksum: 0x3a17 [validation disabled] Options: (8 bytes) No. Time 768 0.000079 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 66 [TCP Dup ACK 762#1]

Frame 768: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17402 (17402), Dst Port: imaps (993), Seq: 151, Ack: 1, Len Source port: 17402 (17402) Destination port: imaps (993) [Stream index: 31] Sequence number: 151 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1521 [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 769 0.000611 Source 23.63.101.50 Destination 192.168.1.125

Protocol Length Info TCP 62 http > 17404 [SYN, A

Frame 769: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 23.63.101.50 (23.63.101.50), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17404 (17404), Seq: 0, Ack: 1, Len: 0 Source port: http (80) Destination port: 17404 (17404) [Stream index: 33] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) Window size value: 1460 [Calculated window size: 1460] Checksum: 0xc436 [validation disabled] Options: (8 bytes) [SEQ/ACK analysis] No. Time Source Destination Protocol Length Info

770 0.000095

192.168.1.125

23.63.101.50

TCP

54

17404 > http [ACK]

Frame 770: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.63.101.50 (23.63.101.50) Transmission Control Protocol, Src Port: 17404 (17404), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 Source port: 17404 (17404) Destination port: http (80) [Stream index: 33] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf681 [validation disabled] [SEQ/ACK analysis] No. Time 771 0.030337 Source HonHaiPr 08:65:ab Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.2

Frame 771: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_08:65:ab (00:26:5e:08:65:ab), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 772 0.125728 Source Destination Protocol Length Info fe80::e4ff:1364:eadc:8125 ff02::1:ff78:6ee9 ICMPv6 86 Neighbor Solici

Frame 772: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Ethernet II, Src: HonHaiPr 65:de:f8 (90:4c:e5:65:de:f8), Dst: IPv6mcast ff:78:6e:e9 (33:33:ff:78:6e Internet Protocol Version 6, Src: fe80::e4ff:1364:eadc:8125 (fe80::e4ff:1364:eadc:8125), Dst: ff02: Internet Control Message Protocol v6 No. Time 773 0.179723 Source 23.63.101.50 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17403 [ACK]

Frame 773: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 23.63.101.50 (23.63.101.50), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17403 (17403), Seq: 1, Ack: 439, Len: Source port: http (80) Destination port: 17403 (17403) [Stream index: 32] Sequence number: 1 (relative sequence number) Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 6432 [Calculated window size: 6432] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x89ce [validation disabled] [SEQ/ACK analysis] No. Time 774 0.000669 Source 64.79.93.146 Destination 192.168.1.125

Protocol Length Info TCP 62 http > 17405 [SYN, A

Frame 774: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 64.79.93.146 (64.79.93.146), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17405 (17405), Seq: 0, Ack: 1, Len: 0 Source port: http (80) Destination port: 17405 (17405) [Stream index: 34] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number)

Header length: 28 bytes Flags: 0x12 (SYN, ACK) Window size value: 1460 [Calculated window size: 1460] Checksum: 0x68e4 [validation disabled] Options: (8 bytes) [SEQ/ACK analysis] No. Time 775 0.000135 Source 192.168.1.125 Destination 64.79.93.146 Protocol Length Info TCP 54 17405 > http [ACK]

Frame 775: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 64.79.93.146 (64.79.93.146) Transmission Control Protocol, Src Port: 17405 (17405), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 Source port: 17405 (17405) Destination port: http (80) [Stream index: 34] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9b2f [validation disabled] [SEQ/ACK analysis] No. Time 776 0.000232 Source 192.168.1.125 Destination 64.79.93.146 Protocol Length Info HTTP 1141 POST /related HTTP/

Frame 776: 1141 bytes on wire (9128 bits), 1141 bytes captured (9128 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 64.79.93.146 (64.79.93.146) Transmission Control Protocol, Src Port: 17405 (17405), Dst Port: http (80), Seq: 1, Ack: 1, Len: 1 Source port: 17405 (17405) Destination port: http (80) [Stream index: 34] Sequence number: 1 (relative sequence number) [Next sequence number: 1088 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x83e8 [validation disabled] [SEQ/ACK analysis] Hypertext Transfer Protocol Line-based text data: application/x-www-form-urlencoded No. Time 777 0.002593 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 777: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 778 0.055986 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 778: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service

No.

Time 779 0.150154

Source 173.194.67.109

Destination 192.168.1.125

Protocol Length Info TCP 60 imaps > 17402 [ACK]

Frame 779: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17402 (17402), Seq: 1, Ack: 151, Len Source port: imaps (993) Destination port: 17402 (17402) [Stream index: 31] Sequence number: 1 (relative sequence number) Acknowledgement number: 151 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 15008 [Calculated window size: 15008] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3055 [validation disabled] [SEQ/ACK analysis] No. Time 780 0.012359 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 1314 Server Hello

Frame 780: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17402 (17402), Seq: 1, Ack: 151, Len Source port: imaps (993) Destination port: 17402 (17402) [Stream index: 31] Sequence number: 1 (relative sequence number) [Next sequence number: 1261 (relative sequence number)] Acknowledgement number: 151 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 15008 [Calculated window size: 15008] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4ca3 [validation disabled] [SEQ/ACK analysis] TCP segment data (1170 bytes) Secure Sockets Layer No. Time 781 0.004246 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 503 Certificate, Server

Frame 781: 503 bytes on wire (4024 bits), 503 bytes captured (4024 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17402 (17402), Seq: 1261, Ack: 151, Source port: imaps (993) Destination port: 17402 (17402) [Stream index: 31] Sequence number: 1261 (relative sequence number) [Next sequence number: 1710 (relative sequence number)] Acknowledgement number: 151 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 15008 [Calculated window size: 15008] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd9f3 [validation disabled] [SEQ/ACK analysis] TCP segment data (449 bytes) [2 Reassembled TCP Segments (1619 bytes): #780(1170), #781(449)]

Secure Sockets Layer No. Time 782 0.000133 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17402 > imaps [ACK]

Frame 782: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17402 (17402), Dst Port: imaps (993), Seq: 151, Ack: 1710, Source port: 17402 (17402) Destination port: imaps (993) [Stream index: 31] Sequence number: 151 (relative sequence number) Acknowledgement number: 1710 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6457 [validation disabled] [SEQ/ACK analysis] No. Time 783 0.000766 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 240 Client Key Exchange

Frame 783: 240 bytes on wire (1920 bits), 240 bytes captured (1920 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17402 (17402), Dst Port: imaps (993), Seq: 151, Ack: 1710, Source port: 17402 (17402) Destination port: imaps (993) [Stream index: 31] Sequence number: 151 (relative sequence number) [Next sequence number: 337 (relative sequence number)] Acknowledgement number: 1710 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2581 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 784 0.011300 Source HonHaiPr 14:0e:06 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 784: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 785 0.113862 Source IntelCor 56:de:52 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 785: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: IntelCor_56:de:52 (88:53:2e:56:de:52), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 786 0.182577 Source 8.8.8.8 Destination 192.168.1.125

Protocol Length Info DNS 100 Standard query respo

Frame 786: 100 bytes on wire (800 bits), 100 bytes captured (800 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 8.8.8.8 (8.8.8.8), Dst: 192.168.1.125 (192.168.1.125) User Datagram Protocol, Src Port: domain (53), Dst Port: 50763 (50763) Domain Name System (response)

No.

