From e63a999312af82c7094b7d1ce363150197f9425e Mon Sep 17 00:00:00 2001 From: kevin Date: Fri, 13 Dec 2024 15:35:40 +0100 Subject: [PATCH] Implementado un wireShark He creado en un documento temporal un mini wireshark para analizar los paquetes en red. --- packet_log.txt | 18321 +++++++++++++++++++++++++++++++++++++++++++++++ pruebas.py | 101 +- 2 files changed, 18394 insertions(+), 28 deletions(-) create mode 100644 packet_log.txt diff --git a/packet_log.txt b/packet_log.txt new file mode 100644 index 0000000..0ab3011 --- /dev/null +++ b/packet_log.txt @@ -0,0 +1,18321 @@ +2024-12-12 23:54:15.338243 - Ether / IP / UDP 192.168.1.11:51195 > 142.250.200.110:https / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 57 + id = 56559 + flags = DF + frag = 0 + ttl = 128 + proto = udp + chksum = 0x0 + src = 192.168.1.11 + dst = 142.250.200.110 + \options \ +###[ UDP ]### + sport = 51195 + dport = https + len = 37 + chksum = 0x1953 +###[ Raw ]### + load = b'D\xea\x99\xa6M\xe7\x97=\xabh|g\rp\xaem\xae\x19rO\xd0\xa1\xe3\x043\xe7U\xf4\xba' + + +2024-12-12 23:54:15.368556 - Ether / IP / UDP 142.250.200.110:https > 192.168.1.11:51195 / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 54 + id = 0 + flags = DF + frag = 0 + ttl = 56 + proto = udp + chksum = 0x299b + src = 142.250.200.110 + dst = 192.168.1.11 + \options \ +###[ UDP ]### + sport = https + dport = 51195 + len = 34 + chksum = 0xe7b2 +###[ Raw ]### + load = b'W=\xc6\xe5\x10\xbe\x82\xa0\xa4\xd18\xd4\xb2\xbb\xef\x15\xbf\x1d\xf14\x0b1\xb9I\x8f]' + + +2024-12-12 23:54:16.352594 - Ether / IP / TCP 192.168.1.11:28387 > 142.250.200.142:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 41 + id = 2612 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 142.250.200.142 + \options \ +###[ TCP ]### + sport = 28387 + dport = https + seq = 1530511306 + ack = 1572146430 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x1958 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x00' + + +2024-12-12 23:54:16.372396 - Ether / IP / TCP 142.250.200.142:https > 192.168.1.11:28387 A +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 45403 + flags = + frag = 0 + ttl = 118 + proto = tcp + chksum = 0x7a2c + src = 142.250.200.142 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28387 + seq = 1572146430 + ack = 1530511307 + dataofs = 8 + reserved = 0 + flags = A + window = 1043 + chksum = 0x300e + urgptr = 0 + options = [('NOP', None), ('NOP', None), ('SAck', (1530511306, 1530511307))] + + +2024-12-12 23:54:17.193238 - Ether / IP / UDP 192.168.1.11:58001 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 01:00:5e:7f:ff:fa + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 165 + id = 4432 + flags = + frag = 0 + ttl = 4 + proto = udp + chksum = 0x0 + src = 192.168.1.11 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 58001 + dport = ssdp + len = 145 + chksum = 0x7102 +###[ Raw ]### + load = b'M-SEARCH * HTTP/1.1\r\nHost: 239.255.255.250:1900\r\nST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\nMan: "ssdp:discover"\r\nMX: 3\r\n\r\n' + + +2024-12-12 23:54:17.201184 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 417 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc5a8 + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 397 + chksum = 0xc02c +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: upnp:rootdevice\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842b9::upnp:rootdevice\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.208137 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 489 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc560 + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 469 + chksum = 0x502d +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: urn:schemas-upnp-org:device:InternetGatewayDevice:2\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842b9::urn:schemas-upnp-org:device:InternetGatewayDevice:2\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.216533 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 426 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc59f + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 406 + chksum = 0x83e4 +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: uuid:d15f795f-9d12-458e-874b-cb38ba3842b9\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842b9\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.226458 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 485 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc564 + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 465 + chksum = 0x7632 +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: urn:schemas-upnp-org:device:WANConnectionDevice:2\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842bb::urn:schemas-upnp-org:device:WANConnectionDevice:2\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.236806 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 426 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc59f + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 406 + chksum = 0x8392 +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: uuid:d15f795f-9d12-458e-874b-cb38ba3842bb\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842bb\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.248724 