Frame 393: 1213 bytes on wire (9704 bits), 1213 bytes captured (9704 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.375019477 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.375019477 seconds [Time delta from previous captured frame: 0.024451474 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 13.577450624 seconds] Frame Number: 393 Frame Length: 1213 bytes (9704 bits) Capture Length: 1213 bytes (9704 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1197 Identification: 0xd4b5 (54453) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x89f0 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 61787, Len: 1157 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 1157] Sequence number: 1021 (relative sequence number) [Next sequence number: 2178 (relative sequence number)] Acknowledgment number: 61787 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdc44 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1157] [Bytes sent since last PSH flag: 1157] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 1152 Encrypted Application Data: 3df20a3a80953e06fb89581c3e8da29624f29239f1d59ad9... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=635391183984-514371109240&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/&id= [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=635391183984-514371109240&protV=20&lpjson=1&page=https%3A] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=635391183984-514371109240&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/&id=7763280453&j] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=635391183984-514371109240&protV=20&lpjson=1&page=https%3A//moj.hrvatskiteleko Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=635391183984-514371109240&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/&id Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagStartPage Request URI Query Parameter: lpCallId=635391183984-514371109240 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/ Request URI Query Parameter: id=7763280453 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: PV%21ErrorName= Request URI Query Parameter: PV%21unit=csc-portal Request URI Query Parameter: PV%21PageUrl=/ Request URI Query Parameter: PV%21ErrorCount=0 Request URI Query Parameter: PV%21pageLoadTime=0%20sec Request URI Query Parameter: PV%21visitorActive=1 Request URI Query Parameter: SV%21language=croatian Request URI Query Parameter: VV%21CustomerLoggedIn=rovismi1 Request URI Query Parameter: title=Moj%20Telekom%20Portal%20%7C%20Hrvatski%20Telekom Request URI Query Parameter: cobrowse=true Request URI Query Parameter [truncated]: cookie=visited%3D1%3B%20_ceg.s%3Dogzmhn%3B%20_ceg.u%3Dogzmhn%3B%2062370768-VID%3D172480676440713%3B%2062370768-SKEY%3D5756825085274454102%3B%20HumanClickSiteContainerID_62370768%3DSTANDALONE%3B%20Co Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=635391183984-514371109240&protV=20&lpjs] [HTTP request 2/2] [Prev request in frame: 318]