Time 787 0.183454

Source 192.168.1.125

Destination 64.79.93.146

Protocol Length Info TCP 62 17406 > http [SYN]

Frame 787: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 64.79.93.146 (64.79.93.146) Transmission Control Protocol, Src Port: 17406 (17406), Dst Port: http (80), Seq: 0, Len: 0 Source port: 17406 (17406) Destination port: http (80) [Stream index: 36] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) Window size value: 8192 [Calculated window size: 8192] Checksum: 0xd908 [validation disabled] Options: (8 bytes) No. Time 788 0.155615 Source 23.63.101.50 Destination 192.168.1.125

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 788: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 23.63.101.50 (23.63.101.50), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17403 (17403), Seq: 1, Ack: 439, Len: Source port: http (80) Destination port: 17403 (17403) [Stream index: 32] Sequence number: 1 (relative sequence number) [Next sequence number: 1261 (relative sequence number)] Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 6432 [Calculated window size: 6432] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa106 [validation disabled] [SEQ/ACK analysis] TCP segment data (1260 bytes) No. Time 789 0.011573 Source 23.63.101.50 Destination 192.168.1.125

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 789: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 23.63.101.50 (23.63.101.50), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17403 (17403), Seq: 1261, Ack: 439, Le Source port: http (80) Destination port: 17403 (17403) [Stream index: 32] Sequence number: 1261 (relative sequence number) [Next sequence number: 2521 (relative sequence number)] Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 6432 [Calculated window size: 6432] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x410b [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 818] TCP segment data (1260 bytes) No. Time 790 0.000180 Source 192.168.1.125 Destination 23.63.101.50 Protocol Length Info TCP 54 17403 > http [ACK]

Frame 790: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.63.101.50 (23.63.101.50) Transmission Control Protocol, Src Port: 17403 (17403), Dst Port: http (80), Seq: 439, Ack: 2521, Le Source port: 17403 (17403) Destination port: http (80) [Stream index: 32] Sequence number: 439 (relative sequence number) Acknowledgement number: 2521 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9925 [validation disabled] [SEQ/ACK analysis] No. Time 791 0.077437 Source 64.79.93.146 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17405 [ACK]

Frame 791: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 64.79.93.146 (64.79.93.146), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17405 (17405), Seq: 1, Ack: 1088, Len Source port: http (80) Destination port: 17405 (17405) [Stream index: 34] Sequence number: 1 (relative sequence number) Acknowledgement number: 1088 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 7609 [Calculated window size: 7609] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7928 [validation disabled] [SEQ/ACK analysis] No. Time 792 0.027660 Source Destination fe80::def:4e55:f352:1cb7 ff02::1:2 Protocol Length Info DHCPv6 149 Solicit XID: 0x3

Frame 792: 149 bytes on wire (1192 bits), 149 bytes captured (1192 bits) Ethernet II, Src: Hewlett- 69:b3:1a (10:1f:74:69:b3:1a), Dst: IPv6mcast 00:01:00:02 (33:33:00:01:00 Internet Protocol Version 6, Src: fe80::def:4e55:f352:1cb7 (fe80::def:4e55:f352:1cb7), Dst: ff02::1 User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547) DHCPv6 No. Time 793 0.188495 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 101 Change Cipher Spec,

Frame 793: 101 bytes on wire (808 bits), 101 bytes captured (808 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17402 (17402), Seq: 1710, Ack: 337, Source port: imaps (993) Destination port: 17402 (17402) [Stream index: 31] Sequence number: 1710 (relative sequence number) [Next sequence number: 1757 (relative sequence number)] Acknowledgement number: 337 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7a21 [validation disabled]

[SEQ/ACK analysis] Secure Sockets Layer No. Time 794 0.001402 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 150 Application Data

Frame 794: 150 bytes on wire (1200 bits), 150 bytes captured (1200 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17402 (17402), Seq: 1757, Ack: 337, Source port: imaps (993) Destination port: 17402 (17402) [Stream index: 31] Sequence number: 1757 (relative sequence number) [Next sequence number: 1853 (relative sequence number)] Acknowledgement number: 337 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xca02 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 795 0.000093 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 54 17402 > imaps [ACK]

Frame 795: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17402 (17402), Dst Port: imaps (993), Seq: 337, Ack: 1853, Source port: 17402 (17402) Destination port: imaps (993) [Stream index: 31] Sequence number: 337 (relative sequence number) Acknowledgement number: 1853 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65377 [Calculated window size: 65377] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x639d [validation disabled] [SEQ/ACK analysis] No. Time 796 0.002487 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 96 Application Data

Frame 796: 96 bytes on wire (768 bits), 96 bytes captured (768 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17402 (17402), Dst Port: imaps (993), Seq: 337, Ack: 1853, Source port: 17402 (17402) Destination port: imaps (993) [Stream index: 31] Sequence number: 337 (relative sequence number) [Next sequence number: 379 (relative sequence number)] Acknowledgement number: 1853 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65377 [Calculated window size: 65377] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb43c [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer

No.

Time 797 0.115644

Source 64.79.93.146

Destination 192.168.1.125

Protocol Length Info TCP 62 http > 17406 [SYN, A

Frame 797: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 64.79.93.146 (64.79.93.146), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17406 (17406), Seq: 0, Ack: 1, Len: 0 Source port: http (80) Destination port: 17406 (17406) [Stream index: 36] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) Window size value: 1460 [Calculated window size: 1460] Checksum: 0x1443 [validation disabled] Options: (8 bytes) [SEQ/ACK analysis] No. Time 798 0.000406 Source 192.168.1.125 Destination 64.79.93.146 Protocol Length Info TCP 54 17406 > http [ACK]

Frame 798: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 64.79.93.146 (64.79.93.146) Transmission Control Protocol, Src Port: 17406 (17406), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 Source port: 17406 (17406) Destination port: http (80) [Stream index: 36] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x468e [validation disabled] [SEQ/ACK analysis] No. Time 799 0.033763 Source 64.79.93.146 Destination 192.168.1.125 Protocol Length Info HTTP 463 HTTP/1.1 200 OK

(ap

Frame 799: 463 bytes on wire (3704 bits), 463 bytes captured (3704 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 64.79.93.146 (64.79.93.146), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17405 (17405), Seq: 1, Ack: 1088, Len Source port: http (80) Destination port: 17405 (17405) [Stream index: 34] Sequence number: 1 (relative sequence number) [Next sequence number: 410 (relative sequence number)] Acknowledgement number: 1088 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 7609 [Calculated window size: 7609] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0a13 [validation disabled] [SEQ/ACK analysis] Hypertext Transfer Protocol JavaScript Object Notation: application/json No. Time 800 0.062573 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 800: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 801 0.094055 Source 23.63.101.50 Destination 192.168.1.125

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 801: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 23.63.101.50 (23.63.101.50), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17403 (17403), Seq: 2521, Ack: 439, Le Source port: http (80) Destination port: 17403 (17403) [Stream index: 32] Sequence number: 2521 (relative sequence number) [Next sequence number: 3781 (relative sequence number)] Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 6432 [Calculated window size: 6432] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9875 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 818] TCP segment data (1260 bytes) No. Time 802 0.011527 Source 23.63.101.50 Destination 192.168.1.125

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 802: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 23.63.101.50 (23.63.101.50), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17403 (17403), Seq: 3781, Ack: 439, Le Source port: http (80) Destination port: 17403 (17403) [Stream index: 32] Sequence number: 3781 (relative sequence number) [Next sequence number: 5041 (relative sequence number)] Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 6432 [Calculated window size: 6432] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x71f0 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 818] TCP segment data (1260 bytes) No. Time 803 0.000108 Source 192.168.1.125 Destination 23.63.101.50 Protocol Length Info TCP 54 17403 > http [ACK]

Frame 803: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.63.101.50 (23.63.101.50) Transmission Control Protocol, Src Port: 17403 (17403), Dst Port: http (80), Seq: 439, Ack: 5041, Le Source port: 17403 (17403) Destination port: http (80) [Stream index: 32] Sequence number: 439 (relative sequence number) Acknowledgement number: 5041 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520

[Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8f4d [validation disabled] [SEQ/ACK analysis] No. Time 804 0.011433 Source 23.63.101.50 Destination 192.168.1.125

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 804: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 23.63.101.50 (23.63.101.50), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17403 (17403), Seq: 5041, Ack: 439, Le Source port: http (80) Destination port: 17403 (17403) [Stream index: 32] Sequence number: 5041 (relative sequence number) [Next sequence number: 6301 (relative sequence number)] Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 6432 [Calculated window size: 6432] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x621b [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 818] TCP segment data (1260 bytes) No. Time 805 0.083293 Source 192.168.1.125 Destination 64.79.93.146 Protocol Length Info TCP 54 17405 > http [ACK]

Frame 805: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 64.79.93.146 (64.79.93.146) Transmission Control Protocol, Src Port: 17405 (17405), Dst Port: http (80), Seq: 1088, Ack: 410, Le Source port: 17405 (17405) Destination port: http (80) [Stream index: 34] Sequence number: 1088 (relative sequence number) Acknowledgement number: 410 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65111 [Calculated window size: 65111] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x96f0 [validation disabled] [SEQ/ACK analysis] No. Time 806 0.117992 Source 192.168.1.125 Destination 23.63.101.50 Protocol Length Info TCP 54 17403 > http [ACK]

Frame 806: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.63.101.50 (23.63.101.50) Transmission Control Protocol, Src Port: 17403 (17403), Dst Port: http (80), Seq: 439, Ack: 6301, Le Source port: 17403 (17403) Destination port: http (80) [Stream index: 32] Sequence number: 439 (relative sequence number) Acknowledgement number: 6301 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8a61 [validation disabled]

[SEQ/ACK analysis] No. Time 807 0.276071 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 251 Application Data