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 465 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc578 + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 445 + chksum = 0x8a6f +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: urn:schemas-upnp-org:device:WANDevice:2\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842ba::urn:schemas-upnp-org:device:WANDevice:2\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.260470 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 426 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc59f + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 406 + chksum = 0x8394 +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: uuid:d15f795f-9d12-458e-874b-cb38ba3842ba\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842ba\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.271514 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 497 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc558 + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 477 + chksum = 0x3a9 +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842ba::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.280053 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 479 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc56a + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 459 + chksum = 0x81a1 +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: urn:schemas-upnp-org:service:WANIPConnection:2\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842bb::urn:schemas-upnp-org:service:WANIPConnection:2\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.473252 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 153 + id = 16788 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862113648 + ack = 2922048777 + dataofs = 5 + reserved = 0 + flags = PA + window = 517 + chksum = 0x672a + urgptr = 0 + options = [] +###[ Raw ]### + load = b"\x17\x03\x03\x00l\x98\xa1\xbe\xc6re:I!$\x818\x8d\xfe\xd3Z\xaa\x10T\xb9\xb7\x9a\xbe\xf4f\x0e\xfe\xf7&\x98'=eB\xec\xa4\x92\xa1\xed\xa4\xed\x9bI\xfb\xf9\xc1k\xe0.Q\\\xa1}\xa0\x1c\xda\xbe.5\xb2 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16789 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862113761 + ack = 2922048777 + dataofs = 5 + reserved = 0 + flags = A + window = 517 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03 \x8d\x0f\xd9\xd1\tz,\xd44k\xc8U\xd7\xe3\xa6\xb5\xfb\xa4H\x8d\xe73\x15\xca\xf2\xcb\x8f\xa4T\x04m\'*<\xd9s\x01=\xa2\xd8\xb8\xe0\xd3:\x9e\xa6\xbf\xf5\xcd`\xc7\xbd\xe8\xc4\x00o:k\xbc\x11V\x98N\xd2\x05\x19,\xfaKu03F\x8c\x02\xdf\xbd~\x95\x8e\xc3\xa4\x90.r\xc6\xcb\x14\x98\x92\x98\x15~S\x0e\x17\x83\xb3?