No. Time Source Destination Protocol Length Info 22 0.233400000 192.168.1.2 mail.t-com.hr TLSv1 121 Application Data Frame 22: 121 bytes on wire (968 bits), 121 bytes captured (968 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Jan 31, 2015 02:42:12.408139000 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1422668532.408139000 seconds [Time delta from previous captured frame: 0.000737000 seconds] [Time delta from previous displayed frame: 0.000737000 seconds] [Time since reference or first frame: 0.233400000 seconds] Frame Number: 22 Frame Length: 121 bytes (968 bits) Capture Length: 121 bytes (968 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:smtp:ssl] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: EdimaxTe_00:80:45 (00:0e:2e:00:80:45) Protocol: IP (0x0800) Internet Protocol Version 4, Src: 192.168.1.2 (192.168.1.2), Dst: mail.t-com.hr (195.29.150.5) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 105 Identification: 0xab4c (43852) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x7475 [validation disabled] [Good: False] [Bad: False] Source: 192.168.1.2 (192.168.1.2) Destination: mail.t-com.hr (195.29.150.5) Transmission Control Protocol, Src Port: 35796 (35796), Dst Port: smtp (25), Seq: 429, Ack: 5121, Len: 53 Source Port: 35796 (35796) Destination Port: smtp (25) [Stream index: 0] [TCP Segment Len: 53] Sequence number: 429 (relative sequence number) [Next sequence number: 482 (relative sequence number)] Acknowledgment number: 5121 (relative ack number) Header Length: 32 bytes .... 0000 0001 1000 = Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 319 [Calculated window size: 40832] [Window size scaling factor: 128] Checksum: 0x1b29 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Timestamps: TSval 72632280, TSecr 2191391931 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 72632280 Timestamp echo reply: 2191391931 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 21] [The RTT to ACK the segment was: 0.000737000 seconds] [iRTT: 0.017820000 seconds] [Bytes in flight: 53] Secure Sockets Layer TLSv1 Record Layer: Application Data Protocol: Application Data Content Type: Application Data (23) Version: TLS 1.0 (0x0301) Length: 48 Encrypted Application Data: 55fd3204fda4146257ea9b8f72e038d8106bc20201ff47a8... No. Time Source Destination Protocol Length Info 23 0.250845000 mail.t-com.hr 192.168.1.2 TLSv1 201 Application Data Frame 23: 201 bytes on wire (1608 bits), 201 bytes captured (1608 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Jan 31, 2015 02:42:12.425584000 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1422668532.425584000 seconds [Time delta from previous captured frame: 0.017445000 seconds] [Time delta from previous displayed frame: 0.017445000 seconds] [Time since reference or first frame: 0.250845000 seconds] Frame Number: 23 Frame Length: 201 bytes (1608 bits) Capture Length: 201 bytes (1608 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:smtp:ssl] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: Zte_14:4e:c6 (2c:95:7f:14:4e:c6) Protocol: IP (0x0800) Internet Protocol Version 4, Src: mail.t-com.hr (195.29.150.5), Dst: 192.168.1.2 (192.168.1.2) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 185 Identification: 0xb9fe (47614) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 60 Protocol: TCP (6) Header checksum: 0x6973 [validation disabled] [Good: False] [Bad: False] Source: mail.t-com.hr (195.29.150.5) Destination: 192.168.1.2 (192.168.1.2) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 35796 (35796), Seq: 5121, Ack: 482, Len: 133 Source Port: smtp (25) Destination Port: 35796 (35796) [Stream index: 0] [TCP Segment Len: 133] Sequence number: 5121 (relative sequence number) [Next sequence number: 5254 (relative sequence number)] Acknowledgment number: 482 (relative ack number) Header Length: 32 bytes .... 0000 0001 1000 = Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 62 [Calculated window size: 7936] [Window size scaling factor: 128] Checksum: 0x0f85 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Timestamps: TSval 2191391951, TSecr 72632280 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 2191391951 Timestamp echo reply: 72632280 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 22] [The RTT to ACK the segment was: 0.017445000 seconds] [iRTT: 0.017820000 seconds] [Bytes in flight: 133] Secure Sockets Layer TLSv1 Record Layer: Application Data Protocol: Application Data Content Type: Application Data (23) Version: TLS 1.0 (0x0301) Length: 128 Encrypted Application Data: fda81296502174a22998e1e427b743374023a6bdadeeb7ac... No. Time Source Destination Protocol Length Info 24 0.252275000 192.168.1.2 mail.t-com.hr TLSv1 185 Application Data Frame 24: 185 bytes on wire (1480 bits), 185 bytes captured (1480 