Frame 807: 251 bytes on wire (2008 bits), 251 bytes captured (2008 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17402 (17402), Seq: 1853, Ack: 379, Source port: imaps (993) Destination port: 17402 (17402) [Stream index: 31] Sequence number: 1853 (relative sequence number) [Next sequence number: 2050 (relative sequence number)] Acknowledgement number: 379 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb911 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 808 0.007614 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 114 Application Data

Frame 808: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17402 (17402), Dst Port: imaps (993), Seq: 379, Ack: 2050, Source port: 17402 (17402) Destination port: imaps (993) [Stream index: 31] Sequence number: 379 (relative sequence number) [Next sequence number: 439 (relative sequence number)] Acknowledgement number: 2050 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65180 [Calculated window size: 65180] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4f05 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 809 0.067567 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 809: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 810 0.081866 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 810: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 811 0.084699 Source Destination fe80::def:4e55:f352:1cb7 ff02::1:2 Protocol Length Info DHCPv6 149 Solicit XID: 0x3

Frame 811: 149 bytes on wire (1192 bits), 149 bytes captured (1192 bits)

Ethernet II, Src: Hewlett- 69:b3:1a (10:1f:74:69:b3:1a), Dst: IPv6mcast 00:01:00:02 (33:33:00:01:00 Internet Protocol Version 6, Src: fe80::def:4e55:f352:1cb7 (fe80::def:4e55:f352:1cb7), Dst: ff02::1 User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547) DHCPv6 No. Time 812 0.124601 Source 23.63.101.50 Destination 192.168.1.125

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 812: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 23.63.101.50 (23.63.101.50), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17403 (17403), Seq: 6301, Ack: 439, Le Source port: http (80) Destination port: 17403 (17403) [Stream index: 32] Sequence number: 6301 (relative sequence number) [Next sequence number: 7561 (relative sequence number)] Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 6432 [Calculated window size: 6432] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6c74 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 818] TCP segment data (1260 bytes) No. Time 813 0.011612 Source 23.63.101.50 Destination 192.168.1.125

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 813: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 23.63.101.50 (23.63.101.50), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17403 (17403), Seq: 7561, Ack: 439, Le Source port: http (80) Destination port: 17403 (17403) [Stream index: 32] Sequence number: 7561 (relative sequence number) [Next sequence number: 8821 (relative sequence number)] Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 6432 [Calculated window size: 6432] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xfa5b [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 818] TCP segment data (1260 bytes) No. Time 814 0.000102 Source 192.168.1.125 Destination 23.63.101.50 Protocol Length Info TCP 54 17403 > http [ACK]

Frame 814: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.63.101.50 (23.63.101.50) Transmission Control Protocol, Src Port: 17403 (17403), Dst Port: http (80), Seq: 439, Ack: 8821, Le Source port: 17403 (17403) Destination port: http (80) [Stream index: 32] Sequence number: 439 (relative sequence number) Acknowledgement number: 8821 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520

[Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8089 [validation disabled] [SEQ/ACK analysis] No. Time 815 0.011489 Source 23.63.101.50 Destination 192.168.1.125

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 815: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 23.63.101.50 (23.63.101.50), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17403 (17403), Seq: 8821, Ack: 439, Le Source port: http (80) Destination port: 17403 (17403) [Stream index: 32] Sequence number: 8821 (relative sequence number) [Next sequence number: 10081 (relative sequence number)] Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 6432 [Calculated window size: 6432] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe1d1 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 818] TCP segment data (1260 bytes) No. Time 816 0.139449 Source 23.63.101.50 Destination 192.168.1.125

Protocol Length Info TCP 1314 [TCP segment of a re

Frame 816: 1314 bytes on wire (10512 bits), 1314 bytes captured (10512 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 23.63.101.50 (23.63.101.50), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17403 (17403), Seq: 10081, Ack: 439, L Source port: http (80) Destination port: 17403 (17403) [Stream index: 32] Sequence number: 10081 (relative sequence number) [Next sequence number: 11341 (relative sequence number)] Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 6432 [Calculated window size: 6432] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf6e0 [validation disabled] [SEQ/ACK analysis] [Reassembled PDU in frame: 818] TCP segment data (1260 bytes) No. Time 817 0.000090 Source 192.168.1.125 Destination 23.63.101.50 Protocol Length Info TCP 54 17403 > http [ACK]

Frame 817: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.63.101.50 (23.63.101.50) Transmission Control Protocol, Src Port: 17403 (17403), Dst Port: http (80), Seq: 439, Ack: 11341, L Source port: 17403 (17403) Destination port: http (80) [Stream index: 32] Sequence number: 439 (relative sequence number) Acknowledgement number: 11341 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520

[Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x76b1 [validation disabled] [SEQ/ACK analysis] No. Time 818 0.005687 Source 23.63.101.50 Destination 192.168.1.125 Protocol Length Info HTTP 709 HTTP/1.1 200 OK

(ap

Frame 818: 709 bytes on wire (5672 bits), 709 bytes captured (5672 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 23.63.101.50 (23.63.101.50), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17403 (17403), Seq: 11341, Ack: 439, L Source port: http (80) Destination port: 17403 (17403) [Stream index: 32] Sequence number: 11341 (relative sequence number) [Next sequence number: 11996 (relative sequence number)] Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 6432 [Calculated window size: 6432] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf972 [validation disabled] [SEQ/ACK analysis] TCP segment data (655 bytes) [10 Reassembled TCP Segments (11995 bytes): #788(1260), #789(1260), #801(1260), #802(1260), #804(12 Hypertext Transfer Protocol Line-based text data: application/x-javascript No. Time 819 0.169056 Source 192.168.1.128 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 819: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: Hewlett-_42:4a:82 (9c:8e:99:42:4a:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.128 (192.168.1.128), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 820 0.177241 Source 192.168.1.128 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 820: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: Hewlett-_42:4a:82 (9c:8e:99:42:4a:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.128 (192.168.1.128), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 821 0.177497 Source 192.168.1.128 Destination 255.255.255.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 821: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: Hewlett-_42:4a:82 (9c:8e:99:42:4a:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.128 (192.168.1.128), Dst: 255.255.255.255 (255.255.255. User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol No. Time 822 0.177657 Source 192.168.1.128 Destination 192.168.1.255 Protocol Length Info DB-LSP-DISC 154 Dropbox LAN sync

Frame 822: 154 bytes on wire (1232 bits), 154 bytes captured (1232 bits) Ethernet II, Src: Hewlett-_42:4a:82 (9c:8e:99:42:4a:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.128 (192.168.1.128), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: db-lsp-disc (17500), Dst Port: db-lsp-disc (17500) Dropbox LAN sync Discovery Protocol

No.

Time 823 0.201183

Source 192.168.1.125

Destination 23.63.101.50

Protocol Length Info TCP 54 17403 > http [ACK]

Frame 823: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.63.101.50 (23.63.101.50) Transmission Control Protocol, Src Port: 17403 (17403), Dst Port: http (80), Seq: 439, Ack: 11996, L Source port: 17403 (17403) Destination port: http (80) [Stream index: 32] Sequence number: 439 (relative sequence number) Acknowledgement number: 11996 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 64865 [Calculated window size: 64865] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x76b1 [validation disabled] [SEQ/ACK analysis] No. Time 824 0.056461 Source 192.168.1.125 Destination 23.63.101.50 Protocol Length Info HTTP 453 GET /js/574656e2373

Frame 824: 453 bytes on wire (3624 bits), 453 bytes captured (3624 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.63.101.50 (23.63.101.50) Transmission Control Protocol, Src Port: 17403 (17403), Dst Port: http (80), Seq: 439, Ack: 11996, L Source port: 17403 (17403) Destination port: http (80) [Stream index: 32] Sequence number: 439 (relative sequence number) [Next sequence number: 838 (relative sequence number)] Acknowledgement number: 11996 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64865 [Calculated window size: 64865] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9c7c [validation disabled] [SEQ/ACK analysis] Hypertext Transfer Protocol No. Time 825 0.094559 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 825: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 826 0.113263 Source 192.168.1.125 Destination 23.21.42.223 Protocol Length Info TCP 62 17407 > http [SYN]

Frame 826: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.21.42.223 (23.21.42.223) Transmission Control Protocol, Src Port: 17407 (17407), Dst Port: http (80), Seq: 0, Len: 0 Source port: 17407 (17407) Destination port: http (80) [Stream index: 37] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) Window size value: 8192 [Calculated window size: 8192] Checksum: 0xed7d [validation disabled] Options: (8 bytes)

No.