\xa5\n\xd7\xbd\xac\xac\xc9\xc3e\xf6\xfbg\xe5\xb9\xf0f!R\x14I\x90}\xabp\xd2>\xa9U\xff\xd5WQ\xc5\xcc\xcc\x924~\xc3\xe6J\x8f\x15f\xc2\xccj\xf0^\xd5\xc8\xa1\xbb\xd4+\xa55\x8c\xc5\x17_I\x81\xb2\x91=H\x98\x1b\xda\xd97|\xd4m\xc2\xae\x89g\xcb<\xbb\xef\xe8\xc2\x10\xcbh\xefb\xf3\x0b\xf6\xf1p\xd3\x12g\xe4N2m?\xa9\x08\x1d\xb0\xdd\xf13\x8a\x06TY\xcd\xe7\x8b9\x02/\xf5\xc5\x94a&\xaeJUn`e\x15\x8cV+\x83g\x86\x84d\xfe;\xfaDF\x06\xfe\xe4u\x11\xdb\x93\xbbi\x01Qu\xf1B\x15\xed2\xb7*F\x91\xa0\xe0\xc9\xbf\xe0\xfda\xdb&a)F\x9f\xdd\x13\xe7\xf1\xab!\x82\xb4\xa41\x99\x88\xce\x1ct,\x05\xa1H^\xbd\xf5\x14\xf2zl~1\xa0\n\xe3X\x81\xf3/0\xac\xad.\xce\xf8:\x12a\xc0|:&\xbd$t/vE\xeeC$\xd2\xf5\xf7\x0fJ\xf3\xf0\x12\xaa\xc6>\x9f\xff\xbf\xf6Q\x8d5\x9b\xe5\x92\x05\xf64\x14D3\rC\xb73pN\xbf\x855\x88I\xff\xf7>\xf5\xfe\x06Rj\xb0F\x92(\xc9\x14\xfe\xdd\xc5q~0\xeb\x9c\x00\x81\x95\xc9s+\xa5\xb0\x87x+\xd1\x8c<\x7fpQ\xa4w\xcfq\xfc\xbe\\\xa4u\xb6o\xed\xeeJ\xae\xce\xf6(Q\xe5a\xd0y\xdb\xd5{B\x81Z\xc3\xe0h\x8a\x8a\x9b\xb0\xa0\x8a\x9e\xaa\xbd\xe1\xeb\xaa\xfa\xb4\xe3\x9b\xc4\x0b\xa2\xee\x99\xff\xf7\xd1\xe94\x87^\x12(7\x171\xdc?k\xf9\xa3`Y\x89\xdfI\xff\x12\x8b\xff\xe9\x8e\x07>\xaf\xa3%e\xa9\x92\x93\x98rR\x80yr\x99K\xe9\\u\xdc4z\x8f\x17.\xb6\x0b\xc5\xe9#\x86\xba\xb1\x92|\\U1\x18\x04~\xcczS7\xe9\x92\x10\xc6\xe7\xe2\xb93\xa3\x80\x82tt\x06\xe8j\xdc\x14\\;g\xcf\xfe\xadG}\x98z\xdc&x\xb3\xdd\x08?j\x05~\xa9\'\xf7t\x01e\x8c\xadu\xab>\x8eEv\r`r-\xe8\xb1Knq>\x17\x1f\x1bJ\xf1?\x85\x88\xc3\xcb@Q#\x9e\xe36\xe03\xd3e\x1c\x9a=\x82\xc3Xy\xd5\xba\xa7\xf8\x1d\xcad\xd4\xb0\xea\x9av|\xa1\x83t]\x01\x95q\xca\x1c\xa2\x01\xed\xdd\xb3\xc7v\xb7&\xa0\x88\x17\xae$\xe0\x94Y\xabrN5Z?\x05\x8bi\xcduoU\x99\xf6\xd1\x87m\x9dA>\x9e}\xc3\x07!\xbcB\x1c\x1dE\x8da\x15.8\xdd\xed\xea\x062\xf6~M\x9e\xa0q|b|4rX\xc0\x18\x95q\xd2\xe7\x83R\x0b\r\xc6f\x02\x01\x89Bq[\x00\xf8\xab\xb5`w\xc5+\xf1\xdb}\xc6\xc6]^`\x1c\x8f\xd7\xf9\xa7\xe5\xc7\x01#=\x06\x0f8\\P\x91\xeb\xee\xf8`uh\x14H;\n\x0eQc~}\xebp$\xcd\xbf[\x02\xcf5-\xee\xac\xc1\x19!\xd9\x8e@9I\xf7\xff\xb2\x82\x916<%\xc4IqQ3b\xca\x14U"r\xcbr\x11YoU?\x8fp0\x83\xd0\xb5b\x11\xed\xf9\x15\x8e\x1c[E\xd3\xf5\x00\xcf\xf3\xf7@sgS\xe2.\x8a$F\xd6X}U\xb3\x99\xd9\xb7*\xf6\xf6\x06\x9aOX%\x9e#SZ\xabV\xbe\xa9O\xd4\xec\xf3>\x97m\xe8\xcb_\xd6\xe4\xe8\xa2\xa4\x95\xddo\xd1\x17Y\to}\xae\x0e\xbcy\x1c\xb2\xa5\xdc\xa1\xa5\x14\x83\x9a\x01\xc8\x19\xf3Ab\x99O\xf0c\xb8\xbd\x84j\x87m3\xe8\xe7*n\xb9r\x98\xf5%Ib=V\x01F\xfdJ\xa5\xac\xa5\xaa\xcb\xcc@\xbd-_\xb1\xa9\x9c\x1b\x80t\xff\x8a2\xd5\xf1_\x03\rA\x94UB0\xf0\xb3\xad5\xb4\xfd\x19\x02Z\xb8\xb4(\xce\xd7\xcf#\t\xd3\xce4g,\xaf\xbcGn\x1dt@\xf7 \xb3\xbd\xeb\x97\xda\xcc\x8a\x03/\xc1\x8etp\xed\xa8?