Frame 256: 76 bytes on wire (608 bits), 76 bytes captured (608 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:47.959705103 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724187.959705103 seconds [Time delta from previous captured frame: 0.000255666 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 13.162136250 seconds] Frame Number: 256 Frame Length: 76 bytes (608 bits) Capture Length: 76 bytes (608 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 60 Identification: 0xd490 (54416) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e86 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 0, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 0 (relative sequence number) Acknowledgment number: 0 Header Length: 40 bytes Flags: 0x002 (SYN) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...0 .... = Acknowledgment: Not set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 443] [Connection establish request (SYN): server port 443] [Severity level: Chat] [Group: Sequence] .... .... ...0 = Fin: Not set [TCP Flags: ··········S·] Window size value: 29200 [Calculated window size: 29200] Checksum: 0xd7d3 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 Options: (20 bytes), Maximum segment size, SACK permitted, Timestamps, No-Operation (NOP), Window scale Maximum segment size: 1460 bytes Kind: Maximum Segment Size (2) Length: 4 MSS Value: 1460 TCP SACK Permitted Option: True Kind: SACK Permitted (4) Length: 2 Timestamps: TSval 335925149, TSecr 0 Kind: Time Stamp Option (8) Length: 10 Timestamp value: 335925149 Timestamp echo reply: 0 No-Operation (NOP) Type: 1 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0001 = Number: No-Operation (NOP) (1) Window scale: 7 (multiply by 128) Kind: Window Scale (3) Length: 3 Shift count: 7 [Multiplier: 128] Frame 275: 64 bytes on wire (512 bits), 64 bytes captured (512 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.003049138 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.003049138 seconds [Time delta from previous captured frame: 0.003693683 seconds] [Time delta from previous displayed frame: 0.043344035 seconds] [Time since reference or first frame: 13.205480285 seconds] Frame Number: 275 Frame Length: 64 bytes (512 bits) Capture Length: 64 bytes (512 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 48 Identification: 0x5be5 (23525) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x543d [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 0, Ack: 1, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 0 (relative sequence number) Acknowledgment number: 1 (relative ack number) Header Length: 28 bytes Flags: 0x012 (SYN, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port 443] [Connection establish acknowledge (SYN+ACK): server port 443] [Severity level: Chat] [Group: Sequence] .... .... ...0 = Fin: Not set [TCP Flags: ·······A··S·] Window size value: 4356 [Calculated window size: 4356] Checksum: 0xb273 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 Options: (8 bytes), Maximum segment size, SACK permitted, End of Option List (EOL) Maximum segment size: 1452 bytes Kind: Maximum Segment Size (2) Length: 4 MSS Value: 1452 TCP SACK Permitted Option: True Kind: SACK Permitted (4) Length: 2 End of Option List (EOL) Type: 0 0... .... = Copy on fragmentation: No .00. .... = Class: Control (0) ...0 0000 = Number: End of Option List (EOL) (0) [SEQ/ACK analysis] [This is an ACK to the segment in frame: 256] [The RTT to ACK the segment was: 0.043344035 seconds] Frame 276: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.003227011 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.003227011 seconds [Time delta from previous captured frame: 0.000177873 seconds] [Time delta from previous displayed frame: 0.000177873 seconds] [Time since reference or first frame: 13.205658158 seconds] Frame Number: 276 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd491 (54417) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e99 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1 (relative sequence number) Acknowledgment number: 1 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 29200 [Calculated window size: 29200] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 275] [The RTT to ACK the segment was: 0.000177873 seconds] [iRTT: 0.043521908 seconds] Frame 277: 281 bytes on wire (2248 bits), 281 bytes captured (2248 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.003471715 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.003471715 seconds [Time delta from previous captured frame: 0.000244704 seconds] [Time delta from previous displayed frame: 0.000244704 seconds] [Time since reference or first frame: 13.205902862 seconds] Frame Number: 277 Frame Length: 281 bytes (2248 bits) Capture Length: 281 bytes (2248 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 265 Identification: 0xd492 (54418) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8db7 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1, Ack: 1, Len: 225 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 225] Sequence number: 1 (relative sequence number) [Next sequence number: 226 (relative sequence number)] Acknowledgment number: 1 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 29200 [Calculated window size: 29200] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd8a0 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 225] [Bytes sent since last PSH flag: 225] Secure Sockets Layer SSL Record Layer: Handshake Protocol: Client Hello Content Type: Handshake (22) Version: TLS 1.0 (0x0301) Length: 220 Handshake Protocol: Client Hello Handshake Type: Client Hello (1) Length: 216 Version: TLS 1.2 (0x0303) Random GMT Unix Time: Feb 14, 2016 12:51:34.000000000 CET Random Bytes: 5226434f7ffca198cd137cc6de0f3bac6366152d37f673b6... Session ID Length: 32 Session ID: e70400007ce4eaed6830d70c1fc964b6c621c437436f8746... Cipher Suites Length: 22 Cipher Suites (11 suites) Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a) Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014) Cipher Suite: TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x0033) Cipher Suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x0039) Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA (0x002f) Cipher Suite: TLS_RSA_WITH_AES_256_CBC_SHA (0x0035) Cipher Suite: TLS_RSA_WITH_3DES_EDE_CBC_SHA (0x000a) Compression Methods Length: 1 Compression Methods (1 method) Compression Method: null (0) Extensions Length: 121 Extension: server_name Type: server_name (0x0000) Length: 30 Server Name Indication extension Server Name list length: 28 Server Name Type: host_name (0) Server Name length: 25 Server Name: server.lon.liveperson.net Extension: renegotiation_info Type: renegotiation_info (0xff01) Length: 1 Renegotiation Info extension Renegotiation info extension length: 0 Extension: elliptic_curves Type: elliptic_curves (0x000a) Length: 8 Elliptic Curves Length: 6 Elliptic curves (3 curves) Elliptic curve: secp256r1 (0x0017) Elliptic curve: secp384r1 (0x0018) Elliptic curve: secp521r1 (0x0019) Extension: ec_point_formats Type: ec_point_formats (0x000b) Length: 2 EC point formats Length: 1 Elliptic curves point formats (1) EC point format: uncompressed (0) Extension: SessionTicket TLS Type: SessionTicket TLS (0x0023) Length: 0 Data (0 bytes) Extension: Application Layer Protocol Negotiation Type: Application Layer Protocol Negotiation (0x0010) Length: 11 ALPN Extension Length: 9 ALPN Protocol ALPN string length: 8 ALPN Next Protocol: http/1.1 Extension: status_request Type: status_request (0x0005) Length: 5 Certificate Status Type: OCSP (1) Responder ID list Length: 0 Request Extensions Length: 0 Extension: signature_algorithms Type: signature_algorithms (0x000d) Length: 32 Signature Hash Algorithms Length: 30 Signature Hash Algorithms (15 algorithms) Signature Hash Algorithm: 0x0403 Signature Hash Algorithm Hash: SHA256 (4) Signature Hash Algorithm Signature: ECDSA (3) Signature Hash Algorithm: 0x0503 Signature Hash Algorithm Hash: SHA384 (5) Signature Hash Algorithm Signature: ECDSA (3) Signature Hash Algorithm: 0x0603 Signature Hash Algorithm Hash: SHA512 (6) Signature Hash Algorithm Signature: ECDSA (3) Signature Hash Algorithm: 0x0203 Signature Hash Algorithm Hash: SHA1 (2) Signature Hash Algorithm Signature: ECDSA (3) Signature Hash Algorithm: 0x0804 Signature Hash Algorithm Hash: Unknown (8) Signature Hash Algorithm Signature: Unknown (4) Signature Hash Algorithm: 0x0805 Signature Hash Algorithm Hash: Unknown (8) Signature Hash Algorithm Signature: Unknown (5) Signature Hash Algorithm: 0x0806 Signature Hash Algorithm Hash: Unknown (8) Signature Hash Algorithm Signature: Unknown (6) Signature Hash Algorithm: 0x0401 Signature Hash Algorithm Hash: SHA256 (4) Signature Hash Algorithm Signature: RSA (1) Signature Hash Algorithm: 0x0501 Signature Hash Algorithm Hash: SHA384 (5) Signature Hash Algorithm Signature: RSA (1) Signature Hash Algorithm: 0x0601 Signature Hash Algorithm Hash: SHA512 (6) Signature Hash Algorithm Signature: RSA (1) Signature Hash Algorithm: 0x0201 Signature Hash Algorithm Hash: SHA1 (2) Signature Hash Algorithm Signature: RSA (1) Signature Hash Algorithm: 0x0402 Signature Hash Algorithm Hash: SHA256 (4) Signature Hash Algorithm Signature: DSA (2) Signature Hash Algorithm: 0x0502 Signature Hash Algorithm Hash: SHA384 (5) Signature Hash Algorithm Signature: DSA (2) Signature Hash Algorithm: 0x0602 Signature Hash Algorithm Hash: SHA512 (6) Signature Hash Algorithm Signature: DSA (2) Signature Hash Algorithm: 0x0202 Signature Hash Algorithm Hash: SHA1 (2) Signature Hash Algorithm Signature: DSA (2) Frame 292: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.046668389 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.046668389 seconds [Time delta from previous captured frame: 0.007063401 seconds] [Time delta from previous displayed frame: 0.043196674 seconds] [Time since reference or first frame: 13.249099536 seconds] Frame Number: 292 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: b58fac24 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x81b3 (33203) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x2e77 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 1, Ack: 226, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1 (relative sequence number) Acknowledgment number: 226 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 4581 [Calculated window size: 4581] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdc6c [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 277] [The RTT to ACK the segment was: 0.043196674 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 57928 Src Port: 57928 Frame 294: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.056171900 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.056171900 seconds [Time delta from previous captured frame: 0.003763509 seconds] [Time delta from previous displayed frame: 0.009503511 seconds] [Time since reference or first frame: 13.258603047 seconds] Frame Number: 294 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x89ea (35306) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x208c [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 1, Ack: 226, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 1 (relative sequence number) [Next sequence number: 1461 (relative sequence number)] Acknowledgment number: 226 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 4581 [Calculated window size: 4581] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Secure Sockets Layer Frame 295: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.056260399 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.056260399 seconds [Time delta from previous captured frame: 0.000088499 seconds] [Time delta from previous displayed frame: 0.000088499 seconds] [Time since reference or first frame: 13.258691546 seconds] Frame Number: 295 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd493 (54419) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e97 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 226, Ack: 1461, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 226 (relative sequence number) Acknowledgment number: 1461 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 31944 [Calculated window size: 31944] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 294] [The RTT to ACK the segment was: 0.000088499 seconds] [iRTT: 0.043521908 seconds] Frame 296: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.056301971 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.056301971 seconds [Time delta from previous captured frame: 0.000041572 seconds] [Time delta from previous displayed frame: 0.000041572 seconds] [Time since reference or first frame: 13.258733118 seconds] Frame Number: 296 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x89ed (35309) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x2089 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 1461, Ack: 226, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 1461 (relative sequence number) [Next sequence number: 2921 (relative sequence number)] Acknowledgment number: 226 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 4581 [Calculated window size: 4581] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 297: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.056353075 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.056353075 seconds [Time delta from previous captured frame: 0.000051104 seconds] [Time delta from previous displayed frame: 0.000051104 seconds] [Time since reference or first frame: 13.258784222 seconds] Frame Number: 297 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd494 (54420) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e96 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 226, Ack: 2921, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 226 (relative sequence number) Acknowledgment number: 2921 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 34848 [Calculated window size: 34848] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 296] [The RTT to ACK the segment was: 0.000051104 seconds] [iRTT: 0.043521908 seconds] Frame 298: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.056428404 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.056428404 seconds [Time delta from previous captured frame: 0.000075329 seconds] [Time delta from previous displayed frame: 0.000075329 seconds] [Time since reference or first frame: 13.258859551 seconds] Frame Number: 298 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x89ee (35310) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x2090 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 2921, Ack: 226, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 2921 (relative sequence number) [Next sequence number: 4373 (relative sequence number)] Acknowledgment number: 226 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 4581 [Calculated window size: 4581] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x098a [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 1452] TCP segment data (1452 bytes) Frame 299: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.056473922 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.056473922 seconds [Time delta from previous captured frame: 0.000045518 seconds] [Time delta from previous displayed frame: 0.000045518 seconds] [Time since reference or first frame: 13.258905069 seconds] Frame Number: 299 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd495 (54421) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e95 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 226, Ack: 4373, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 226 (relative sequence number) Acknowledgment number: 4373 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 37752 [Calculated window size: 37752] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 298] [The RTT to ACK the segment was: 0.000045518 seconds] [iRTT: 0.043521908 seconds] Frame 304: 623 bytes on wire (4984 bits), 623 bytes captured (4984 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.099595535 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.099595535 seconds [Time delta from previous captured frame: 0.026329321 seconds] [Time delta from previous displayed frame: 0.043121613 seconds] [Time since reference or first frame: 13.302026682 seconds] Frame Number: 304 Frame Length: 623 bytes (4984 bits) Capture Length: 623 bytes (4984 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame [truncated]: sll:ethertype:ip:tcp:ssl:pkcs-1:x509sat:x509sat:x509sat:x509sat:x509sat:x509sat:x509sat:x509sat:x509sat:x509sat:x509sat:x509sat:x509sat:x509sat:x509sat:pkcs-1:x509ce:x509ce:x509ce:x509ce:x509ce:x509ce:pkix1e] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 607 Identification: 0xb3ee (46062) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xfa04 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 4373, Ack: 226, Len: 567 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 567] Sequence number: 4373 (relative sequence number) [Next sequence number: 4940 (relative sequence number)] Acknowledgment number: 226 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 4581 [Calculated window size: 4581] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc183 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 567] [Bytes sent since last PSH flag: 567] TCP segment data (567 bytes) [4 Reassembled TCP Segments (4939 bytes): #294(1460), #296(1460), #298(1452), #304(567)] [Frame: 294, payload: 0-1459 (1460 bytes)] [Frame: 296, payload: 1460-2919 (1460 bytes)] [Frame: 298, payload: 2920-4371 (1452 bytes)] [Frame: 304, payload: 4372-4938 (567 bytes)] [Segment count: 4] [Reassembled TCP length: 4939] [Reassembled TCP Data: 16030313460200004d03035832ccabf00a02a13cb45aba95...] Secure Sockets Layer TLSv1.2 Record Layer: Handshake Protocol: Multiple Handshake Messages Content Type: Handshake (22) Version: TLS 1.2 (0x0303) Length: 4934 Handshake Protocol: Server Hello Handshake Type: Server Hello (2) Length: 77 Version: TLS 1.2 (0x0303) Random GMT Unix Time: Nov 21, 2016 11:30:03.000000000 CET Random Bytes: f00a02a13cb45aba958543894c7354f8bb244b73680fa8cc... Session ID Length: 32 Session ID: 9748000071aa8af20543211f1e27ce1f8db8f266609f4545... Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013) Compression Method: null (0) Extensions Length: 5 Extension: renegotiation_info Type: renegotiation_info (0xff01) Length: 1 Renegotiation Info extension Renegotiation info extension length: 0 Handshake Protocol: Certificate Handshake Type: Certificate (11) Length: 4512 Certificates Length: 4509 Certificates (4509 bytes) Certificate Length: 1546 Certificate: 30820606308204eea003020102021100b02dff62b3469d6c... (id-at-commonName=*.lon.liveperson.net,id-at-organizationalUnitName=PlatinumSSL Wildcard,id-at-organizationalUnitName=Hosted by LivePerson, Inc.,id-at-organizationalUnitName= signedCertificate version: v3 (2) serialNumber: 0x00b02dff62b3469d6c8449c5f52cec02c0 signature (sha256WithRSAEncryption) Algorithm Id: 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) issuer: rdnSequence (0) rdnSequence: 5 items (id-at-commonName=COMODO RSA Organization Validation Secure Serv,id-at-organizationName=COMODO CA Limited,id-at-localityName=Salford,id-at-stateOrProvinceName=Greater Manchester,id-at-countryName=GB) RDNSequence item: 1 item (id-at-countryName=GB) RelativeDistinguishedName item (id-at-countryName=GB) Id: 2.5.4.6 (id-at-countryName) CountryName: GB RDNSequence item: 1 item (id-at-stateOrProvinceName=Greater Manchester) RelativeDistinguishedName item (id-at-stateOrProvinceName=Greater Manchester) Id: 2.5.4.8 (id-at-stateOrProvinceName) DirectoryString: printableString (1) printableString: Greater Manchester RDNSequence item: 1 item (id-at-localityName=Salford) RelativeDistinguishedName item (id-at-localityName=Salford) Id: 2.5.4.7 (id-at-localityName) DirectoryString: printableString (1) printableString: Salford RDNSequence item: 1 item (id-at-organizationName=COMODO CA Limited) RelativeDistinguishedName item (id-at-organizationName=COMODO CA Limited) Id: 2.5.4.10 (id-at-organizationName) DirectoryString: printableString (1) printableString: COMODO CA Limited RDNSequence item: 1 item (id-at-commonName=COMODO RSA Organization Validation Secure Serv) RelativeDistinguishedName item (id-at-commonName=COMODO RSA Organization Validation Secure Server CA) Id: 2.5.4.3 (id-at-commonName) DirectoryString: printableString (1) printableString: COMODO RSA Organization Validation Secure Server CA validity notBefore: utcTime (0) utcTime: 15-08-17 00:00:00 (UTC) notAfter: utcTime (0) utcTime: 18-08-16 23:59:59 (UTC) subject: rdnSequence (0) rdnSequence: 10 items (id-at-commonName=*.lon.liveperson.net,id-at-organizationalUnitName=PlatinumSSL Wildcard,id-at-organizationalUnitName=Hosted by LivePerson, Inc.,id-at-organizationalUnitName=LivePerson, Inc.,id-at-organizationName=Liv RDNSequence item: 1 item (id-at-countryName=US) RelativeDistinguishedName item (id-at-countryName=US) Id: 2.5.4.6 (id-at-countryName) CountryName: US RDNSequence item: 1 item (id-at-postalCode=100007) RelativeDistinguishedName item (id-at-postalCode=100007) Id: 2.5.4.17 (id-at-postalCode) DirectoryString: printableString (1) printableString: 100007 RDNSequence item: 1 item (id-at-stateOrProvinceName=New York) RelativeDistinguishedName item (id-at-stateOrProvinceName=New York) Id: 2.5.4.8 (id-at-stateOrProvinceName) DirectoryString: printableString (1) printableString: New York RDNSequence item: 1 item (id-at-localityName=New York) RelativeDistinguishedName item (id-at-localityName=New York) Id: 2.5.4.7 (id-at-localityName) DirectoryString: printableString (1) printableString: New York RDNSequence item: 1 item (id-at-streetAddress=New York) RelativeDistinguishedName item (id-at-streetAddress=New York) Id: 2.5.4.9 (id-at-streetAddress) DirectoryString: printableString (1) printableString: New York RDNSequence item: 1 item (id-at-organizationName=LivePerson, Inc) RelativeDistinguishedName item (id-at-organizationName=LivePerson, Inc) Id: 2.5.4.10 (id-at-organizationName) DirectoryString: printableString (1) printableString: LivePerson, Inc RDNSequence item: 1 item (id-at-organizationalUnitName=LivePerson, Inc.) RelativeDistinguishedName item (id-at-organizationalUnitName=LivePerson, Inc.) Id: 2.5.4.11 (id-at-organizationalUnitName) DirectoryString: printableString (1) printableString: LivePerson, Inc. RDNSequence item: 1 item (id-at-organizationalUnitName=Hosted by LivePerson, Inc.) RelativeDistinguishedName item (id-at-organizationalUnitName=Hosted by LivePerson, Inc.) Id: 2.5.4.11 (id-at-organizationalUnitName) DirectoryString: printableString (1) printableString: Hosted by LivePerson, Inc. RDNSequence item: 1 item (id-at-organizationalUnitName=PlatinumSSL Wildcard) RelativeDistinguishedName item (id-at-organizationalUnitName=PlatinumSSL Wildcard) Id: 2.5.4.11 (id-at-organizationalUnitName) DirectoryString: printableString (1) printableString: PlatinumSSL Wildcard RDNSequence item: 1 item (id-at-commonName=*.lon.liveperson.net) RelativeDistinguishedName item (id-at-commonName=*.lon.liveperson.net) Id: 2.5.4.3 (id-at-commonName) DirectoryString: uTF8String (4) uTF8String: *.lon.liveperson.net subjectPublicKeyInfo algorithm (rsaEncryption) Algorithm Id: 1.2.840.113549.1.1.1 (rsaEncryption) subjectPublicKey: 3082010a028201010095966031b71f6f66836ebed987ff08... modulus: 0x0095966031b71f6f66836ebed987ff083e48dc10e30c060b... publicExponent: 65537 extensions: 9 items Extension (id-ce-authorityKeyIdentifier) Extension Id: 2.5.29.35 (id-ce-authorityKeyIdentifier) AuthorityKeyIdentifier keyIdentifier: 9af32bdacfad4fb62fbb2a48482a12b71b42c124 Extension (id-ce-subjectKeyIdentifier) Extension Id: 2.5.29.14 (id-ce-subjectKeyIdentifier) SubjectKeyIdentifier: 423534484acfd02d8e34e741494500f7cc426a18 Extension (id-ce-keyUsage) Extension Id: 2.5.29.15 (id-ce-keyUsage) critical: True Padding: 5 KeyUsage: a0 (digitalSignature, keyEncipherment) 1... .... = digitalSignature: True .0.. .... = contentCommitment: False ..1. .... = keyEncipherment: True ...0 .... = dataEncipherment: False .... 0... = keyAgreement: False .... .0.. = keyCertSign: False .... ..0. = cRLSign: False .... ...0 = encipherOnly: False 0... .... = decipherOnly: False Extension (id-ce-basicConstraints) Extension Id: 2.5.29.19 (id-ce-basicConstraints) critical: True BasicConstraintsSyntax [0 length] Extension (id-ce-extKeyUsage) Extension Id: 2.5.29.37 (id-ce-extKeyUsage) KeyPurposeIDs: 2 items KeyPurposeId: 1.3.6.1.5.5.7.3.1 (id-kp-serverAuth) KeyPurposeId: 1.3.6.1.5.5.7.3.2 (id-kp-clientAuth) Extension (id-ce-certificatePolicies) Extension Id: 2.5.29.32 (id-ce-certificatePolicies) CertificatePoliciesSyntax: 2 items PolicyInformation policyIdentifier: 1.3.6.1.4.1.6449.1.2.1.3.4 (iso.3.6.1.4.1.6449.1.2.1.3.4) policyQualifiers: 1 item PolicyQualifierInfo Id: 1.3.6.1.5.5.7.2.1 (id-qt-cps) DirectoryString: https://secure.comodo.com/CPS PolicyInformation policyIdentifier: 2.23.140.1.2.2 (joint-iso-itu-t.23.140.1.2.2) Extension (id-ce-cRLDistributionPoints) Extension Id: 2.5.29.31 (id-ce-cRLDistributionPoints) CRLDistPointsSyntax: 1 item DistributionPoint distributionPoint: fullName (0) fullName: 1 item GeneralName: uniformResourceIdentifier (6) uniformResourceIdentifier: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl Extension (id-pe-authorityInfoAccessSyntax) Extension Id: 1.3.6.1.5.5.7.1.1 (id-pe-authorityInfoAccessSyntax) AuthorityInfoAccessSyntax: 2 items AccessDescription accessMethod: 1.3.6.1.5.5.7.48.2 (id-pkix.48.2) accessLocation: 6 uniformResourceIdentifier: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt AccessDescription accessMethod: 1.3.6.1.5.5.7.48.1 (id-pkix.48.1) accessLocation: 6 uniformResourceIdentifier: http://ocsp.comodoca.com Extension (id-ce-subjectAltName) Extension Id: 2.5.29.17 (id-ce-subjectAltName) GeneralNames: 2 items GeneralName: dNSName (2) dNSName: *.lon.liveperson.net GeneralName: dNSName (2) dNSName: lon.liveperson.net algorithmIdentifier (sha256WithRSAEncryption) Algorithm Id: 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) Padding: 0 encrypted: 6a29cc00f584b0524b0ddfd26614b3e74dd8dc975ec61fae... Certificate Length: 1554 Certificate: 3082060e308203f6a003020102021036825e7fb5a481937e... (id-at-commonName=COMODO RSA Organization Validation Secure Serv,id-at-organizationName=COMODO CA Limited,id-at-localityName=Salford,id-at-stateOrProvinceName=Greater Manches signedCertificate version: v3 (2) serialNumber: 0x36825e7fb5a481937ef6d1736bb93ca6 signature (sha384WithRSAEncryption) Algorithm Id: 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) issuer: rdnSequence (0) rdnSequence: 5 items (id-at-commonName=COMODO RSA Certification Authority,id-at-organizationName=COMODO CA Limited,id-at-localityName=Salford,id-at-stateOrProvinceName=Greater Manchester,id-at-countryName=GB) RDNSequence item: 1 item (id-at-countryName=GB) RelativeDistinguishedName item (id-at-countryName=GB) Id: 2.5.4.6 (id-at-countryName) CountryName: GB RDNSequence item: 1 item (id-at-stateOrProvinceName=Greater Manchester) RelativeDistinguishedName item (id-at-stateOrProvinceName=Greater Manchester) Id: 2.5.4.8 (id-at-stateOrProvinceName) DirectoryString: printableString (1) printableString: Greater Manchester RDNSequence item: 1 item (id-at-localityName=Salford) RelativeDistinguishedName item (id-at-localityName=Salford) Id: 2.5.4.7 (id-at-localityName) DirectoryString: printableString (1) printableString: Salford RDNSequence item: 1 item (id-at-organizationName=COMODO CA Limited) RelativeDistinguishedName item (id-at-organizationName=COMODO CA Limited) Id: 2.5.4.10 (id-at-organizationName) DirectoryString: printableString (1) printableString: COMODO CA Limited RDNSequence item: 1 item (id-at-commonName=COMODO RSA Certification Authority) RelativeDistinguishedName item (id-at-commonName=COMODO RSA Certification Authority) Id: 2.5.4.3 (id-at-commonName) DirectoryString: printableString (1) printableString: COMODO RSA Certification Authority validity notBefore: utcTime (0) utcTime: 14-02-12 00:00:00 (UTC) notAfter: utcTime (0) utcTime: 29-02-11 23:59:59 (UTC) subject: rdnSequence (0) rdnSequence: 5 items (id-at-commonName=COMODO RSA Organization Validation Secure Serv,id-at-organizationName=COMODO CA Limited,id-at-localityName=Salford,id-at-stateOrProvinceName=Greater Manchester,id-at-countryName=GB) RDNSequence item: 1 item (id-at-countryName=GB) RelativeDistinguishedName item (id-at-countryName=GB) Id: 2.5.4.6 (id-at-countryName) CountryName: GB RDNSequence item: 1 item (id-at-stateOrProvinceName=Greater Manchester) RelativeDistinguishedName item (id-at-stateOrProvinceName=Greater Manchester) Id: 2.5.4.8 (id-at-stateOrProvinceName) DirectoryString: printableString (1) printableString: Greater Manchester RDNSequence item: 1 item (id-at-localityName=Salford) RelativeDistinguishedName item (id-at-localityName=Salford) Id: 2.5.4.7 (id-at-localityName) DirectoryString: printableString (1) printableString: Salford RDNSequence item: 1 item (id-at-organizationName=COMODO CA Limited) RelativeDistinguishedName item (id-at-organizationName=COMODO CA Limited) Id: 2.5.4.10 (id-at-organizationName) DirectoryString: printableString (1) printableString: COMODO CA Limited RDNSequence item: 1 item (id-at-commonName=COMODO RSA Organization Validation Secure Serv) RelativeDistinguishedName item (id-at-commonName=COMODO RSA Organization Validation Secure Server CA) Id: 2.5.4.3 (id-at-commonName) DirectoryString: printableString (1) printableString: COMODO RSA Organization Validation Secure Server CA subjectPublicKeyInfo algorithm (rsaEncryption) Algorithm Id: 1.2.840.113549.1.1.1 (rsaEncryption) subjectPublicKey: 3082010a0282010100b914d985f2414457ff30441edc3c44... modulus: 0x00b914d985f2414457ff30441edc3c44a317b86e01f8a35f... publicExponent: 65537 extensions: 8 items Extension (id-ce-authorityKeyIdentifier) Extension Id: 2.5.29.35 (id-ce-authorityKeyIdentifier) AuthorityKeyIdentifier keyIdentifier: bbaf7e023dfaa6f13c848eadee3898ecd93232d4 Extension (id-ce-subjectKeyIdentifier) Extension Id: 2.5.29.14 (id-ce-subjectKeyIdentifier) SubjectKeyIdentifier: 9af32bdacfad4fb62fbb2a48482a12b71b42c124 Extension (id-ce-keyUsage) Extension Id: 2.5.29.15 (id-ce-keyUsage) critical: True Padding: 1 KeyUsage: 86 (digitalSignature, keyCertSign, cRLSign) 1... .... = digitalSignature: True .0.. .... = contentCommitment: False ..0. .... = keyEncipherment: False ...0 .... = dataEncipherment: False .... 0... = keyAgreement: False .... .1.. = keyCertSign: True .... ..1. = cRLSign: True .... ...0 = encipherOnly: False 0... .... = decipherOnly: False Extension (id-ce-basicConstraints) Extension Id: 2.5.29.19 (id-ce-basicConstraints) critical: True BasicConstraintsSyntax cA: True pathLenConstraint: 0 Extension (id-ce-extKeyUsage) Extension Id: 2.5.29.37 (id-ce-extKeyUsage) KeyPurposeIDs: 2 items KeyPurposeId: 1.3.6.1.5.5.7.3.1 (id-kp-serverAuth) KeyPurposeId: 1.3.6.1.5.5.7.3.2 (id-kp-clientAuth) Extension (id-ce-certificatePolicies) Extension Id: 2.5.29.32 (id-ce-certificatePolicies) CertificatePoliciesSyntax: 2 items PolicyInformation policyIdentifier: 2.5.29.32.0 (id-ce-certificatePolicies.0) PolicyInformation policyIdentifier: 2.23.140.1.2.2 (joint-iso-itu-t.23.140.1.2.2) Extension (id-ce-cRLDistributionPoints) Extension Id: 2.5.29.31 (id-ce-cRLDistributionPoints) CRLDistPointsSyntax: 1 item DistributionPoint distributionPoint: fullName (0) fullName: 1 item GeneralName: uniformResourceIdentifier (6) uniformResourceIdentifier: http://crl.comodoca.com/COMODORSACertificationAuthority.crl Extension (id-pe-authorityInfoAccessSyntax) Extension Id: 1.3.6.1.5.5.7.1.1 (id-pe-authorityInfoAccessSyntax) AuthorityInfoAccessSyntax: 2 items AccessDescription accessMethod: 1.3.6.1.5.5.7.48.2 (id-pkix.48.2) accessLocation: 6 uniformResourceIdentifier: http://crt.comodoca.com/COMODORSAAddTrustCA.crt AccessDescription accessMethod: 1.3.6.1.5.5.7.48.1 (id-pkix.48.1) accessLocation: 6 uniformResourceIdentifier: http://ocsp.comodoca.com algorithmIdentifier (sha384WithRSAEncryption) Algorithm Id: 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) Padding: 0 encrypted: 698a36689a1e3b650be07ccfa6ab713baf61a43fe4640149... Certificate Length: 1400 Certificate: 308205743082045ca00302010202102766ee56eb49f38eab... (id-at-commonName=COMODO RSA Certification Authority,id-at-organizationName=COMODO CA Limited,id-at-localityName=Salford,id-at-stateOrProvinceName=Greater Manchester,id-at-co signedCertificate version: v3 (2) serialNumber: 0x2766ee56eb49f38eabd770a2fc84de22 signature (sha384WithRSAEncryption) Algorithm Id: 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) issuer: rdnSequence (0) rdnSequence: 4 items (id-at-commonName=AddTrust External CA Root,id-at-organizationalUnitName=AddTrust External TTP Network,id-at-organizationName=AddTrust AB,id-at-countryName=SE) RDNSequence item: 1 item (id-at-countryName=SE) RelativeDistinguishedName item (id-at-countryName=SE) Id: 2.5.4.6 (id-at-countryName) CountryName: SE RDNSequence item: 1 item (id-at-organizationName=AddTrust AB) RelativeDistinguishedName item (id-at-organizationName=AddTrust AB) Id: 2.5.4.10 (id-at-organizationName) DirectoryString: printableString (1) printableString: AddTrust AB RDNSequence item: 1 item (id-at-organizationalUnitName=AddTrust External TTP Network) RelativeDistinguishedName item (id-at-organizationalUnitName=AddTrust External TTP Network) Id: 2.5.4.11 (id-at-organizationalUnitName) DirectoryString: printableString (1) printableString: AddTrust External TTP Network RDNSequence item: 1 item (id-at-commonName=AddTrust External CA Root) RelativeDistinguishedName item (id-at-commonName=AddTrust External CA Root) Id: 2.5.4.3 (id-at-commonName) DirectoryString: printableString (1) printableString: AddTrust External CA Root validity notBefore: utcTime (0) utcTime: 00-05-30 10:48:38 (UTC) notAfter: utcTime (0) utcTime: 20-05-30 10:48:38 (UTC) subject: rdnSequence (0) rdnSequence: 5 items (id-at-commonName=COMODO RSA Certification Authority,id-at-organizationName=COMODO CA Limited,id-at-localityName=Salford,id-at-stateOrProvinceName=Greater Manchester,id-at-countryName=GB) RDNSequence item: 1 item (id-at-countryName=GB) RelativeDistinguishedName item (id-at-countryName=GB) Id: 2.5.4.6 (id-at-countryName) CountryName: GB RDNSequence item: 1 item (id-at-stateOrProvinceName=Greater Manchester) RelativeDistinguishedName item (id-at-stateOrProvinceName=Greater Manchester) Id: 2.5.4.8 (id-at-stateOrProvinceName) DirectoryString: printableString (1) printableString: Greater Manchester RDNSequence item: 1 item (id-at-localityName=Salford) RelativeDistinguishedName item (id-at-localityName=Salford) Id: 2.5.4.7 (id-at-localityName) DirectoryString: printableString (1) printableString: Salford RDNSequence item: 1 item (id-at-organizationName=COMODO CA Limited) RelativeDistinguishedName item (id-at-organizationName=COMODO CA Limited) Id: 2.5.4.10 (id-at-organizationName) DirectoryString: printableString (1) printableString: COMODO CA Limited RDNSequence item: 1 item (id-at-commonName=COMODO RSA Certification Authority) RelativeDistinguishedName item (id-at-commonName=COMODO RSA Certification Authority) Id: 2.5.4.3 (id-at-commonName) DirectoryString: printableString (1) printableString: COMODO RSA Certification Authority subjectPublicKeyInfo algorithm (rsaEncryption) Algorithm Id: 1.2.840.113549.1.1.1 (rsaEncryption) subjectPublicKey: 3082020a028202010091e85492d20a56b1ac0d24ddc5cf44... modulus: 0x0091e85492d20a56b1ac0d24ddc5cf446774992b37a37d23... publicExponent: 65537 extensions: 7 items Extension (id-ce-authorityKeyIdentifier) Extension Id: 2.5.29.35 (id-ce-authorityKeyIdentifier) AuthorityKeyIdentifier keyIdentifier: adbd987a34b426f7fac42654ef03bde024cb541a Extension (id-ce-subjectKeyIdentifier) Extension Id: 2.5.29.14 (id-ce-subjectKeyIdentifier) SubjectKeyIdentifier: bbaf7e023dfaa6f13c848eadee3898ecd93232d4 Extension (id-ce-keyUsage) Extension Id: 2.5.29.15 (id-ce-keyUsage) critical: True Padding: 1 KeyUsage: 86 (digitalSignature, keyCertSign, cRLSign) 1... .... = digitalSignature: True .0.. .... = contentCommitment: False ..0. .... = keyEncipherment: False ...0 .... = dataEncipherment: False .... 0... = keyAgreement: False .... .1.. = keyCertSign: True .... ..1. = cRLSign: True .... ...0 = encipherOnly: False 0... .... = decipherOnly: False Extension (id-ce-basicConstraints) Extension Id: 2.5.29.19 (id-ce-basicConstraints) critical: True BasicConstraintsSyntax cA: True Extension (id-ce-certificatePolicies) Extension Id: 2.5.29.32 (id-ce-certificatePolicies) CertificatePoliciesSyntax: 1 item PolicyInformation policyIdentifier: 2.5.29.32.0 (id-ce-certificatePolicies.0) Extension (id-ce-cRLDistributionPoints) Extension Id: 2.5.29.31 (id-ce-cRLDistributionPoints) CRLDistPointsSyntax: 1 item DistributionPoint distributionPoint: fullName (0) fullName: 1 item GeneralName: uniformResourceIdentifier (6) uniformResourceIdentifier: http://crl.usertrust.com/AddTrustExternalCARoot.crl Extension (id-pe-authorityInfoAccessSyntax) Extension Id: 1.3.6.1.5.5.7.1.1 (id-pe-authorityInfoAccessSyntax) AuthorityInfoAccessSyntax: 1 item AccessDescription accessMethod: 1.3.6.1.5.5.7.48.1 (id-pkix.48.1) accessLocation: 6 uniformResourceIdentifier: http://ocsp.usertrust.com algorithmIdentifier (sha384WithRSAEncryption) Algorithm Id: 1.2.840.113549.1.1.12 (sha384WithRSAEncryption) Padding: 0 encrypted: 64bf83f15f9a85d0cdb8a129570de85af7d1e93ef276046e... Handshake Protocol: Server Key Exchange Handshake Type: Server Key Exchange (12) Length: 329 EC Diffie-Hellman Server Params Curve Type: named_curve (0x03) Named Curve: secp256r1 (0x0017) Pubkey Length: 65 Pubkey: 04f423bec0e8010aa93b3db18f4070591df93ab9beef902d... Signature Hash Algorithm: 0x0201 Signature Hash Algorithm Hash: SHA1 (2) Signature Hash Algorithm Signature: RSA (1) Signature Length: 256 Signature: 584168eaec3d60d17a5e5efba13e954452254e302b11ec35... Handshake Protocol: Server Hello Done Handshake Type: Server Hello Done (14) Length: 0 Frame 305: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.099661848 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.099661848 seconds [Time delta from previous captured frame: 0.000066313 seconds] [Time delta from previous displayed frame: 0.000066313 seconds] [Time since reference or first frame: 13.302092995 seconds] Frame Number: 305 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd496 (54422) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e94 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 226, Ack: 4940, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 226 (relative sequence number) Acknowledgment number: 4940 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 40656 [Calculated window size: 40656] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 304] [The RTT to ACK the segment was: 0.000066313 seconds] [iRTT: 0.043521908 seconds] Frame 306: 206 bytes on wire (1648 bits), 206 bytes captured (1648 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.104545416 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.104545416 seconds [Time delta from previous captured frame: 0.004883568 seconds] [Time delta from previous displayed frame: 0.004883568 seconds] [Time since reference or first frame: 13.306976563 seconds] Frame Number: 306 Frame Length: 206 bytes (1648 bits) Capture Length: 206 bytes (1648 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 190 Identification: 0xd497 (54423) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8dfd [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 226, Ack: 4940, Len: 150 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 150] Sequence number: 226 (relative sequence number) [Next sequence number: 376 (relative sequence number)] Acknowledgment number: 4940 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 40656 [Calculated window size: 40656] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd855 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 150] [Bytes sent since last PSH flag: 150] Secure Sockets Layer TLSv1.2 Record Layer: Handshake Protocol: Client Key Exchange Content Type: Handshake (22) Version: TLS 1.2 (0x0303) Length: 70 Handshake Protocol: Client Key Exchange Handshake Type: Client Key Exchange (16) Length: 66 EC Diffie-Hellman Client Params Pubkey Length: 65 Pubkey: 04e4a2770160d4b880cfda324652426cf1570269ea77b11b... TLSv1.2 Record Layer: Change Cipher Spec Protocol: Change Cipher Spec Content Type: Change Cipher Spec (20) Version: TLS 1.2 (0x0303) Length: 1 Change Cipher Spec Message TLSv1.2 Record Layer: Handshake Protocol: Finished Content Type: Handshake (22) Version: TLS 1.2 (0x0303) Length: 64 Handshake Protocol: Finished Handshake Type: Finished (20) Length: 12 Verify Data Frame 316: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.147605116 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.147605116 seconds [Time delta from previous captured frame: 0.011235197 seconds] [Time delta from previous displayed frame: 0.043059700 seconds] [Time since reference or first frame: 13.350036263 seconds] Frame Number: 316 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 41f4dd35 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xdf25 (57125) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xd104 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 4940, Ack: 376, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4940 (relative sequence number) Acknowledgment number: 376 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 4731 [Calculated window size: 4731] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc7f5 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 306] [The RTT to ACK the segment was: 0.043059700 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 45839 Src Port: 45839 Frame 317: 131 bytes on wire (1048 bits), 131 bytes captured (1048 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.152821104 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.152821104 seconds [Time delta from previous captured frame: 0.005215988 seconds] [Time delta from previous displayed frame: 0.005215988 seconds] [Time since reference or first frame: 13.355252251 seconds] Frame Number: 317 Frame Length: 131 bytes (1048 bits) Capture Length: 131 bytes (1048 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 115 Identification: 0xe418 (58392) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xcbc6 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 4940, Ack: 376, Len: 75 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 75] Sequence number: 4940 (relative sequence number) [Next sequence number: 5015 (relative sequence number)] Acknowledgment number: 376 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 4731 [Calculated window size: 4731] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf324 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 75] [Bytes sent since last PSH flag: 75] Secure Sockets Layer TLSv1.2 Record Layer: Change Cipher Spec Protocol: Change Cipher Spec Content Type: Change Cipher Spec (20) Version: TLS 1.2 (0x0303) Length: 1 Change Cipher Spec Message TLSv1.2 Record Layer: Handshake Protocol: Finished Content Type: Handshake (22) Version: TLS 1.2 (0x0303) Length: 64 Handshake Protocol: Finished Handshake Type: Finished (20) Length: 12 Verify Data Frame 318: 701 bytes on wire (5608 bits), 701 bytes captured (5608 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.153462751 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.153462751 seconds [Time delta from previous captured frame: 0.000641647 seconds] [Time delta from previous displayed frame: 0.000641647 seconds] [Time since reference or first frame: 13.355893898 seconds] Frame Number: 318 Frame Length: 701 bytes (5608 bits) Capture Length: 701 bytes (5608 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 685 Identification: 0xd498 (54424) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8c0d [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 376, Ack: 5015, Len: 645 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 645] Sequence number: 376 (relative sequence number) [Next sequence number: 1021 (relative sequence number)] Acknowledgment number: 5015 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 40656 [Calculated window size: 40656] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xda44 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 317] [The RTT to ACK the segment was: 0.000641647 seconds] [iRTT: 0.043521908 seconds] [Bytes in flight: 645] [Bytes sent since last PSH flag: 645] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 640 Encrypted Application Data: 14499449c9ca51e7d620f91f49342a8dafc8177aeea76c48... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=087079991179-080504397088&protV=20&lpjson=1&id=7763280453&javaSupport=false&visitorSta [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=087079991179-080504397088&protV=20&lpjson=1&id=7763280453] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=087079991179-080504397088&protV=20&lpjson=1&id=7763280453&javaSupport=false&visitorStatus=INSITE_S] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=087079991179-080504397088&protV=20&lpjson=1&id=7763280453&javaSupport=false&v Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=087079991179-080504397088&protV=20&lpjson=1&id=7763280453&javaSupport=false&visitorSt Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagKnockPage Request URI Query Parameter: lpCallId=087079991179-080504397088 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: id=7763280453 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: dbut=chat-csc-portal-croatian%7ClpMTagConfig.db1%7ClpButtonDiv-csc-portal%7C Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=087079991179-080504397088&protV=20&lpjs] [HTTP request 1/1] Frame 323: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.197162228 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.197162228 seconds [Time delta from previous captured frame: 0.010061688 seconds] [Time delta from previous displayed frame: 0.043699477 seconds] [Time since reference or first frame: 13.399593375 seconds] Frame Number: 323 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 5f4dd4c9 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x0d8e (3470) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xa29c [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 5015, Ack: 1021, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 5015 (relative sequence number) Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc2a0 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 318] [The RTT to ACK the segment was: 0.043699477 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 65535 Src Port: 65535 Frame 324: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.218063105 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.218063105 seconds [Time delta from previous captured frame: 0.020900877 seconds] [Time delta from previous displayed frame: 0.020900877 seconds] [Time since reference or first frame: 13.420494252 seconds] Frame Number: 324 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x21ba (8634) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x88bc [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 5015, Ack: 1021, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 5015 (relative sequence number) [Next sequence number: 6475 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Secure Sockets Layer Frame 325: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.218162681 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.218162681 seconds [Time delta from previous captured frame: 0.000099576 seconds] [Time delta from previous displayed frame: 0.000099576 seconds] [Time since reference or first frame: 13.420593828 seconds] Frame Number: 325 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd499 (54425) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e91 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 6475, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 6475 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 43560 [Calculated window size: 43560] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 324] [The RTT to ACK the segment was: 0.000099576 seconds] [iRTT: 0.043521908 seconds] Frame 326: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.218191151 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.218191151 seconds [Time delta from previous captured frame: 0.000028470 seconds] [Time delta from previous displayed frame: 0.000028470 seconds] [Time since reference or first frame: 13.420622298 seconds] Frame Number: 326 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x21bd (8637) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x88b9 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 6475, Ack: 1021, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 6475 (relative sequence number) [Next sequence number: 7935 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 327: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.218240880 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.218240880 seconds [Time delta from previous captured frame: 0.000049729 seconds] [Time delta from previous displayed frame: 0.000049729 seconds] [Time since reference or first frame: 13.420672027 seconds] Frame Number: 327 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd49a (54426) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e90 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 7935, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 7935 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 46464 [Calculated window size: 46464] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 326] [The RTT to ACK the segment was: 0.000049729 seconds] [iRTT: 0.043521908 seconds] Frame 328: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.218309943 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.218309943 seconds [Time delta from previous captured frame: 0.000069063 seconds] [Time delta from previous displayed frame: 0.000069063 seconds] [Time since reference or first frame: 13.420741090 seconds] Frame Number: 328 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x21bf (8639) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x88b7 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 7935, Ack: 1021, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 7935 (relative sequence number) [Next sequence number: 9395 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 329: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.218357521 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.218357521 seconds [Time delta from previous captured frame: 0.000047578 seconds] [Time delta from previous displayed frame: 0.000047578 seconds] [Time since reference or first frame: 13.420788668 seconds] Frame Number: 329 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd49b (54427) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e8f [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 9395, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 9395 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 49368 [Calculated window size: 49368] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 328] [The RTT to ACK the segment was: 0.000047578 seconds] [iRTT: 0.043521908 seconds] Frame 330: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.218437727 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.218437727 seconds [Time delta from previous captured frame: 0.000080206 seconds] [Time delta from previous displayed frame: 0.000080206 seconds] [Time since reference or first frame: 13.420868874 seconds] Frame Number: 330 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x21c2 (8642) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x88b4 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 9395, Ack: 1021, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 9395 (relative sequence number) [Next sequence number: 10855 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 331: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.218484798 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.218484798 seconds [Time delta from previous captured frame: 0.000047071 seconds] [Time delta from previous displayed frame: 0.000047071 seconds] [Time since reference or first frame: 13.420915945 seconds] Frame Number: 331 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd49c (54428) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e8e [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 10855, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 10855 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 52272 [Calculated window size: 52272] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 330] [The RTT to ACK the segment was: 0.000047071 seconds] [iRTT: 0.043521908 seconds] Frame 332: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.218567402 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.218567402 seconds [Time delta from previous captured frame: 0.000082604 seconds] [Time delta from previous displayed frame: 0.000082604 seconds] [Time since reference or first frame: 13.420998549 seconds] Frame Number: 332 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x21c4 (8644) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x88b2 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 10855, Ack: 1021, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 10855 (relative sequence number) [Next sequence number: 12315 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 333: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.218614449 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.218614449 seconds [Time delta from previous captured frame: 0.000047047 seconds] [Time delta from previous displayed frame: 0.000047047 seconds] [Time since reference or first frame: 13.421045596 seconds] Frame Number: 333 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd49d (54429) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e8d [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 12315, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 12315 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 55176 [Calculated window size: 55176] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 332] [The RTT to ACK the segment was: 0.000047047 seconds] [iRTT: 0.043521908 seconds] Frame 334: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.218693571 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.218693571 seconds [Time delta from previous captured frame: 0.000079122 seconds] [Time delta from previous displayed frame: 0.000079122 seconds] [Time since reference or first frame: 13.421124718 seconds] Frame Number: 334 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x21d7 (8663) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x88a7 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 12315, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 12315 (relative sequence number) [Next sequence number: 13767 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x74cd [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 1452] TCP segment data (1452 bytes) Frame 336: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.259671134 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.259671134 seconds [Time delta from previous captured frame: 0.029490087 seconds] [Time delta from previous displayed frame: 0.040977563 seconds] [Time since reference or first frame: 13.462102281 seconds] Frame Number: 336 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd49e (54430) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e8c [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 13767, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 13767 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 58080 [Calculated window size: 58080] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 334] [The RTT to ACK the segment was: 0.040977563 seconds] [iRTT: 0.043521908 seconds] Frame 337: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.261076192 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.261076192 seconds [Time delta from previous captured frame: 0.001405058 seconds] [Time delta from previous displayed frame: 0.001405058 seconds] [Time since reference or first frame: 13.463507339 seconds] Frame Number: 337 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x491a (18714) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x6164 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 13767, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 13767 (relative sequence number) [Next sequence number: 15219 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xebb4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 1452] TCP segment data (1452 bytes) Frame 338: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.261185384 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.261185384 seconds [Time delta from previous captured frame: 0.000109192 seconds] [Time delta from previous displayed frame: 0.000109192 seconds] [Time since reference or first frame: 13.463616531 seconds] Frame Number: 338 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd49f (54431) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e8b [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 15219, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 15219 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 60984 [Calculated window size: 60984] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 337] [The RTT to ACK the segment was: 0.000109192 seconds] [iRTT: 0.043521908 seconds] Frame 339: 2151 bytes on wire (17208 bits), 2151 bytes captured (17208 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.261871989 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.261871989 seconds [Time delta from previous captured frame: 0.000686605 seconds] [Time delta from previous displayed frame: 0.000686605 seconds] [Time since reference or first frame: 13.464303136 seconds] Frame Number: 339 Frame Length: 2151 bytes (17208 bits) Capture Length: 2151 bytes (17208 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 2135 Identification: 0x491b (18715) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x5ee0 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 15219, Ack: 1021, Len: 2095 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 2095] Sequence number: 15219 (relative sequence number) [Next sequence number: 17314 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdfee [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 2095] [Bytes sent since last PSH flag: 3547] TCP segment data (2095 bytes) Frame 340: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.261931634 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.261931634 seconds [Time delta from previous captured frame: 0.000059645 seconds] [Time delta from previous displayed frame: 0.000059645 seconds] [Time since reference or first frame: 13.464362781 seconds] Frame Number: 340 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4a0 (54432) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e8a [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 17314, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 17314 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 339] [The RTT to ACK the segment was: 0.000059645 seconds] [iRTT: 0.043521908 seconds] Frame 341: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.262043292 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.262043292 seconds [Time delta from previous captured frame: 0.000111658 seconds] [Time delta from previous displayed frame: 0.000111658 seconds] [Time since reference or first frame: 13.464474439 seconds] Frame Number: 341 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x493d (18749) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x6141 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 17314, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 17314 (relative sequence number) [Next sequence number: 18766 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2556 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 1452] TCP segment data (1452 bytes) Frame 342: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.262095162 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.262095162 seconds [Time delta from previous captured frame: 0.000051870 seconds] [Time delta from previous displayed frame: 0.000051870 seconds] [Time since reference or first frame: 13.464526309 seconds] Frame Number: 342 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4a1 (54433) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e89 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 18766, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 18766 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 341] [The RTT to ACK the segment was: 0.000051870 seconds] [iRTT: 0.043521908 seconds] Frame 343: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.262134385 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.262134385 seconds [Time delta from previous captured frame: 0.000039223 seconds] [Time delta from previous displayed frame: 0.000039223 seconds] [Time since reference or first frame: 13.464565532 seconds] Frame Number: 343 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x493e (18750) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x6140 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 18766, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 18766 (relative sequence number) [Next sequence number: 20218 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x45aa [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 2904] TCP segment data (1452 bytes) Frame 344: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.262186144 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.262186144 seconds [Time delta from previous captured frame: 0.000051759 seconds] [Time delta from previous displayed frame: 0.000051759 seconds] [Time since reference or first frame: 13.464617291 seconds] Frame Number: 344 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4a2 (54434) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e88 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 20218, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 20218 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 343] [The RTT to ACK the segment was: 0.000051759 seconds] [iRTT: 0.043521908 seconds] Frame 345: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.262287255 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.262287255 seconds [Time delta from previous captured frame: 0.000101111 seconds] [Time delta from previous displayed frame: 0.000101111 seconds] [Time since reference or first frame: 13.464718402 seconds] Frame Number: 345 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:ssl] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x4950 (18768) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x612e [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 20218, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 20218 (relative sequence number) [Next sequence number: 21670 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd81b [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 1452] TCP segment data (1234 bytes) TCP segment data (218 bytes) [11 Reassembled TCP Segments (16437 bytes): #324(1460), #326(1460), #328(1460), #330(1460), #332(1460), #334(1452), #337(1452), #339(2095), #341(1452), #343(1452), #345(1234)] [Frame: 324, payload: 0-1459 (1460 bytes)] [Frame: 326, payload: 1460-2919 (1460 bytes)] [Frame: 328, payload: 2920-4379 (1460 bytes)] [Frame: 330, payload: 4380-5839 (1460 bytes)] [Frame: 332, payload: 5840-7299 (1460 bytes)] [Frame: 334, payload: 7300-8751 (1452 bytes)] [Frame: 337, payload: 8752-10203 (1452 bytes)] [Frame: 339, payload: 10204-12298 (2095 bytes)] [Frame: 341, payload: 12299-13750 (1452 bytes)] [Frame: 343, payload: 13751-15202 (1452 bytes)] [Frame: 345, payload: 15203-16436 (1234 bytes)] [Segment count: 11] [Reassembled TCP length: 16437] [Reassembled TCP Data: 17030340309d7b80f320eb355e6861d9f68b5b8e6d6f9d3d...] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 16432 Encrypted Application Data: 9d7b80f320eb355e6861d9f68b5b8e6d6f9d3d777a29a419... SSL segment data (16384 bytes) Secure Sockets Layer Frame 346: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.262331436 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.262331436 seconds [Time delta from previous captured frame: 0.000044181 seconds] [Time delta from previous displayed frame: 0.000044181 seconds] [Time since reference or first frame: 13.464762583 seconds] Frame Number: 346 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4a3 (54435) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e87 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 21670, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 21670 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 345] [The RTT to ACK the segment was: 0.000044181 seconds] [iRTT: 0.043521908 seconds] Frame 347: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.262358136 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.262358136 seconds [Time delta from previous captured frame: 0.000026700 seconds] [Time delta from previous displayed frame: 0.000026700 seconds] [Time since reference or first frame: 13.464789283 seconds] Frame Number: 347 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x4951 (18769) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x612d [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 21670, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 21670 (relative sequence number) [Next sequence number: 23122 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x30be [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 2904] TCP segment data (1452 bytes) Frame 348: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.262397341 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.262397341 seconds [Time delta from previous captured frame: 0.000039205 seconds] [Time delta from previous displayed frame: 0.000039205 seconds] [Time since reference or first frame: 13.464828488 seconds] Frame Number: 348 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4a4 (54436) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e86 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 23122, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 23122 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 347] [The RTT to ACK the segment was: 0.000039205 seconds] [iRTT: 0.043521908 seconds] Frame 349: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.262551606 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.262551606 seconds [Time delta from previous captured frame: 0.000154265 seconds] [Time delta from previous displayed frame: 0.000154265 seconds] [Time since reference or first frame: 13.464982753 seconds] Frame Number: 349 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x4952 (18770) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x612c [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 23122, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 23122 (relative sequence number) [Next sequence number: 24574 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4fd2 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 1452] TCP segment data (1452 bytes) Frame 350: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.262600276 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.262600276 seconds [Time delta from previous captured frame: 0.000048670 seconds] [Time delta from previous displayed frame: 0.000048670 seconds] [Time since reference or first frame: 13.465031423 seconds] Frame Number: 350 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4a5 (54437) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e85 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 24574, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 24574 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 349] [The RTT to ACK the segment was: 0.000048670 seconds] [iRTT: 0.043521908 seconds] Frame 351: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.262622164 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.262622164 seconds [Time delta from previous captured frame: 0.000021888 seconds] [Time delta from previous displayed frame: 0.000021888 seconds] [Time since reference or first frame: 13.465053311 seconds] Frame Number: 351 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x4953 (18771) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x612b [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 24574, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 24574 (relative sequence number) [Next sequence number: 26026 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xbe32 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 2904] TCP segment data (1452 bytes) Frame 352: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.262663565 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.262663565 seconds [Time delta from previous captured frame: 0.000041401 seconds] [Time delta from previous displayed frame: 0.000041401 seconds] [Time since reference or first frame: 13.465094712 seconds] Frame Number: 352 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4a6 (54438) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e84 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 26026, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 26026 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 351] [The RTT to ACK the segment was: 0.000041401 seconds] [iRTT: 0.043521908 seconds] Frame 353: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.262775391 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.262775391 seconds [Time delta from previous captured frame: 0.000111826 seconds] [Time delta from previous displayed frame: 0.000111826 seconds] [Time since reference or first frame: 13.465206538 seconds] Frame Number: 353 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x4981 (18817) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x60fd [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 26026, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 26026 (relative sequence number) [Next sequence number: 27478 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2c17 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 1452] TCP segment data (1452 bytes) Frame 354: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.262819931 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.262819931 seconds [Time delta from previous captured frame: 0.000044540 seconds] [Time delta from previous displayed frame: 0.000044540 seconds] [Time since reference or first frame: 13.465251078 seconds] Frame Number: 354 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4a7 (54439) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e83 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 27478, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 27478 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 353] [The RTT to ACK the segment was: 0.000044540 seconds] [iRTT: 0.043521908 seconds] Frame 355: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.262840285 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.262840285 seconds [Time delta from previous captured frame: 0.000020354 seconds] [Time delta from previous displayed frame: 0.000020354 seconds] [Time since reference or first frame: 13.465271432 seconds] Frame Number: 355 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x4982 (18818) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x60fc [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 27478, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 27478 (relative sequence number) [Next sequence number: 28930 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x88ad [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 2904] TCP segment data (1452 bytes) Frame 356: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.262879853 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.262879853 seconds [Time delta from previous captured frame: 0.000039568 seconds] [Time delta from previous displayed frame: 0.000039568 seconds] [Time since reference or first frame: 13.465311000 seconds] Frame Number: 356 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4a8 (54440) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e82 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 28930, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 28930 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 355] [The RTT to ACK the segment was: 0.000039568 seconds] [iRTT: 0.043521908 seconds] Frame 358: 2960 bytes on wire (23680 bits), 2960 bytes captured (23680 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.302596529 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.302596529 seconds [Time delta from previous captured frame: 0.023186714 seconds] [Time delta from previous displayed frame: 0.039716676 seconds] [Time since reference or first frame: 13.505027676 seconds] Frame Number: 358 Frame Length: 2960 bytes (23680 bits) Capture Length: 2960 bytes (23680 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 2944 Identification: 0x6f59 (28505) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x3579 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 28930, Ack: 1021, Len: 2904 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 2904] Sequence number: 28930 (relative sequence number) [Next sequence number: 31834 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe317 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 2904] [Bytes sent since last PSH flag: 2904] TCP segment data (2904 bytes) Frame 359: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.302706148 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.302706148 seconds [Time delta from previous captured frame: 0.000109619 seconds] [Time delta from previous displayed frame: 0.000109619 seconds] [Time since reference or first frame: 13.505137295 seconds] Frame Number: 359 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4a9 (54441) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e81 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 31834, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 31834 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 358] [The RTT to ACK the segment was: 0.000109619 seconds] [iRTT: 0.043521908 seconds] Frame 360: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.304760151 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.304760151 seconds [Time delta from previous captured frame: 0.002054003 seconds] [Time delta from previous displayed frame: 0.002054003 seconds] [Time since reference or first frame: 13.507191298 seconds] Frame Number: 360 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x70f1 (28913) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x398d [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 31834, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 31834 (relative sequence number) [Next sequence number: 33286 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xfafc [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 1452] TCP segment data (1452 bytes) Frame 361: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.304803645 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.304803645 seconds [Time delta from previous captured frame: 0.000043494 seconds] [Time delta from previous displayed frame: 0.000043494 seconds] [Time since reference or first frame: 13.507234792 seconds] Frame Number: 361 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x70f2 (28914) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x398c [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 33286, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 33286 (relative sequence number) [Next sequence number: 34738 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5474 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 2904] [Bytes sent since last PSH flag: 2904] TCP segment data (1452 bytes) Frame 362: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.304825977 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.304825977 seconds [Time delta from previous captured frame: 0.000022332 seconds] [Time delta from previous displayed frame: 0.000022332 seconds] [Time since reference or first frame: 13.507257124 seconds] Frame Number: 362 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4aa (54442) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e80 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 34738, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 34738 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 361] [The RTT to ACK the segment was: 0.000022332 seconds] [iRTT: 0.043521908 seconds] Frame 363: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.305005515 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.305005515 seconds [Time delta from previous captured frame: 0.000179538 seconds] [Time delta from previous displayed frame: 0.000179538 seconds] [Time since reference or first frame: 13.507436662 seconds] Frame Number: 363 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x7101 (28929) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x397d [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 34738, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 34738 (relative sequence number) [Next sequence number: 36190 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3419 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 1452] TCP segment data (1452 bytes) Frame 364: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.305125804 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.305125804 seconds [Time delta from previous captured frame: 0.000120289 seconds] [Time delta from previous displayed frame: 0.000120289 seconds] [Time since reference or first frame: 13.507556951 seconds] Frame Number: 364 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x7102 (28930) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x397c [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 36190, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 36190 (relative sequence number) [Next sequence number: 37642 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc208 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 2904] [Bytes sent since last PSH flag: 2904] TCP segment data (1452 bytes) Frame 365: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.305147565 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.305147565 seconds [Time delta from previous captured frame: 0.000021761 seconds] [Time delta from previous displayed frame: 0.000021761 seconds] [Time since reference or first frame: 13.507578712 seconds] Frame Number: 365 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4ab (54443) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e7f [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 37642, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 37642 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 364] [The RTT to ACK the segment was: 0.000021761 seconds] [iRTT: 0.043521908 seconds] Frame 366: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.305160176 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.305160176 seconds [Time delta from previous captured frame: 0.000012611 seconds] [Time delta from previous displayed frame: 0.000012611 seconds] [Time since reference or first frame: 13.507591323 seconds] Frame Number: 366 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:ssl] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x7147 (28999) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x3937 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 37642, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 37642 (relative sequence number) [Next sequence number: 39094 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x215e [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 1452] TCP segment data (247 bytes) TCP segment data (1205 bytes) [12 Reassembled TCP Segments (16437 bytes): #345(218), #347(1452), #349(1452), #351(1452), #353(1452), #355(1452), #358(2904), #360(1452), #361(1452), #363(1452), #364(1452), #366(247)] [Frame: 345, payload: 0-217 (218 bytes)] [Frame: 347, payload: 218-1669 (1452 bytes)] [Frame: 349, payload: 1670-3121 (1452 bytes)] [Frame: 351, payload: 3122-4573 (1452 bytes)] [Frame: 353, payload: 4574-6025 (1452 bytes)] [Frame: 355, payload: 6026-7477 (1452 bytes)] [Frame: 358, payload: 7478-10381 (2904 bytes)] [Frame: 360, payload: 10382-11833 (1452 bytes)] [Frame: 361, payload: 11834-13285 (1452 bytes)] [Frame: 363, payload: 13286-14737 (1452 bytes)] [Frame: 364, payload: 14738-16189 (1452 bytes)] [Frame: 366, payload: 16190-16436 (247 bytes)] [Segment count: 12] [Reassembled TCP length: 16437] [Reassembled TCP Data: 17030340306d1649097b82868fce393d6a5e8cc06990e829...] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 16432 Encrypted Application Data: 6d1649097b82868fce393d6a5e8cc06990e829a6a38a419f... SSL segment data (16384 bytes) Secure Sockets Layer Frame 367: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.305370897 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.305370897 seconds [Time delta from previous captured frame: 0.000210721 seconds] [Time delta from previous displayed frame: 0.000210721 seconds] [Time since reference or first frame: 13.507802044 seconds] Frame Number: 367 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x7148 (29000) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x3936 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 39094, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 39094 (relative sequence number) [Next sequence number: 40546 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4f50 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 2904] [Bytes sent since last PSH flag: 2904] TCP segment data (1452 bytes) Frame 368: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.305391953 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.305391953 seconds [Time delta from previous captured frame: 0.000021056 seconds] [Time delta from previous displayed frame: 0.000021056 seconds] [Time since reference or first frame: 13.507823100 seconds] Frame Number: 368 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4ac (54444) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e7e [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 40546, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 40546 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 367] [The RTT to ACK the segment was: 0.000021056 seconds] [iRTT: 0.043521908 seconds] Frame 369: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.305401091 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.305401091 seconds [Time delta from previous captured frame: 0.000009138 seconds] [Time delta from previous displayed frame: 0.000009138 seconds] [Time since reference or first frame: 13.507832238 seconds] Frame Number: 369 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x716a (29034) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x3914 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 40546, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 40546 (relative sequence number) [Next sequence number: 41998 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6c0e [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 1452] TCP segment data (1452 bytes) Frame 370: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.305628081 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.305628081 seconds [Time delta from previous captured frame: 0.000226990 seconds] [Time delta from previous displayed frame: 0.000226990 seconds] [Time since reference or first frame: 13.508059228 seconds] Frame Number: 370 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x716b (29035) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x3913 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 41998, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 41998 (relative sequence number) [Next sequence number: 43450 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xbda3 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 2904] [Bytes sent since last PSH flag: 2904] TCP segment data (1452 bytes) Frame 371: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.305651983 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.305651983 seconds [Time delta from previous captured frame: 0.000023902 seconds] [Time delta from previous displayed frame: 0.000023902 seconds] [Time since reference or first frame: 13.508083130 seconds] Frame Number: 371 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4ad (54445) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e7d [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 43450, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 43450 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 370] [The RTT to ACK the segment was: 0.000023902 seconds] [iRTT: 0.043521908 seconds] Frame 372: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.305680120 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.305680120 seconds [Time delta from previous captured frame: 0.000028137 seconds] [Time delta from previous displayed frame: 0.000028137 seconds] [Time since reference or first frame: 13.508111267 seconds] Frame Number: 372 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x7196 (29078) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x38e8 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 43450, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 43450 (relative sequence number) [Next sequence number: 44902 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x65c9 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 1452] TCP segment data (1452 bytes) Frame 373: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.305864208 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.305864208 seconds [Time delta from previous captured frame: 0.000184088 seconds] [Time delta from previous displayed frame: 0.000184088 seconds] [Time since reference or first frame: 13.508295355 seconds] Frame Number: 373 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x7197 (29079) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x38e7 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 44902, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 44902 (relative sequence number) [Next sequence number: 46354 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf6ea [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 2904] [Bytes sent since last PSH flag: 2904] TCP segment data (1452 bytes) Frame 374: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.305886395 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.305886395 seconds [Time delta from previous captured frame: 0.000022187 seconds] [Time delta from previous displayed frame: 0.000022187 seconds] [Time since reference or first frame: 13.508317542 seconds] Frame Number: 374 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4ae (54446) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e7c [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 46354, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 46354 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 373] [The RTT to ACK the segment was: 0.000022187 seconds] [iRTT: 0.043521908 seconds] Frame 375: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.305895381 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.305895381 seconds [Time delta from previous captured frame: 0.000008986 seconds] [Time delta from previous displayed frame: 0.000008986 seconds] [Time since reference or first frame: 13.508326528 seconds] Frame Number: 375 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x71a2 (29090) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x38dc [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 46354, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 46354 (relative sequence number) [Next sequence number: 47806 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5d98 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 1452] TCP segment data (1452 bytes) Frame 376: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.306117372 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.306117372 seconds [Time delta from previous captured frame: 0.000221991 seconds] [Time delta from previous displayed frame: 0.000221991 seconds] [Time since reference or first frame: 13.508548519 seconds] Frame Number: 376 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x71a3 (29091) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x38db [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 47806, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 47806 (relative sequence number) [Next sequence number: 49258 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6e84 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 2904] [Bytes sent since last PSH flag: 2904] TCP segment data (1452 bytes) Frame 377: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.306145853 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.306145853 seconds [Time delta from previous captured frame: 0.000028481 seconds] [Time delta from previous displayed frame: 0.000028481 seconds] [Time since reference or first frame: 13.508577000 seconds] Frame Number: 377 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4af (54447) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e7b [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 49258, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 49258 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 376] [The RTT to ACK the segment was: 0.000028481 seconds] [iRTT: 0.043521908 seconds] Frame 378: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.306251555 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.306251555 seconds [Time delta from previous captured frame: 0.000105702 seconds] [Time delta from previous displayed frame: 0.000105702 seconds] [Time since reference or first frame: 13.508682702 seconds] Frame Number: 378 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x71a4 (29092) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x38da [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 49258, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 49258 (relative sequence number) [Next sequence number: 50710 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x74b9 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 1452] TCP segment data (1452 bytes) Frame 379: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.306380705 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.306380705 seconds [Time delta from previous captured frame: 0.000129150 seconds] [Time delta from previous displayed frame: 0.000129150 seconds] [Time since reference or first frame: 13.508811852 seconds] Frame Number: 379 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x71a5 (29093) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x38d9 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 50710, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 50710 (relative sequence number) [Next sequence number: 52162 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xe617 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 2904] [Bytes sent since last PSH flag: 2904] TCP segment data (1452 bytes) Frame 380: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.306404121 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.306404121 seconds [Time delta from previous captured frame: 0.000023416 seconds] [Time delta from previous displayed frame: 0.000023416 seconds] [Time since reference or first frame: 13.508835268 seconds] Frame Number: 380 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4b0 (54448) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e7a [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 52162, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 52162 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 379] [The RTT to ACK the segment was: 0.000023416 seconds] [iRTT: 0.043521908 seconds] Frame 381: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.306412863 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.306412863 seconds [Time delta from previous captured frame: 0.000008742 seconds] [Time delta from previous displayed frame: 0.000008742 seconds] [Time since reference or first frame: 13.508844010 seconds] Frame Number: 381 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x71c9 (29129) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x38b5 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 52162, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 52162 (relative sequence number) [Next sequence number: 53614 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x05e4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 1452] TCP segment data (1452 bytes) Frame 382: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.306625916 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.306625916 seconds [Time delta from previous captured frame: 0.000213053 seconds] [Time delta from previous displayed frame: 0.000213053 seconds] [Time since reference or first frame: 13.509057063 seconds] Frame Number: 382 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:ssl] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x71ca (29130) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x38b4 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 53614, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 53614 (relative sequence number) [Next sequence number: 55066 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x96f2 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 2904] [Bytes sent since last PSH flag: 2904] TCP segment data (712 bytes) TCP segment data (740 bytes) [12 Reassembled TCP Segments (16437 bytes): #366(1205), #367(1452), #369(1452), #370(1452), #372(1452), #373(1452), #375(1452), #376(1452), #378(1452), #379(1452), #381(1452), #382(712)] [Frame: 366, payload: 0-1204 (1205 bytes)] [Frame: 367, payload: 1205-2656 (1452 bytes)] [Frame: 369, payload: 2657-4108 (1452 bytes)] [Frame: 370, payload: 4109-5560 (1452 bytes)] [Frame: 372, payload: 5561-7012 (1452 bytes)] [Frame: 373, payload: 7013-8464 (1452 bytes)] [Frame: 375, payload: 8465-9916 (1452 bytes)] [Frame: 376, payload: 9917-11368 (1452 bytes)] [Frame: 378, payload: 11369-12820 (1452 bytes)] [Frame: 379, payload: 12821-14272 (1452 bytes)] [Frame: 381, payload: 14273-15724 (1452 bytes)] [Frame: 382, payload: 15725-16436 (712 bytes)] [Segment count: 12] [Reassembled TCP length: 16437] [Reassembled TCP Data: 17030340304fa31edbaf09c11948d915c9d4e3f1673b7537...] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 16432 Encrypted Application Data: 4fa31edbaf09c11948d915c9d4e3f1673b7537015dd5f0de... SSL segment data (16384 bytes) Secure Sockets Layer Frame 383: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.306649437 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.306649437 seconds [Time delta from previous captured frame: 0.000023521 seconds] [Time delta from previous displayed frame: 0.000023521 seconds] [Time since reference or first frame: 13.509080584 seconds] Frame Number: 383 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4b1 (54449) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e79 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 55066, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 55066 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 382] [The RTT to ACK the segment was: 0.000023521 seconds] [iRTT: 0.043521908 seconds] Frame 384: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.306663457 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.306663457 seconds [Time delta from previous captured frame: 0.000014020 seconds] [Time delta from previous displayed frame: 0.000014020 seconds] [Time since reference or first frame: 13.509094604 seconds] Frame Number: 384 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x71cf (29135) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x38af [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 55066, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 55066 (relative sequence number) [Next sequence number: 56518 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa44a [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 1452] TCP segment data (1452 bytes) Frame 385: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.306869016 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.306869016 seconds [Time delta from previous captured frame: 0.000205559 seconds] [Time delta from previous displayed frame: 0.000205559 seconds] [Time since reference or first frame: 13.509300163 seconds] Frame Number: 385 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x71d0 (29136) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x38ae [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 56518, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 56518 (relative sequence number) [Next sequence number: 57970 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0efb [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 2904] [Bytes sent since last PSH flag: 2904] TCP segment data (1452 bytes) Frame 386: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.306892393 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.306892393 seconds [Time delta from previous captured frame: 0.000023377 seconds] [Time delta from previous displayed frame: 0.000023377 seconds] [Time since reference or first frame: 13.509323540 seconds] Frame Number: 386 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4b2 (54450) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e78 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 57970, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 57970 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 385] [The RTT to ACK the segment was: 0.000023377 seconds] [iRTT: 0.043521908 seconds] Frame 387: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.306901368 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.306901368 seconds [Time delta from previous captured frame: 0.000008975 seconds] [Time delta from previous displayed frame: 0.000008975 seconds] [Time since reference or first frame: 13.509332515 seconds] Frame Number: 387 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x71f8 (29176) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x3886 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 57970, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 57970 (relative sequence number) [Next sequence number: 59422 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xbe3d [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1452] [Bytes sent since last PSH flag: 1452] TCP segment data (1452 bytes) Frame 388: 1508 bytes on wire (12064 bits), 1508 bytes captured (12064 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.307129958 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.307129958 seconds [Time delta from previous captured frame: 0.000228590 seconds] [Time delta from previous displayed frame: 0.000228590 seconds] [Time since reference or first frame: 13.509561105 seconds] Frame Number: 388 Frame Length: 1508 bytes (12064 bits) Capture Length: 1508 bytes (12064 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1492 Identification: 0x71f9 (29177) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x3885 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 59422, Ack: 1021, Len: 1452 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1452] Sequence number: 59422 (relative sequence number) [Next sequence number: 60874 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa360 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 2904] [Bytes sent since last PSH flag: 2904] TCP segment data (1452 bytes) Frame 389: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.307151054 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.307151054 seconds [Time delta from previous captured frame: 0.000021096 seconds] [Time delta from previous displayed frame: 0.000021096 seconds] [Time since reference or first frame: 13.509582201 seconds] Frame Number: 389 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4b3 (54451) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e77 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 60874, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 60874 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 388] [The RTT to ACK the segment was: 0.000021096 seconds] [iRTT: 0.043521908 seconds] Frame 391: 969 bytes on wire (7752 bits), 969 bytes captured (7752 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.350280338 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.350280338 seconds [Time delta from previous captured frame: 0.030693441 seconds] [Time delta from previous displayed frame: 0.043129284 seconds] [Time since reference or first frame: 13.552711485 seconds] Frame Number: 391 Frame Length: 969 bytes (7752 bits) Capture Length: 969 bytes (7752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 953 Identification: 0x96df (38623) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x15ba [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 60874, Ack: 1021, Len: 913 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 913] Sequence number: 60874 (relative sequence number) [Next sequence number: 61787 (relative sequence number)] Acknowledgment number: 1021 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 5376 [Calculated window size: 5376] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2b79 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 913] [Bytes sent since last PSH flag: 913] TCP segment data (913 bytes) [6 Reassembled TCP Segments (7461 bytes): #382(740), #384(1452), #385(1452), #387(1452), #388(1452), #391(913)] [Frame: 382, payload: 0-739 (740 bytes)] [Frame: 384, payload: 740-2191 (1452 bytes)] [Frame: 385, payload: 2192-3643 (1452 bytes)] [Frame: 387, payload: 3644-5095 (1452 bytes)] [Frame: 388, payload: 5096-6547 (1452 bytes)] [Frame: 391, payload: 6548-7460 (913 bytes)] [Segment count: 6] [Reassembled TCP length: 7461] [Reassembled TCP Data: 1703031d20dbb093c6710fee0df200316edf989f10cec6e4...] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 7456 Encrypted Application Data: dbb093c6710fee0df200316edf989f10cec6e44a1de44c1f... SSL segment data (7406 bytes) [4 Reassembled SSL segments (56558 bytes): #345(16384), #366(16384), #382(16384), #391(7406)] [Frame: 345, payload: 0-16383 (16384 bytes)] [Frame: 366, payload: 16384-32767 (16384 bytes)] [Frame: 382, payload: 32768-49151 (16384 bytes)] [Frame: 391, payload: 49152-56557 (7406 bytes)] [Segment count: 4] [Reassembled PDU length: 56558] [Reassembled PDU data: 485454502f312e3120323030204f4b0d0a43616368652d43...] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 56035\r\n [Content length: 56035] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:30:03 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: LivePersonID=LP i=172480676442279,d=1479724203; path=/; domain=.liveperson.net\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:30:02 GMT\r\n \r\n [HTTP response 1/1] [Time since request: 0.196817587 seconds] [Request in frame: 318] File Data: 56035 bytes Line-based text data: application/x-javascript [truncated]lpConnLib.Process({"ResultSet": {"lpCallId":"087079991179-080504397088","lpCallConfirm":"","lpJS_Execute":[{"code_id": "webServerOverride", "js_code": "if (lpMTagConfig.lpServer != 'server.lon.liveperson.net') { lpMTag.override Frame 392: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.350568003 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.350568003 seconds [Time delta from previous captured frame: 0.000287665 seconds] [Time delta from previous displayed frame: 0.000287665 seconds] [Time since reference or first frame: 13.552999150 seconds] Frame Number: 392 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4b4 (54452) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e76 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 61787, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 1021 (relative sequence number) Acknowledgment number: 61787 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 391] [The RTT to ACK the segment was: 0.000287665 seconds] [iRTT: 0.043521908 seconds] Frame 393: 1213 bytes on wire (9704 bits), 1213 bytes captured (9704 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.375019477 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.375019477 seconds [Time delta from previous captured frame: 0.024451474 seconds] [Time delta from previous displayed frame: 0.024451474 seconds] [Time since reference or first frame: 13.577450624 seconds] Frame Number: 393 Frame Length: 1213 bytes (9704 bits) Capture Length: 1213 bytes (9704 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1197 Identification: 0xd4b5 (54453) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x89f0 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 1021, Ack: 61787, Len: 1157 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 1157] Sequence number: 1021 (relative sequence number) [Next sequence number: 2178 (relative sequence number)] Acknowledgment number: 61787 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdc44 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1157] [Bytes sent since last PSH flag: 1157] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 1152 Encrypted Application Data: 3df20a3a80953e06fb89581c3e8da29624f29239f1d59ad9... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=635391183984-514371109240&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/&id= [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=635391183984-514371109240&protV=20&lpjson=1&page=https%3A] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=635391183984-514371109240&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/&id=7763280453&j] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=635391183984-514371109240&protV=20&lpjson=1&page=https%3A//moj.hrvatskiteleko Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=635391183984-514371109240&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/&id Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagStartPage Request URI Query Parameter: lpCallId=635391183984-514371109240 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/ Request URI Query Parameter: id=7763280453 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: PV%21ErrorName= Request URI Query Parameter: PV%21unit=csc-portal Request URI Query Parameter: PV%21PageUrl=/ Request URI Query Parameter: PV%21ErrorCount=0 Request URI Query Parameter: PV%21pageLoadTime=0%20sec Request URI Query Parameter: PV%21visitorActive=1 Request URI Query Parameter: SV%21language=croatian Request URI Query Parameter: VV%21CustomerLoggedIn=rovismi1 Request URI Query Parameter: title=Moj%20Telekom%20Portal%20%7C%20Hrvatski%20Telekom Request URI Query Parameter: cobrowse=true Request URI Query Parameter [truncated]: cookie=visited%3D1%3B%20_ceg.s%3Dogzmhn%3B%20_ceg.u%3Dogzmhn%3B%2062370768-VID%3D172480676440713%3B%2062370768-SKEY%3D5756825085274454102%3B%20HumanClickSiteContainerID_62370768%3DSTANDALONE%3B%20Co Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=635391183984-514371109240&protV=20&lpjs] [HTTP request 2/2] [Prev request in frame: 318] Frame 394: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.418094391 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.418094391 seconds [Time delta from previous captured frame: 0.043074914 seconds] [Time delta from previous displayed frame: 0.043074914 seconds] [Time since reference or first frame: 13.620525538 seconds] Frame Number: 394 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 93d1d942 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xccd7 (52439) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xe352 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 61787, Ack: 2178, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 61787 (relative sequence number) Acknowledgment number: 2178 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 6533 [Calculated window size: 6533] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdbd1 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 393] [The RTT to ACK the segment was: 0.043074914 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 65535 Src Port: 65535 Frame 395: 877 bytes on wire (7016 bits), 877 bytes captured (7016 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.426471149 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.426471149 seconds [Time delta from previous captured frame: 0.008376758 seconds] [Time delta from previous displayed frame: 0.008376758 seconds] [Time since reference or first frame: 13.628902296 seconds] Frame Number: 395 Frame Length: 877 bytes (7016 bits) Capture Length: 877 bytes (7016 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 861 Identification: 0xd441 (54337) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xd8b3 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 61787, Ack: 2178, Len: 821 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 821] Sequence number: 61787 (relative sequence number) [Next sequence number: 62608 (relative sequence number)] Acknowledgment number: 2178 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 6533 [Calculated window size: 6533] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2ad7 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 821] [Bytes sent since last PSH flag: 821] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 816 Encrypted Application Data: 477c9cacc78ce29d6a7898e28e4e22d1d53a365c62577508... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 340\r\n [Content length: 340] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:30:03 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:30:02 GMT\r\n \r\n [HTTP response 2/2] [Time since request: 0.051451672 seconds] [Prev request in frame: 318] [Prev response in frame: 391] [Request in frame: 393] File Data: 340 bytes Line-based text data: application/x-javascript [truncated]lpConnLib.Process({"ResultSet": {"lpCallId":"635391183984-514371109240","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"},{"code_id": "FPCSetVal", "js_code": "lpMTag Frame 396: 877 bytes on wire (7016 bits), 877 bytes captured (7016 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.432771142 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.432771142 seconds [Time delta from previous captured frame: 0.006299993 seconds] [Time delta from previous displayed frame: 0.006299993 seconds] [Time since reference or first frame: 13.635202289 seconds] Frame Number: 396 Frame Length: 877 bytes (7016 bits) Capture Length: 877 bytes (7016 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 861 Identification: 0xd4b6 (54454) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b3f [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 2178, Ack: 62608, Len: 821 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 821] Sequence number: 2178 (relative sequence number) [Next sequence number: 2999 (relative sequence number)] Acknowledgment number: 62608 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdaf4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 395] [The RTT to ACK the segment was: 0.006299993 seconds] [iRTT: 0.043521908 seconds] [Bytes in flight: 821] [Bytes sent since last PSH flag: 821] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 816 Encrypted Application Data: 5888a4feee0c7a83d69aec18f8049da0568fb2cf730af156... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=369952815664-408672467007&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croat [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=369952815664-408672467007&protV=20&lpjson=1&SV%21impression-que] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=369952815664-408672467007&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croatian&SV%21imp] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=369952815664-408672467007&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-por Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=369952815664-408672467007&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croa Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagUrl Request URI Query Parameter: lpCallId=369952815664-408672467007 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: SV%21impression-query-name=chat-csc-portal-croatian Request URI Query Parameter: SV%21impression-query-room=chat-csc-portal-croatian Request URI Query Parameter: id=7763280453 Request URI Query Parameter: info=button-impression%3Achat-csc-portal-croatian%28Moj%20Telekom%20Portal%20%7C%20Hrvatski%20Telekom%29 Request URI Query Parameter: waitForVisitor=true Request URI Query Parameter: d=1479724188430 Request URI Query Parameter: page=https%3A//server.lon.liveperson.net/hcp/width/img40.gif Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=369952815664-408672467007&protV=20&lpjson=1&S] [HTTP request 3/3] [Prev request in frame: 393] Frame 398: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.475898905 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.475898905 seconds [Time delta from previous captured frame: 0.040750550 seconds] [Time delta from previous displayed frame: 0.043127763 seconds] [Time since reference or first frame: 13.678330052 seconds] Frame Number: 398 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 4a4a19dd Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xffec (65516) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xb03d [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 62608, Ack: 2999, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 62608 (relative sequence number) Acknowledgment number: 2999 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 7354 [Calculated window size: 7354] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd232 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 396] [The RTT to ACK the segment was: 0.043127763 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 49018 Src Port: 49018 Frame 400: 749 bytes on wire (5992 bits), 749 bytes captured (5992 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.478491917 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.478491917 seconds [Time delta from previous captured frame: 0.000316635 seconds] [Time delta from previous displayed frame: 0.002593012 seconds] [Time since reference or first frame: 13.680923064 seconds] Frame Number: 400 Frame Length: 749 bytes (5992 bits) Capture Length: 749 bytes (5992 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 733 Identification: 0x01f1 (497) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xab84 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 62608, Ack: 2999, Len: 693 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 693] Sequence number: 62608 (relative sequence number) [Next sequence number: 63301 (relative sequence number)] Acknowledgment number: 2999 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 7354 [Calculated window size: 7354] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5e58 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 693] [Bytes sent since last PSH flag: 693] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 688 Encrypted Application Data: d485c600d7e0a03a635aa4cf8548eb87fd0cf63f5fc6fe52... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 119\r\n [Content length: 119] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:30:03 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: LivePersonID=LP i=172480676442280,d=1479724203; path=/; domain=.liveperson.net\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:30:02 GMT\r\n \r\n [HTTP response 3/3] [Time since request: 0.045720775 seconds] [Prev request in frame: 393] [Prev response in frame: 395] [Request in frame: 396] File Data: 119 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"369952815664-408672467007","lpCallConfirm":"","lpData":[{"result":60}]}}); Frame 403: 557 bytes on wire (4456 bits), 557 bytes captured (4456 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.486555191 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.486555191 seconds [Time delta from previous captured frame: 0.005584144 seconds] [Time delta from previous displayed frame: 0.008063274 seconds] [Time since reference or first frame: 13.688986338 seconds] Frame Number: 403 Frame Length: 557 bytes (4456 bits) Capture Length: 557 bytes (4456 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 541 Identification: 0xd4b7 (54455) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8c7e [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 2999, Ack: 63301, Len: 501 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 501] Sequence number: 2999 (relative sequence number) [Next sequence number: 3500 (relative sequence number)] Acknowledgment number: 63301 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd9b4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 400] [The RTT to ACK the segment was: 0.008063274 seconds] [iRTT: 0.043521908 seconds] [Bytes in flight: 501] [Bytes sent since last PSH flag: 501] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 496 Encrypted Application Data: d9b40b7d524ca38471b28a314435ffe5e29343ff062f20b4... Hypertext Transfer Protocol GET /hc/62370768/?lpCallId=959503395399-255489891934&protV=20&lpjson=5&site=62370768&cmd=leVisitorEvent&type=impression&appKey=f907f2d9acd64b7f8c00b83bed3c2822&data=dynBut%3A9 HTTP/1.1\r\n [Expert Info (Chat/Sequence): GET /hc/62370768/?lpCallId=959503395399-255489891934&protV=20&lpjson=5&site=62370768&cmd=leVisitorEvent&type=impression&appKey=f907f2d9acd64b7f8c00b83bed3c2822&data=dynBut%3A9 HTTP/1.1\r\n] [GET /hc/62370768/?lpCallId=959503395399-255489891934&protV=20&lpjson=5&site=62370768&cmd=leVisitorEvent&type=impression&appKey=f907f2d9acd64b7f8c00b83bed3c2822&data=dynBut%3A9 HTTP/1.1\r\n] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI: /hc/62370768/?lpCallId=959503395399-255489891934&protV=20&lpjson=5&site=62370768&cmd=leVisitorEvent&type=impression&appKey=f907f2d9acd64b7f8c00b83bed3c2822&data=dynBut%3A9 Request URI Path: /hc/62370768/ Request URI Query: lpCallId=959503395399-255489891934&protV=20&lpjson=5&site=62370768&cmd=leVisitorEvent&type=impression&appKey=f907f2d9acd64b7f8c00b83bed3c2822&data=dynBut%3A9 Request URI Query Parameter: lpCallId=959503395399-255489891934 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=5 Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=leVisitorEvent Request URI Query Parameter: type=impression Request URI Query Parameter: appKey=f907f2d9acd64b7f8c00b83bed3c2822 Request URI Query Parameter: data=dynBut%3A9 Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/\r\n Connection: keep-alive\r\n \r\n [Full request URI: https://server.lon.liveperson.net/hc/62370768/?lpCallId=959503395399-255489891934&protV=20&lpjson=5&site=62370768&cmd=leVisitorEvent&type=impression&appKey=f907f2d9acd64b7f8c00b83bed3c2822&data=dynBut%3A9] [HTTP request 4/4] [Prev request in frame: 396] Frame 407: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.530352454 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.530352454 seconds [Time delta from previous captured frame: 0.001616538 seconds] [Time delta from previous displayed frame: 0.043797263 seconds] [Time since reference or first frame: 13.732783601 seconds] Frame Number: 407 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: da65d464 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x31f5 (12789) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x7e35 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 63301, Ack: 3500, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 63301 (relative sequence number) Acknowledgment number: 3500 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 7855 [Calculated window size: 7855] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xcb93 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 403] [The RTT to ACK the segment was: 0.043797263 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 37885 Src Port: 37885 Frame 409: 637 bytes on wire (5096 bits), 637 bytes captured (5096 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.534669949 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.534669949 seconds [Time delta from previous captured frame: 0.002435933 seconds] [Time delta from previous displayed frame: 0.004317495 seconds] [Time since reference or first frame: 13.737101096 seconds] Frame Number: 409 Frame Length: 637 bytes (5096 bits) Capture Length: 637 bytes (5096 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 621 Identification: 0x36fd (14077) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x76e8 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 63301, Ack: 3500, Len: 581 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 581] Sequence number: 63301 (relative sequence number) [Next sequence number: 63882 (relative sequence number)] Acknowledgment number: 3500 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 7855 [Calculated window size: 7855] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb4a8 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 581] [Bytes sent since last PSH flag: 581] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 576 Encrypted Application Data: f734d72c008585396407276956092dea8b3cbe91eb66c2ad... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 94\r\n [Content length: 94] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:30:03 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: LivePersonID=LP i=172480676442281,d=1479724203; path=/; domain=.liveperson.net\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:30:02 GMT\r\n \r\n [HTTP response 4/4] [Time since request: 0.048114758 seconds] [Prev request in frame: 396] [Prev response in frame: 400] [Request in frame: 403] File Data: 94 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"959503395399-255489891934","lpCallConfirm":""}}); Frame 417: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:48.575662597 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724188.575662597 seconds [Time delta from previous captured frame: 0.016890722 seconds] [Time delta from previous displayed frame: 0.040992648 seconds] [Time since reference or first frame: 13.778093744 seconds] Frame Number: 417 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4b8 (54456) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e72 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 3500, Ack: 63882, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 3500 (relative sequence number) Acknowledgment number: 63882 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 409] [The RTT to ACK the segment was: 0.040992648 seconds] [iRTT: 0.043521908 seconds] Frame 544: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:58.537565662 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724198.537565662 seconds [Time delta from previous captured frame: 0.011858931 seconds] [Time delta from previous displayed frame: 9.961903065 seconds] [Time since reference or first frame: 23.739996809 seconds] Frame Number: 544 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4b9 (54457) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e71 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 3499, Ack: 63882, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 3499 (relative sequence number) Acknowledgment number: 63882 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [TCP Analysis Flags] [Expert Info (Note/Sequence): TCP keep-alive segment] [TCP keep-alive segment] [Severity level: Note] [Group: Sequence] Frame 550: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:58.580177354 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724198.580177354 seconds [Time delta from previous captured frame: 0.006169481 seconds] [Time delta from previous displayed frame: 0.042611692 seconds] [Time since reference or first frame: 23.782608501 seconds] Frame Number: 550 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: c72f85f4 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xa146 (41286) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x0ee4 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 63882, Ack: 3500, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 63882 (relative sequence number) Acknowledgment number: 3500 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 7855 [Calculated window size: 7855] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc94e [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [TCP Analysis Flags] [Expert Info (Note/Sequence): ACK to a TCP keep-alive segment] [ACK to a TCP keep-alive segment] [Severity level: Note] [Group: Sequence] VSS-Monitoring ethernet trailer, Source Port: 53159 Src Port: 53159 Frame 655: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.516696779 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.516696779 seconds [Time delta from previous captured frame: 0.001349363 seconds] [Time delta from previous displayed frame: 0.936519425 seconds] [Time since reference or first frame: 24.719127926 seconds] Frame Number: 655 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0xd4ba (54458) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8bdb [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 3500, Ack: 63882, Len: 661 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 3500 (relative sequence number) [Next sequence number: 4161 (relative sequence number)] Acknowledgment number: 63882 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xda54 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: d00ff403a4ac6be75467487dc609807e722cca02f4134568... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=751328680093-545752455555&protV=20&lpjson=1&id=6207797629&javaSupport=false&visitorSta [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=751328680093-545752455555&protV=20&lpjson=1&id=6207797629] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=751328680093-545752455555&protV=20&lpjson=1&id=6207797629&javaSupport=false&visitorStatus=INSITE_S] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=751328680093-545752455555&protV=20&lpjson=1&id=6207797629&javaSupport=false&v Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=751328680093-545752455555&protV=20&lpjson=1&id=6207797629&javaSupport=false&visitorSt Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagKnockPage Request URI Query Parameter: lpCallId=751328680093-545752455555 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: dbut=chat-csc-portal-croatian%7ClpMTagConfig.db1%7ClpButtonDiv-csc-portal%7C Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=751328680093-545752455555&protV=20&lpjs] [HTTP request 5/5] [Prev request in frame: 403] Frame 668: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.559587705 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.559587705 seconds [Time delta from previous captured frame: 0.004086571 seconds] [Time delta from previous displayed frame: 0.042890926 seconds] [Time since reference or first frame: 24.762018852 seconds] Frame Number: 668 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 4aeca14e Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x1200 (4608) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x9e2a [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 63882, Ack: 4161, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 63882 (relative sequence number) Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc424 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 655] [The RTT to ACK the segment was: 0.042890926 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 21848 Src Port: 21848 Frame 670: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.565167372 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.565167372 seconds [Time delta from previous captured frame: 0.004787744 seconds] [Time delta from previous displayed frame: 0.005579667 seconds] [Time since reference or first frame: 24.767598519 seconds] Frame Number: 670 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x165c (5724) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x941a [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 63882, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 63882 (relative sequence number) [Next sequence number: 65342 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Secure Sockets Layer Frame 671: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.565245792 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.565245792 seconds [Time delta from previous captured frame: 0.000078420 seconds] [Time delta from previous displayed frame: 0.000078420 seconds] [Time since reference or first frame: 24.767676939 seconds] Frame Number: 671 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4bb (54459) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e6f [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 65342, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 65342 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 670] [The RTT to ACK the segment was: 0.000078420 seconds] [iRTT: 0.043521908 seconds] Frame 672: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.565280619 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.565280619 seconds [Time delta from previous captured frame: 0.000034827 seconds] [Time delta from previous displayed frame: 0.000034827 seconds] [Time since reference or first frame: 24.767711766 seconds] Frame Number: 672 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x165e (5726) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x9418 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 65342, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 65342 (relative sequence number) [Next sequence number: 66802 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 673: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.565327525 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.565327525 seconds [Time delta from previous captured frame: 0.000046906 seconds] [Time delta from previous displayed frame: 0.000046906 seconds] [Time since reference or first frame: 24.767758672 seconds] Frame Number: 673 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4bc (54460) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e6e [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 66802, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 66802 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 672] [The RTT to ACK the segment was: 0.000046906 seconds] [iRTT: 0.043521908 seconds] Frame 674: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.565398006 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.565398006 seconds [Time delta from previous captured frame: 0.000070481 seconds] [Time delta from previous displayed frame: 0.000070481 seconds] [Time since reference or first frame: 24.767829153 seconds] Frame Number: 674 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x1661 (5729) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x9415 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 66802, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 66802 (relative sequence number) [Next sequence number: 68262 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 675: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.565438471 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.565438471 seconds [Time delta from previous captured frame: 0.000040465 seconds] [Time delta from previous displayed frame: 0.000040465 seconds] [Time since reference or first frame: 24.767869618 seconds] Frame Number: 675 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4bd (54461) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e6d [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 68262, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 68262 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 674] [The RTT to ACK the segment was: 0.000040465 seconds] [iRTT: 0.043521908 seconds] Frame 676: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.565526880 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.565526880 seconds [Time delta from previous captured frame: 0.000088409 seconds] [Time delta from previous displayed frame: 0.000088409 seconds] [Time since reference or first frame: 24.767958027 seconds] Frame Number: 676 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x1664 (5732) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x9412 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 68262, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 68262 (relative sequence number) [Next sequence number: 69722 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 677: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.565576147 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.565576147 seconds [Time delta from previous captured frame: 0.000049267 seconds] [Time delta from previous displayed frame: 0.000049267 seconds] [Time since reference or first frame: 24.768007294 seconds] Frame Number: 677 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4be (54462) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e6c [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 69722, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 69722 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 676] [The RTT to ACK the segment was: 0.000049267 seconds] [iRTT: 0.043521908 seconds] Frame 678: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.565656698 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.565656698 seconds [Time delta from previous captured frame: 0.000080551 seconds] [Time delta from previous displayed frame: 0.000080551 seconds] [Time since reference or first frame: 24.768087845 seconds] Frame Number: 678 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x1667 (5735) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x940f [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 69722, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 69722 (relative sequence number) [Next sequence number: 71182 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 679: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.565696987 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.565696987 seconds [Time delta from previous captured frame: 0.000040289 seconds] [Time delta from previous displayed frame: 0.000040289 seconds] [Time since reference or first frame: 24.768128134 seconds] Frame Number: 679 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4bf (54463) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e6b [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 71182, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 71182 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 678] [The RTT to ACK the segment was: 0.000040289 seconds] [iRTT: 0.043521908 seconds] Frame 680: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.565803839 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.565803839 seconds [Time delta from previous captured frame: 0.000106852 seconds] [Time delta from previous displayed frame: 0.000106852 seconds] [Time since reference or first frame: 24.768234986 seconds] Frame Number: 680 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x1669 (5737) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x940d [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 71182, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 71182 (relative sequence number) [Next sequence number: 72642 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 681: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.565845459 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.565845459 seconds [Time delta from previous captured frame: 0.000041620 seconds] [Time delta from previous displayed frame: 0.000041620 seconds] [Time since reference or first frame: 24.768276606 seconds] Frame Number: 681 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4c0 (54464) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e6a [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 72642, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 72642 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 680] [The RTT to ACK the segment was: 0.000041620 seconds] [iRTT: 0.043521908 seconds] Frame 682: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.565915582 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.565915582 seconds [Time delta from previous captured frame: 0.000070123 seconds] [Time delta from previous displayed frame: 0.000070123 seconds] [Time since reference or first frame: 24.768346729 seconds] Frame Number: 682 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x166c (5740) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x940a [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 72642, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 72642 (relative sequence number) [Next sequence number: 74102 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 683: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.565954330 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.565954330 seconds [Time delta from previous captured frame: 0.000038748 seconds] [Time delta from previous displayed frame: 0.000038748 seconds] [Time since reference or first frame: 24.768385477 seconds] Frame Number: 683 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4c1 (54465) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e69 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 74102, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 74102 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 682] [The RTT to ACK the segment was: 0.000038748 seconds] [iRTT: 0.043521908 seconds] Frame 684: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.566043863 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.566043863 seconds [Time delta from previous captured frame: 0.000089533 seconds] [Time delta from previous displayed frame: 0.000089533 seconds] [Time since reference or first frame: 24.768475010 seconds] Frame Number: 684 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x166e (5742) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x9408 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 74102, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 74102 (relative sequence number) [Next sequence number: 75562 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 685: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.566085039 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.566085039 seconds [Time delta from previous captured frame: 0.000041176 seconds] [Time delta from previous displayed frame: 0.000041176 seconds] [Time since reference or first frame: 24.768516186 seconds] Frame Number: 685 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4c2 (54466) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e68 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 75562, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 75562 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 684] [The RTT to ACK the segment was: 0.000041176 seconds] [iRTT: 0.043521908 seconds] Frame 686: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.566173540 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.566173540 seconds [Time delta from previous captured frame: 0.000088501 seconds] [Time delta from previous displayed frame: 0.000088501 seconds] [Time since reference or first frame: 24.768604687 seconds] Frame Number: 686 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x1671 (5745) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x9405 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 75562, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 75562 (relative sequence number) [Next sequence number: 77022 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 687: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.566212941 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.566212941 seconds [Time delta from previous captured frame: 0.000039401 seconds] [Time delta from previous displayed frame: 0.000039401 seconds] [Time since reference or first frame: 24.768644088 seconds] Frame Number: 687 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4c3 (54467) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e67 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 77022, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 77022 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 686] [The RTT to ACK the segment was: 0.000039401 seconds] [iRTT: 0.043521908 seconds] Frame 688: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.566302804 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.566302804 seconds [Time delta from previous captured frame: 0.000089863 seconds] [Time delta from previous displayed frame: 0.000089863 seconds] [Time since reference or first frame: 24.768733951 seconds] Frame Number: 688 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x1673 (5747) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x9403 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 77022, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 77022 (relative sequence number) [Next sequence number: 78482 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 689: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.566343335 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.566343335 seconds [Time delta from previous captured frame: 0.000040531 seconds] [Time delta from previous displayed frame: 0.000040531 seconds] [Time since reference or first frame: 24.768774482 seconds] Frame Number: 689 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4c4 (54468) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e66 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 78482, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 78482 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 688] [The RTT to ACK the segment was: 0.000040531 seconds] [iRTT: 0.043521908 seconds] Frame 690: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.566431748 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.566431748 seconds [Time delta from previous captured frame: 0.000088413 seconds] [Time delta from previous displayed frame: 0.000088413 seconds] [Time since reference or first frame: 24.768862895 seconds] Frame Number: 690 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x1676 (5750) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x9400 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 78482, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 78482 (relative sequence number) [Next sequence number: 79942 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 691: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.566471304 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.566471304 seconds [Time delta from previous captured frame: 0.000039556 seconds] [Time delta from previous displayed frame: 0.000039556 seconds] [Time since reference or first frame: 24.768902451 seconds] Frame Number: 691 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4c5 (54469) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e65 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 79942, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 79942 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 690] [The RTT to ACK the segment was: 0.000039556 seconds] [iRTT: 0.043521908 seconds] Frame 692: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.566565856 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.566565856 seconds [Time delta from previous captured frame: 0.000094552 seconds] [Time delta from previous displayed frame: 0.000094552 seconds] [Time since reference or first frame: 24.768997003 seconds] Frame Number: 692 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:ssl] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x1678 (5752) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93fe [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 79942, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 79942 (relative sequence number) [Next sequence number: 81402 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (377 bytes) TCP segment data (1083 bytes) [12 Reassembled TCP Segments (16437 bytes): #670(1460), #672(1460), #674(1460), #676(1460), #678(1460), #680(1460), #682(1460), #684(1460), #686(1460), #688(1460), #690(1460), #692(377)] [Frame: 670, payload: 0-1459 (1460 bytes)] [Frame: 672, payload: 1460-2919 (1460 bytes)] [Frame: 674, payload: 2920-4379 (1460 bytes)] [Frame: 676, payload: 4380-5839 (1460 bytes)] [Frame: 678, payload: 5840-7299 (1460 bytes)] [Frame: 680, payload: 7300-8759 (1460 bytes)] [Frame: 682, payload: 8760-10219 (1460 bytes)] [Frame: 684, payload: 10220-11679 (1460 bytes)] [Frame: 686, payload: 11680-13139 (1460 bytes)] [Frame: 688, payload: 13140-14599 (1460 bytes)] [Frame: 690, payload: 14600-16059 (1460 bytes)] [Frame: 692, payload: 16060-16436 (377 bytes)] [Segment count: 12] [Reassembled TCP length: 16437] [Reassembled TCP Data: 1703034030ad73a3ab0271b7a630dad1181a7daeace2a2bf...] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 16432 Encrypted Application Data: ad73a3ab0271b7a630dad1181a7daeace2a2bfdad8121c1a... SSL segment data (16384 bytes) Secure Sockets Layer Frame 693: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.566606058 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.566606058 seconds [Time delta from previous captured frame: 0.000040202 seconds] [Time delta from previous displayed frame: 0.000040202 seconds] [Time since reference or first frame: 24.769037205 seconds] Frame Number: 693 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4c6 (54470) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e64 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 81402, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 81402 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 692] [The RTT to ACK the segment was: 0.000040202 seconds] [iRTT: 0.043521908 seconds] Frame 694: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.566690743 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.566690743 seconds [Time delta from previous captured frame: 0.000084685 seconds] [Time delta from previous displayed frame: 0.000084685 seconds] [Time since reference or first frame: 24.769121890 seconds] Frame Number: 694 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x167b (5755) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93fb [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 81402, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 81402 (relative sequence number) [Next sequence number: 82862 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 695: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.566735857 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.566735857 seconds [Time delta from previous captured frame: 0.000045114 seconds] [Time delta from previous displayed frame: 0.000045114 seconds] [Time since reference or first frame: 24.769167004 seconds] Frame Number: 695 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4c7 (54471) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e63 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 82862, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 82862 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 694] [The RTT to ACK the segment was: 0.000045114 seconds] [iRTT: 0.043521908 seconds] Frame 696: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.566819982 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.566819982 seconds [Time delta from previous captured frame: 0.000084125 seconds] [Time delta from previous displayed frame: 0.000084125 seconds] [Time since reference or first frame: 24.769251129 seconds] Frame Number: 696 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x167d (5757) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93f9 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 82862, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 82862 (relative sequence number) [Next sequence number: 84322 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 697: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.566858392 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.566858392 seconds [Time delta from previous captured frame: 0.000038410 seconds] [Time delta from previous displayed frame: 0.000038410 seconds] [Time since reference or first frame: 24.769289539 seconds] Frame Number: 697 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4c8 (54472) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e62 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 84322, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 84322 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 696] [The RTT to ACK the segment was: 0.000038410 seconds] [iRTT: 0.043521908 seconds] Frame 698: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.566948304 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.566948304 seconds [Time delta from previous captured frame: 0.000089912 seconds] [Time delta from previous displayed frame: 0.000089912 seconds] [Time since reference or first frame: 24.769379451 seconds] Frame Number: 698 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x1680 (5760) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93f6 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 84322, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 84322 (relative sequence number) [Next sequence number: 85782 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 699: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.566987876 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.566987876 seconds [Time delta from previous captured frame: 0.000039572 seconds] [Time delta from previous displayed frame: 0.000039572 seconds] [Time since reference or first frame: 24.769419023 seconds] Frame Number: 699 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4c9 (54473) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e61 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 85782, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 85782 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 698] [The RTT to ACK the segment was: 0.000039572 seconds] [iRTT: 0.043521908 seconds] Frame 700: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.567078291 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.567078291 seconds [Time delta from previous captured frame: 0.000090415 seconds] [Time delta from previous displayed frame: 0.000090415 seconds] [Time since reference or first frame: 24.769509438 seconds] Frame Number: 700 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x1682 (5762) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93f4 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 85782, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 85782 (relative sequence number) [Next sequence number: 87242 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 701: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.567116292 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.567116292 seconds [Time delta from previous captured frame: 0.000038001 seconds] [Time delta from previous displayed frame: 0.000038001 seconds] [Time since reference or first frame: 24.769547439 seconds] Frame Number: 701 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4ca (54474) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e60 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 87242, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 87242 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 700] [The RTT to ACK the segment was: 0.000038001 seconds] [iRTT: 0.043521908 seconds] Frame 702: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.567207184 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.567207184 seconds [Time delta from previous captured frame: 0.000090892 seconds] [Time delta from previous displayed frame: 0.000090892 seconds] [Time since reference or first frame: 24.769638331 seconds] Frame Number: 702 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x1685 (5765) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93f1 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 87242, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 87242 (relative sequence number) [Next sequence number: 88702 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 703: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.567245578 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.567245578 seconds [Time delta from previous captured frame: 0.000038394 seconds] [Time delta from previous displayed frame: 0.000038394 seconds] [Time since reference or first frame: 24.769676725 seconds] Frame Number: 703 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4cb (54475) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e5f [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 88702, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 88702 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 702] [The RTT to ACK the segment was: 0.000038394 seconds] [iRTT: 0.043521908 seconds] Frame 704: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.567339409 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.567339409 seconds [Time delta from previous captured frame: 0.000093831 seconds] [Time delta from previous displayed frame: 0.000093831 seconds] [Time since reference or first frame: 24.769770556 seconds] Frame Number: 704 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x1687 (5767) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93ef [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 88702, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 88702 (relative sequence number) [Next sequence number: 90162 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 705: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.567378241 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.567378241 seconds [Time delta from previous captured frame: 0.000038832 seconds] [Time delta from previous displayed frame: 0.000038832 seconds] [Time since reference or first frame: 24.769809388 seconds] Frame Number: 705 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4cc (54476) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e5e [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 90162, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 90162 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 704] [The RTT to ACK the segment was: 0.000038832 seconds] [iRTT: 0.043521908 seconds] Frame 706: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.567482084 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.567482084 seconds [Time delta from previous captured frame: 0.000103843 seconds] [Time delta from previous displayed frame: 0.000103843 seconds] [Time since reference or first frame: 24.769913231 seconds] Frame Number: 706 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x168a (5770) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93ec [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 90162, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 90162 (relative sequence number) [Next sequence number: 91622 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 707: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.567523470 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.567523470 seconds [Time delta from previous captured frame: 0.000041386 seconds] [Time delta from previous displayed frame: 0.000041386 seconds] [Time since reference or first frame: 24.769954617 seconds] Frame Number: 707 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4cd (54477) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e5d [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 91622, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 91622 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 706] [The RTT to ACK the segment was: 0.000041386 seconds] [iRTT: 0.043521908 seconds] Frame 708: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.567595697 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.567595697 seconds [Time delta from previous captured frame: 0.000072227 seconds] [Time delta from previous displayed frame: 0.000072227 seconds] [Time since reference or first frame: 24.770026844 seconds] Frame Number: 708 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x168c (5772) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93ea [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 91622, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 91622 (relative sequence number) [Next sequence number: 93082 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 709: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.567642684 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.567642684 seconds [Time delta from previous captured frame: 0.000046987 seconds] [Time delta from previous displayed frame: 0.000046987 seconds] [Time since reference or first frame: 24.770073831 seconds] Frame Number: 709 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4ce (54478) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e5c [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 93082, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 93082 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 708] [The RTT to ACK the segment was: 0.000046987 seconds] [iRTT: 0.043521908 seconds] Frame 710: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.567725178 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.567725178 seconds [Time delta from previous captured frame: 0.000082494 seconds] [Time delta from previous displayed frame: 0.000082494 seconds] [Time since reference or first frame: 24.770156325 seconds] Frame Number: 710 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x1692 (5778) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93e4 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 93082, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 93082 (relative sequence number) [Next sequence number: 94542 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 711: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.567767181 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.567767181 seconds [Time delta from previous captured frame: 0.000042003 seconds] [Time delta from previous displayed frame: 0.000042003 seconds] [Time since reference or first frame: 24.770198328 seconds] Frame Number: 711 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4cf (54479) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e5b [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 94542, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 94542 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 710] [The RTT to ACK the segment was: 0.000042003 seconds] [iRTT: 0.043521908 seconds] Frame 712: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.567853838 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.567853838 seconds [Time delta from previous captured frame: 0.000086657 seconds] [Time delta from previous displayed frame: 0.000086657 seconds] [Time since reference or first frame: 24.770284985 seconds] Frame Number: 712 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x1694 (5780) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93e2 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 94542, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 94542 (relative sequence number) [Next sequence number: 96002 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 713: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.567895235 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.567895235 seconds [Time delta from previous captured frame: 0.000041397 seconds] [Time delta from previous displayed frame: 0.000041397 seconds] [Time since reference or first frame: 24.770326382 seconds] Frame Number: 713 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4d0 (54480) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e5a [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 96002, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 96002 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 712] [The RTT to ACK the segment was: 0.000041397 seconds] [iRTT: 0.043521908 seconds] Frame 714: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.567982733 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.567982733 seconds [Time delta from previous captured frame: 0.000087498 seconds] [Time delta from previous displayed frame: 0.000087498 seconds] [Time since reference or first frame: 24.770413880 seconds] Frame Number: 714 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:ssl] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x1697 (5783) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93df [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 96002, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 96002 (relative sequence number) [Next sequence number: 97462 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (754 bytes) TCP segment data (706 bytes) [12 Reassembled TCP Segments (16437 bytes): #692(1083), #694(1460), #696(1460), #698(1460), #700(1460), #702(1460), #704(1460), #706(1460), #708(1460), #710(1460), #712(1460), #714(754)] [Frame: 692, payload: 0-1082 (1083 bytes)] [Frame: 694, payload: 1083-2542 (1460 bytes)] [Frame: 696, payload: 2543-4002 (1460 bytes)] [Frame: 698, payload: 4003-5462 (1460 bytes)] [Frame: 700, payload: 5463-6922 (1460 bytes)] [Frame: 702, payload: 6923-8382 (1460 bytes)] [Frame: 704, payload: 8383-9842 (1460 bytes)] [Frame: 706, payload: 9843-11302 (1460 bytes)] [Frame: 708, payload: 11303-12762 (1460 bytes)] [Frame: 710, payload: 12763-14222 (1460 bytes)] [Frame: 712, payload: 14223-15682 (1460 bytes)] [Frame: 714, payload: 15683-16436 (754 bytes)] [Segment count: 12] [Reassembled TCP length: 16437] [Reassembled TCP Data: 1703034030e4728130bca04adfd194b49827ff38722e530f...] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 16432 Encrypted Application Data: e4728130bca04adfd194b49827ff38722e530f9868ec2a5a... SSL segment data (16384 bytes) Secure Sockets Layer Frame 715: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.568024205 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.568024205 seconds [Time delta from previous captured frame: 0.000041472 seconds] [Time delta from previous displayed frame: 0.000041472 seconds] [Time since reference or first frame: 24.770455352 seconds] Frame Number: 715 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4d1 (54481) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e59 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 97462, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 97462 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 714] [The RTT to ACK the segment was: 0.000041472 seconds] [iRTT: 0.043521908 seconds] Frame 716: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.568112825 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.568112825 seconds [Time delta from previous captured frame: 0.000088620 seconds] [Time delta from previous displayed frame: 0.000088620 seconds] [Time since reference or first frame: 24.770543972 seconds] Frame Number: 716 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x169a (5786) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93dc [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 97462, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 97462 (relative sequence number) [Next sequence number: 98922 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 717: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.568157271 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.568157271 seconds [Time delta from previous captured frame: 0.000044446 seconds] [Time delta from previous displayed frame: 0.000044446 seconds] [Time since reference or first frame: 24.770588418 seconds] Frame Number: 717 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4d2 (54482) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e58 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 98922, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 98922 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 716] [The RTT to ACK the segment was: 0.000044446 seconds] [iRTT: 0.043521908 seconds] Frame 718: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.568241260 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.568241260 seconds [Time delta from previous captured frame: 0.000083989 seconds] [Time delta from previous displayed frame: 0.000083989 seconds] [Time since reference or first frame: 24.770672407 seconds] Frame Number: 718 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x169d (5789) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93d9 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 98922, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 98922 (relative sequence number) [Next sequence number: 100382 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 719: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.568280070 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.568280070 seconds [Time delta from previous captured frame: 0.000038810 seconds] [Time delta from previous displayed frame: 0.000038810 seconds] [Time since reference or first frame: 24.770711217 seconds] Frame Number: 719 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4d3 (54483) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e57 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 100382, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 100382 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 718] [The RTT to ACK the segment was: 0.000038810 seconds] [iRTT: 0.043521908 seconds] Frame 720: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.568370059 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.568370059 seconds [Time delta from previous captured frame: 0.000089989 seconds] [Time delta from previous displayed frame: 0.000089989 seconds] [Time since reference or first frame: 24.770801206 seconds] Frame Number: 720 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x169f (5791) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93d7 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 100382, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 100382 (relative sequence number) [Next sequence number: 101842 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 721: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.568407908 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.568407908 seconds [Time delta from previous captured frame: 0.000037849 seconds] [Time delta from previous displayed frame: 0.000037849 seconds] [Time since reference or first frame: 24.770839055 seconds] Frame Number: 721 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4d4 (54484) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e56 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 101842, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 101842 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 720] [The RTT to ACK the segment was: 0.000037849 seconds] [iRTT: 0.043521908 seconds] Frame 722: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.568499497 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.568499497 seconds [Time delta from previous captured frame: 0.000091589 seconds] [Time delta from previous displayed frame: 0.000091589 seconds] [Time since reference or first frame: 24.770930644 seconds] Frame Number: 722 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x16a2 (5794) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93d4 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 101842, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 101842 (relative sequence number) [Next sequence number: 103302 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 723: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.568563820 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.568563820 seconds [Time delta from previous captured frame: 0.000064323 seconds] [Time delta from previous displayed frame: 0.000064323 seconds] [Time since reference or first frame: 24.770994967 seconds] Frame Number: 723 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4d5 (54485) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e55 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 103302, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 103302 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 722] [The RTT to ACK the segment was: 0.000064323 seconds] [iRTT: 0.043521908 seconds] Frame 724: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.568629358 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.568629358 seconds [Time delta from previous captured frame: 0.000065538 seconds] [Time delta from previous displayed frame: 0.000065538 seconds] [Time since reference or first frame: 24.771060505 seconds] Frame Number: 724 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x16a4 (5796) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93d2 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 103302, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 103302 (relative sequence number) [Next sequence number: 104762 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 725: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.568668469 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.568668469 seconds [Time delta from previous captured frame: 0.000039111 seconds] [Time delta from previous displayed frame: 0.000039111 seconds] [Time since reference or first frame: 24.771099616 seconds] Frame Number: 725 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4d6 (54486) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e54 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 104762, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 104762 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 724] [The RTT to ACK the segment was: 0.000039111 seconds] [iRTT: 0.043521908 seconds] Frame 726: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.568757340 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.568757340 seconds [Time delta from previous captured frame: 0.000088871 seconds] [Time delta from previous displayed frame: 0.000088871 seconds] [Time since reference or first frame: 24.771188487 seconds] Frame Number: 726 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x16a9 (5801) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93cd [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 104762, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 104762 (relative sequence number) [Next sequence number: 106222 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 727: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.568795874 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.568795874 seconds [Time delta from previous captured frame: 0.000038534 seconds] [Time delta from previous displayed frame: 0.000038534 seconds] [Time since reference or first frame: 24.771227021 seconds] Frame Number: 727 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4d7 (54487) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e53 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 106222, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 106222 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 726] [The RTT to ACK the segment was: 0.000038534 seconds] [iRTT: 0.043521908 seconds] Frame 728: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.568886356 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.568886356 seconds [Time delta