Time 827 0.010905

Source Cisco_29:49:0f

Destination Cisco_29:49:0f

Protocol Length Info LOOP 60 Reply

Frame 827: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_29:49:0f (00:24:f7:29:49:0f), Dst: Cisco_29:49:0f (00:24:f7:29:49:0f) Configuration Test Protocol (loopback) Data (40 bytes) 0000 0010 0020 No. 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Source D-LinkIn 6e:a0:42 Destination Broadcast ................ ................ ........ Protocol Length Info ARP 60 Who has 192.168.1.1

Time 828 0.088036

Frame 828: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 829 0.189646 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17402 [ACK]

Frame 829: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17402 (17402), Seq: 2050, Ack: 439, Source port: imaps (993) Destination port: 17402 (17402) [Stream index: 31] Sequence number: 2050 (relative sequence number) Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2304 [validation disabled] [SEQ/ACK analysis] No. Time 830 0.061807 Source 192.168.1.125 Destination 54.243.105.172 Protocol Length Info TCP 62 17408 > http [SYN]

Frame 830: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 54.243.105.172 (54.243.105.17 Transmission Control Protocol, Src Port: 17408 (17408), Dst Port: http (80), Seq: 0, Len: 0 Source port: 17408 (17408) Destination port: http (80) [Stream index: 38] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) Window size value: 8192 [Calculated window size: 8192] Checksum: 0xf436 [validation disabled] Options: (8 bytes) No. Time 831 0.114984 Source HonHaiPr 08:65:ab Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.2

Frame 831: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_08:65:ab (00:26:5e:08:65:ab), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Length Info

832 0.169285

192.168.1.117

224.0.0.251

MDNS

81

Standard query A re

Frame 832: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 833 0.277840 Source 23.63.101.50 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17403 [ACK]

Frame 833: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 23.63.101.50 (23.63.101.50), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17403 (17403), Seq: 11996, Ack: 838, L Source port: http (80) Destination port: 17403 (17403) [Stream index: 32] Sequence number: 11996 (relative sequence number) Acknowledgement number: 838 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 7504 [Calculated window size: 7504] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5534 [validation disabled] [SEQ/ACK analysis] No. Time 834 0.154395 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 834: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 835 0.224167 Source 54.243.105.172 Destination 192.168.1.125

Protocol Length Info TCP 62 http > 17408 [SYN, A

Frame 835: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 54.243.105.172 (54.243.105.172), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17408 (17408), Seq: 0, Ack: 1, Len: 0 Source port: http (80) Destination port: 17408 (17408) [Stream index: 38] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) Window size value: 1460 [Calculated window size: 1460] Checksum: 0x50a2 [validation disabled] Options: (8 bytes) [SEQ/ACK analysis] No. Time 836 0.000193 Source 192.168.1.125 Destination 54.243.105.172 Protocol Length Info TCP 54 17408 > http [ACK]

Frame 836: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 54.243.105.172 (54.243.105.17 Transmission Control Protocol, Src Port: 17408 (17408), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 Source port: 17408 (17408) Destination port: http (80)

[Stream index: 38] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x82ed [validation disabled] [SEQ/ACK analysis] No. Time 837 0.003397 Source 192.168.1.125 Destination 54.243.105.172

Protocol Length Info HTTP 871 POST /kwd?c=Ojo6Z2Fp

Frame 837: 871 bytes on wire (6968 bits), 871 bytes captured (6968 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 54.243.105.172 (54.243.105.17 Transmission Control Protocol, Src Port: 17408 (17408), Dst Port: http (80), Seq: 1, Ack: 1, Len: 8 Source port: 17408 (17408) Destination port: http (80) [Stream index: 38] Sequence number: 1 (relative sequence number) [Next sequence number: 818 (relative sequence number)] Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf2f6 [validation disabled] [SEQ/ACK analysis] Hypertext Transfer Protocol Media Type No. Time 838 0.038900 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 838: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 839 0.276292 Source 23.63.101.50 Destination 192.168.1.125

Protocol Length Info HTTP 291 HTTP/1.1 304 Not Mod

Frame 839: 291 bytes on wire (2328 bits), 291 bytes captured (2328 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 23.63.101.50 (23.63.101.50), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17403 (17403), Seq: 11996, Ack: 838, L Source port: http (80) Destination port: 17403 (17403) [Stream index: 32] Sequence number: 11996 (relative sequence number) [Next sequence number: 12233 (relative sequence number)] Acknowledgement number: 838 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 7504 [Calculated window size: 7504] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x06cc [validation disabled] [SEQ/ACK analysis] Hypertext Transfer Protocol No. Time 840 0.054501 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 840: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 841 0.174785 Source HonHaiPr 08:65:ab Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.2

Frame 841: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_08:65:ab (00:26:5e:08:65:ab), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 842 0.200017 Source 192.168.1.125 Destination 23.63.101.50 Protocol Length Info TCP 54 17403 > http [ACK]

Frame 842: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.63.101.50 (23.63.101.50) Transmission Control Protocol, Src Port: 17403 (17403), Dst Port: http (80), Seq: 838, Ack: 12233, L Source port: 17403 (17403) Destination port: http (80) [Stream index: 32] Sequence number: 838 (relative sequence number) Acknowledgement number: 12233 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 64628 [Calculated window size: 64628] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7522 [validation disabled] [SEQ/ACK analysis] No. Time 843 0.049675 Source 54.243.105.172 Destination 192.168.1.125 Protocol Length Info TCP 60 http > 17408 [ACK]

Frame 843: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 54.243.105.172 (54.243.105.172), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17408 (17408), Seq: 1, Ack: 818, Len: Source port: http (80) Destination port: 17408 (17408) [Stream index: 38] Sequence number: 1 (relative sequence number) Acknowledgement number: 818 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 7353 [Calculated window size: 7353] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x62f4 [validation disabled] [SEQ/ACK analysis] No. Time 844 0.119100 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 844: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 845 0.134818 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 845: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol

No.

Time 846 0.138479

Source Destination fe80::def:4e55:f352:1cb7 ff02::1:2

Protocol Length Info DHCPv6 149 Solicit XID: 0x3

Frame 846: 149 bytes on wire (1192 bits), 149 bytes captured (1192 bits) Ethernet II, Src: Hewlett- 69:b3:1a (10:1f:74:69:b3:1a), Dst: IPv6mcast 00:01:00:02 (33:33:00:01:00 Internet Protocol Version 6, Src: fe80::def:4e55:f352:1cb7 (fe80::def:4e55:f352:1cb7), Dst: ff02::1 User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547) DHCPv6 No. Time 847 0.495524 Source 192.168.1.117 Destination 224.0.0.251 Protocol Length Info MDNS 81 Standard query A re

Frame 847: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 848 0.512950 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 848: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 849 0.804724 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 849: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 850 0.828058 Source 54.243.105.172 Destination 192.168.1.125 Protocol Length Info HTTP 380 HTTP/1.1 200 OK

(te

Frame 850: 380 bytes on wire (3040 bits), 380 bytes captured (3040 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 54.243.105.172 (54.243.105.172), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: http (80), Dst Port: 17408 (17408), Seq: 1, Ack: 818, Len: Source port: http (80) Destination port: 17408 (17408) [Stream index: 38] Sequence number: 1 (relative sequence number) [Next sequence number: 327 (relative sequence number)] Acknowledgement number: 818 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 7353 [Calculated window size: 7353] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4080 [validation disabled] [SEQ/ACK analysis] Hypertext Transfer Protocol Line-based text data: text/javascript No. Time 851 0.076251 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 262 Application Data

Frame 851: 262 bytes on wire (2096 bits), 262 bytes captured (2096 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17402 (17402), Seq: 2050, Ack: 439, Source port: imaps (993) Destination port: 17402 (17402) [Stream index: 31]

Sequence number: 2050 (relative sequence number) [Next sequence number: 2258 (relative sequence number)] Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 2860 [Calculated window size: 2860] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb6aa [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 852 0.001648 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 90 Application Data

Frame 852: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17402 (17402), Dst Port: imaps (993), Seq: 439, Ack: 2258, Source port: 17402 (17402) Destination port: imaps (993) [Stream index: 31] Sequence number: 439 (relative sequence number) [Next sequence number: 475 (relative sequence number)] Acknowledgement number: 2258 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64972 [Calculated window size: 64972] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x414e [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 853 0.016873 Source HonHaiPr 08:65:ab Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.2

Frame 853: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: HonHaiPr_08:65:ab (00:26:5e:08:65:ab), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 854 0.119486 Source 192.168.1.125 Destination 54.243.105.172 Protocol Length Info TCP 54 17408 > http [ACK]

