Frame 1358: 1325 bytes on wire (10600 bits), 1325 bytes captured (10600 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:40.217500075 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724300.217500075 seconds [Time delta from previous captured frame: 0.236751841 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 125.419931222 seconds] Frame Number: 1358 Frame Length: 1325 bytes (10600 bits) Capture Length: 1325 bytes (10600 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 195.29.149.33 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1309 Identification: 0xd3bd (54205) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x4834 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 195.29.149.33 Transmission Control Protocol, Src Port: 56456 (56456), Dst Port: https (443), Seq: 13100, Ack: 177447, Len: 1269 Source Port: 56456 (56456) Destination Port: https (443) [Stream index: 1] [TCP Segment Len: 1269] Sequence number: 13100 (relative sequence number) [Next sequence number: 14369 (relative sequence number)] Acknowledgment number: 177447 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1ef9 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.003305578 seconds] [Bytes in flight: 1269] [Bytes sent since last PSH flag: 1269] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 1264 Encrypted Application Data: f1d1eb837385f8e09eb785d2a5446264602af9695d26248c... Hypertext Transfer Protocol GET /racuni/pregled-racuna-pdf?serviceid=12018216&metaid=435518423&filename=435518423.pdf HTTP/1.1\r\n [Expert Info (Chat/Sequence): GET /racuni/pregled-racuna-pdf?serviceid=12018216&metaid=435518423&filename=435518423.pdf HTTP/1.1\r\n] [GET /racuni/pregled-racuna-pdf?serviceid=12018216&metaid=435518423&filename=435518423.pdf HTTP/1.1\r\n] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI: /racuni/pregled-racuna-pdf?serviceid=12018216&metaid=435518423&filename=435518423.pdf Request URI Path: /racuni/pregled-racuna-pdf Request URI Query: serviceid=12018216&metaid=435518423&filename=435518423.pdf Request URI Query Parameter: serviceid=12018216 Request URI Query Parameter: metaid=435518423 Request URI Query Parameter: filename=435518423.pdf Request Version: HTTP/1.1 Host: moj.hrvatskitelekom.hr\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n [truncated]Cookie: UniqueTracking=bd2fa232-f4e6-44ef-a403-d7e24494fda8; ASP.NET_SessionId=qlutfqwzfvlalxugfszjzeuc; CurrentServiceId=12018216; visited=1; _ceg.s=ogzmhy; _ceg.u=ogzmhy; 62370768-VID=172480676440713; 62370768-SKEY=5756825085 Cookie pair: UniqueTracking=bd2fa232-f4e6-44ef-a403-d7e24494fda8 Cookie pair: ASP.NET_SessionId=qlutfqwzfvlalxugfszjzeuc Cookie pair: CurrentServiceId=12018216 Cookie pair: visited=1 Cookie pair: _ceg.s=ogzmhy Cookie pair: _ceg.u=ogzmhy Cookie pair: 62370768-VID=172480676440713 Cookie pair: 62370768-SKEY=5756825085274454102 Cookie pair: HumanClickSiteContainerID_62370768=STANDALONE Cookie pair: CookieNotification=yes Cookie pair [truncated]: oAuthData=yZA1pvWTmXBQfSyylhj+mRpL0VrYpBsoQMdI7IhDkh1lyOV+gSeSymOg3H7pRVXia2TCjOlsKT/9Z7dDhR7gFkOzV49jD0zUBgpzZk2U4xD74iEdnsNWbozCl4wLAyflT4Etc/+lsTvrYDa3QTg67hhLGjjhycAnpZP6CmGf6eR7+uLTXwrCimWt91lY+2rGyb2TUC8/QI9I Cookie pair: front_ctck=KEbgveugedO4x0mDMyb3l0jsoXjqdTEZ9e2KtUnHMcWpgdlBV7Dq4mOLexbp9zXfoOFDiXeP2A+lyuJoRjhlcA== Cookie pair: AuthType=HWMamMq/3eNv8oek1ObOWmxq1IXzPLqr8uJ3ibU+sIo= Connection: keep-alive\r\n \r\n [Full request URI: https://moj.hrvatskitelekom.hr/racuni/pregled-racuna-pdf?serviceid=12018216&metaid=435518423&filename=435518423.pdf] [HTTP request 11/11] [Prev request in frame: 1223]