from previous captured frame: 0.000090482 seconds] [Time delta from previous displayed frame: 0.000090482 seconds] [Time since reference or first frame: 24.771317503 seconds] Frame Number: 728 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x16ab (5803) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93cb [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 106222, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 106222 (relative sequence number) [Next sequence number: 107682 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 729: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.568925026 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.568925026 seconds [Time delta from previous captured frame: 0.000038670 seconds] [Time delta from previous displayed frame: 0.000038670 seconds] [Time since reference or first frame: 24.771356173 seconds] Frame Number: 729 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4d8 (54488) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e52 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 107682, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 107682 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 728] [The RTT to ACK the segment was: 0.000038670 seconds] [iRTT: 0.043521908 seconds] Frame 730: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.569015688 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.569015688 seconds [Time delta from previous captured frame: 0.000090662 seconds] [Time delta from previous displayed frame: 0.000090662 seconds] [Time since reference or first frame: 24.771446835 seconds] Frame Number: 730 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x16ae (5806) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93c8 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 107682, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 107682 (relative sequence number) [Next sequence number: 109142 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 731: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.569052582 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.569052582 seconds [Time delta from previous captured frame: 0.000036894 seconds] [Time delta from previous displayed frame: 0.000036894 seconds] [Time since reference or first frame: 24.771483729 seconds] Frame Number: 731 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4d9 (54489) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e51 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 109142, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 109142 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 730] [The RTT to ACK the segment was: 0.000036894 seconds] [iRTT: 0.043521908 seconds] Frame 732: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.569145447 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.569145447 seconds [Time delta from previous captured frame: 0.000092865 seconds] [Time delta from previous displayed frame: 0.000092865 seconds] [Time since reference or first frame: 24.771576594 seconds] Frame Number: 732 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x16b0 (5808) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93c6 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 109142, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 109142 (relative sequence number) [Next sequence number: 110602 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 733: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.569184797 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.569184797 seconds [Time delta from previous captured frame: 0.000039350 seconds] [Time delta from previous displayed frame: 0.000039350 seconds] [Time since reference or first frame: 24.771615944 seconds] Frame Number: 733 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4da (54490) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e50 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 110602, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 110602 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 732] [The RTT to ACK the segment was: 0.000039350 seconds] [iRTT: 0.043521908 seconds] Frame 734: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.569288863 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.569288863 seconds [Time delta from previous captured frame: 0.000104066 seconds] [Time delta from previous displayed frame: 0.000104066 seconds] [Time since reference or first frame: 24.771720010 seconds] Frame Number: 734 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x16b5 (5813) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93c1 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 110602, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 110602 (relative sequence number) [Next sequence number: 112062 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 735: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.569329914 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.569329914 seconds [Time delta from previous captured frame: 0.000041051 seconds] [Time delta from previous displayed frame: 0.000041051 seconds] [Time since reference or first frame: 24.771761061 seconds] Frame Number: 735 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4db (54491) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e4f [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 112062, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 112062 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 734] [The RTT to ACK the segment was: 0.000041051 seconds] [iRTT: 0.043521908 seconds] Frame 736: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.569404679 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.569404679 seconds [Time delta from previous captured frame: 0.000074765 seconds] [Time delta from previous displayed frame: 0.000074765 seconds] [Time since reference or first frame: 24.771835826 seconds] Frame Number: 736 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:ssl] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x16b7 (5815) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93bf [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 112062, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 112062 (relative sequence number) [Next sequence number: 113522 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1131 bytes) TCP segment data (329 bytes) [12 Reassembled TCP Segments (16437 bytes): #714(706), #716(1460), #718(1460), #720(1460), #722(1460), #724(1460), #726(1460), #728(1460), #730(1460), #732(1460), #734(1460), #736(1131)] [Frame: 714, payload: 0-705 (706 bytes)] [Frame: 716, payload: 706-2165 (1460 bytes)] [Frame: 718, payload: 2166-3625 (1460 bytes)] [Frame: 720, payload: 3626-5085 (1460 bytes)] [Frame: 722, payload: 5086-6545 (1460 bytes)] [Frame: 724, payload: 6546-8005 (1460 bytes)] [Frame: 726, payload: 8006-9465 (1460 bytes)] [Frame: 728, payload: 9466-10925 (1460 bytes)] [Frame: 730, payload: 10926-12385 (1460 bytes)] [Frame: 732, payload: 12386-13845 (1460 bytes)] [Frame: 734, payload: 13846-15305 (1460 bytes)] [Frame: 736, payload: 15306-16436 (1131 bytes)] [Segment count: 12] [Reassembled TCP length: 16437] [Reassembled TCP Data: 17030340306d282f7675b244965fa1975b8a292dc7c20ba9...] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 16432 Encrypted Application Data: 6d282f7675b244965fa1975b8a292dc7c20ba990915eebd0... SSL segment data (16384 bytes) Secure Sockets Layer Frame 737: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.569442496 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.569442496 seconds [Time delta from previous captured frame: 0.000037817 seconds] [Time delta from previous displayed frame: 0.000037817 seconds] [Time since reference or first frame: 24.771873643 seconds] Frame Number: 737 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4dc (54492) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e4e [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 113522, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 113522 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 736] [The RTT to ACK the segment was: 0.000037817 seconds] [iRTT: 0.043521908 seconds] Frame 738: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.569550722 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.569550722 seconds [Time delta from previous captured frame: 0.000108226 seconds] [Time delta from previous displayed frame: 0.000108226 seconds] [Time since reference or first frame: 24.771981869 seconds] Frame Number: 738 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x16ba (5818) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93bc [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 113522, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 113522 (relative sequence number) [Next sequence number: 114982 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 739: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.569598494 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.569598494 seconds [Time delta from previous captured frame: 0.000047772 seconds] [Time delta from previous displayed frame: 0.000047772 seconds] [Time since reference or first frame: 24.772029641 seconds] Frame Number: 739 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4dd (54493) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e4d [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 114982, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 114982 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 738] [The RTT to ACK the segment was: 0.000047772 seconds] [iRTT: 0.043521908 seconds] Frame 740: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.569662372 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.569662372 seconds [Time delta from previous captured frame: 0.000063878 seconds] [Time delta from previous displayed frame: 0.000063878 seconds] [Time since reference or first frame: 24.772093519 seconds] Frame Number: 740 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x16bc (5820) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93ba [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 114982, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 114982 (relative sequence number) [Next sequence number: 116442 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 741: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.569700880 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.569700880 seconds [Time delta from previous captured frame: 0.000038508 seconds] [Time delta from previous displayed frame: 0.000038508 seconds] [Time since reference or first frame: 24.772132027 seconds] Frame Number: 741 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4de (54494) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e4c [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 116442, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 116442 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 740] [The RTT to ACK the segment was: 0.000038508 seconds] [iRTT: 0.043521908 seconds] Frame 742: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.569791785 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.569791785 seconds [Time delta from previous captured frame: 0.000090905 seconds] [Time delta from previous displayed frame: 0.000090905 seconds] [Time since reference or first frame: 24.772222932 seconds] Frame Number: 742 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x16bf (5823) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93b7 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 116442, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 116442 (relative sequence number) [Next sequence number: 117902 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 743: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.569830903 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.569830903 seconds [Time delta from previous captured frame: 0.000039118 seconds] [Time delta from previous displayed frame: 0.000039118 seconds] [Time since reference or first frame: 24.772262050 seconds] Frame Number: 743 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4df (54495) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e4b [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 117902, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 117902 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 742] [The RTT to ACK the segment was: 0.000039118 seconds] [iRTT: 0.043521908 seconds] Frame 744: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.569920961 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.569920961 seconds [Time delta from previous captured frame: 0.000090058 seconds] [Time delta from previous displayed frame: 0.000090058 seconds] [Time since reference or first frame: 24.772352108 seconds] Frame Number: 744 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0x16c1 (5825) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93b5 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 117902, Ack: 4161, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 117902 (relative sequence number) [Next sequence number: 119362 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 745: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.569960588 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.569960588 seconds [Time delta from previous captured frame: 0.000039627 seconds] [Time delta from previous displayed frame: 0.000039627 seconds] [Time since reference or first frame: 24.772391735 seconds] Frame Number: 745 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4e0 (54496) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e4a [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 119362, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 119362 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 744] [The RTT to ACK the segment was: 0.000039627 seconds] [iRTT: 0.043521908 seconds] Frame 751: 1348 bytes on wire (10784 bits), 1348 bytes captured (10784 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.612814685 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.612814685 seconds [Time delta from previous captured frame: 0.010988998 seconds] [Time delta from previous displayed frame: 0.042854097 seconds] [Time since reference or first frame: 24.815245832 seconds] Frame Number: 751 Frame Length: 1348 bytes (10784 bits) Capture Length: 1348 bytes (10784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1332 Identification: 0x44a1 (17569) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x667d [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 119362, Ack: 4161, Len: 1292 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1292] Sequence number: 119362 (relative sequence number) [Next sequence number: 120654 (relative sequence number)] Acknowledgment number: 4161 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 8516 [Calculated window size: 8516] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x809e [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1292] [Bytes sent since last PSH flag: 1292] TCP segment data (1292 bytes) [6 Reassembled TCP Segments (7461 bytes): #736(329), #738(1460), #740(1460), #742(1460), #744(1460), #751(1292)] [Frame: 736, payload: 0-328 (329 bytes)] [Frame: 738, payload: 329-1788 (1460 bytes)] [Frame: 740, payload: 1789-3248 (1460 bytes)] [Frame: 742, payload: 3249-4708 (1460 bytes)] [Frame: 744, payload: 4709-6168 (1460 bytes)] [Frame: 751, payload: 6169-7460 (1292 bytes)] [Segment count: 6] [Reassembled TCP length: 7461] [Reassembled TCP Data: 1703031d20fba7aafed6ae99f4da74599ca00083671e8187...] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 7456 Encrypted Application Data: fba7aafed6ae99f4da74599ca00083671e8187e31b0e083a... SSL segment data (7406 bytes) [4 Reassembled SSL segments (56558 bytes): #692(16384), #714(16384), #736(16384), #751(7406)] [Frame: 692, payload: 0-16383 (16384 bytes)] [Frame: 714, payload: 16384-32767 (16384 bytes)] [Frame: 736, payload: 32768-49151 (16384 bytes)] [Frame: 751, payload: 49152-56557 (7406 bytes)] [Segment count: 4] [Reassembled PDU length: 56558] [Reassembled PDU data: 485454502f312e3120323030204f4b0d0a43616368652d43...] Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 56035\r\n [Content length: 56035] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:30:14 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: LivePersonID=LP i=172480676442344,d=1479724214; path=/; domain=.liveperson.net\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:30:13 GMT\r\n \r\n [HTTP response 5/5] [Time since request: 0.096117906 seconds] [Prev request in frame: 403] [Prev response in frame: 409] [Request in frame: 655] File Data: 56035 bytes Line-based text data: application/x-javascript [truncated]lpConnLib.Process({"ResultSet": {"lpCallId":"751328680093-545752455555","lpCallConfirm":"","lpJS_Execute":[{"code_id": "webServerOverride", "js_code": "if (lpMTagConfig.lpServer != 'server.lon.liveperson.net') { lpMTag.override Frame 752: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.612993148 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.612993148 seconds [Time delta from previous captured frame: 0.000178463 seconds] [Time delta from previous displayed frame: 0.000178463 seconds] [Time since reference or first frame: 24.815424295 seconds] Frame Number: 752 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4e1 (54497) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e49 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 120654, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 4161 (relative sequence number) Acknowledgment number: 120654 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 751] [The RTT to ACK the segment was: 0.000178463 seconds] [iRTT: 0.043521908 seconds] Frame 756: 1325 bytes on wire (10600 bits), 1325 bytes captured (10600 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.634476579 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.634476579 seconds [Time delta from previous captured frame: 0.000462777 seconds] [Time delta from previous displayed frame: 0.021483431 seconds] [Time since reference or first frame: 24.836907726 seconds] Frame Number: 756 Frame Length: 1325 bytes (10600 bits) Capture Length: 1325 bytes (10600 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1309 Identification: 0xd4e2 (54498) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8953 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 4161, Ack: 120654, Len: 1269 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 1269] Sequence number: 4161 (relative sequence number) [Next sequence number: 5430 (relative sequence number)] Acknowledgment number: 120654 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdcb4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1269] [Bytes sent since last PSH flag: 1269] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 1264 Encrypted Application Data: ccf4b13d0fb7490e093a98ef9eb8690f3203751612532e2b... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=310652208809-141496981530&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racu [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=310652208809-141496981530&protV=20&lpjson=1&page=https%3A] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=310652208809-141496981530&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fservice] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=310652208809-141496981530&protV=20&lpjson=1&page=https%3A//moj.hrvatskiteleko Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=310652208809-141496981530&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/rac Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagStartPage Request URI Query Parameter: lpCallId=310652208809-141496981530 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: PV%21ErrorName= Request URI Query Parameter: PV%21unit=csc-portal Request URI Query Parameter: PV%21PageUrl=/racuni Request URI Query Parameter: PV%21ErrorCount=0 Request URI Query Parameter: PV%21pageLoadTime=1%20sec Request URI Query Parameter: PV%21visitorActive=1 Request URI Query Parameter: SV%21language=croatian Request URI Query Parameter: VV%21CustomerLoggedIn=rovismi1 Request URI Query Parameter: title=HT%20fiksni%20ra%u010Dun%20br.%205019102951%20%u2022%20Moj%20Telekom Request URI Query Parameter: referrer=https%3A//moj.hrvatskitelekom.hr/ Request URI Query Parameter: cobrowse=true Request URI Query Parameter [truncated]: cookie=visited%3D1%3B%20_ceg.s%3Dogzmhy%3B%20_ceg.u%3Dogzmhy%3B%2062370768-VID%3D172480676440713%3B%2062370768-SKEY%3D5756825085274454102%3B%20HumanClickSiteContainerID_62370768%3DSTANDALONE%3B%20Co Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagStartPage&lpCallId=310652208809-141496981530&protV=20&lpjs] [HTTP request 6/6] [Prev request in frame: 655] Frame 766: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.677855354 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.677855354 seconds [Time delta from previous captured frame: 0.003261909 seconds] [Time delta from previous displayed frame: 0.043378775 seconds] [Time since reference or first frame: 24.880286501 seconds] Frame Number: 766 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: bc2959d9 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x7dff (32255) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x322b [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 120654, Ack: 5430, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 120654 (relative sequence number) Acknowledgment number: 5430 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 9785 [Calculated window size: 9785] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdc75 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 756] [The RTT to ACK the segment was: 0.043378775 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 51745 Src Port: 51745 Frame 767: 877 bytes on wire (7016 bits), 877 bytes captured (7016 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.681608854 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.681608854 seconds [Time delta from previous captured frame: 0.003753500 seconds] [Time delta from previous displayed frame: 0.003753500 seconds] [Time since reference or first frame: 24.884040001 seconds] Frame Number: 767 Frame Length: 877 bytes (7016 bits) Capture Length: 877 bytes (7016 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 861 Identification: 0x80bf (32959) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x2c36 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 120654, Ack: 5430, Len: 821 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 821] Sequence number: 120654 (relative sequence number) [Next sequence number: 121475 (relative sequence number)] Acknowledgment number: 5430 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 9785 [Calculated window size: 9785] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5e74 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 821] [Bytes sent since last PSH flag: 821] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 816 Encrypted Application Data: ef56db4ab47c945d6f237a1a9e8d03543cf107dff5f96703... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 340\r\n [Content length: 340] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:30:14 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:30:13 GMT\r\n \r\n [HTTP response 6/6] [Time since request: 0.047132275 seconds] [Prev request in frame: 655] [Prev response in frame: 751] [Request in frame: 756] File Data: 340 bytes Line-based text data: application/x-javascript [truncated]lpConnLib.Process({"ResultSet": {"lpCallId":"310652208809-141496981530","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"},{"code_id": "FPCSetVal", "js_code": "lpMTag Frame 768: 925 bytes on wire (7400 bits), 925 bytes captured (7400 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.685873316 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.685873316 seconds [Time delta from previous captured frame: 0.004264462 seconds] [Time delta from previous displayed frame: 0.004264462 seconds] [Time since reference or first frame: 24.888304463 seconds] Frame Number: 768 Frame Length: 925 bytes (7400 bits) Capture Length: 925 bytes (7400 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 909 Identification: 0xd4e3 (54499) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8ae2 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 5430, Ack: 121475, Len: 869 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 869] Sequence number: 5430 (relative sequence number) [Next sequence number: 6299 (relative sequence number)] Acknowledgment number: 121475 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdb24 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 767] [The RTT to ACK the segment was: 0.004264462 seconds] [iRTT: 0.043521908 seconds] [Bytes in flight: 869] [Bytes sent since last PSH flag: 869] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 864 Encrypted Application Data: 13d29b77143de5db6f97a50f3198731c38205745a9258dd8... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=655570808185-529993946698&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croat [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=655570808185-529993946698&protV=20&lpjson=1&SV%21impression-que] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=655570808185-529993946698&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croatian&SV%21imp] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=655570808185-529993946698&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-por Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=655570808185-529993946698&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croa Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagUrl Request URI Query Parameter: lpCallId=655570808185-529993946698 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: SV%21impression-query-name=chat-csc-portal-croatian Request URI Query Parameter: SV%21impression-query-room=chat-csc-portal-croatian Request URI Query Parameter: id=6207797629 Request URI Query Parameter: info=button-impression%3Achat-csc-portal-croatian%28HT%20fiksni%20ra%u010Dun%20br.%205019102951%20%u2022%20Moj%20Telekom%29 Request URI Query Parameter: waitForVisitor=true Request URI Query Parameter: d=1479724199683 Request URI Query Parameter: page=https%3A//server.lon.liveperson.net/hcp/width/img40.gif Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=655570808185-529993946698&protV=20&lpjson=1&S] [HTTP request 7/7] [Prev request in frame: 756] Frame 771: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.728715579 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.728715579 seconds [Time delta from previous captured frame: 0.001900753 seconds] [Time delta from previous displayed frame: 0.042842263 seconds] [Time since reference or first frame: 24.931146726 seconds] Frame Number: 771 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 862a1715 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xa7e8 (42984) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x0842 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 121475, Ack: 6299, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 121475 (relative sequence number) Acknowledgment number: 6299 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 10654 [Calculated window size: 10654] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd276 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 768] [The RTT to ACK the segment was: 0.042842263 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 29381 Src Port: 29381 Frame 772: 749 bytes on wire (5992 bits), 749 bytes captured (5992 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.730820718 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.730820718 seconds [Time delta from previous captured frame: 0.002105139 seconds] [Time delta from previous displayed frame: 0.002105139 seconds] [Time since reference or first frame: 24.933251865 seconds] Frame Number: 772 Frame Length: 749 bytes (5992 bits) Capture Length: 749 bytes (5992 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 733 Identification: 0xa905 (43269) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x0470 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 121475, Ack: 6299, Len: 693 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 693] Sequence number: 121475 (relative sequence number) [Next sequence number: 122168 (relative sequence number)] Acknowledgment number: 6299 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 10654 [Calculated window size: 10654] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x53cf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 693] [Bytes sent since last PSH flag: 693] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 688 Encrypted Application Data: 6587f68c287ab5e9dbb59fc70d4899493e1929f0c7b27620... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 119\r\n [Content length: 119] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:30:14 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: LivePersonID=LP i=172480676442345,d=1479724214; path=/; domain=.liveperson.net\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:30:13 GMT\r\n \r\n [HTTP response 7/7] [Time since request: 0.044947402 seconds] [Prev request in frame: 756] [Prev response in frame: 767] [Request in frame: 768] File Data: 119 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"655570808185-529993946698","lpCallConfirm":"","lpData":[{"result":60}]}}); Frame 776: 573 bytes on wire (4584 bits), 573 bytes captured (4584 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.735578229 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.735578229 seconds [Time delta from previous captured frame: 0.002078666 seconds] [Time delta from previous displayed frame: 0.004757511 seconds] [Time since reference or first frame: 24.938009376 seconds] Frame Number: 776 Frame Length: 573 bytes (4584 bits) Capture Length: 573 bytes (4584 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 557 Identification: 0xd4e4 (54500) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8c41 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 6299, Ack: 122168, Len: 517 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 517] Sequence number: 6299 (relative sequence number) [Next sequence number: 6816 (relative sequence number)] Acknowledgment number: 122168 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd9c4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 772] [The RTT to ACK the segment was: 0.004757511 seconds] [iRTT: 0.043521908 seconds] [Bytes in flight: 517] [Bytes sent since last PSH flag: 517] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 512 Encrypted Application Data: 3b05939c3b8d195845264bb7c0c43f41209fa4e90be2bc12... Hypertext Transfer Protocol GET /hc/62370768/?lpCallId=651416434125-209047248097&protV=20&lpjson=5&site=62370768&cmd=leVisitorEvent&type=impression&appKey=f907f2d9acd64b7f8c00b83bed3c2822&data=dynBut%3A9 HTTP/1.1\r\n [Expert Info (Chat/Sequence): GET /hc/62370768/?lpCallId=651416434125-209047248097&protV=20&lpjson=5&site=62370768&cmd=leVisitorEvent&type=impression&appKey=f907f2d9acd64b7f8c00b83bed3c2822&data=dynBut%3A9 HTTP/1.1\r\n] [GET /hc/62370768/?lpCallId=651416434125-209047248097&protV=20&lpjson=5&site=62370768&cmd=leVisitorEvent&type=impression&appKey=f907f2d9acd64b7f8c00b83bed3c2822&data=dynBut%3A9 HTTP/1.1\r\n] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI: /hc/62370768/?lpCallId=651416434125-209047248097&protV=20&lpjson=5&site=62370768&cmd=leVisitorEvent&type=impression&appKey=f907f2d9acd64b7f8c00b83bed3c2822&data=dynBut%3A9 Request URI Path: /hc/62370768/ Request URI Query: lpCallId=651416434125-209047248097&protV=20&lpjson=5&site=62370768&cmd=leVisitorEvent&type=impression&appKey=f907f2d9acd64b7f8c00b83bed3c2822&data=dynBut%3A9 Request URI Query Parameter: lpCallId=651416434125-209047248097 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=5 Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=leVisitorEvent Request URI Query Parameter: type=impression Request URI Query Parameter: appKey=f907f2d9acd64b7f8c00b83bed3c2822 Request URI Query Parameter: data=dynBut%3A9 Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI: https://server.lon.liveperson.net/hc/62370768/?lpCallId=651416434125-209047248097&protV=20&lpjson=5&site=62370768&cmd=leVisitorEvent&type=impression&appKey=f907f2d9acd64b7f8c00b83bed3c2822&data=dynBut%3A9] [HTTP request 8/8] [Prev request in frame: 768] Frame 778: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.778381321 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.778381321 seconds [Time delta from previous captured frame: 0.010760882 seconds] [Time delta from previous displayed frame: 0.042803092 seconds] [Time since reference or first frame: 24.980812468 seconds] Frame Number: 778 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: ac381446 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd244 (53828) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xdde5 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 122168, Ack: 6816, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 122168 (relative sequence number) Acknowledgment number: 6816 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 11171 [Calculated window size: 11171] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xcbb7 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 776] [The RTT to ACK the segment was: 0.042803092 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 65535 Src Port: 65535 Frame 779: 637 bytes on wire (5096 bits), 637 bytes captured (5096 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.780236211 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.780236211 seconds [Time delta from previous captured frame: 0.001854890 seconds] [Time delta from previous displayed frame: 0.001854890 seconds] [Time since reference or first frame: 24.982667358 seconds] Frame Number: 779 Frame Length: 637 bytes (5096 bits) Capture Length: 637 bytes (5096 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 621 Identification: 0xd393 (54163) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xda51 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 122168, Ack: 6816, Len: 581 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 581] Sequence number: 122168 (relative sequence number) [Next sequence number: 122749 (relative sequence number)] Acknowledgment number: 6816 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 11171 [Calculated window size: 11171] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x853b [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 581] [Bytes sent since last PSH flag: 581] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 576 Encrypted Application Data: 756b84306cc28909e07487a0bdc3923334891421cccfa8cd... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 94\r\n [Content length: 94] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:30:14 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: LivePersonID=LP i=172480676442346,d=1479724214; path=/; domain=.liveperson.net\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:30:13 GMT\r\n \r\n [HTTP response 8/8] [Time since request: 0.044657982 seconds] [Prev request in frame: 768] [Prev response in frame: 772] [Request in frame: 776] File Data: 94 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"651416434125-209047248097","lpCallConfirm":""}}); Frame 780: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:29:59.820591099 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724199.820591099 seconds [Time delta from previous captured frame: 0.040354888 seconds] [Time delta from previous displayed frame: 0.040354888 seconds] [Time since reference or first frame: 25.023022246 seconds] Frame Number: 780 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4e5 (54501) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e45 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 6816, Ack: 122749, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 6816 (relative sequence number) Acknowledgment number: 122749 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 779] [The RTT to ACK the segment was: 0.040354888 seconds] [iRTT: 0.043521908 seconds] Frame 874: 813 bytes on wire (6504 bits), 813 bytes captured (6504 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:09.742035884 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724209.742035884 seconds [Time delta from previous captured frame: 0.207626290 seconds] [Time delta from previous displayed frame: 9.921444785 seconds] [Time since reference or first frame: 34.944467031 seconds] Frame Number: 874 Frame Length: 813 bytes (6504 bits) Capture Length: 813 bytes (6504 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 797 Identification: 0xd4e6 (54502) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b4f [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 6816, Ack: 122749, Len: 757 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 757] Sequence number: 6816 (relative sequence number) [Next sequence number: 7573 (relative sequence number)] Acknowledgment number: 122749 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdab4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 757] [Bytes sent since last PSH flag: 757] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 752 Encrypted Application Data: 686d95377580c61254fac1dce5611c6bc31c0340a0b41064... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=811889567039-076742755264&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni% [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=811889567039-076742755264&protV=20&lpjson=1&page=https%3A//m] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=811889567039-076742755264&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=811889567039-076742755264&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.h Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=811889567039-076742755264&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagInPage Request URI Query Parameter: lpCallId=811889567039-076742755264 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: cobrowse=true Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=811889567039-076742755264&protV=20&lpjson=] [HTTP request 9/9] [Prev request in frame: 776] Frame 876: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:09.785163644 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724209.785163644 seconds [Time delta from previous captured frame: 0.031540172 seconds] [Time delta from previous displayed frame: 0.043127760 seconds] [Time since reference or first frame: 34.987594791 seconds] Frame Number: 876 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: e8677542 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xb333 (45875) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xfcf6 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 122749, Ack: 7573, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 122749 (relative sequence number) Acknowledgment number: 7573 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 11928 [Calculated window size: 11928] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc388 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 874] [The RTT to ACK the segment was: 0.043127760 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 18640 Src Port: 18640 Frame 877: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:09.787837945 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724209.787837945 seconds [Time delta from previous captured frame: 0.002674301 seconds] [Time delta from previous displayed frame: 0.002674301 seconds] [Time since reference or first frame: 34.990269092 seconds] Frame Number: 877 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0xb64a (46666) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xf74a [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 122749, Ack: 7573, Len: 661 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 122749 (relative sequence number) [Next sequence number: 123410 (relative sequence number)] Acknowledgment number: 7573 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 11928 [Calculated window size: 11928] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x39a9 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: 79953f08117c27e4e1b046c46882e91c664bc4f9af112ec0... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 188\r\n [Content length: 188] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:30:24 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:30:23 GMT\r\n \r\n [HTTP response 9/9] [Time since request: 0.045802061 seconds] [Prev request in frame: 776] [Prev response in frame: 779] [Request in frame: 874] File Data: 188 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"811889567039-076742755264","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"}]}}); Frame 878: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:09.787874253 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724209.787874253 seconds [Time delta from previous captured frame: 0.000036308 seconds] [Time delta from previous displayed frame: 0.000036308 seconds] [Time since reference or first frame: 34.990305400 seconds] Frame Number: 878 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4e7 (54503) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e43 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 7573, Ack: 123410, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 7573 (relative sequence number) Acknowledgment number: 123410 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 877] [The RTT to ACK the segment was: 0.000036308 seconds] [iRTT: 0.043521908 seconds] Frame 962: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:19.801605706 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724219.801605706 seconds [Time delta from previous captured frame: 0.000015896 seconds] [Time delta from previous displayed frame: 10.013731453 seconds] [Time since reference or first frame: 45.004036853 seconds] Frame Number: 962 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4e8 (54504) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e42 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 7572, Ack: 123410, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 7572 (relative sequence number) Acknowledgment number: 123410 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [TCP Analysis Flags] [Expert Info (Note/Sequence): TCP keep-alive segment] [TCP keep-alive segment] [Severity level: Note] [Group: Sequence] Frame 963: 813 bytes on wire (6504 bits), 813 bytes captured (6504 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:19.802338580 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724219.802338580 seconds [Time delta from previous captured frame: 0.000732874 seconds] [Time delta from previous displayed frame: 0.000732874 seconds] [Time since reference or first frame: 45.004769727 seconds] Frame Number: 963 Frame Length: 813 bytes (6504 bits) Capture Length: 813 bytes (6504 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 797 Identification: 0xd4e9 (54505) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b4c [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 7573, Ack: 123410, Len: 757 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 757] Sequence number: 7573 (relative sequence number) [Next sequence number: 8330 (relative sequence number)] Acknowledgment number: 123410 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65340 [Calculated window size: 65340] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdab4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 757] [Bytes sent since last PSH flag: 757] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 752 Encrypted Application Data: c7403daf1fc0906fc2384d763ecd2f5c3cfa54fcc4cd8776... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=723506896623-344152705650&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni% [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=723506896623-344152705650&protV=20&lpjson=1&page=https%3A//m] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=723506896623-344152705650&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=723506896623-344152705650&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.h Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=723506896623-344152705650&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagInPage Request URI Query Parameter: lpCallId=723506896623-344152705650 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: cobrowse=true Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=723506896623-344152705650&protV=20&lpjson=] [HTTP request 10/10] [Prev request in frame: 874] Frame 965: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:19.844214191 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724219.844214191 seconds [Time delta from previous captured frame: 0.000077923 seconds] [Time delta from previous displayed frame: 0.041875611 seconds] [Time since reference or first frame: 45.046645338 seconds] Frame Number: 965 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 9408dfc5 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x1b4b (6987) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x94df [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 123410, Ack: 7573, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 123410 (relative sequence number) Acknowledgment number: 7573 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 11928 [Calculated window size: 11928] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xc0f3 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [TCP Analysis Flags] [This is a TCP duplicate ack] [Duplicate ACK #: 1] [Duplicate to the ACK in frame: 876] [Expert Info (Note/Sequence): Duplicate ACK (#1)] [Duplicate ACK (#1)] [Severity level: Note] [Group: Sequence] VSS-Monitoring ethernet trailer, Source Port: 51449 Src Port: 51449 Frame 966: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:19.845217481 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724219.845217481 seconds [Time delta from previous captured frame: 0.001003290 seconds] [Time delta from previous displayed frame: 0.001003290 seconds] [Time since reference or first frame: 45.047648628 seconds] Frame Number: 966 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 816f6d9f Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x1bdb (7131) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x944f [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 123410, Ack: 8330, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 123410 (relative sequence number) Acknowledgment number: 8330 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 12685 [Calculated window size: 12685] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xbb09 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 963] [The RTT to ACK the segment was: 0.042878901 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 1200 Src Port: 1200 Frame 967: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:19.847608094 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724219.847608094 seconds [Time delta from previous captured frame: 0.002390613 seconds] [Time delta from previous displayed frame: 0.002390613 seconds] [Time since reference or first frame: 45.050039241 seconds] Frame Number: 967 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0x1e67 (7783) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x8f2e [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 123410, Ack: 8330, Len: 661 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 123410 (relative sequence number) [Next sequence number: 124071 (relative sequence number)] Acknowledgment number: 8330 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 12685 [Calculated window size: 12685] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd4f8 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: 50e58804589457f1bb3ba913973a7b540c469c4fba2d1626... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 188\r\n [Content length: 188] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:30:34 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:30:34 GMT\r\n \r\n [HTTP response 10/10] [Time since request: 0.045269514 seconds] [Prev request in frame: 874] [Prev response in frame: 877] [Request in frame: 963] File Data: 188 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"723506896623-344152705650","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"}]}}); Frame 968: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:19.847702820 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724219.847702820 seconds [Time delta from previous captured frame: 0.000094726 seconds] [Time delta from previous displayed frame: 0.000094726 seconds] [Time since reference or first frame: 45.050133967 seconds] Frame Number: 968 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4ea (54506) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e40 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 8330, Ack: 124071, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 8330 (relative sequence number) Acknowledgment number: 124071 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 967] [The RTT to ACK the segment was: 0.000094726 seconds] [iRTT: 0.043521908 seconds] Frame 999: 925 bytes on wire (7400 bits), 925 bytes captured (7400 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:29.743459724 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724229.743459724 seconds [Time delta from previous captured frame: 0.157317733 seconds] [Time delta from previous displayed frame: 9.895756904 seconds] [Time since reference or first frame: 54.945890871 seconds] Frame Number: 999 Frame Length: 925 bytes (7400 bits) Capture Length: 925 bytes (7400 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 909 Identification: 0xd4eb (54507) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8ada [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 8330, Ack: 124071, Len: 869 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 869] Sequence number: 8330 (relative sequence number) [Next sequence number: 9199 (relative sequence number)] Acknowledgment number: 124071 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdb24 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 869] [Bytes sent since last PSH flag: 869] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 864 Encrypted Application Data: 1b0ea94f534219ec3aa223bda8cc4b88d0b8524cbf90c5a7... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=204732008437-748056875658&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croat [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=204732008437-748056875658&protV=20&lpjson=1&SV%21impression-que] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=204732008437-748056875658&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croatian&SV%21imp] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=204732008437-748056875658&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-por Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=204732008437-748056875658&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croa Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagUrl Request URI Query Parameter: lpCallId=204732008437-748056875658 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: SV%21impression-query-name=chat-csc-portal-croatian Request URI Query Parameter: SV%21impression-query-room=chat-csc-portal-croatian Request URI Query Parameter: id=6207797629 Request URI Query Parameter: info=button-impression%3Achat-csc-portal-croatian%28HT%20fiksni%20ra%u010Dun%20br.%205019102951%20%u2022%20Moj%20Telekom%29 Request URI Query Parameter: waitForVisitor=true Request URI Query Parameter: d=1479724229738 Request URI Query Parameter: page=https%3A//server.lon.liveperson.net/hcp/width/img40.gif Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=204732008437-748056875658&protV=20&lpjson=1&S] [HTTP request 11/11] [Prev request in frame: 963] Frame 1000: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:29.786548610 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724229.786548610 seconds [Time delta from previous captured frame: 0.043088886 seconds] [Time delta from previous displayed frame: 0.043088886 seconds] [Time since reference or first frame: 54.988979757 seconds] Frame Number: 1000 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: ecb88188 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x1c7a (7290) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x93b0 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 124071, Ack: 9199, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 124071 (relative sequence number) Acknowledgment number: 9199 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 13554 [Calculated window size: 13554] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb1aa [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 999] [The RTT to ACK the segment was: 0.043088886 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 24802 Src Port: 24802 Frame 1001: 749 bytes on wire (5992 bits), 749 bytes captured (5992 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:29.788760099 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724229.788760099 seconds [Time delta from previous captured frame: 0.002211489 seconds] [Time delta from previous displayed frame: 0.002211489 seconds] [Time since reference or first frame: 54.991191246 seconds] Frame Number: 1001 Frame Length: 749 bytes (5992 bits) Capture Length: 749 bytes (5992 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 733 Identification: 0x1f38 (7992) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x8e3d [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 124071, Ack: 9199, Len: 693 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 693] Sequence number: 124071 (relative sequence number) [Next sequence number: 124764 (relative sequence number)] Acknowledgment number: 9199 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 13554 [Calculated window size: 13554] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8d6e [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 693] [Bytes sent since last PSH flag: 693] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 688 Encrypted Application Data: ad7eca5780a94b23bc521930a4280e5007b57323ed3cc0e8... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 119\r\n [Content length: 119] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:30:44 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: LivePersonID=LP i=172480676442495,d=1479724244; path=/; domain=.liveperson.net\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:30:44 GMT\r\n \r\n [HTTP response 11/11] [Time since request: 0.045300375 seconds] [Prev request in frame: 963] [Prev response in frame: 967] [Request in frame: 999] File Data: 119 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"204732008437-748056875658","lpCallConfirm":"","lpData":[{"result":40}]}}); Frame 1002: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:29.788810438 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724229.788810438 seconds [Time delta from previous captured frame: 0.000050339 seconds] [Time delta from previous displayed frame: 0.000050339 seconds] [Time since reference or first frame: 54.991241585 seconds] Frame Number: 1002 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4ec (54508) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e3e [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 9199, Ack: 124764, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 9199 (relative sequence number) Acknowledgment number: 124764 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1001] [The RTT to ACK the segment was: 0.000050339 seconds] [iRTT: 0.043521908 seconds] Frame 1003: 813 bytes on wire (6504 bits), 813 bytes captured (6504 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:29.861408427 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724229.861408427 seconds [Time delta from previous captured frame: 0.072597989 seconds] [Time delta from previous displayed frame: 0.072597989 seconds] [Time since reference or first frame: 55.063839574 seconds] Frame Number: 1003 Frame Length: 813 bytes (6504 bits) Capture Length: 813 bytes (6504 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 797 Identification: 0xd4ed (54509) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b48 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 9199, Ack: 124764, Len: 757 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 757] Sequence number: 9199 (relative sequence number) [Next sequence number: 9956 (relative sequence number)] Acknowledgment number: 124764 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdab4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 757] [Bytes sent since last PSH flag: 757] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 752 Encrypted Application Data: 4099390538265c9a8c101d35625c55f58c4b4159cea2d667... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=801119070659-304442259484&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni% [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=801119070659-304442259484&protV=20&lpjson=1&page=https%3A//m] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=801119070659-304442259484&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=801119070659-304442259484&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.h Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=801119070659-304442259484&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagInPage Request URI Query Parameter: lpCallId=801119070659-304442259484 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: cobrowse=true Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=801119070659-304442259484&protV=20&lpjson=] [HTTP request 12/12] [Prev request in frame: 999] Frame 1004: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:29.904200440 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724229.904200440 seconds [Time delta from previous captured frame: 0.042792013 seconds] [Time delta from previous displayed frame: 0.042792013 seconds] [Time since reference or first frame: 55.106631587 seconds] Frame Number: 1004 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 79352a42 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x8dd6 (36310) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x2254 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 124764, Ack: 9956, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 124764 (relative sequence number) Acknowledgment number: 9956 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 14311 [Calculated window size: 14311] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa90b [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1003] [The RTT to ACK the segment was: 0.042792013 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 20767 Src Port: 20767 Frame 1005: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:29.906813602 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724229.906813602 seconds [Time delta from previous captured frame: 0.002613162 seconds] [Time delta from previous displayed frame: 0.002613162 seconds] [Time since reference or first frame: 55.109244749 seconds] Frame Number: 1005 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0x9053 (36947) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x1d42 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 124764, Ack: 9956, Len: 661 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 124764 (relative sequence number) [Next sequence number: 125425 (relative sequence number)] Acknowledgment number: 9956 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 14311 [Calculated window size: 14311] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9141 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: 3b9817bef4b65ef2057eb98156f83c487b2a4f9977ceb188... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 188\r\n [Content length: 188] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:30:44 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:30:44 GMT\r\n \r\n [HTTP response 12/12] [Time since request: 0.045405175 seconds] [Prev request in frame: 999] [Prev response in frame: 1001] [Request in frame: 1003] File Data: 188 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"801119070659-304442259484","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"}]}}); Frame 1006: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:29.906907004 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724229.906907004 seconds [Time delta from previous captured frame: 0.000093402 seconds] [Time delta from previous displayed frame: 0.000093402 seconds] [Time since reference or first frame: 55.109338151 seconds] Frame Number: 1006 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4ee (54510) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e3c [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 9956, Ack: 125425, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 9956 (relative sequence number) Acknowledgment number: 125425 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1005] [The RTT to ACK the segment was: 0.000093402 seconds] [iRTT: 0.043521908 seconds] Frame 1032: 813 bytes on wire (6504 bits), 813 bytes captured (6504 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:39.913526104 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724239.913526104 seconds [Time delta from previous captured frame: 1.844979004 seconds] [Time delta from previous displayed frame: 10.006619100 seconds] [Time since reference or first frame: 65.115957251 seconds] Frame Number: 1032 Frame Length: 813 bytes (6504 bits) Capture Length: 813 bytes (6504 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 797 Identification: 0xd4ef (54511) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b46 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 9956, Ack: 125425, Len: 757 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 757] Sequence number: 9956 (relative sequence number) [Next sequence number: 10713 (relative sequence number)] Acknowledgment number: 125425 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdab4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 757] [Bytes sent since last PSH flag: 757] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 752 Encrypted Application Data: c4c59d46d93a6f361308e1c6a3b4c4e0d2b0b0dfe8464ed4... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=099283434853-885811812124&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni% [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=099283434853-885811812124&protV=20&lpjson=1&page=https%3A//m] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=099283434853-885811812124&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=099283434853-885811812124&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.h Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=099283434853-885811812124&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagInPage Request URI Query Parameter: lpCallId=099283434853-885811812124 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: cobrowse=true Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=099283434853-885811812124&protV=20&lpjson=] [HTTP request 13/13] [Prev request in frame: 1003] Frame 1033: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:39.956491220 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724239.956491220 seconds [Time delta from previous captured frame: 0.042965116 seconds] [Time delta from previous displayed frame: 0.042965116 seconds] [Time since reference or first frame: 65.158922367 seconds] Frame Number: 1033 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: fe9adc48 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xc124 (49444) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xef05 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 125425, Ack: 10713, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 125425 (relative sequence number) Acknowledgment number: 10713 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 15068 [Calculated window size: 15068] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xa08c [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1032] [The RTT to ACK the segment was: 0.042965116 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 8516 Src Port: 8516 Frame 1034: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:39.958945679 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724239.958945679 seconds [Time delta from previous captured frame: 0.002454459 seconds] [Time delta from previous displayed frame: 0.002454459 seconds] [Time since reference or first frame: 65.161376826 seconds] Frame Number: 1034 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0xc2d8 (49880) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xeabc [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 125425, Ack: 10713, Len: 661 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 125425 (relative sequence number) [Next sequence number: 126086 (relative sequence number)] Acknowledgment number: 10713 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 15068 [Calculated window size: 15068] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8870 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: 05ce0a4204cb2ca7a06895da2c9b6b5c197ec3744903dd5a... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 188\r\n [Content length: 188] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:30:54 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:30:54 GMT\r\n \r\n [HTTP response 13/13] [Time since request: 0.045419575 seconds] [Prev request in frame: 1003] [Prev response in frame: 1005] [Request in frame: 1032] File Data: 188 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"099283434853-885811812124","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"}]}}); Frame 1035: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:39.959036879 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724239.959036879 seconds [Time delta from previous captured frame: 0.000091200 seconds] [Time delta from previous displayed frame: 0.000091200 seconds] [Time since reference or first frame: 65.161468026 seconds] Frame Number: 1035 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4f0 (54512) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e3a [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 10713, Ack: 126086, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 10713 (relative sequence number) Acknowledgment number: 126086 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1034] [The RTT to ACK the segment was: 0.000091200 seconds] [iRTT: 0.043521908 seconds] Frame 1055: 813 bytes on wire (6504 bits), 813 bytes captured (6504 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:49.966399051 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724249.966399051 seconds [Time delta from previous captured frame: 0.203339283 seconds] [Time delta from previous displayed frame: 10.007362172 seconds] [Time since reference or first frame: 75.168830198 seconds] Frame Number: 1055 Frame Length: 813 bytes (6504 bits) Capture Length: 813 bytes (6504 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 797 Identification: 0xd4f1 (54513) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b44 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 10713, Ack: 126086, Len: 757 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 757] Sequence number: 10713 (relative sequence number) [Next sequence number: 11470 (relative sequence number)] Acknowledgment number: 126086 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdab4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 757] [Bytes sent since last PSH flag: 757] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 752 Encrypted Application Data: 9616ac9262f50c57930a6df5d5593a78fec0971403c2a721... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=975596984555-345090076587&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni% [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=975596984555-345090076587&protV=20&lpjson=1&page=https%3A//m] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=975596984555-345090076587&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=975596984555-345090076587&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.h Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=975596984555-345090076587&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagInPage Request URI Query Parameter: lpCallId=975596984555-345090076587 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: cobrowse=true Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=975596984555-345090076587&protV=20&lpjson=] [HTTP request 14/14] [Prev request in frame: 1032] Frame 1060: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:50.009248879 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724250.009248879 seconds [Time delta from previous captured frame: 0.012191469 seconds] [Time delta from previous displayed frame: 0.042849828 seconds] [Time since reference or first frame: 75.211680026 seconds] Frame Number: 1060 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 747e8182 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x33bb (13243) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x7c6f [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 126086, Ack: 11470, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 126086 (relative sequence number) Acknowledgment number: 11470 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 15825 [Calculated window size: 15825] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x980d [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1055] [The RTT to ACK the segment was: 0.042849828 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 33099 Src Port: 33099 Frame 1061: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:50.011269399 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724250.011269399 seconds [Time delta from previous captured frame: 0.002020520 seconds] [Time delta from previous displayed frame: 0.002020520 seconds] [Time since reference or first frame: 75.213700546 seconds] Frame Number: 1061 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0x34d1 (13521) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x78c4 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 126086, Ack: 11470, Len: 661 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 126086 (relative sequence number) [Next sequence number: 126747 (relative sequence number)] Acknowledgment number: 11470 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 15825 [Calculated window size: 15825] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1dcc [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: 9ff37ac80dc9962c6f3a5de6711bac2ded07a52fe816c258... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 188\r\n [Content length: 188] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:31:05 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:31:04 GMT\r\n \r\n [HTTP response 14/14] [Time since request: 0.044870348 seconds] [Prev request in frame: 1032] [Prev response in frame: 1034] [Request in frame: 1055] File Data: 188 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"975596984555-345090076587","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"}]}}); Frame 1062: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:50.011366848 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724250.011366848 seconds [Time delta from previous captured frame: 0.000097449 seconds] [Time delta from previous displayed frame: 0.000097449 seconds] [Time since reference or first frame: 75.213797995 seconds] Frame Number: 1062 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4f2 (54514) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e38 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 11470, Ack: 126747, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 11470 (relative sequence number) Acknowledgment number: 126747 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1061] [The RTT to ACK the segment was: 0.000097449 seconds] [iRTT: 0.043521908 seconds] Frame 1156: 925 bytes on wire (7400 bits), 925 bytes captured (7400 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:59.796849007 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724259.796849007 seconds [Time delta from previous captured frame: 1.392754881 seconds] [Time delta from previous displayed frame: 9.785482159 seconds] [Time since reference or first frame: 84.999280154 seconds] Frame Number: 1156 Frame Length: 925 bytes (7400 bits) Capture Length: 925 bytes (7400 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 909 Identification: 0xd4f3 (54515) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8ad2 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 11470, Ack: 126747, Len: 869 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 869] Sequence number: 11470 (relative sequence number) [Next sequence number: 12339 (relative sequence number)] Acknowledgment number: 126747 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdb24 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 869] [Bytes sent since last PSH flag: 869] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 864 Encrypted Application Data: 2eb0a0570c5d62f7e412ec727802ca7fbcfe0790d8823ea2... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=800314520924-056688837181&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croat [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=800314520924-056688837181&protV=20&lpjson=1&SV%21impression-que] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=800314520924-056688837181&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croatian&SV%21imp] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=800314520924-056688837181&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-por Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=800314520924-056688837181&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croa Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagUrl Request URI Query Parameter: lpCallId=800314520924-056688837181 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: SV%21impression-query-name=chat-csc-portal-croatian Request URI Query Parameter: SV%21impression-query-room=chat-csc-portal-croatian Request URI Query Parameter: id=6207797629 Request URI Query Parameter: info=button-impression%3Achat-csc-portal-croatian%28HT%20fiksni%20ra%u010Dun%20br.%205019102951%20%u2022%20Moj%20Telekom%29 Request URI Query Parameter: waitForVisitor=true Request URI Query Parameter: d=1479724259792 Request URI Query Parameter: page=https%3A//server.lon.liveperson.net/hcp/width/img40.gif Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=800314520924-056688837181&protV=20&lpjson=1&S] [HTTP request 15/15] [Prev request in frame: 1055] Frame 1157: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:59.839792451 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724259.839792451 seconds [Time delta from previous captured frame: 0.042943444 seconds] [Time delta from previous displayed frame: 0.042943444 seconds] [Time since reference or first frame: 85.042223598 seconds] Frame Number: 1157 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 2c79392e Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x1ce7 (7399) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x9343 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 126747, Ack: 12339, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 126747 (relative sequence number) Acknowledgment number: 12339 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 16694 [Calculated window size: 16694] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x8eae [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1156] [The RTT to ACK the segment was: 0.042943444 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 4560 Src Port: 4560 Frame 1158: 749 bytes on wire (5992 bits), 749 bytes captured (5992 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:59.842586948 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724259.842586948 seconds [Time delta from previous captured frame: 0.002794497 seconds] [Time delta from previous displayed frame: 0.002794497 seconds] [Time since reference or first frame: 85.045018095 seconds] Frame Number: 1158 Frame Length: 749 bytes (5992 bits) Capture Length: 749 bytes (5992 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 733 Identification: 0x1e78 (7800) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x8efd [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 126747, Ack: 12339, Len: 693 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 693] Sequence number: 126747 (relative sequence number) [Next sequence number: 127440 (relative sequence number)] Acknowledgment number: 12339 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 16694 [Calculated window size: 16694] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x961d [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 693] [Bytes sent since last PSH flag: 693] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 688 Encrypted Application Data: 521de28df295b1e6c1be9a0026beac77061df896f3bb901e... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 119\r\n [Content length: 119] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:31:14 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: LivePersonID=LP i=172480676442647,d=1479724274; path=/; domain=.liveperson.net\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:31:14 GMT\r\n \r\n [HTTP response 15/15] [Time since request: 0.045737941 seconds] [Prev request in frame: 1055] [Prev response in frame: 1061] [Request in frame: 1156] File Data: 119 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"800314520924-056688837181","lpCallConfirm":"","lpData":[{"result":40}]}}); Frame 1159: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:30:59.842683501 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724259.842683501 seconds [Time delta from previous captured frame: 0.000096553 seconds] [Time delta from previous displayed frame: 0.000096553 seconds] [Time since reference or first frame: 85.045114648 seconds] Frame Number: 1159 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4f4 (54516) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e36 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 12339, Ack: 127440, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 12339 (relative sequence number) Acknowledgment number: 127440 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1158] [The RTT to ACK the segment was: 0.000096553 seconds] [iRTT: 0.043521908 seconds] Frame 1162: 813 bytes on wire (6504 bits), 813 bytes captured (6504 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:00.019422432 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724260.019422432 seconds [Time delta from previous captured frame: 0.020786605 seconds] [Time delta from previous displayed frame: 0.176738931 seconds] [Time since reference or first frame: 85.221853579 seconds] Frame Number: 1162 Frame Length: 813 bytes (6504 bits) Capture Length: 813 bytes (6504 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 797 Identification: 0xd4f5 (54517) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b40 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 12339, Ack: 127440, Len: 757 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 757] Sequence number: 12339 (relative sequence number) [Next sequence number: 13096 (relative sequence number)] Acknowledgment number: 127440 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdab4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 757] [Bytes sent since last PSH flag: 757] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 752 Encrypted Application Data: e6fd01fde704bf12cbbfdf75eb0ff4f23aab787af74fc8af... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=331968606013-291149950868&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni% [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=331968606013-291149950868&protV=20&lpjson=1&page=https%3A//m] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=331968606013-291149950868&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=331968606013-291149950868&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.h Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=331968606013-291149950868&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagInPage Request URI Query Parameter: lpCallId=331968606013-291149950868 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: cobrowse=true Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=331968606013-291149950868&protV=20&lpjson=] [HTTP request 16/16] [Prev request in frame: 1156] Frame 1167: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:00.063481831 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724260.063481831 seconds [Time delta from previous captured frame: 0.001246044 seconds] [Time delta from previous displayed frame: 0.044059399 seconds] [Time since reference or first frame: 85.265912978 seconds] Frame Number: 1167 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 9e3be465 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xe428 (58408) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xcc01 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 127440, Ack: 13096, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 127440 (relative sequence number) Acknowledgment number: 13096 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 17451 [Calculated window size: 17451] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x860f [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1162] [The RTT to ACK the segment was: 0.044059399 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 21741 Src Port: 21741 Frame 1168: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:00.065765450 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724260.065765450 seconds [Time delta from previous captured frame: 0.002283619 seconds] [Time delta from previous displayed frame: 0.002283619 seconds] [Time since reference or first frame: 85.268196597 seconds] Frame Number: 1168 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0xe6c8 (59080) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xc6cc [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 127440, Ack: 13096, Len: 661 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 127440 (relative sequence number) [Next sequence number: 128101 (relative sequence number)] Acknowledgment number: 13096 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 17451 [Calculated window size: 17451] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5065 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: de038409380f8139846c0ab3541b5f74b90e1bcd2acd28ca... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 188\r\n [Content length: 188] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:31:15 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:31:14 GMT\r\n \r\n [HTTP response 16/16] [Time since request: 0.046343018 seconds] [Prev request in frame: 1156] [Prev response in frame: 1158] [Request in frame: 1162] File Data: 188 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"331968606013-291149950868","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"}]}}); Frame 1169: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:00.065840897 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724260.065840897 seconds [Time delta from previous captured frame: 0.000075447 seconds] [Time delta from previous displayed frame: 0.000075447 seconds] [Time since reference or first frame: 85.268272044 seconds] Frame Number: 1169 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4f6 (54518) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e34 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 13096, Ack: 128101, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 13096 (relative sequence number) Acknowledgment number: 128101 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1168] [The RTT to ACK the segment was: 0.000075447 seconds] [iRTT: 0.043521908 seconds] Frame 1192: 813 bytes on wire (6504 bits), 813 bytes captured (6504 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:10.075822385 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724270.075822385 seconds [Time delta from previous captured frame: 0.750414841 seconds] [Time delta from previous displayed frame: 10.009981488 seconds] [Time since reference or first frame: 95.278253532 seconds] Frame Number: 1192 Frame Length: 813 bytes (6504 bits) Capture Length: 813 bytes (6504 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 797 Identification: 0xd4f7 (54519) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b3e [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 13096, Ack: 128101, Len: 757 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 757] Sequence number: 13096 (relative sequence number) [Next sequence number: 13853 (relative sequence number)] Acknowledgment number: 128101 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdab4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 757] [Bytes sent since last PSH flag: 757] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 752 Encrypted Application Data: 7bbc52e23b6a4239741983de2c9a59079857dae819f62443... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=615054082248-864146593786&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni% [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=615054082248-864146593786&protV=20&lpjson=1&page=https%3A//m] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=615054082248-864146593786&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=615054082248-864146593786&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.h Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=615054082248-864146593786&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagInPage Request URI Query Parameter: lpCallId=615054082248-864146593786 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: cobrowse=true Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=615054082248-864146593786&protV=20&lpjson=] [HTTP request 17/17] [Prev request in frame: 1162] Frame 1193: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:10.118724303 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724270.118724303 seconds [Time delta from previous captured frame: 0.042901918 seconds] [Time delta from previous displayed frame: 0.042901918 seconds] [Time since reference or first frame: 95.321155450 seconds] Frame Number: 1193 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: e03ca592 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x4d07 (19719) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x6323 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 128101, Ack: 13853, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 128101 (relative sequence number) Acknowledgment number: 13853 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 18208 [Calculated window size: 18208] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7d90 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1192] [The RTT to ACK the segment was: 0.042901918 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 5514 Src Port: 5514 Frame 1194: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:10.121110705 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724270.121110705 seconds [Time delta from previous captured frame: 0.002386402 seconds] [Time delta from previous displayed frame: 0.002386402 seconds] [Time since reference or first frame: 95.323541852 seconds] Frame Number: 1194 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0x4f3a (20282) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x5e5b [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 128101, Ack: 13853, Len: 661 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 128101 (relative sequence number) [Next sequence number: 128762 (relative sequence number)] Acknowledgment number: 13853 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 18208 [Calculated window size: 18208] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9b20 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: dabd2c5a76a70f4d6acc22c07c5025fdd148a0cc77caa00f... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 188\r\n [Content length: 188] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:31:25 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:31:24 GMT\r\n \r\n [HTTP response 17/17] [Time since request: 0.045288320 seconds] [Prev request in frame: 1162] [Prev response in frame: 1168] [Request in frame: 1192] File Data: 188 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"615054082248-864146593786","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"}]}}); Frame 1195: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:10.121207541 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724270.121207541 seconds [Time delta from previous captured frame: 0.000096836 seconds] [Time delta from previous displayed frame: 0.000096836 seconds] [Time since reference or first frame: 95.323638688 seconds] Frame Number: 1195 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4f8 (54520) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e32 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 13853, Ack: 128762, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 13853 (relative sequence number) Acknowledgment number: 128762 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1194] [The RTT to ACK the segment was: 0.000096836 seconds] [iRTT: 0.043521908 seconds] Frame 1300: 813 bytes on wire (6504 bits), 813 bytes captured (6504 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:20.195257513 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724280.195257513 seconds [Time delta from previous captured frame: 0.090844161 seconds] [Time delta from previous displayed frame: 10.074049972 seconds] [Time since reference or first frame: 105.397688660 seconds] Frame Number: 1300 Frame Length: 813 bytes (6504 bits) Capture Length: 813 bytes (6504 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 797 Identification: 0xd4f9 (54521) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b3c [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 13853, Ack: 128762, Len: 757 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 757] Sequence number: 13853 (relative sequence number) [Next sequence number: 14610 (relative sequence number)] Acknowledgment number: 128762 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdab4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 757] [Bytes sent since last PSH flag: 757] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 752 Encrypted Application Data: 6ad691db4faf6b7865e6ed1db07f289d5ca16b456fce0b04... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=509096928178-411637057372&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni% [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=509096928178-411637057372&protV=20&lpjson=1&page=https%3A//m] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=509096928178-411637057372&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=509096928178-411637057372&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.h Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=509096928178-411637057372&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagInPage Request URI Query Parameter: lpCallId=509096928178-411637057372 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: cobrowse=true Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=509096928178-411637057372&protV=20&lpjson=] [HTTP request 18/18] [Prev request in frame: 1192] Frame 1301: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:20.238244350 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724280.238244350 seconds [Time delta from previous captured frame: 0.042986837 seconds] [Time delta from previous displayed frame: 0.042986837 seconds] [Time since reference or first frame: 105.440675497 seconds] Frame Number: 1301 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 2d1d745b Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xe09c (57500) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xcf8d [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 128762, Ack: 14610, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 128762 (relative sequence number) Acknowledgment number: 14610 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 18965 [Calculated window size: 18965] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7511 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1300] [The RTT to ACK the segment was: 0.042986837 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 36789 Src Port: 36789 Frame 1302: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:20.240372334 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724280.240372334 seconds [Time delta from previous captured frame: 0.002127984 seconds] [Time delta from previous displayed frame: 0.002127984 seconds] [Time since reference or first frame: 105.442803481 seconds] Frame Number: 1302 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0xe23c (57916) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xcb58 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 128762, Ack: 14610, Len: 661 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 128762 (relative sequence number) [Next sequence number: 129423 (relative sequence number)] Acknowledgment number: 14610 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 18965 [Calculated window size: 18965] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1a91 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: 267a174c286de25affd9edcbd27f3646fa5d4d7206392e1c... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 188\r\n [Content length: 188] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:31:35 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:31:34 GMT\r\n \r\n [HTTP response 18/18] [Time since request: 0.045114821 seconds] [Prev request in frame: 1192] [Prev response in frame: 1194] [Request in frame: 1300] File Data: 188 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"509096928178-411637057372","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"}]}}); Frame 1303: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:20.240466797 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724280.240466797 seconds [Time delta from previous captured frame: 0.000094463 seconds] [Time delta from previous displayed frame: 0.000094463 seconds] [Time since reference or first frame: 105.442897944 seconds] Frame Number: 1303 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4fa (54522) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e30 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 14610, Ack: 129423, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 14610 (relative sequence number) Acknowledgment number: 129423 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1302] [The RTT to ACK the segment was: 0.000094463 seconds] [iRTT: 0.043521908 seconds] Frame 1324: 925 bytes on wire (7400 bits), 925 bytes captured (7400 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:29.851141564 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724289.851141564 seconds [Time delta from previous captured frame: 0.059235216 seconds] [Time delta from previous displayed frame: 9.610674767 seconds] [Time since reference or first frame: 115.053572711 seconds] Frame Number: 1324 Frame Length: 925 bytes (7400 bits) Capture Length: 925 bytes (7400 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 909 Identification: 0xd4fb (54523) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8aca [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 14610, Ack: 129423, Len: 869 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 869] Sequence number: 14610 (relative sequence number) [Next sequence number: 15479 (relative sequence number)] Acknowledgment number: 129423 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdb24 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 869] [Bytes sent since last PSH flag: 869] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 864 Encrypted Application Data: 419fad4c9989380bdeb4d7fb31e9cbab313ed967356850c2... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=303930277941-439100771836&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croat [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=303930277941-439100771836&protV=20&lpjson=1&SV%21impression-que] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=303930277941-439100771836&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croatian&SV%21imp] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=303930277941-439100771836&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-por Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=303930277941-439100771836&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croa Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagUrl Request URI Query Parameter: lpCallId=303930277941-439100771836 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: SV%21impression-query-name=chat-csc-portal-croatian Request URI Query Parameter: SV%21impression-query-room=chat-csc-portal-croatian Request URI Query Parameter: id=6207797629 Request URI Query Parameter: info=button-impression%3Achat-csc-portal-croatian%28HT%20fiksni%20ra%u010Dun%20br.%205019102951%20%u2022%20Moj%20Telekom%29 Request URI Query Parameter: waitForVisitor=true Request URI Query Parameter: d=1479724289846 Request URI Query Parameter: page=https%3A//server.lon.liveperson.net/hcp/width/img40.gif Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=303930277941-439100771836&protV=20&lpjson=1&S] [HTTP request 19/19] [Prev request in frame: 1300] Frame 1325: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:29.893987078 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724289.893987078 seconds [Time delta from previous captured frame: 0.042845514 seconds] [Time delta from previous displayed frame: 0.042845514 seconds] [Time since reference or first frame: 115.096418225 seconds] Frame Number: 1325 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: c1cdcbac Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xc496 (50326) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xeb93 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 129423, Ack: 15479, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 129423 (relative sequence number) Acknowledgment number: 15479 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 19834 [Calculated window size: 19834] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6bb2 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1324] [The RTT to ACK the segment was: 0.042845514 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 61738 Src Port: 61738 Frame 1326: 749 bytes on wire (5992 bits), 749 bytes captured (5992 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:29.897075716 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724289.897075716 seconds [Time delta from previous captured frame: 0.003088638 seconds] [Time delta from previous displayed frame: 0.003088638 seconds] [Time since reference or first frame: 115.099506863 seconds] Frame Number: 1326 Frame Length: 749 bytes (5992 bits) Capture Length: 749 bytes (5992 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 733 Identification: 0xc76b (51051) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xe609 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 129423, Ack: 15479, Len: 693 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 693] Sequence number: 129423 (relative sequence number) [Next sequence number: 130116 (relative sequence number)] Acknowledgment number: 15479 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 19834 [Calculated window size: 19834] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xae1b [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 693] [Bytes sent since last PSH flag: 693] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 688 Encrypted Application Data: e268376f8b90d484a52e03209050c620315aeee2b0701157... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 119\r\n [Content length: 119] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:31:44 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: LivePersonID=LP i=172480676442790,d=1479724304; path=/; domain=.liveperson.net\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:31:44 GMT\r\n \r\n [HTTP response 19/19] [Time since request: 0.045934152 seconds] [Prev request in frame: 1300] [Prev response in frame: 1302] [Request in frame: 1324] File Data: 119 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"303930277941-439100771836","lpCallConfirm":"","lpData":[{"result":40}]}}); Frame 1327: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:29.897187012 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724289.897187012 seconds [Time delta from previous captured frame: 0.000111296 seconds] [Time delta from previous displayed frame: 0.000111296 seconds] [Time since reference or first frame: 115.099618159 seconds] Frame Number: 1327 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4fc (54524) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e2e [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 15479, Ack: 130116, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 15479 (relative sequence number) Acknowledgment number: 130116 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1326] [The RTT to ACK the segment was: 0.000111296 seconds] [iRTT: 0.043521908 seconds] Frame 1329: 813 bytes on wire (6504 bits), 813 bytes captured (6504 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:30.247170180 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724290.247170180 seconds [Time delta from previous captured frame: 0.135351135 seconds] [Time delta from previous displayed frame: 0.349983168 seconds] [Time since reference or first frame: 115.449601327 seconds] Frame Number: 1329 Frame Length: 813 bytes (6504 bits) Capture Length: 813 bytes (6504 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 797 Identification: 0xd4fd (54525) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b38 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 15479, Ack: 130116, Len: 757 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 757] Sequence number: 15479 (relative sequence number) [Next sequence number: 16236 (relative sequence number)] Acknowledgment number: 130116 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdab4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 757] [Bytes sent since last PSH flag: 757] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 752 Encrypted Application Data: fe212e2d21658ca68f288261521ff9b9c4bc0ae9ef783bce... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=125251644969-170666231431&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni% [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=125251644969-170666231431&protV=20&lpjson=1&page=https%3A//m] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=125251644969-170666231431&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=125251644969-170666231431&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.h Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=125251644969-170666231431&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagInPage Request URI Query Parameter: lpCallId=125251644969-170666231431 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: cobrowse=true Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=125251644969-170666231431&protV=20&lpjson=] [HTTP request 20/20] [Prev request in frame: 1324] Frame 1330: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:30.290095113 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724290.290095113 seconds [Time delta from previous captured frame: 0.042924933 seconds] [Time delta from previous displayed frame: 0.042924933 seconds] [Time since reference or first frame: 115.492526260 seconds] Frame Number: 1330 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 3c82dbfc Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x1a44 (6724) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x95e6 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 130116, Ack: 16236, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 130116 (relative sequence number) Acknowledgment number: 16236 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 20591 [Calculated window size: 20591] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6313 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1329] [The RTT to ACK the segment was: 0.042924933 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 17259 Src Port: 17259 Frame 1331: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:30.295317339 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724290.295317339 seconds [Time delta from previous captured frame: 0.005222226 seconds] [Time delta from previous displayed frame: 0.005222226 seconds] [Time since reference or first frame: 115.497748486 seconds] Frame Number: 1331 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0x1ed2 (7890) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x8ec3 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 130116, Ack: 16236, Len: 661 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 130116 (relative sequence number) [Next sequence number: 130777 (relative sequence number)] Acknowledgment number: 16236 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 20591 [Calculated window size: 20591] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4d12 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: 35004034ba90421ec80b5ca068d785650d833f844d8686f4... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 188\r\n [Content length: 188] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:31:45 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:31:44 GMT\r\n \r\n [HTTP response 20/20] [Time since request: 0.048147159 seconds] [Prev request in frame: 1324] [Prev response in frame: 1326] [Request in frame: 1329] File Data: 188 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"125251644969-170666231431","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"}]}}); Frame 1332: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:30.295411875 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724290.295411875 seconds [Time delta from previous captured frame: 0.000094536 seconds] [Time delta from previous displayed frame: 0.000094536 seconds] [Time since reference or first frame: 115.497843022 seconds] Frame Number: 1332 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd4fe (54526) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e2c [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 16236, Ack: 130777, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 16236 (relative sequence number) Acknowledgment number: 130777 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1331] [The RTT to ACK the segment was: 0.000094536 seconds] [iRTT: 0.043521908 seconds] Frame 1360: 813 bytes on wire (6504 bits), 813 bytes captured (6504 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:40.303679546 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724300.303679546 seconds [Time delta from previous captured frame: 0.034300724 seconds] [Time delta from previous displayed frame: 10.008267671 seconds] [Time since reference or first frame: 125.506110693 seconds] Frame Number: 1360 Frame Length: 813 bytes (6504 bits) Capture Length: 813 bytes (6504 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 797 Identification: 0xd4ff (54527) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b36 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 16236, Ack: 130777, Len: 757 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 757] Sequence number: 16236 (relative sequence number) [Next sequence number: 16993 (relative sequence number)] Acknowledgment number: 130777 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdab4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 757] [Bytes sent since last PSH flag: 757] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 752 Encrypted Application Data: 0eece9b00ee3567b83bc5f0e2a66d224fabcd0db3f8f4227... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=868832018200-290448420939&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni% [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=868832018200-290448420939&protV=20&lpjson=1&page=https%3A//m] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=868832018200-290448420939&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=868832018200-290448420939&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.h Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=868832018200-290448420939&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagInPage Request URI Query Parameter: lpCallId=868832018200-290448420939 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: cobrowse=true Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=868832018200-290448420939&protV=20&lpjson=] [HTTP request 21/21] [Prev request in frame: 1329] Frame 1361: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:40.347236216 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724300.347236216 seconds [Time delta from previous captured frame: 0.043556670 seconds] [Time delta from previous displayed frame: 0.043556670 seconds] [Time since reference or first frame: 125.549667363 seconds] Frame Number: 1361 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: bb3ba824 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xf590 (62864) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xba99 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 130777, Ack: 16993, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 130777 (relative sequence number) Acknowledgment number: 16993 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 21348 [Calculated window size: 21348] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5a94 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1360] [The RTT to ACK the segment was: 0.043556670 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 516 Src Port: 516 Frame 1362: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:40.349486644 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724300.349486644 seconds [Time delta from previous captured frame: 0.002250428 seconds] [Time delta from previous displayed frame: 0.002250428 seconds] [Time since reference or first frame: 125.551917791 seconds] Frame Number: 1362 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0xf727 (63271) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xb66d [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 130777, Ack: 16993, Len: 661 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 130777 (relative sequence number) [Next sequence number: 131438 (relative sequence number)] Acknowledgment number: 16993 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 21348 [Calculated window size: 21348] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0250 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: 9302ca217154598512ae81c3daeea3150cf0d7bccc050482... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 188\r\n [Content length: 188] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:31:55 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:31:54 GMT\r\n \r\n [HTTP response 21/21] [Time since request: 0.045807098 seconds] [Prev request in frame: 1329] [Prev response in frame: 1331] [Request in frame: 1360] File Data: 188 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"868832018200-290448420939","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"}]}}); Frame 1363: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:40.349531300 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724300.349531300 seconds [Time delta from previous captured frame: 0.000044656 seconds] [Time delta from previous displayed frame: 0.000044656 seconds] [Time since reference or first frame: 125.551962447 seconds] Frame Number: 1363 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd500 (54528) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e2a [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 16993, Ack: 131438, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 16993 (relative sequence number) Acknowledgment number: 131438 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1362] [The RTT to ACK the segment was: 0.000044656 seconds] [iRTT: 0.043521908 seconds] Frame 1439: 813 bytes on wire (6504 bits), 813 bytes captured (6504 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:50.359747402 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724310.359747402 seconds [Time delta from previous captured frame: 0.000346098 seconds] [Time delta from previous displayed frame: 10.010216102 seconds] [Time since reference or first frame: 135.562178549 seconds] Frame Number: 1439 Frame Length: 813 bytes (6504 bits) Capture Length: 813 bytes (6504 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 797 Identification: 0xd501 (54529) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b34 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 16993, Ack: 131438, Len: 757 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 757] Sequence number: 16993 (relative sequence number) [Next sequence number: 17750 (relative sequence number)] Acknowledgment number: 131438 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdab4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 757] [Bytes sent since last PSH flag: 757] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 752 Encrypted Application Data: 10bbe1c5657470021f8ee1f1c9d2d980a628274c33632b82... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=367533111815-728821200434&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni% [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=367533111815-728821200434&protV=20&lpjson=1&page=https%3A//m] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=367533111815-728821200434&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=367533111815-728821200434&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.h Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=367533111815-728821200434&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagInPage Request URI Query Parameter: lpCallId=367533111815-728821200434 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: cobrowse=true Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=367533111815-728821200434&protV=20&lpjson=] [HTTP request 22/22] [Prev request in frame: 1360] Frame 1442: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:50.402779253 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724310.402779253 seconds [Time delta from previous captured frame: 0.013412591 seconds] [Time delta from previous displayed frame: 0.043031851 seconds] [Time since reference or first frame: 135.605210400 seconds] Frame Number: 1442 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: e4169a9b Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x83df (33759) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x2c4b [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 131438, Ack: 17750, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 131438 (relative sequence number) Acknowledgment number: 17750 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 22105 [Calculated window size: 22105] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x5215 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1439] [The RTT to ACK the segment was: 0.043031851 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 6308 Src Port: 6308 Frame 1443: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:50.405503854 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724310.405503854 seconds [Time delta from previous captured frame: 0.002724601 seconds] [Time delta from previous displayed frame: 0.002724601 seconds] [Time since reference or first frame: 135.607935001 seconds] Frame Number: 1443 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0x860a (34314) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x278b [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 131438, Ack: 17750, Len: 661 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 131438 (relative sequence number) [Next sequence number: 132099 (relative sequence number)] Acknowledgment number: 17750 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 22105 [Calculated window size: 22105] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x9c79 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: f395f54fe567cb34fe161a6ef665c3bdb3f0b13dffa61c08... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 188\r\n [Content length: 188] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:32:05 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:32:04 GMT\r\n \r\n [HTTP response 22/22] [Time since request: 0.045756452 seconds] [Prev request in frame: 1360] [Prev response in frame: 1362] [Request in frame: 1439] File Data: 188 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"367533111815-728821200434","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"}]}}); Frame 1444: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:50.405597601 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724310.405597601 seconds [Time delta from previous captured frame: 0.000093747 seconds] [Time delta from previous displayed frame: 0.000093747 seconds] [Time since reference or first frame: 135.608028748 seconds] Frame Number: 1444 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd502 (54530) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e28 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 17750, Ack: 132099, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 17750 (relative sequence number) Acknowledgment number: 132099 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1443] [The RTT to ACK the segment was: 0.000093747 seconds] [iRTT: 0.043521908 seconds] Frame 1469: 925 bytes on wire (7400 bits), 925 bytes captured (7400 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:59.913096016 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724319.913096016 seconds [Time delta from previous captured frame: 0.584599105 seconds] [Time delta from previous displayed frame: 9.507498415 seconds] [Time since reference or first frame: 145.115527163 seconds] Frame Number: 1469 Frame Length: 925 bytes (7400 bits) Capture Length: 925 bytes (7400 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 909 Identification: 0xd503 (54531) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8ac2 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 17750, Ack: 132099, Len: 869 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 869] Sequence number: 17750 (relative sequence number) [Next sequence number: 18619 (relative sequence number)] Acknowledgment number: 132099 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdb24 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 869] [Bytes sent since last PSH flag: 869] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 864 Encrypted Application Data: 4aead07272867184a41cd50217eefa3906b5c73e7e1381d8... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=586326260469-506619355287&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croat [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=586326260469-506619355287&protV=20&lpjson=1&SV%21impression-que] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=586326260469-506619355287&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croatian&SV%21imp] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=586326260469-506619355287&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-por Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=586326260469-506619355287&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croa Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagUrl Request URI Query Parameter: lpCallId=586326260469-506619355287 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: SV%21impression-query-name=chat-csc-portal-croatian Request URI Query Parameter: SV%21impression-query-room=chat-csc-portal-croatian Request URI Query Parameter: id=6207797629 Request URI Query Parameter: info=button-impression%3Achat-csc-portal-croatian%28HT%20fiksni%20ra%u010Dun%20br.%205019102951%20%u2022%20Moj%20Telekom%29 Request URI Query Parameter: waitForVisitor=true Request URI Query Parameter: d=1479724319902 Request URI Query Parameter: page=https%3A//server.lon.liveperson.net/hcp/width/img40.gif Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=586326260469-506619355287&protV=20&lpjson=1&S] [HTTP request 23/23] [Prev request in frame: 1439] Frame 1471: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:59.956088051 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724319.956088051 seconds [Time delta from previous captured frame: 0.027705554 seconds] [Time delta from previous displayed frame: 0.042992035 seconds] [Time since reference or first frame: 145.158519198 seconds] Frame Number: 1471 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 438ddb4f Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x67f9 (26617) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x4831 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 132099, Ack: 18619, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 132099 (relative sequence number) Acknowledgment number: 18619 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 22974 [Calculated window size: 22974] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x48b6 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1469] [The RTT to ACK the segment was: 0.042992035 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 2479 Src Port: 2479 Frame 1472: 749 bytes on wire (5992 bits), 749 bytes captured (5992 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:59.993418617 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724319.993418617 seconds [Time delta from previous captured frame: 0.037330566 seconds] [Time delta from previous displayed frame: 0.037330566 seconds] [Time since reference or first frame: 145.195849764 seconds] Frame Number: 1472 Frame Length: 749 bytes (5992 bits) Capture Length: 749 bytes (5992 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 733 Identification: 0x8a56 (35414) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x231f [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 132099, Ack: 18619, Len: 693 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 693] Sequence number: 132099 (relative sequence number) [Next sequence number: 132792 (relative sequence number)] Acknowledgment number: 18619 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 22974 [Calculated window size: 22974] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xf237 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 693] [Bytes sent since last PSH flag: 693] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 688 Encrypted Application Data: 7fc0ccb85891172e570fc9247694f978e6ccb55f8c58ee30... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 119\r\n [Content length: 119] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:32:15 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: LivePersonID=LP i=172480676442969,d=1479724335; path=/; domain=.liveperson.net\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:32:14 GMT\r\n \r\n [HTTP response 23/23] [Time since request: 0.080322601 seconds] [Prev request in frame: 1439] [Prev response in frame: 1443] [Request in frame: 1469] File Data: 119 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"586326260469-506619355287","lpCallConfirm":"","lpData":[{"result":50}]}}); Frame 1473: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:31:59.993536281 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724319.993536281 seconds [Time delta from previous captured frame: 0.000117664 seconds] [Time delta from previous displayed frame: 0.000117664 seconds] [Time since reference or first frame: 145.195967428 seconds] Frame Number: 1473 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd504 (54532) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e26 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 18619, Ack: 132792, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 18619 (relative sequence number) Acknowledgment number: 132792 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1472] [The RTT to ACK the segment was: 0.000117664 seconds] [iRTT: 0.043521908 seconds] Frame 1474: 813 bytes on wire (6504 bits), 813 bytes captured (6504 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:00.416999964 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724320.416999964 seconds [Time delta from previous captured frame: 0.423463683 seconds] [Time delta from previous displayed frame: 0.423463683 seconds] [Time since reference or first frame: 145.619431111 seconds] Frame Number: 1474 Frame Length: 813 bytes (6504 bits) Capture Length: 813 bytes (6504 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 797 Identification: 0xd505 (54533) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b30 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 18619, Ack: 132792, Len: 757 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 757] Sequence number: 18619 (relative sequence number) [Next sequence number: 19376 (relative sequence number)] Acknowledgment number: 132792 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdab4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 757] [Bytes sent since last PSH flag: 757] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 752 Encrypted Application Data: 42d1a8e512bdfc7363cce3125b4fa518cf4d803545d3d11c... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=002622717908-253626912872&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni% [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=002622717908-253626912872&protV=20&lpjson=1&page=https%3A//m] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=002622717908-253626912872&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=002622717908-253626912872&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.h Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=002622717908-253626912872&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagInPage Request URI Query Parameter: lpCallId=002622717908-253626912872 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: cobrowse=true Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=002622717908-253626912872&protV=20&lpjson=] [HTTP request 24/24] [Prev request in frame: 1469] Frame 1475: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:00.460621298 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724320.460621298 seconds [Time delta from previous captured frame: 0.043621334 seconds] [Time delta from previous displayed frame: 0.043621334 seconds] [Time since reference or first frame: 145.663052445 seconds] Frame Number: 1475 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: bebc9dc6 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x388b (14475) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x779f [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 132792, Ack: 19376, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 132792 (relative sequence number) Acknowledgment number: 19376 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 23731 [Calculated window size: 23731] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x4017 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1474] [The RTT to ACK the segment was: 0.043621334 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 19309 Src Port: 19309 Frame 1476: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:00.463536041 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724320.463536041 seconds [Time delta from previous captured frame: 0.002914743 seconds] [Time delta from previous displayed frame: 0.002914743 seconds] [Time since reference or first frame: 145.665967188 seconds] Frame Number: 1476 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0x3bef (15343) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x71a6 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 132792, Ack: 19376, Len: 661 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 132792 (relative sequence number) [Next sequence number: 133453 (relative sequence number)] Acknowledgment number: 19376 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 23731 [Calculated window size: 23731] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1cc0 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: 5b0ca8687d028555bf9307b58b024d40ceee51eec021a24d... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 188\r\n [Content length: 188] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:32:15 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:32:15 GMT\r\n \r\n [HTTP response 24/24] [Time since request: 0.046536077 seconds] [Prev request in frame: 1469] [Prev response in frame: 1472] [Request in frame: 1474] File Data: 188 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"002622717908-253626912872","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"}]}}); Frame 1477: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:00.463640995 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724320.463640995 seconds [Time delta from previous captured frame: 0.000104954 seconds] [Time delta from previous displayed frame: 0.000104954 seconds] [Time since reference or first frame: 145.666072142 seconds] Frame Number: 1477 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd506 (54534) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e24 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 19376, Ack: 133453, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 19376 (relative sequence number) Acknowledgment number: 133453 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1476] [The RTT to ACK the segment was: 0.000104954 seconds] [iRTT: 0.043521908 seconds] Frame 1496: 813 bytes on wire (6504 bits), 813 bytes captured (6504 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:10.473043695 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724330.473043695 seconds [Time delta from previous captured frame: 0.441654518 seconds] [Time delta from previous displayed frame: 10.009402700 seconds] [Time since reference or first frame: 155.675474842 seconds] Frame Number: 1496 Frame Length: 813 bytes (6504 bits) Capture Length: 813 bytes (6504 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 797 Identification: 0xd507 (54535) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b2e [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 19376, Ack: 133453, Len: 757 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 757] Sequence number: 19376 (relative sequence number) [Next sequence number: 20133 (relative sequence number)] Acknowledgment number: 133453 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdab4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 757] [Bytes sent since last PSH flag: 757] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 752 Encrypted Application Data: 657b7c36e725279403f66053316b1c1c93e43ba613c9b7c0... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=412296092747-508018263959&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni% [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=412296092747-508018263959&protV=20&lpjson=1&page=https%3A//m] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=412296092747-508018263959&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=412296092747-508018263959&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.h Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=412296092747-508018263959&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagInPage Request URI Query Parameter: lpCallId=412296092747-508018263959 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: cobrowse=true Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=412296092747-508018263959&protV=20&lpjson=] [HTTP request 25/25] [Prev request in frame: 1474] Frame 1497: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:10.516006928 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724330.516006928 seconds [Time delta from previous captured frame: 0.042963233 seconds] [Time delta from previous displayed frame: 0.042963233 seconds] [Time since reference or first frame: 155.718438075 seconds] Frame Number: 1497 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 4a33e9c0 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xee86 (61062) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xc1a3 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 133453, Ack: 20133, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 133453 (relative sequence number) Acknowledgment number: 20133 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 24488 [Calculated window size: 24488] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x3798 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1496] [The RTT to ACK the segment was: 0.042963233 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 34855 Src Port: 34855 Frame 1498: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:10.518652607 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724330.518652607 seconds [Time delta from previous captured frame: 0.002645679 seconds] [Time delta from previous displayed frame: 0.002645679 seconds] [Time since reference or first frame: 155.721083754 seconds] Frame Number: 1498 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0xf14a (61770) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xbc4a [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 133453, Ack: 20133, Len: 661 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 133453 (relative sequence number) [Next sequence number: 134114 (relative sequence number)] Acknowledgment number: 20133 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 24488 [Calculated window size: 24488] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x7dc4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: 8bbb745980abadf5a52fbf432c6d18ed6395e153639a0098... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 188\r\n [Content length: 188] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:32:25 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:32:25 GMT\r\n \r\n [HTTP response 25/25] [Time since request: 0.045608912 seconds] [Prev request in frame: 1474] [Prev response in frame: 1476] [Request in frame: 1496] File Data: 188 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"412296092747-508018263959","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"}]}}); Frame 1499: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:10.518748640 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724330.518748640 seconds [Time delta from previous captured frame: 0.000096033 seconds] [Time delta from previous displayed frame: 0.000096033 seconds] [Time since reference or first frame: 155.721179787 seconds] Frame Number: 1499 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd508 (54536) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e22 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 20133, Ack: 134114, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 20133 (relative sequence number) Acknowledgment number: 134114 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1498] [The RTT to ACK the segment was: 0.000096033 seconds] [iRTT: 0.043521908 seconds] Frame 1524: 813 bytes on wire (6504 bits), 813 bytes captured (6504 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:20.526000675 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724340.526000675 seconds [Time delta from previous captured frame: 0.291048043 seconds] [Time delta from previous displayed frame: 10.007252035 seconds] [Time since reference or first frame: 165.728431822 seconds] Frame Number: 1524 Frame Length: 813 bytes (6504 bits) Capture Length: 813 bytes (6504 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 797 Identification: 0xd509 (54537) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b2c [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 20133, Ack: 134114, Len: 757 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 757] Sequence number: 20133 (relative sequence number) [Next sequence number: 20890 (relative sequence number)] Acknowledgment number: 134114 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdab4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 757] [Bytes sent since last PSH flag: 757] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 752 Encrypted Application Data: 688fad86295326f5e1e3e0d1b69ae2a50053131044f4012c... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=210838304120-634939827946&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni% [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=210838304120-634939827946&protV=20&lpjson=1&page=https%3A//m] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=210838304120-634939827946&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=210838304120-634939827946&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.h Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=210838304120-634939827946&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagInPage Request URI Query Parameter: lpCallId=210838304120-634939827946 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: cobrowse=true Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=210838304120-634939827946&protV=20&lpjson=] [HTTP request 26/26] [Prev request in frame: 1496] Frame 1525: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:20.569067608 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724340.569067608 seconds [Time delta from previous captured frame: 0.043066933 seconds] [Time delta from previous displayed frame: 0.043066933 seconds] [Time since reference or first frame: 165.771498755 seconds] Frame Number: 1525 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: c49bb631 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x0267 (615) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xadc3 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 134114, Ack: 20890, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 134114 (relative sequence number) Acknowledgment number: 20890 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 25245 [Calculated window size: 25245] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2f19 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1524] [The RTT to ACK the segment was: 0.043066933 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 12594 Src Port: 12594 Frame 1526: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:20.571434182 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724340.571434182 seconds [Time delta from previous captured frame: 0.002366574 seconds] [Time delta from previous displayed frame: 0.002366574 seconds] [Time since reference or first frame: 165.773865329 seconds] Frame Number: 1526 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0x0442 (1090) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xa953 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 134114, Ack: 20890, Len: 661 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 134114 (relative sequence number) [Next sequence number: 134775 (relative sequence number)] Acknowledgment number: 20890 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 25245 [Calculated window size: 25245] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xb53c [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: 96ae78269b0ea65b581c7b14127a16e9d0960ec877c8905b... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 188\r\n [Content length: 188] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:32:35 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:32:35 GMT\r\n \r\n [HTTP response 26/26] [Time since request: 0.045433507 seconds] [Prev request in frame: 1496] [Prev response in frame: 1498] [Request in frame: 1524] File Data: 188 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"210838304120-634939827946","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"}]}}); Frame 1527: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:20.571529149 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724340.571529149 seconds [Time delta from previous captured frame: 0.000094967 seconds] [Time delta from previous displayed frame: 0.000094967 seconds] [Time since reference or first frame: 165.773960296 seconds] Frame Number: 1527 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd50a (54538) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e20 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 20890, Ack: 134775, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 20890 (relative sequence number) Acknowledgment number: 134775 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1526] [The RTT to ACK the segment was: 0.000094967 seconds] [iRTT: 0.043521908 seconds] Frame 1547: 925 bytes on wire (7400 bits), 925 bytes captured (7400 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:30.003143053 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724350.003143053 seconds [Time delta from previous captured frame: 1.272158780 seconds] [Time delta from previous displayed frame: 9.431613904 seconds] [Time since reference or first frame: 175.205574200 seconds] Frame Number: 1547 Frame Length: 925 bytes (7400 bits) Capture Length: 925 bytes (7400 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 909 Identification: 0xd50b (54539) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8aba [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 20890, Ack: 134775, Len: 869 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 869] Sequence number: 20890 (relative sequence number) [Next sequence number: 21759 (relative sequence number)] Acknowledgment number: 134775 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdb24 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 869] [Bytes sent since last PSH flag: 869] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 864 Encrypted Application Data: 1a06be84b7010de10562629c905bc9cc971980602e6a4a8a... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=878643826745-933606866028&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croat [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=878643826745-933606866028&protV=20&lpjson=1&SV%21impression-que] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=878643826745-933606866028&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croatian&SV%21imp] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=878643826745-933606866028&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-por Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=878643826745-933606866028&protV=20&lpjson=1&SV%21impression-query-name=chat-csc-portal-croa Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagUrl Request URI Query Parameter: lpCallId=878643826745-933606866028 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: SV%21impression-query-name=chat-csc-portal-croatian Request URI Query Parameter: SV%21impression-query-room=chat-csc-portal-croatian Request URI Query Parameter: id=6207797629 Request URI Query Parameter: info=button-impression%3Achat-csc-portal-croatian%28HT%20fiksni%20ra%u010Dun%20br.%205019102951%20%u2022%20Moj%20Telekom%29 Request URI Query Parameter: waitForVisitor=true Request URI Query Parameter: d=1479724350000 Request URI Query Parameter: page=https%3A//server.lon.liveperson.net/hcp/width/img40.gif Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagUrl&lpCallId=878643826745-933606866028&protV=20&lpjson=1&S] [HTTP request 27/27] [Prev request in frame: 1524] Frame 1548: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:30.046004352 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724350.046004352 seconds [Time delta from previous captured frame: 0.042861299 seconds] [Time delta from previous displayed frame: 0.042861299 seconds] [Time since reference or first frame: 175.248435499 seconds] Frame Number: 1548 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 2bcf0cf9 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xdbea (56298) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xd43f [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 134775, Ack: 21759, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 134775 (relative sequence number) Acknowledgment number: 21759 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 26114 [Calculated window size: 26114] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x25ba [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1547] [The RTT to ACK the segment was: 0.042861299 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 34277 Src Port: 34277 Frame 1549: 749 bytes on wire (5992 bits), 749 bytes captured (5992 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:30.049787862 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724350.049787862 seconds [Time delta from previous captured frame: 0.003783510 seconds] [Time delta from previous displayed frame: 0.003783510 seconds] [Time since reference or first frame: 175.252219009 seconds] Frame Number: 1549 Frame Length: 749 bytes (5992 bits) Capture Length: 749 bytes (5992 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 733 Identification: 0xdea4 (56996) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xced0 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 134775, Ack: 21759, Len: 693 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 693] Sequence number: 134775 (relative sequence number) [Next sequence number: 135468 (relative sequence number)] Acknowledgment number: 21759 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 26114 [Calculated window size: 26114] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x6e95 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 693] [Bytes sent since last PSH flag: 693] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 688 Encrypted Application Data: 90b54b1cb5de54db01c44bc00873b2dea6d71d8c5144d8ee... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 119\r\n [Content length: 119] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:32:45 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: LivePersonID=LP i=172480676443086,d=1479724365; path=/; domain=.liveperson.net\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:32:44 GMT\r\n \r\n [HTTP response 27/27] [Time since request: 0.046644809 seconds] [Prev request in frame: 1524] [Prev response in frame: 1526] [Request in frame: 1547] File Data: 119 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"878643826745-933606866028","lpCallConfirm":"","lpData":[{"result":60}]}}); Frame 1550: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:30.049883339 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724350.049883339 seconds [Time delta from previous captured frame: 0.000095477 seconds] [Time delta from previous displayed frame: 0.000095477 seconds] [Time since reference or first frame: 175.252314486 seconds] Frame Number: 1550 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd50c (54540) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e1e [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 21759, Ack: 135468, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 21759 (relative sequence number) Acknowledgment number: 135468 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1549] [The RTT to ACK the segment was: 0.000095477 seconds] [iRTT: 0.043521908 seconds] Frame 1556: 813 bytes on wire (6504 bits), 813 bytes captured (6504 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:30.579402757 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724350.579402757 seconds [Time delta from previous captured frame: 0.041106240 seconds] [Time delta from previous displayed frame: 0.529519418 seconds] [Time since reference or first frame: 175.781833904 seconds] Frame Number: 1556 Frame Length: 813 bytes (6504 bits) Capture Length: 813 bytes (6504 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 797 Identification: 0xd50d (54541) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b28 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 21759, Ack: 135468, Len: 757 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 757] Sequence number: 21759 (relative sequence number) [Next sequence number: 22516 (relative sequence number)] Acknowledgment number: 135468 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdab4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 757] [Bytes sent since last PSH flag: 757] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 752 Encrypted Application Data: 39d536cf4d0878294ca6ea5107829ba088b1bd972e394f72... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=553887780093-574358456824&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni% [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=553887780093-574358456824&protV=20&lpjson=1&page=https%3A//m] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=553887780093-574358456824&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=553887780093-574358456824&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.h Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=553887780093-574358456824&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagInPage Request URI Query Parameter: lpCallId=553887780093-574358456824 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: cobrowse=true Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=553887780093-574358456824&protV=20&lpjson=] [HTTP request 28/28] [Prev request in frame: 1547] Frame 1557: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:30.622556010 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724350.622556010 seconds [Time delta from previous captured frame: 0.043153253 seconds] [Time delta from previous displayed frame: 0.043153253 seconds] [Time since reference or first frame: 175.824987157 seconds] Frame Number: 1557 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 95f94366 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xe421 (58401) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xcc08 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 135468, Ack: 22516, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 135468 (relative sequence number) Acknowledgment number: 22516 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 26871 [Calculated window size: 26871] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1d1b [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1556] [The RTT to ACK the segment was: 0.043153253 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 1319 Src Port: 1319 Frame 1558: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:30.626304328 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724350.626304328 seconds [Time delta from previous captured frame: 0.003748318 seconds] [Time delta from previous displayed frame: 0.003748318 seconds] [Time since reference or first frame: 175.828735475 seconds] Frame Number: 1558 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0xe79b (59291) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xc5f9 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 135468, Ack: 22516, Len: 661 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 135468 (relative sequence number) [Next sequence number: 136129 (relative sequence number)] Acknowledgment number: 22516 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 26871 [Calculated window size: 26871] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0c07 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: aa5d4637e8bb8b07fec06e752142490eecea079b8081da39... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 188\r\n [Content length: 188] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:32:45 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:32:45 GMT\r\n \r\n [HTTP response 28/28] [Time since request: 0.046901571 seconds] [Prev request in frame: 1547] [Prev response in frame: 1549] [Request in frame: 1556] File Data: 188 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"553887780093-574358456824","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"}]}}); Frame 1559: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:30.626397420 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724350.626397420 seconds [Time delta from previous captured frame: 0.000093092 seconds] [Time delta from previous displayed frame: 0.000093092 seconds] [Time since reference or first frame: 175.828828567 seconds] Frame Number: 1559 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd50e (54542) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e1c [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 22516, Ack: 136129, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 22516 (relative sequence number) Acknowledgment number: 136129 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1558] [The RTT to ACK the segment was: 0.000093092 seconds] [iRTT: 0.043521908 seconds] Frame 1583: 813 bytes on wire (6504 bits), 813 bytes captured (6504 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:40.632440625 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724360.632440625 seconds [Time delta from previous captured frame: 0.595438035 seconds] [Time delta from previous displayed frame: 10.006043205 seconds] [Time since reference or first frame: 185.834871772 seconds] Frame Number: 1583 Frame Length: 813 bytes (6504 bits) Capture Length: 813 bytes (6504 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 797 Identification: 0xd50f (54543) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b26 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 22516, Ack: 136129, Len: 757 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 757] Sequence number: 22516 (relative sequence number) [Next sequence number: 23273 (relative sequence number)] Acknowledgment number: 136129 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdab4 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 757] [Bytes sent since last PSH flag: 757] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 752 Encrypted Application Data: 5908971e4595d95dc169798b316a70fad6b7f2829ffae0df... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=813517978235-473802429942&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni% [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=813517978235-473802429942&protV=20&lpjson=1&page=https%3A//m] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=813517978235-473802429942&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=813517978235-473802429942&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.h Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=813517978235-473802429942&protV=20&lpjson=1&page=https%3A//moj.hrvatskitelekom.hr/racuni Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagInPage Request URI Query Parameter: lpCallId=813517978235-473802429942 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: page=https%3A//moj.hrvatskitelekom.hr/racuni%3Fserviceid%3D12018216 Request URI Query Parameter: id=6207797629 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: defInvite=chat-csc-portal-croatian Request URI Query Parameter: activePlugin=none Request URI Query Parameter: cobrowse=true Request URI Query Parameter: pageWindowName=diams Request URI Query Parameter: cobrowse=true Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagInPage&lpCallId=813517978235-473802429942&protV=20&lpjson=] [HTTP request 29/29] [Prev request in frame: 1556] Frame 1584: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:40.675487166 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724360.675487166 seconds [Time delta from previous captured frame: 0.043046541 seconds] [Time delta from previous displayed frame: 0.043046541 seconds] [Time since reference or first frame: 185.877918313 seconds] Frame Number: 1584 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: dd98fb79 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x903e (36926) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x1fec [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 136129, Ack: 23273, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 136129 (relative sequence number) Acknowledgment number: 23273 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 27628 [Calculated window size: 27628] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x149c [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1583] [The RTT to ACK the segment was: 0.043046541 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 62413 Src Port: 62413 Frame 1585: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:40.678240389 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724360.678240389 seconds [Time delta from previous captured frame: 0.002753223 seconds] [Time delta from previous displayed frame: 0.002753223 seconds] [Time since reference or first frame: 185.880671536 seconds] Frame Number: 1585 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http:data-text-lines] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0x926b (37483) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0x1b2a [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 136129, Ack: 23273, Len: 661 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 136129 (relative sequence number) [Next sequence number: 136790 (relative sequence number)] Acknowledgment number: 23273 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 27628 [Calculated window size: 27628] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xfdb6 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: e6eef9ba0199cee440ce7364a86ec3c6ed9ed3e9489b9926... Hypertext Transfer Protocol HTTP/1.1 200 OK\r\n [Expert Info (Chat/Sequence): HTTP/1.1 200 OK\r\n] [HTTP/1.1 200 OK\r\n] [Severity level: Chat] [Group: Sequence] Request Version: HTTP/1.1 Status Code: 200 Response Phrase: OK Cache-Control: no-store\r\n Pragma: no-cache\r\n Content-Length: 188\r\n [Content length: 188] Content-Type: application/x-javascript\r\n Expires: Wed, 31 Dec 1969 23:59:59 GMT\r\n Last-Modified: Mon, 21 Nov 2016 10:32:55 GMT\r\n Accept-Ranges: bytes\r\n Server: WS\r\n Set-Cookie: HumanClickSiteContainerID_62370768=STANDALONE; path=/hc/62370768\r\n P3P: CP="NON BUS INT NAV COM ADM CON CUR IVA IVD OTP PSA PSD TEL SAM"\r\n Date: Mon, 21 Nov 2016 10:32:55 GMT\r\n \r\n [HTTP response 29/29] [Time since request: 0.045799764 seconds] [Prev request in frame: 1556] [Prev response in frame: 1558] [Request in frame: 1583] File Data: 188 bytes Line-based text data: application/x-javascript lpConnLib.Process({"ResultSet": {"lpCallId":"813517978235-473802429942","lpCallConfirm":"","lpJS_Execute":[{"code_id": "INPAGE-DELAY-10", "js_code": "lpMTag.lpInPageRequestDelay=10;"}]}}); Frame 1586: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:40.678339173 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724360.678339173 seconds [Time delta from previous captured frame: 0.000098784 seconds] [Time delta from previous displayed frame: 0.000098784 seconds] [Time since reference or first frame: 185.880770320 seconds] Frame Number: 1586 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd510 (54544) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e1a [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 23273, Ack: 136790, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 23273 (relative sequence number) Acknowledgment number: 136790 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1585] [The RTT to ACK the segment was: 0.000098784 seconds] [iRTT: 0.043521908 seconds] Frame 1712: 717 bytes on wire (5736 bits), 717 bytes captured (5736 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:42.800567732 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724362.800567732 seconds [Time delta from previous captured frame: 0.024088733 seconds] [Time delta from previous displayed frame: 2.122228559 seconds] [Time since reference or first frame: 188.002998879 seconds] Frame Number: 1712 Frame Length: 717 bytes (5736 bits) Capture Length: 717 bytes (5736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl:http] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 701 Identification: 0xd511 (54545) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8b84 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 23273, Ack: 136790, Len: 661 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 661] Sequence number: 23273 (relative sequence number) [Next sequence number: 23934 (relative sequence number)] Acknowledgment number: 136790 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xda54 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 661] [Bytes sent since last PSH flag: 661] Secure Sockets Layer TLSv1.2 Record Layer: Application Data Protocol: http-over-tls Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 656 Encrypted Application Data: 0fb71ad0320243bdbbfd7924b57e97a3810440d4944fa4a9... Hypertext Transfer Protocol [truncated]GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=556664220905-114107864414&protV=20&lpjson=1&id=2646794390&javaSupport=false&visitorSta [ [truncated]Expert Info (Chat/Sequence): GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=556664220905-114107864414&protV=20&lpjson=1&id=2646794390] [GET /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=556664220905-114107864414&protV=20&lpjson=1&id=2646794390&javaSupport=false&visitorStatus=INSITE_S] [Severity level: Chat] [Group: Sequence] Request Method: GET Request URI [truncated]: /hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=556664220905-114107864414&protV=20&lpjson=1&id=2646794390&javaSupport=false&v Request URI Path: /hc/62370768/ Request URI Query [truncated]: &visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=556664220905-114107864414&protV=20&lpjson=1&id=2646794390&javaSupport=false&visitorSt Request URI Query Parameter: visitor=172480676440713 Request URI Query Parameter: msessionkey=5756825085274454102 Request URI Query Parameter: siteContainer=STANDALONE Request URI Query Parameter: site=62370768 Request URI Query Parameter: cmd=mTagKnockPage Request URI Query Parameter: lpCallId=556664220905-114107864414 Request URI Query Parameter: protV=20 Request URI Query Parameter: lpjson=1 Request URI Query Parameter: id=2646794390 Request URI Query Parameter: javaSupport=false Request URI Query Parameter: visitorStatus=INSITE_STATUS Request URI Query Parameter: dbut=chat-csc-portal-croatian%7ClpMTagConfig.db1%7ClpButtonDiv-csc-portal%7C Request Version: HTTP/1.1 Host: server.lon.liveperson.net\r\n User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101 Firefox/45.0\r\n Accept: */*\r\n Accept-Language: en-US,en;q=0.5\r\n Accept-Encoding: gzip, deflate\r\n Referer: https://moj.hrvatskitelekom.hr/racuni?serviceid=12018216\r\n Connection: keep-alive\r\n \r\n [Full request URI [truncated]: https://server.lon.liveperson.net/hc/62370768/?&visitor=172480676440713&msessionkey=5756825085274454102&siteContainer=STANDALONE&site=62370768&cmd=mTagKnockPage&lpCallId=556664220905-114107864414&protV=20&lpjs] [HTTP request 30/30] [Prev request in frame: 1583] Frame 1728: 62 bytes on wire (496 bits), 62 bytes captured (496 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:42.843463724 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724362.843463724 seconds [Time delta from previous captured frame: 0.001230021 seconds] [Time delta from previous displayed frame: 0.042895992 seconds] [Time since reference or first frame: 188.045894871 seconds] Frame Number: 1728 Frame Length: 62 bytes (496 bits) Capture Length: 62 bytes (496 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:vssmonitoring] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Padding: 8546af76 Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xe308 (58120) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xcd21 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 136790, Ack: 23934, Len: 0 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 136790 (relative sequence number) Acknowledgment number: 23934 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 28289 [Calculated window size: 28289] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x0cdd [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1712] [The RTT to ACK the segment was: 0.042895992 seconds] [iRTT: 0.043521908 seconds] VSS-Monitoring ethernet trailer, Source Port: 51158 Src Port: 51158 Frame 1729: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:42.850117400 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724362.850117400 seconds [Time delta from previous captured frame: 0.006653676 seconds] [Time delta from previous displayed frame: 0.006653676 seconds] [Time since reference or first frame: 188.052548547 seconds] Frame Number: 1729 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp:ssl] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xe871 (59505) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xc204 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 136790, Ack: 23934, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 136790 (relative sequence number) [Next sequence number: 138250 (relative sequence number)] Acknowledgment number: 23934 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 28289 [Calculated window size: 28289] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Secure Sockets Layer Frame 1730: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:42.850188107 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724362.850188107 seconds [Time delta from previous captured frame: 0.000070707 seconds] [Time delta from previous displayed frame: 0.000070707 seconds] [Time since reference or first frame: 188.052619254 seconds] Frame Number: 1730 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd512 (54546) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e18 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 23934, Ack: 138250, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 23934 (relative sequence number) Acknowledgment number: 138250 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1729] [The RTT to ACK the segment was: 0.000070707 seconds] [iRTT: 0.043521908 seconds] Frame 1731: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:42.850239252 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724362.850239252 seconds [Time delta from previous captured frame: 0.000051145 seconds] [Time delta from previous displayed frame: 0.000051145 seconds] [Time since reference or first frame: 188.052670399 seconds] Frame Number: 1731 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xe873 (59507) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xc202 [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 138250, Ack: 23934, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 138250 (relative sequence number) [Next sequence number: 139710 (relative sequence number)] Acknowledgment number: 23934 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 28289 [Calculated window size: 28289] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 1732: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:42.850287450 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724362.850287450 seconds [Time delta from previous captured frame: 0.000048198 seconds] [Time delta from previous displayed frame: 0.000048198 seconds] [Time since reference or first frame: 188.052718597 seconds] Frame Number: 1732 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd513 (54547) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e17 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 23934, Ack: 139710, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 23934 (relative sequence number) Acknowledgment number: 139710 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1731] [The RTT to ACK the segment was: 0.000048198 seconds] [iRTT: 0.043521908 seconds] Frame 1733: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:42.850368057 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724362.850368057 seconds [Time delta from previous captured frame: 0.000080607 seconds] [Time delta from previous displayed frame: 0.000080607 seconds] [Time since reference or first frame: 188.052799204 seconds] Frame Number: 1733 Frame Length: 1516 bytes (12128 bits) Capture Length: 1516 bytes (12128 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Unicast to us (0) Link-layer address type: 1 Link-layer address length: 6 Source: ZteCorpo_8b:44:87 (2c:95:7f:8b:44:87) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 178.249.99.1, Dst: 192.168.1.2 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 1500 Identification: 0xe876 (59510) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 243 Protocol: TCP (6) Header checksum: 0xc1ff [validation disabled] [Header checksum status: Unverified] Source: 178.249.99.1 Destination: 192.168.1.2 Transmission Control Protocol, Src Port: https (443), Dst Port: 48302 (48302), Seq: 139710, Ack: 23934, Len: 1460 Source Port: https (443) Destination Port: 48302 (48302) [Stream index: 13] [TCP Segment Len: 1460] Sequence number: 139710 (relative sequence number) [Next sequence number: 141170 (relative sequence number)] Acknowledgment number: 23934 (relative ack number) Header Length: 20 bytes Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 28289 [Calculated window size: 28289] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xdd73 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.043521908 seconds] [Bytes in flight: 1460] [Bytes sent since last PSH flag: 1460] TCP segment data (1460 bytes) Frame 1734: 56 bytes on wire (448 bits), 56 bytes captured (448 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:42.850421367 CET [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1479724362.850421367 seconds [Time delta from previous captured frame: 0.000053310 seconds] [Time delta from previous displayed frame: 0.000053310 seconds] [Time since reference or first frame: 188.052852514 seconds] Frame Number: 1734 Frame Length: 56 bytes (448 bits) Capture Length: 56 bytes (448 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: sll:ethertype:ip:tcp] Linux cooked capture Packet type: Sent by us (4) Link-layer address type: 1 Link-layer address length: 6 Source: PlanetTe_8a:2c:05 (00:30:4f:8a:2c:05) Protocol: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.2, Dst: 178.249.99.1 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0xd514 (54548) Flags: 0x02 (Don't Fragment) 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: TCP (6) Header checksum: 0x8e16 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.2 Destination: 178.249.99.1 Transmission Control Protocol, Src Port: 48302 (48302), Dst Port: https (443), Seq: 23934, Ack: 141170, Len: 0 Source Port: 48302 (48302) Destination Port: https (443) [Stream index: 13] [TCP Segment Len: 0] Sequence number: 23934 (relative sequence number) Acknowledgment number: 141170 (relative ack number) Header Length: 20 bytes Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 65535 [Calculated window size: 65535] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0xd7bf [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1733] [The RTT to ACK the segment was: 0.000053310 seconds] [iRTT: 0.043521908 seconds] Frame 1735: 1516 bytes on wire (12128 bits), 1516 bytes captured (12128 bits) on interface 0 Interface id: 0 (any) Encapsulation type: Linux cooked-mode capture (25) Arrival Time: Nov 21, 2016 11:32:42.850497350 CE