Frame 854: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 54.243.105.172 (54.243.105.17 Transmission Control Protocol, Src Port: 17408 (17408), Dst Port: http (80), Seq: 818, Ack: 327, Len Source port: 17408 (17408) Destination port: http (80) [Stream index: 38] Sequence number: 818 (relative sequence number) Acknowledgement number: 327 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65194 [Calculated window size: 65194] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7fbc [validation disabled] [SEQ/ACK analysis] No. Time 855 0.189750 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 262 [TCP Retransmission

Frame 855: 262 bytes on wire (2096 bits), 262 bytes captured (2096 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26)

Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17402 (17402), Seq: 2050, Ack: 439, Source port: imaps (993) Destination port: 17402 (17402) [Stream index: 31] Sequence number: 2050 (relative sequence number) [Next sequence number: 2258 (relative sequence number)] Acknowledgement number: 439 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8306 [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 856 0.000116 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TCP 66 [TCP Dup ACK 852#1]

Frame 856: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17402 (17402), Dst Port: imaps (993), Seq: 475, Ack: 2258, Source port: 17402 (17402) Destination port: imaps (993) [Stream index: 31] Sequence number: 475 (relative sequence number) Acknowledgement number: 2258 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 64972 [Calculated window size: 64972] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xfc5c [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 857 0.117710 Source 192.168.1.125 Destination 23.63.101.50

Protocol Length Info TCP 54 17404 > http [FIN, A

Frame 857: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.63.101.50 (23.63.101.50) Transmission Control Protocol, Src Port: 17404 (17404), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 Source port: 17404 (17404) Destination port: http (80) [Stream index: 33] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x11 (FIN, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf680 [validation disabled] No. Time 858 0.028973 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 858: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service

No.

Time 859 0.080809

Source 192.168.1.117

Destination 224.0.0.251

Protocol Length Info MDNS 81 Standard query A re

Frame 859: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 860 0.304546 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17402 [ACK]

Frame 860: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17402 (17402), Seq: 2258, Ack: 475, Source port: imaps (993) Destination port: 17402 (17402) [Stream index: 31] Sequence number: 2258 (relative sequence number) Acknowledgement number: 475 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2210 [validation disabled] [SEQ/ACK analysis] No. Time 861 0.051963 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 861: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 862 0.084859 Source 192.168.1.125 Destination 23.21.42.223 Protocol Length Info TCP 62 17407 > http [SYN]

Frame 862: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.21.42.223 (23.21.42.223) Transmission Control Protocol, Src Port: 17407 (17407), Dst Port: http (80), Seq: 0, Len: 0 Source port: 17407 (17407) Destination port: http (80) [Stream index: 37] Sequence number: 0 (relative sequence number) Header length: 28 bytes Flags: 0x02 (SYN) Window size value: 8192 [Calculated window size: 8192] Checksum: 0xed7d [validation disabled] Options: (8 bytes) No. Time 863 0.002401 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 89 Application Data

Frame 863: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17402 (17402), Seq: 2258, Ack: 475, Source port: imaps (993) Destination port: 17402 (17402) [Stream index: 31] Sequence number: 2258 (relative sequence number) [Next sequence number: 2293 (relative sequence number)]

Acknowledgement number: 475 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x08cc [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 864 0.000440 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 85 Application Data

Frame 864: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17402 (17402), Dst Port: imaps (993), Seq: 475, Ack: 2293, Source port: 17402 (17402) Destination port: imaps (993) [Stream index: 31] Sequence number: 475 (relative sequence number) [Next sequence number: 506 (relative sequence number)] Acknowledgement number: 2293 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64937 [Calculated window size: 64937] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x633b [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 865 0.089547 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 865: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 866 0.129231 Source 23.63.101.50 Destination 192.168.1.125

Protocol Length Info TCP 60 http > 17404 [FIN, A

Frame 866: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 23.63.101.50 (23.63.101.50), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17404 (17404), Seq: 1, Ack: 2, Len: 0 Source port: http (80) Destination port: 17404 (17404) [Stream index: 33] Sequence number: 1 (relative sequence number) Acknowledgement number: 2 (relative ack number) Header length: 20 bytes Flags: 0x11 (FIN, ACK) Window size value: 5840 [Calculated window size: 5840] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdfa0 [validation disabled] [SEQ/ACK analysis] No. Time 867 0.000194 Source 192.168.1.125 Destination 23.63.101.50 Protocol Length Info TCP 54 17404 > http [ACK]

Frame 867: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.63.101.50 (23.63.101.50) Transmission Control Protocol, Src Port: 17404 (17404), Dst Port: http (80), Seq: 2, Ack: 2, Len: 0

Source port: 17404 (17404) Destination port: http (80) [Stream index: 33] Sequence number: 2 (relative sequence number) Acknowledgement number: 2 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf67f [validation disabled] [SEQ/ACK analysis] No. Time 868 0.000512 Source 192.168.1.2 Destination 192.168.1.125 Protocol Length Info ICMP 70 Redirect

Frame 868: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) Ethernet II, Src: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 192.168.1.2 (192.168.1.2), Dst: 192.168.1.125 (192.168.1.125) Internet Control Message Protocol No. Time 869 0.256760 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 869: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 870 0.264058 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 870: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 871 0.279680 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 871: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 872 0.478938 Source 192.168.1.125 Destination 64.79.93.146

Protocol Length Info TCP 54 17406 > http [FIN, A

Frame 872: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 64.79.93.146 (64.79.93.146) Transmission Control Protocol, Src Port: 17406 (17406), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 Source port: 17406 (17406) Destination port: http (80) [Stream index: 36] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x11 (FIN, ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x468d [validation disabled] No. Time Source Destination Protocol Length Info

873 0.088626

192.168.1.117

224.0.0.251

MDNS

81

Standard query A re

Frame 873: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) Ethernet II, Src: HonHaiPr 14:0e:06 (38:59:f9:14:0e:06), Dst: IPv4mcast 00:00:fb (01:00:5e:00:00:fb Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 224.0.0.251 (224.0.0.251) User Datagram Protocol, Src Port: mdns (5353), Dst Port: mdns (5353) Domain Name System (query) No. Time 874 0.179122 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 874: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 875 0.460342 Source 67.195.186.174 Destination 192.168.1.125 Protocol Length Info YMSG 119 Y6 Status Update (s

Frame 875: 119 bytes on wire (952 bits), 119 bytes captured (952 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 67.195.186.174 (67.195.186.174), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: mmcc (5050), Dst Port: 17278 (17278), Seq: 1, Ack: 33, Len Source port: mmcc (5050) Destination port: 17278 (17278) [Stream index: 11] Sequence number: 1 (relative sequence number) [Next sequence number: 66 (relative sequence number)] Acknowledgement number: 33 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -1 (unknown)] Checksum: 0x1a44 [validation disabled] [SEQ/ACK analysis] [PDU Size: 65] Yahoo YMSG Messenger Protocol (Y6 Status Update) No. Time 876 0.020211 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 876: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 877 0.067399 Source 192.168.1.117 Destination 192.168.1.255

Protocol Length Info NBNS 92 Name query NB RETRAC

Frame 877: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Ethernet II, Src: HonHaiPr_14:0e:06 (38:59:f9:14:0e:06), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol Version 4, Src: 192.168.1.117 (192.168.1.117), Dst: 192.168.1.255 (192.168.1.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time 878 0.208840 Source 64.79.93.146 Destination 192.168.1.125

Protocol Length Info TCP 60 http > 17406 [FIN, A

Frame 878: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 64.79.93.146 (64.79.93.146), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17406 (17406), Seq: 1, Ack: 2, Len: 0 Source port: http (80) Destination port: 17406 (17406) [Stream index: 36] Sequence number: 1 (relative sequence number) Acknowledgement number: 2 (relative ack number)

Header length: 20 bytes Flags: 0x11 (FIN, ACK) Window size value: 5840 [Calculated window size: 5840] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2fad [validation disabled] [SEQ/ACK analysis] No. Time 879 0.000192 Source 192.168.1.125 Destination 64.79.93.146 Protocol Length Info TCP 54 17406 > http [ACK]

Frame 879: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 64.79.93.146 (64.79.93.146) Transmission Control Protocol, Src Port: 17406 (17406), Dst Port: http (80), Seq: 2, Ack: 2, Len: 0 Source port: 17406 (17406) Destination port: http (80) [Stream index: 36] Sequence number: 2 (relative sequence number) Acknowledgement number: 2 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x468c [validation disabled] [SEQ/ACK analysis] No. Time 880 0.000993 Source 192.168.1.125 Destination 67.195.186.174 Protocol Length Info TCP 54 17278 > mmcc [ACK]