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Jan 31, 2015 02:42:12.427014000 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1422668532.427014000 seconds [Time delta from previous captured frame: 0.001430000 seconds] [Time delta from previous displayed frame: 0.001430000 seconds] [Time since reference or first frame: 0.252275000 seconds] Frame Number: 24 Frame Length: 185 bytes (1480 bits) Capture Length: 185 bytes (1480 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:smtp:ssl] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: EdimaxTe_00:80:45 (00:0e:2e:00:80:45) Protocol: IP (0x0800) Internet Protocol Version 4, Src: 192.168.1.2 (192.168.1.2), Dst: mail.t-com.hr (195.29.150.5) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 169 Identification: 0xab4d (43853) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x7434 [validation disabled] [Good: False] [Bad: False] Source: 192.168.1.2 (192.168.1.2) Destination: mail.t-com.hr (195.29.150.5) Transmission Control Protocol, Src Port: 35796 (35796), Dst Port: smtp (25), Seq: 482, Ack: 5254, Len: 117 Source Port: 35796 (35796) Destination Port: smtp (25) [Stream index: 0] [TCP Segment Len: 117] Sequence number: 482 (relative sequence number) [Next sequence number: 599 (relative sequence number)] Acknowledgment number: 5254 (relative ack number) Header Length: 32 bytes .... 0000 0001 1000 = Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 340 [Calculated window size: 43520] [Window size scaling factor: 128] Checksum: 0x1b69 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Timestamps: TSval 72632299, TSecr 2191391951 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 72632299 Timestamp echo reply: 2191391951 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 23] [The RTT to ACK the segment was: 0.001430000 seconds] [iRTT: 0.017820000 seconds] [Bytes in flight: 117] Secure Sockets Layer TLSv1 Record Layer: Application Data Protocol: Application Data Content Type: Application Data (23) Version: TLS 1.0 (0x0301) Length: 112 Encrypted Application Data: d9bcd40933a19024fedbd2858c1bb07ce4003a42429d7455... No. Time Source Destination Protocol Length Info 25 0.275728000 mail.t-com.hr 192.168.1.2 TLSv1 169 Application Data Frame 25: 169 bytes on wire (1352 bits), 169 bytes captured (1352 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Jan 31, 2015 02:42:12.450467000 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1422668532.450467000 seconds [Time delta from previous captured frame: 0.023453000 seconds] [Time delta from previous displayed frame: 0.023453000 seconds] [Time since reference or first frame: 0.275728000 seconds] Frame Number: 25 Frame Length: 169 bytes (1352 bits) Capture Length: 169 bytes (1352 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:smtp:ssl] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: Zte_14:4e:c6 (2c:95:7f:14:4e:c6) Protocol: IP (0x0800) Internet Protocol Version 4, Src: mail.t-com.hr (195.29.150.5), Dst: 192.168.1.2 (192.168.1.2) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 153 Identification: 0xb9ff (47615) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 60 Protocol: TCP (6) Header checksum: 0x6992 [validation disabled] [Good: False] [Bad: False] Source: mail.t-com.hr (195.29.150.5) Destination: 192.168.1.2 (192.168.1.2) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 35796 (35796), Seq: 5254, Ack: 599, Len: 101 Source Port: smtp (25) Destination Port: 35796 (35796) [Stream index: 0] [TCP Segment Len: 101] Sequence number: 5254 (relative sequence number) [Next sequence number: 5355 (relative sequence number)] Acknowledgment number: 599 (relative ack number) Header Length: 32 bytes .... 0000 0001 1000 = Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 62 [Calculated window size: 7936] [Window size scaling factor: 128] Checksum: 0xc739 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Timestamps: TSval 2191391975, TSecr 72632299 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 2191391975 Timestamp echo reply: 72632299 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 24] [The RTT to ACK the segment was: 0.023453000 seconds] [iRTT: 0.017820000 seconds] [Bytes in flight: 101] Secure Sockets Layer TLSv1 Record Layer: Application Data Protocol: Application Data Content Type: Application Data (23) Version: TLS 1.0 (0x0301) Length: 96 Encrypted Application Data: f67a2d6505152a021ba1cd92294a2fee8a03dd7bfb7ec546... No. Time Source Destination Protocol Length Info 28 0.276117000 192.168.1.2 mail.t-com.hr TLSv1 169 Application Data Frame 28: 169 bytes on wire (1352 bits), 169 bytes captured (1352 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Jan 31, 2015 02:42:12.450856000 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1422668532.450856000 seconds [Time delta from previous captured frame: 0.000015000 