\x15\xb0Yz|\xcdr\xd3\xd2\xc6\xcd\x0eJ\xd0\x8b\xec\xdfb\x9b\xfaSI"\xb6M\x9fb\xb9\x87\\\xfb\x80\xb8\xd0_%\xf8\xca,\xf5Br\xf8\xebD\x84\xcc]] \xa9#\xce\x9e!\x08\x8b\xfb\x93\x99L\xc8\xe1el\xed\x93\x8a!*\xb6?\xde+\x9f\xfb\xaa\xed\xdc-\xa0|\x05\x8a\xd0\x9c\x84\xdf.s\xbb\xd1:\xca\xda\x03\xf0\x96.\x81\xc6\xea&\xcf{\xef\xb7\xf9\xe2\xdd\x06Z\xab\x88:\xf3Z\xb6\x06\x8f\xa1\x1e\x86\x99\xc3\xd2?\xa2\xdf\xfe\x11\'\xbeN\xb1\xe6\x96\xe6\x94\xb1(\x9c\x06\xecR,\xc5\\\x08Z\xd76\x13vAG\xaa8\x00D\xdf\x8e\xf1\xcb\x8bY\xdc\x8f\x7f\x15\x1bL\x1e\x80\xdc\x05\x10\x02\x0f\x96\x1da\x98\x9e F\xff\xa6k\x19\x9e\xba\x15\x11h1Vi\x1f^\x1f\xf6\xd9\x9b\xddJ\n\xd8\xfdN\x959^\xd4\xf6<\x8cf-\xa3\xc0\x8b\x9a\xac:\x0c{\xd5\nK\xd6\x0f\xa8\xfbh\xd6Y\xe29\xb5\xe2\x05!*\x9e\x8b\xbe\xab\xce\xe0\x12Lx\xff\xa3\xbd\xd4\xc8\xfa\xdb\xc0\x915\x95\x18\x90\x0eji\xa3E\x8d34\x9a\xb3\xbeU\xa2\x91\xf9\x19\xc3$\xc2\xdd\xf0\xe6\xa1\x8e\x14\xf3\x1b[\xd5\xf5\xc2\xb9\x93\x08s\x84\xb6\xaf\xd1\x93\r!\xcaD\xd4\x18\xe7\xd7\\:\xc8[kd\x8f\x1c\xfa:\xb7\t\xb0\xe7\xd1\xe95\x87>\x9d\x1eVI' + + +2024-12-12 23:54:17.496890 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16790 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862115201 + ack = 2922048777 + dataofs = 5 + reserved = 0 + flags = A + window = 517 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'z\xdd\x9eu\xde\x1e\xc3\x83\x83\x94\xb8S^\xccC\x89\xe1\x8c\xc5N\xda\xe7\xe6\x90Wa\xa5\x11\x9a\xc3,\x04\xb1\xe8\xf1\xa4\xb7k/\xb3\x9c\xd7\xfe\xe2\xb1;\xf5Y\x97\x9e\xe4\\\xff\xc8)\x04@\xb8\xb1_\x00\xbb\xeb\x96\xc3\x95\\\x06\x183[\x11\xbdGz\xa2\xed\xca\xa7C\r\xb8\x94#QS\xc2h\xd4:r\xbd\xf7\xfb\xc5\x8a\x8d3k\xad\xafX\x03{^\xf2YR\x99m\xcb\xe7N\xb9,\xd5\xcc\x07\x86\xe0\xc0\xd2\xf9N\xed\xbc\xf3hc\xa3\x11u\x03eM\xbe\xd2+8\xa61\xc9\xb9\xe8|\xc4\xa8\x16\x8e(\xac^\x92L\xf0\x08\xac^\xe4\xa3\x84\x04\xcf\x9d\xa2\x8aso\tD\x8b^=_)\xea\x0f\x1e(WW}q\xa6@\xf1K\xb4\xa1\x83\x92\xe2b\xf6\xdcus\xf2\xfaM]\xc6\xfe\xb9=\xbb\xcc\xb3\x00\xd5*\xdbk\xce:\xdc\x86;\xf5\xd3\xcf\xe7\x99\xee\xb0\xdf\xc4\xe0\xd3\x17\x89\xe1(\xfaxc\xb5\xab\'\x15\'n\xb9\x93\xae\xc7F\xc8\x02\x08\x14\xa2\xceI\xbbo`\xb2\xee\x16n\xcc\xebz\xa8\xd7\xc4\'\xd2\x17h\xe5S\xcf\x88=\xd2\x8b|"\x14\xf1R\xffs\xbe\xa9\x95\x0c\x8b\xb9\xc9\x9e\x0fL\x8a\xff\xa7\x1a5>i\x8f\xcfW\x87*\xbe\x1a\x11\xc8\xb9>\x10\x9f\x83\x01\x87u\x9e\x94\xf2X{\xa0\x03\x90\xf1*\xac=*\xe8\xee\x90\'\x7fo\xf4xy\xe4\xb6\xc9\xbeg\x04\xa0\x02)K\xe9\x17\x7f\xca\x1e\xd8]\xbaLO\xa4-\x04\'S\x01v\xfd\x03XD\x1e\xcb\xc2\x06\x10\x00\xd6\x1c:ie\xff]\x11)\x94V\x15\x0e\xa7\xd4)\xb8p\x06\xf5\x9e,p\xb7W\xf3\xfb\xec\xd7\x17\xb6\x87\xa6\xaeU\xde\xfa\xb3\xc2F\xb5&\x86\x93~\x90\x81M\xb5\xe4\xb3\x98\xfaL\xaa"\x8b\xabh"\x86~\x118(\x10\xa6b\xa5\xae\xf2GeB\xe4\xf0\xc5\xbc\xe0\x82$\xef\x11\xbe\xaa\xa1\x14?