Frame 880: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 67.195.186.174 (67.195.186.174 Transmission Control Protocol, Src Port: 17278 (17278), Dst Port: mmcc (5050), Seq: 33, Ack: 66, Len Source port: 17278 (17278) Destination port: mmcc (5050) [Stream index: 11] Sequence number: 33 (relative sequence number) Acknowledgement number: 66 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 64591 [Calculated window size: 64591] [Window size scaling factor: -1 (unknown)] Checksum: 0x8d1a [validation disabled] [SEQ/ACK analysis] No. Time 881 0.009923 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 85 [TCP Retransmission

Frame 881: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17402 (17402), Dst Port: imaps (993), Seq: 475, Ack: 2293, Source port: 17402 (17402) Destination port: imaps (993) [Stream index: 31] Sequence number: 475 (relative sequence number) [Next sequence number: 506 (relative sequence number)] Acknowledgement number: 2293 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64937 [Calculated window size: 64937] [Window size scaling factor: -2 (no window scaling used)]

Checksum: 0x633b [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 882 0.202172 Source 23.21.42.223 Destination 192.168.1.125

Protocol Length Info TCP 62 http > 17407 [SYN, A

Frame 882: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 23.21.42.223 (23.21.42.223), Dst: 192.168.1.125 (192.168.1.125) Transmission Control Protocol, Src Port: http (80), Dst Port: 17407 (17407), Seq: 0, Ack: 1, Len: 0 Source port: http (80) Destination port: 17407 (17407) [Stream index: 37] Sequence number: 0 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 28 bytes Flags: 0x12 (SYN, ACK) Window size value: 1260 [Calculated window size: 1260] Checksum: 0x8625 [validation disabled] Options: (8 bytes) [SEQ/ACK analysis] No. Time 883 0.000119 Source 192.168.1.125 Destination 23.21.42.223 Protocol Length Info TCP 54 17407 > http [ACK]

Frame 883: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 23.21.42.223 (23.21.42.223) Transmission Control Protocol, Src Port: 17407 (17407), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 Source port: 17407 (17407) Destination port: http (80) [Stream index: 37] Sequence number: 1 (relative sequence number) Acknowledgement number: 1 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 65520 [Calculated window size: 65520] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb7a8 [validation disabled] [SEQ/ACK analysis] No. Time 884 0.151345 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 89 [TCP Retransmission

Frame 884: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17402 (17402), Seq: 2258, Ack: 475, Source port: imaps (993) Destination port: 17402 (17402) [Stream index: 31] Sequence number: 2258 (relative sequence number) [Next sequence number: 2293 (relative sequence number)] Acknowledgement number: 475 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x08cc [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer

No.

Time 885 0.000063

Source 192.168.1.125

Destination 173.194.67.109

Protocol Length Info TCP 66 [TCP Dup ACK 881#1]

Frame 885: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17402 (17402), Dst Port: imaps (993), Seq: 506, Ack: 2293, Source port: 17402 (17402) Destination port: imaps (993) [Stream index: 31] Sequence number: 506 (relative sequence number) Acknowledgement number: 2293 (relative ack number) Header length: 32 bytes Flags: 0x10 (ACK) Window size value: 64937 [Calculated window size: 64937] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xfb4a [validation disabled] Options: (12 bytes) [SEQ/ACK analysis] No. Time 886 0.147214 Source Hewlett- 69:b3:1a Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.4

Frame 886: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Hewlett-_69:b3:1a (10:1f:74:69:b3:1a), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 887 0.381372 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17402 [ACK]

Frame 887: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17402 (17402), Seq: 2293, Ack: 506, Source port: imaps (993) Destination port: 17402 (17402) [Stream index: 31] Sequence number: 2293 (relative sequence number) Acknowledgement number: 506 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x21ce [validation disabled] [SEQ/ACK analysis] No. Time 888 0.065000 Source D-LinkIn 6e:a0:42 Destination Broadcast Protocol Length Info ARP 60 Who has 192.168.1.1

Frame 888: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: D-LinkIn_6e:a0:42 (84:c9:b2:6e:a0:42), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time 889 0.099517 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TLSv1 114 Application Data

Frame 889: 114 bytes on wire (912 bits), 114 bytes captured (912 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17402 (17402), Seq: 2293, Ack: 506, Source port: imaps (993) Destination port: 17402 (17402) [Stream index: 31] Sequence number: 2293 (relative sequence number)

[Next sequence number: 2353 (relative sequence number)] Acknowledgement number: 506 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7c0c [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 890 0.000487 Source 192.168.1.125 Destination 173.194.67.109 Protocol Length Info TLSv1 108 Application Data

Frame 890: 108 bytes on wire (864 bits), 108 bytes captured (864 bits) Ethernet II, Src: Toshiba_ef:70:26 (e8:9d:87:ef:70:26), Dst: Cisco_17:a6:c5 (00:1c:b0:17:a6:c5) Internet Protocol Version 4, Src: 192.168.1.125 (192.168.1.125), Dst: 173.194.67.109 (173.194.67.10 Transmission Control Protocol, Src Port: 17402 (17402), Dst Port: imaps (993), Seq: 506, Ack: 2353, Source port: 17402 (17402) Destination port: imaps (993) [Stream index: 31] Sequence number: 506 (relative sequence number) [Next sequence number: 560 (relative sequence number)] Acknowledgement number: 2353 (relative ack number) Header length: 20 bytes Flags: 0x18 (PSH, ACK) Window size value: 64877 [Calculated window size: 64877] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9ffe [validation disabled] [SEQ/ACK analysis] Secure Sockets Layer No. Time 891 0.269834 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 891: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 892 0.285366 Source Cisco 29:49:0f Destination PVST+ Protocol Length Info STP 64 Conf. Root = 32768/

Frame 892: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) IEEE 802.3 Ethernet Logical-Link Control Spanning Tree Protocol No. Time 893 0.290066 Source Destination fe80::def:4e55:f352:1cb7 ff02::1:2 Protocol Length Info DHCPv6 149 Solicit XID: 0x3

Frame 893: 149 bytes on wire (1192 bits), 149 bytes captured (1192 bits) Ethernet II, Src: Hewlett- 69:b3:1a (10:1f:74:69:b3:1a), Dst: IPv6mcast 00:01:00:02 (33:33:00:01:00 Internet Protocol Version 6, Src: fe80::def:4e55:f352:1cb7 (fe80::def:4e55:f352:1cb7), Dst: ff02::1 User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547) DHCPv6 No. Time 894 0.697435 Source 173.194.67.109 Destination 192.168.1.125 Protocol Length Info TCP 60 imaps > 17402 [ACK]

Frame 894: 60 bytes on wire (480 bits), 60 bytes captured (480 bits) Ethernet II, Src: Cisco_be:41:f9 (00:1b:d5:be:41:f9), Dst: Toshiba_ef:70:26 (e8:9d:87:ef:70:26) Internet Protocol Version 4, Src: 173.194.67.109 (173.194.67.109), Dst: 192.168.1.125 (192.168.1.12 Transmission Control Protocol, Src Port: imaps (993), Dst Port: 17402 (17402), Seq: 2353, Ack: 560, Source port: imaps (993)

Destination port: 17402 (17402) [Stream index: 31] Sequence number: 2353 (relative sequence number) Acknowledgement number: 560 (relative ack number) Header length: 20 bytes Flags: 0x10 (ACK) Window size value: 16080 [Calculated window size: 16080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x215c [validation disabled] [SEQ/ACK analysis]

Similar Documents

Free Essay

Jkjk

...mind Crafting your first packet Sending and Receiving Packets/Frames Basic examples and dealing with the OS's TCP/IP stack using iptables Quick discussion of the Super Socket ● What is Scapy ● A Python framework used for crafting and transmitting packets. Capable of Sniffing or replaying packets for troubleshooting or fuzzing network services. Can be used as the interactive Python interpreter or the framework can be imported as a python module and used for further coding Everything is an object! ● ● ● Why use Scapy? ● Blue Team – – – – Test IDS/IPS Test Firewall Learn more about TCP/IP (down and dirty) Application response(Fuzzing) Fire teh lazorz (DOS/DDOS) More Fuzzing Penetration Testing ● Red Team – – – Important Concepts ● Everything is an Object – treat it as such – IP(), TCP(), UDP(), ICMP() help() - displays help ls() - displays packet classes lsc() - displays commands available to you ip=IP(src=”1.2.3.4”, dst=”google.com”) ip=IP() ip.src=”1.2.3.4” ip.dst=”google.com” ● Important commands to remember: – – – ● When assigning Field Values(either works) – – – – Important Concepts Continued ● Displaying Values of Variables – – – ls(ip) – shows what you have set and default vaules ip – shows only what you have set ip.show() - omits variable classes and default values packet=IP(dst=”1.2.3.4”)/TCP(flags=”S”,dport=443) frame=Ether(type=0x8100)/Dot1Q(vlan=99)/packet Will Display all the layers after the initial ...