seconds] [Time delta from previous displayed frame: 0.000015000 seconds] [Time since reference or first frame: 0.276117000 seconds] Frame Number: 28 Frame Length: 169 bytes (1352 bits) Capture Length: 169 bytes (1352 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:smtp:ssl] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: EdimaxTe_00:80:45 (00:0e:2e:00:80:45) Protocol: IP (0x0800) Internet Protocol Version 4, Src: 192.168.1.2 (192.168.1.2), Dst: mail.t-com.hr (195.29.150.5) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 153 Identification: 0xab50 (43856) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x7441 [validation disabled] [Good: False] [Bad: False] Source: 192.168.1.2 (192.168.1.2) Destination: mail.t-com.hr (195.29.150.5) Transmission Control Protocol, Src Port: 35796 (35796), Dst Port: smtp (25), Seq: 3335, Ack: 5355, Len: 101 Source Port: 35796 (35796) Destination Port: smtp (25) [Stream index: 0] [TCP Segment Len: 101] Sequence number: 3335 (relative sequence number) [Next sequence number: 3436 (relative sequence number)] Acknowledgment number: 5355 (relative ack number) Header Length: 32 bytes .... 0000 0001 1000 = Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 340 [Calculated window size: 43520] [Window size scaling factor: 128] Checksum: 0x1b59 [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Timestamps: TSval 72632323, TSecr 2191391975 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 72632323 Timestamp echo reply: 2191391975 [SEQ/ACK analysis] [iRTT: 0.017820000 seconds] [Bytes in flight: 2837] TCP segment data (101 bytes) [3 Reassembled TCP Segments (2837 bytes): #26(1368), #27(1368), #28(101)] [Frame: 26, payload: 0-1367 (1368 bytes)] [Frame: 27, payload: 1368-2735 (1368 bytes)] [Frame: 28, payload: 2736-2836 (101 bytes)] [Segment count: 3] [Reassembled TCP length: 2837] [Reassembled TCP Data: 1703010b104908cc770fd7b1f57d53bf9313d00113cd2a17...] Secure Sockets Layer TLSv1 Record Layer: Application Data Protocol: Application Data Content Type: Application Data (23) Version: TLS 1.0 (0x0301) Length: 2832 Encrypted Application Data: 4908cc770fd7b1f57d53bf9313d00113cd2a171075865868... No. Time Source Destination Protocol Length Info 30 0.320352000 mail.t-com.hr 192.168.1.2 TLSv1 153 Application Data Frame 30: 153 bytes on wire (1224 bits), 153 bytes captured (1224 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Jan 31, 2015 02:42:12.495091000 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1422668532.495091000 seconds [Time delta from previous captured frame: 0.003733000 seconds] [Time delta from previous displayed frame: 0.003733000 seconds] [Time since reference or first frame: 0.320352000 seconds] Frame Number: 30 Frame Length: 153 bytes (1224 bits) Capture Length: 153 bytes (1224 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:smtp:ssl] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: Zte_14:4e:c6 (2c:95:7f:14:4e:c6) Protocol: IP (0x0800) Internet Protocol Version 4, Src: mail.t-com.hr (195.29.150.5), Dst: 192.168.1.2 (192.168.1.2) Version: 4 Header Length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00: Not-ECT (Not ECN-Capable Transport)) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..00 = Explicit Congestion Notification: Not-ECT (Not ECN-Capable Transport) (0x00) Total Length: 137 Identification: 0xba01 (47617) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 60 Protocol: TCP (6) Header checksum: 0x69a0 [validation disabled] [Good: False] [Bad: False] Source: mail.t-com.hr (195.29.150.5) Destination: 192.168.1.2 (192.168.1.2) Transmission Control Protocol, Src Port: smtp (25), Dst Port: 35796 (35796), Seq: 5355, Ack: 3436, Len: 85 Source Port: smtp (25) Destination Port: 35796 (35796) [Stream index: 0] [TCP Segment Len: 85] Sequence number: 5355 (relative sequence number) [Next sequence number: 5440 (relative sequence number)] Acknowledgment number: 3436 (relative ack number) Header Length: 32 bytes .... 0000 0001 1000 = Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set Window size value: 105 [Calculated window size: 13440] [Window size scaling factor: 128] Checksum: 0xf1da [validation disabled] [Good Checksum: False] [Bad Checksum: False] Urgent pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Timestamps: TSval 2191392020, TSecr 72632323 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 2191392020 Timestamp echo reply: 72632323 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 28] [The RTT to ACK the segment was: 0.044235000 seconds] [iRTT: 0.017820000 seconds] [Bytes in flight: 85] Secure Sockets Layer TLSv1 Record Layer: Application Data Protocol: Application Data Content Type: Application Data (23) Version: TLS 1.0 (0x0301) Length: 80 Encrypted Application Data: 2ff536c5d862c91b9c51c8a9f0e590a6373164f68e9de8ab...