\xf4`\xc4\x03\xdfDI\x1b\xaa\x85\x10m\x9d=\xc0\x96\x03\x8a\xf3\xfas\xc4\x1d\x92\xf1e\xfeM\\Y\xb7\xb6,\xc1\xfb\xfd\xac\x9br\x1d\x9b\x1fW"\x92}{\xe1*M~\xc2f\xc9J\x19\xc5FN\xd1$\xed\x05"\xd9u\x10\xc6C\x03\xe7.\xebs\x13/b\x0cA\xae\xf1uX\x95\xa7tb|\xa8Z:\xb6\x9ef\xb8\xa8\x03\xddg\x84z=\x1b\x13r(\xe1.5Hx\x90k\xc7\x1cu\xd3\x94\xc2\xa8~F\x81\xf5\xb5\x84\x89ygl\xdfO\'\xa3C\x1aF\xc9\xf5\x9d\xb3\xcf\xb7\xf6Z\x10\xec\xc1\xc7\xed\xa1\x95\xb6+\x84\xb0B\xaaq\x1a\xa2Ry\'\x93\xa4%\x93\xc3\xfaj\xa3\tI_\xf4\xe8\xe6\x98P\xc7\x03zk{\xa2\xa2\x9c\x0fgu\x7fP]\xcd\x1eAO0\x17\\\xc9\xc6\x15b\x1e\x90\xa8yEY\xac\xc4\xd1\x89dM\xe0\xef\xf4\xcah\xc6dH3i\x0f\x12\x91\xe9\x85\xf5\xda\xb0~\xb4\x98\xb3,@\x11\x18;M\x98\xafm\xe7\x9d\x82z\xdcs5\'E\xa97\x86I\xfb\xb9\xdbY\x7f<\xc8\xb6[KO]8\x8d\xc8\xea@\xf6\xc7\x10f3\xb0Q\xf1\xf0\x8b\xe7\x96G\xcc@d\xd0\x0en\xf8\xd6\xfd .\xc5\xdb\n\xe1/\x0bC\xd7^\xa9\x9b"Z\xdb9\xc2c\xffHl\xbfk\x8a\x9b\x04\xdfN)\xf2\xa9\xdc\x1b\x16/\xdb/B\x82\x1e\'\x84)^\xfaN\xaa\xc2\xf0\xef\xb1\xd2\x8bv\ro\xd7"~s\xc3\x8c.Mse\xd6Z\x9b\xea\xfb\xe7\x05N.\x13i)\x89\xf5\xdcG,6\xc0f\x0f\x07\x7f\x11K\xedE\xdb\\\x9a\xa3\xc3\x18\xbb\xfeH\xfe\x9e\xd1Y\xd7\x0b\x80\x92mo\xb0\x0c\xe4\x96\x10\xc13\xec\x14\xc8\xa4.[\xd7(\xcf\xa3K\xb8\x87\xb0U\x14Jc\xd6\xffn\xeb\x9f\xc1\xff\xe2\x85\x0fZ\xe5 \xa6P\x7f\xab9\xc4|\xf1\xcf?\x88\xe5\xef\xa9\x15\xc8\x13\xc1\x13YT\x96\xb4\x83\x8e\xde\x97#\xf7\xbd\x9by\x02D\xac4YP\xca\x85i\x1a\xceE\xb6\xc0\x81\xcc@\x1c\xdaQ\x1e\xd4\x8aw\xeb>g\x1cV\x82jUj\x9c\x14 Jw\xf7\xe4\x9e\xda#2\x96O\xbe7\xd5qt\xe9\x99\xd6\x17CcBB\x12jvf\xe4\x07e\xbbq\xb8\xbc(@\xefu3\x1a\x82\xcb!\xb8\xbb\x85\xa7\xd0B\xcc\xa0\x9c\xd3\xe7\xbaqA\x96;\xe7H\x9b\xf3\\,x\x86w=\xa0\x10\xd9\xe3\xd3\xdf\xad<\xfeJz\xcdu;\xb2\xa8\x0c\xd5y\xd5\xdc\xa8\xbe2\xeew\x92I/\\\xaa\xa3\xef\x96\xa3\x08\x8c\xc8N]\x89\xea\xd2(\xe6\x9dtK+\xda\x88\xc4\xbf\xfb\xa1\xf7\xaf#f\xe5\xe8f\x1dg\xa7\x94\x1888O\xc0\n\xdd\xe2n\x10\xeacg=\x0er@\xbe\xd0\xbd\x9a\xf584\x8e\xd8mw\xf1\xccEe_\x8bc\x81uEh\xb6\x8eo7n\x0byB=a\xfc\xca\xed\xd8\xbes\x8f\xd5\xea(\xec\xff\x9f\x00_D(\x03\xeb\xe6\x99\xf8q\xa4\xc9\x8eH\xf4\xac(5O\x81\x13\xe9\xdd\x01\xda\xa6\xa9\xd5\xff\xbe\x99\xa7\xd7^y\x95XE`\xb9\xbe\x19\xb5\xf4}\x86\x19*\x14h\xf7\'\xbc<0\xf1l\x94y\x8b 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16791 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862116641 + ack = 2922048777 + dataofs = 5 + reserved = 0 + flags = A + window = 517 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x04\x01=\x1bG\x82\xc0\x92\xb2\x07\x80j\xb2\xc59\x8f<\xd3x\x1d\x0e\xd4\x8b\xcf\xe33\xa8\xdd\x86\xb0\x05\xbb\xed\x9f-\xe8\x880s\xb6\x1bp[ZX\x12\x91\xed\t\xfa\xce\xbc\t\x1e\x83\xb7S\x9e\x97\xbe\xa1\xef[\x8c\x91\xa6J\xa5D\xb0\x04/z\xfa\xaa\x8c\x97\xde\xc8\xb7\x00\x05\x96\x88&\x19\xda\xb0N\x0c\xd2\xfc\x1d=/j\xdf\x1e|W\x889KQ\x05\xec\xff\xd4@\xdb\xb0.5E\xe1\xcf\xf7\x84\xd6\xe3\xf3\xbe\xc3U"\xe1\xa4\xe7\x95\xc0\x88\xb1\xcd\xba?