Words: 831 - Pages: 4

Premium Essay

Jon Jons

...This document is exclusive property of Cisco Systems, Inc. Permission is granted to print and copy this document for non-commercial distribution and exclusive use by instructors in the CCNA Exploration: Network Fundamentals course as part of an official Cisco Networking Academy Program. Activity 1.1.1: Using Google Earth™ to View the World Learning Objectives Upon completion of this activity, you will be able to: • • • • • Explain the purpose of Google Earth. Explain the different versions of Google Earth. Explain the hardware and software requirements needed to use Google Earth (free edition). Experiment with Google Earth features such as Help | Tutorial. Experiment with Google Earth to explore continents, countries, and places of interest. Background Google Earth is a popular application that executes on the desktop of most operating systems. It requires a broadband connection to the Internet and displays Earth as a manipulated 2D, or 3D image. The popular world news channel, CNN, regularly uses Google Earth to emphasize where a news story has occurred. At the time of writing this activity, there are three versions of Google Earth. The version that fits most needs is Google's free version, Google Earth. A Google Earth Plus version includes GPS support, a spreadsheet importer, and other support features. The Google Earth Pro version is for professional and commercial use. The URL http://earth.google.com/product_comparison.html contains a description of the versions...

Words: 60675 - Pages: 243

Free Essay

Lab Step

...Hands-On Steps Note: This lab contains detailed lab procedures which you should follow as written. Frequently performed tasks are explained in the Common Lab Tasks document on the vWorkstation desktop. You should review these tasks before starting the lab. 1. From the vWorkstation desktop, open the Common Lab Tasks file. If desired, use the File Transfer button to transfer the file to your local computer and print a copy for your reference. Figure 1 "Student Landing" workstation 2. On your local computer, create the lab deliverable files. 3. Review the Lab Assessment Worksheet at the end of this lab. You will find answers to these questions as you proceed through the lab steps. Part 1: Capture Network Traffic using TCPdump utility Note: In the next steps, you will use TCPdump, a command line utility, to capture network traffic on the TargetLinux01 virtual server. You will generate that traffic by exploiting a cross-site scripting (XSS) vulnerability in the Damn Vulnerable Web Application (DVWA) tool. In the lab environment, you will be capturing traffic on one interface. In a real-world situation, it is likely the machine would be straddling both an internal network and an external network. In that case, you would want to want to monitor both sides of the interface. Monitoring outside network traffic allows information systems security practitioners to see who and what is attempting to infiltrate your IP network. Monitoring internal traffic allows network analysts to see exactly...

Words: 3168 - Pages: 13

Premium Essay

Tdtfyh Jvhkbvjkn Hvhkb, Jb

...Wireshark Lab: HTTP SOLUTION Supplement to Computer Networking: A Top-Down Approach, 6th ed., J.F. Kurose and K.W. Ross © 2005-21012, J.F Kurose and K.W. Ross, All Rights Reserved The following screen shots showing the HTTP GET and HTTP reply answer these questions: 1. Is your browser running HTTP version 1.0 or 1.1? What version of HTTP is the server running? 2. What languages (if any) does your browser indicate that it can accept to the server? 3. What is the IP address of your computer? Of the gaia.cs.umass.edu server? 4. What is the status code returned from the server to your browser? 5. When was the HTML file that you are retrieving last modified at the server? 6. How many bytes of content are being returned to your browser? 7. By inspecting the raw data in the packet content window, do you see any headers within the data that are not displayed in the packet-listing window? If so, name one. Answer: no, I don’t see any in the HTTP Message below ©2013 Pearson Education, Inc. Upper Saddle River, NJ. All Rights Reserved. Client IP address Gaia server IP address Client running http 1.1 languages accepted Return status: 200 content: 128 bytes server running http 1.1 document last modified on this date ©2013 Pearson Education, Inc. Upper Saddle River, NJ. All Rights Reserved. 2. The HTTP CONDITIONAL GET/response interaction Here’s a screenshot after doing the two identical HTTP GETs: First GET, then a reply, then another ...

Words: 1220 - Pages: 5

Free Essay

Capturing and Monitoring Telnet Traffic

...Capturing and Analyzing Telnet Traffic A Description of Telnet a Text Based Computer Protocol Telnet is a network protocol used in LAN or via the web to provide bi-directional interactive text-oriented communication framework using virtual terminal connection. Data is interspersed in-band with Telnet control information, usually in an 8-byte oriented data communication over TCP. Telnet program runs on a computer and connects you PC to a server on the network. Commands are entered into Telnet program and can execute them as if they were entering them directly on the server console. This implies that you can control the server and communicate with other servers on the network (Sloan, 2001). Telnet traffic refers to a user command and an underlying TCP/IP protocol used for accessing remote computers. Actually, telnet is a mechanism of gaining access to remote computers using command prompts. Through the use of Telnet, an administrator can access someone’s computers remotely permitting access of his data or applications. On the web, HTTP and FTP protocols allow a remote user to request specific files from the remote computer other than being logged on as that computers user. By using Telnet, you log on as a regular user with whatever privileges granted to access specific data and applications. A Telnet command that requests user information over the net may look like this: telnet. Smithspc.t. Com. The result is an invitation to log on with a username and password prompt, of which...

Words: 1994 - Pages: 8

Premium Essay

Information Security

...Wireshark Lab: HTTP SOLUTION Supplement to Computer Networking: A Top-Down Approach, 6th ed., J.F. Kurose and K.W. Ross © 2005-21012, J.F Kurose and K.W. Ross, All Rights Reserved The following screen shots showing the HTTP GET and HTTP reply answer these questions: 1. Is your browser running HTTP version 1.0 or 1.1? What version of HTTP is the server running? 2. What languages (if any) does your browser indicate that it can accept to the server? 3. What is the IP address of your computer? Of the gaia.cs.umass.edu server? 4. What is the status code returned from the server to your browser? 5. When was the HTML file that you are retrieving last modified at the server? 6. How many bytes of content are being returned to your browser? 7. By inspecting the raw data in the packet content window, do you see any headers within the data that are not displayed in the packet-listing window? If so, name one. Answer: no, I don’t see any in the HTTP Message below ©2013 Pearson Education, Inc. Upper Saddle River, NJ. All Rights Reserved. Client IP address Gaia server IP address Client running http 1.1 languages accepted Return status: 200 content: 128 bytes server running http 1.1 document last modified on this date ©2013 Pearson Education, Inc. Upper Saddle River, NJ. All Rights Reserved. 2. The HTTP CONDITIONAL GET/response interaction Here’s a screenshot after doing the two identical HTTP GETs: First GET, then a reply, then another ...

Words: 1220 - Pages: 5

Free Essay

Packet Sniffer Report

...IMPLEMENTATION OF PACKET SNIFFING IN JAVA USING JPCAP LIBRARY Project Report Submitted in Partial Fulfillment of the Requirement for the Award of Degree of Bachelor of Engineering in Computer Science Engineering of Rajiv Gandhi Proudyogiki Vishwavidalaya, Bhopal (MP) By Siddharth Pateriya Swarna Swaminathan (0131CS081077) (0131CS081084) Department of Computer Science Engineering Jai Narain College of Technology, Bhopal June – 2012 DECLARATION We, Siddharth Pateriya and Swarna Swaminathan, the students of Bachelor of Engineering (Computer Science Engineering), Jai Narain College of Technology, Bhopal hereby declare that the work presented in this Major Project is an authentic record of our own and has been carried out taking care of Engineering Ethics under the guidance of Prof. Manish Mishra. Siddharth Pateriya Swarna Swaminathan (0131CS081077) (0131CS081084) CERTIFICATE This is to certify that the work embodied in this Major Project entitled “Implementation of Packet Sniffing in Java using Jpcap Library” has been satisfactorily completed by the students of final year, Mr. Siddharth Pateriya and Ms.Swarna Swaminathan. The work was carried out satisfactorily under the supervision and guidance of the undersigned in the Department of Computer Science Engineering, Jai Narain College of Technology and Science, Bhopal for the partial...

