Frame 756: 1325 bytes on wire (10600 bits), 1325 bytes captured (10600 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.634476579 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.634476579 seconds [Time delta from previous captured frame: 0.000462777 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 24.836907726 seconds] Frame Number: 756 Frame Length: 1325 bytes (10600 bits) Capture Length: 1325 bytes (10600 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1309 Identification: 0xd4e2 (54498) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8953 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 120654, Len: 1269 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 1269] Sequence number: 4161 (relative sequence number) [Next sequence number: 5430 (relative sequence number)] Acknowledgment number: 120654 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdcb4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1269] [Bytes sent since last PSH flag: 1269] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 1264 Encrypted Application Data: ccf4b13d0fb7490e093a98ef9eb8690f3203751612532e2b... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=310652208809-141496981530&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racu [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=310652208809-141496981530&protV=20&lpjson=1&page=https%3A] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=310652208809-141496981530&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fservice] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=310652208809-141496981530&protV=20&lpjson=1&page=https%3A//moj.hrvatskiteleko Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=310652208809-141496981530&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/rac Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagStartPage Request URI Query Parameter: lpCallId=310652208809-141496981530 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: PV%21ErrorName= Request URI Query Parameter: PV%21unit=csc-portal Request URI Query Parameter: PV%21PageUrl=/racuni Request URI Query Parameter: PV%21ErrorCount=0 Request URI Query Parameter: PV%21pageLoadTime=1%20sec Request URI Query Parameter: PV%21visitorActive=1 Request URI Query Parameter: SV%21language=croatian Request URI Query Parameter: VV%21CustomerLoggedIn=rovismi1 Request URI Query Parameter: title=HT%20fiksni%20ra%u010Dun%20br.%205019102951%20%u2022%20Moj%20Telekom Request URI Query Parameter: referrer=https%3A//moj.hrvatskitelekom.hr/ Request URI Query Parameter: cobrowse=true Request URI Query Parameter [truncated]: cookie=visited%3D1%3B%20_ceg.s%3Dogzmhy%3B%20_ceg.u%3Dogzmhy%3B%2062370768-VID%3D172480676440713%3B%2062370768-SKEY%3D5756825085274454102%3B%20HumanClickSiteContainerID_62370768%3DSTANDALONE%3B%20Co Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=310652208809-141496981530&protV=20&lpjs] [HTTP request 6/6] [Prev request in frame: 655]