\x164\xf9\xf6P\x06X}\x02\x19ZzA\xffy6\\\xfeG\x05\xbc\xab\xb3\xf4X\xd8\x1c\xd5p\x9en\xf3;y9eDC\xe0\xcc\xa7\xea\xfcf\x03]\xdf\xbf\r\x08\x0f0\xf9$\t\xa5\xd9f~\xa4U\xc2\xb1\x05ya\xcc3\xe9\xd0:\xcd\xfeoq\xd6 `)\xd4>;\xbe\xec\xde\xdeK\x05\xf2YO\x83l\xcb\xed\x00\x97\xa9\xd5\xb4\xaa\xb6\xb7#\xd3\x92\xa99\xfa\xef\xd8}\x81\x8baH\x00\xdf\xcd\x87Yy\xb7+\x8a\nO\xe0\xed\xe5"L\x9e\x06j5\xc0Kx\xc4=?=\x8a\xc1t\x88\x9aE\xcd\x08D\x02\x04\x17\x91\xe8\x99\'\x9a+\x98x \x81\xee\xf6\xf3\x17G\xa8\x0c{\xbem)\rD\x95b\xd1\x1e\xab\xff\x1c\xd20\xeb\x03\x85X\x84\xeb\xb9\x00\x19R2\xe9\xde{\x8b\x89\xdb\xd6\xc1\xe5\x88\xdb: C\xaf\xfc2\xda\x15\\a\xae\xc9b\xc1e\xbc3\x0fWq\xb2\xed\xc8\xea\xfc\x90\xd3\xf1~\xcbR\xbc\x98\xd5c!\x88M\xae\xcaL\xe4;@\xb9\xfb\x9b\x7f^\x05p8\x11K8\xe6\xe3\x98\xab\x07+\xb1,q\x9b>\xa9\x17fD\x87\xc3(\x9d\xc44\x9b<\xa89\x9en\x8eF!\xbb\x85e2A\x0e;\xa8\xd7\xe7\xa5g8~\xf5%\xf4\x97\x9c\xbeE\x97IGj\x94\xe0a\x03\x16\x1c\xa6\xe5-\xfaG\xcb\x8e+G\xce\xda\xddk\x0f\x85V\r\xdeE|S4_\x08\'\x986M\x96\xeax\xd8\x0c\xc4Kn,\xf7\x04\x84\x0f^\x05B\x7fM\xc9\xab\x8b\xd1\xa7}\xe9=v\xce\x10\x84R\xe3\xd6\xef\xbf9\xb2\x83\xb49\xf6F\xbb{\x819\x0c\x18}\xdf\x06UO\xff-\xd2\x96\xe8\xf8\xbcJ\xc8*\x1a\x13r\x19\xf5\xa6d\x08v\x1c\xb7\xe0\x8d\xed@\xba\xc3C\x88\x9f\x1a2u\x13e\x18\xb4\x120\xcf\xd0Z\xed\x15DF1\x19\x8c\xcat\xaaK\xcfQ\x95\xd5\xecZ\xd8\xff\x0c-\xae|\x83\'\x19B]U\xce\xb5d\xf5\x1c\x07d;\x9f\xdf\x0b\xad\xd86\xb2\x0c>\xb9\x03\xe2\xce\x0e\x0f\xafy\x8e\xf8\x9cs\x8d\xb5\x81\x979\x95\xda\xefz\xa6\x9dy\x0c\xca\xedbdW\x06\xd5\xb4\xc0\xd5S\xf7\xbdy\x7f;\n\xb3\xc9\xfc\x07pm\xd26F!\xc8\t\xce\xf4t(|\\!E!\xae\x10u\x15\xe1|\x15C\x0b\x80I\xbd\xf1\xf4#\x19\x84\xce\x90t\xc9@\xf0YG\x9b\x9f\xd9\x7f\xf7\xec\xe5E\xa3\xd1\xb7\xc7\x11\x98h\x86\xf9\x83\x03\xd7\x0e\x9b\x13\x9fR\x03\x87{\x96.s\x0e\x12\xe2\x08\x1ex\xda\xba\x9a\xb2I\x0e\xcdV\xb7\x12\xb7\x81\xa8\xe0L\xce\x94\x02\xd3\xdb\xe2\x8c_E\x92cA\x084\xf4x\xf7\x98y\x11]\x9dRe\x02\x94EI\xdd\x9b\x8c2\xb4\xe3\n3Q\x9b\xe1\x86\xae\xc7\x92Z\xa3\xf1="\t\xd2\xe3\x01L[\xe5H\xa6[\x98\xa6x\xa8\x1f\xa0L\x05t\xc979d\xd8f\xcf\xc5\xf1\xbb>\xd9}\xdc\x83\xa2\xbb\x8e\xfb\x0c)s$\xa7/j\x92\x0f\xe9=\x07Z\x90\xc8\x88\xebh?\x04\xc3\xf4\x0f\x16V\xdfE\xc7\xf3bWWL~\xeb\xc0}\xabT3Z\xfe:\xdd\x07u8>3vCOY\x0e`(\xa8,t \xab(\x9e\xf0\xeb\xb8C\x8b\x17\xe16\xce/u\xe1\xef\x84\x8d\xfbn\x81m(\x94\x8dM3X\x82\x15\xb7\xfa\xa1\xa0EB\xbb\xbf-X\xddqT\x14]Wc\xe8\xbfqD\xcc#\x1eF\xff\xde\xe1\xa7\x95h2\xe0\xd6\x95\xe0|\xb4\xe3\xb30\xcc\x81\x17\xc2rQw\x8c\x08_\xc1B~@v\xd9\x17\xb8\xe0\x87\xdbb\x16\xfc\xbf\xaa\xfe\x1f\x8a\xba^\x97\x1dI\xad\x04/\xbc\xb4\x9e\'\xa5];\xa6\x96%\xd0.