Words: 8200 - Pages: 33

Premium Essay

Networ Design

...Advanced Networks Lab Book 2015/2016 Module Leader: Nauman Israr Office Location: IT 1.06 Email: N.Israr@tees.ac.uk Telephone no: 2693 Course Number and Name: Advanced Networks(COM3038-N-BJ1-2015) Year: 2015/2016 Working Time: Timetable Tutorial Time Only in Lab Name of Student: Name of Lab Instructor: Submission Date: TBA Grade: Submission Method: Introduction The purpose of this lab book is to document your solution for a given set of exercises. The relevant concepts used in each exercise will be covered during the lecture. You must complete these exercises within your timetabled tutorial session. The lab book will count towards your final grade. You will be required to submit completed lab book before the submission deadline. Please check with your tutor about the deadline date, time and submission method. This lab book is 10% of your overall mark. 1 Exercise 1: Duration- One Hour You are a network engineer who has been asked to attend an initial meeting with the management team of ABC, LLC. ABC manufactures electric cars. Its new electric car was just picked up by a Government promotional scheme. ABC is upgrading its manufacturing capacity and hiring new employees. Recently, ABC employees have started saying, “The network is too slow.” They are also experiencing problems sending email, accessing web-based applications, and printing. In the past, when the company was small, it didn’t have these...

Words: 2719 - Pages: 11

Premium Essay

Nt1310 Unit 5 Assignment 1

...exploring both the tcpClient.c and tcpServer.c code. When I had a rough understanding of how it worked, I tried running it. This caused an error to occur. The problem was I was using Winsock sockets instead of BSD sockets. One, Winsock, is a socket creator for windows, the other BSD socket is an application programming interface for Unix. So, in order to get the application running, I simply had to change WIN to BSD sockets. Next I ran both files again and this time I got back a message from the server saying that it had received a message. Then I opened Wireshark to view what was going on between the client and server. In the top frame, I could see the handshake occurring between the client and server, the client was sending a SYN(Synchronize) and the Server was replying with a SYN-ACK, which means Synchronize acknowledgment. I also noted there was a push function occurring, and when I clicked on the psh function and viewed its output in...

Words: 774 - Pages: 4

Premium Essay

5010

...Perform Reconnaissance and Probing Using Zenmap GUI (Nmap) Course Name and Number: IA5010 13020 Found of Information Assurance Student Name: Zhen Sun Instructor Name: Professor Themis Papageorge Lab Due Date: 09/19/13 Lab Assessment Questions & Answers Name at least five applications and tools pre-loaded on the TargetWindows01 server desktop, and identify whether that application starts as a service on the system or must be run manually. Note: These forms have been formatted to allow you to complete the form online and save it using Adobe Reader. You may experience problems with either or both of these actions if you are using any other software program. indows Application Loaded Starts as Service Y/N 1.WireShark NO 2.Nessus Client NO 3.Tftpd32 YES 4.Mozilla Firefox NO 5.Nmap-Zenmap GUI NO What was the allocated source IP host address for the TargetWindows01 server, LAN Switch 1,LAN Switch 2, and the IP default gateway router? TargetWindows01 server: 172.30.0.8 LAN Switch 1: 172.16.8.5 LAN Switch 2: 172.16.20.5 Default gateway router: 172.30.0.1 Did the targeted IP hosts respond to the ICMP echo-request packet with an ICMP echo-reply packet when you initiated the “ping” command at your DOS prompt? If yes, how many ICMP echo-request packets were sent back to the IP source? YES. 4 packets were sent back to the IP source. 4.What is the command line syntax for running an “Intense Scan” with Zenmap on a target subnet...

Words: 523 - Pages: 3

Free Essay

Ccna Ch 4

...the output that is shown? (Choose two.) The local host is using three client sessions. The local host is using web sessions to a remote server. The local host is listening for TCP connections using public addresses. The local host is using well-known port numbers to identify the source ports. The local host is performing the three-way handshake with 192.168.1.101:1037. 2. After a web browser makes a request to a web server that is listening to the standard port, what will be the source port number in the TCP header of the response from the server? 13 53 80 1024 1728 3. Which information is found in both the TCP and UDP header information? sequencing flow control acknowledgments source and destination 4. Which is an important characteristic of UDP? acknowledgement of data delivery minimal delays in data delivery high reliability of data delivery same order data delivery 5. Refer to the exhibit. Host A is using FTP to download a large file from Server 1. During the download process, Server 1 does not receive an acknowledgment from Host A for several bytes of transferred data. What action will Server 1 take as a result? create a Layer 1 jam signal reach a timeout and resend the data that needs to be acknowledged send a RESET bit to the host change the window size in the Layer 4 header 6. Refer to the exhibit. In line 7 of this Wireshark capture, what TCP operation...

Words: 973 - Pages: 4

Premium Essay

Nt1310 Unit 1 Assignment 1

...restrictions iptables –A OUTPUT –s 10.20.111.0/24 –d 10.10.111.0/24 –j ACCEPT -m state --state NEW,ESTABLISHED,RELATED b)For incoming traffic (from the 10.10.111.0/24 to the 10.20.111.0/24) - all incoming connection requests should be rejected with the following exceptions. iptables –A INPUT –s 10.10.111.0/24 –d 10.20.111.0/24 –j REJECT -m state --state NEW,ESTABLISHED,RELATED. iptables –A FORWARD –s 10.10.111.0/24 –d 10.20.111.0/24 –j REJECT -m state --state NEW,ESTABLISHED,RELATED....

Words: 1021 - Pages: 5

Premium Essay

Vulnerability Analysis Paper

...To get directly to the point, scanners will get you a great deal, however manual testing can rapidly limit the degree to apropos target applications, administrations, frameworks, and so on. Additionally, knowing how instruments present information is critical. For example, the penetration tester must comprehend NMAP yield, it is not generally as basic as open or shut. It will rely on upon the kind of output and the objective framework. Trust me, read up and see how NMAP functions. I additionally suggest that amid this stride the penetration tester utilize a parcel catch apparatus such as Wireshark to see the convention correspondence. I once had a penetration tester let me know a frail port was open on my firewall when indeed it was a TCP RST they were getting, sadly, they were utilizing Windows telnet to the port to approve and never saw the RST. The presumption was made that Windows gave the dream they were associating with the port being referred to, they were most certainly not. A brisk investigation using Wireshark would have spared us time and I would possibly regard the penetration tester. Point here is, don't markdown manual approval, it can offer you some assistance with finding false-positives from scanner yield. Taking into account the data assembled, setting up a lab is profoundly suggested, additionally for misuse testing, for example, achievement of adventure, AV and FW/IPS/IDS avoidance and so (“PTES Technical”,...

Words: 825 - Pages: 4

Free Essay

Ccna 1 Chapter 4 Study Materials

...from the output that is shown? (Choose two.) The local host is using three client sessions. The local host is using web sessions to a remote server. The local host is listening for TCP connections using public addresses. The local host is using well-known port numbers to identify the source ports. The local host is performing the three-way handshake with 192.168.1.101:1037. 2. After a web browser makes a request to a web server that is listening to the standard port, what will be the source port number in the TCP header of the response from the server? 13 53 80 1024 1728 3. Which information is found in both the TCP and UDP header information? sequencing flow control acknowledgments source and destination 4. Which is an important characteristic of UDP? acknowledgement of data delivery minimal delays in data delivery high reliability of data delivery same order data delivery 5. [pic] ccna 1 chapter 4 answers 100% 2011 Refer to the exhibit. Host A is using FTP to download a large file from Server 1. During the download process, Server 1 does not receive an acknowledgment from Host A for several bytes of transferred data. What action will Server 1 take as a result? create a Layer 1 jam signal reach a timeout and resend the data that needs to be acknowledged send a RESET bit to the host change the window size in the Layer 4 header 6. [pic] ccna 1 chapter 4 answers 100% 2011 Refer to the exhibit. In line 7 of this Wireshark capture, what TCP operation...

Words: 1109 - Pages: 5

Premium Essay

Liao

...Volume 1 FACULTY OF INFORMATION TECHNOLOGY Computer Network Systems Department Computer Networks 1 Lab Manual V 2.0 P R E P A R E D D R . A S U B Y H I J J A W I M O H A M M A D 2 0 1 2 R E V I E W E D B Y D R . M O H A M M A D H I J J A W I Applied Science Private University – Jordan http://FIT.asu.edu.jo Table of Contents Lab 1: Network Components ....................................................................................... 7 Introduction ........................................................................................................ 7 Objectives: ........................................................................................................ 13 Lab Steps: ......................................................................................................... 13 Lab 2: Cable Construction ......................................................................................... 14 Introduction: ...................................................................................................... 14 Objectives: ........................................................................................................ 20 Lab Steps: ......................................................................................................... 21 Preparation ....................................................................................................... 21 Main Steps .................................................

Words: 20902 - Pages: 84