\xa8g\xc8A_\xb4& \x80x?\x8fq\x91\xd5F`' + + +2024-12-12 23:54:17.524229 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16792 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862118081 + ack = 2922048777 + dataofs = 5 + reserved = 0 + flags = A + window = 517 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'd4\xf1\xc4f\x89\x9b\x9a+\xc0l\xf1\xb1q\x9c!\xd8\x85y\xc2\r\xe0\x0b\x06\x9b:\xcd"\xe3K\x16\xd8c\x9eK[\xbf\xc3\r\xd2\x9820\xe7\xa4\'\x1aZs\xbdB*>\x17\xd7\xde\xfar6\x0c\xcbP\x81\xf8s\xbd\xb4\xf6\xdf\x02a\xd3"\xf9\x90\t\xf4TQn\x8d\xa1\x17\x1bE,I\xc0\x9bx\xd7\xc1(\xe3\x84\xd6\x17@\xa3\xaa\xb8\xbd(\x1f\xf2\xf0\xca2R-r\'\xe1\xd3\x95\xda\x91:\x88k\xb6\x1b\x00\xb3\x12)\n\x9e\xd6;\xe9\xbb\t\x02>\xa68\x07\x179\xb2Q\xfb\x82Ku@\xf112P\xef\x96\xa5\xee\xfc\x01r\xda\x83\x17\xce\x1c\xf7\xfd2\xec\xf7w#\xdb\xc7$&\x91$\x11\xd6\xaf}\x00@6\x9e\x00\xcc\x13\xee\xf1\xfe\xcb\x1e\xa2\\\x1f(\xe5\xc3\x97?\xbb\x80\xd9\xab\x87\xc2\xf3\xd8\xe8e\x10\x99\xa3\xe2q\xe5\xaa>\x01iWk\xd7\xf0\xde\x1b|y\xe9\x06\xaf\\\x08\x1dV=w\xd9\x7f\xee\xb8\xa1\xff\xadT4\x8d\xf2\x1f\xa9\xf1\x9a\x1d\x9c\xdasN\xf0\xfc\xae\xa5+G\xf0\xac\x93\xf5$\xc09;\x17\x0e\xbeJ\xa9\x95v\x19\x02\xc2\xb7\x82q\xe2\x8d\xc5y\x06\x03\xf0\xd1\xee9U\x13\xf8[\x98E\x10N\xd1\xc2\x13`\xb5?+\xeb\xc3y\xa34?p+\xaa|\xa6\x82z~J\x1f\xd3C\x07\xde\xab\xf5p\xf4\x1f\x8d\x14\xad\xb5"Z\xb2w\xd8\x92"/"\x1f%\r\xb3\x0e\x97\xd4!\x93I\xf9U\xbf\t\xcb\x9a\xc7Zrt\xd4\x1fja3y\x16L\xda\x8ct\xad\xbe\xe5X#\xf2\xe9\xe7?\xd9\xdf\x85\xc4s\xed?\xc6\xde.\xa6\xda^\xce!A\xff\x94\xf8\x8a\x7f\xcb\x1b\xe8\xc8\x1c\xb3$\xf11\xfc\x11\xfe\xd5\xad/:\xd4\x0e,\xd2Fl+\xf1\xfb1\x1bm\xd1\xfe\x03\xe3\xe7\xc145\x88t3S.\x9d\xe3\xec\x87 \x89\xd4\xba\xbc\xe0\x00\x9c\xb6z\xabz\xf0\xa3\xddw\xc0B2\xbc\xdf\xbf\xe7\x85\x0b\xce\x8fe\xbd\xb2,\x04\xde\xb2\x94F\xb4\x01o3\xcc[,U\x95\x94\xbcj\x1a\x94\xa4n\x0fb.!ht(X`}\x81\xb6X\x87\xbd+\xe3\xbf\xc9\x95\xc5\x0f\xa0\xf8\xbe\xe4?\xa6\x96\x7f\xb1\x8c*\xd5\x01\x8eF\xa5\xcbK\n\x14\x90(.4)\xab\xd8\t\x9f\x9fGhQ\xdb\\\x91\xd5J\xdb\x97\x16l\xac7I\xa6\x97\xe9p67L\xba\x882\x12\xb9r\xd5\x94\xdaN\x8f\x9f\x05\x04\x8c\x9c\xd6-H\x99\xee\xf4x\xce\x8c\x0f\xb7\xb1\xd2\x14\x99\x19J\x91\xe4\xff\xa1\xfa\xe4O\n\xc5u\r\\\xf5\xbb?\x8dOY\xe1\x1b\xc1w5\xc1\x85\xf5\x12\xc25\x04]\xe5\x9f`\xc9\xd3l\x08i\xc9%\xc4\xee\xeb\x82\x19\x0bd\'T\x9f\x8c5\x1a\xb3\tG\x07"\xcf\x08\x18\x19=\xb06\xc4\x90\x9e\xc2C\xcf\xdfR\xb8\xfaa%\x7f*\x92\xb8\x98\x95\xc8\xa5)\xfb\x84\xf0\x10\x9a5\xa6V\xbe\xff\xe8m\x84MB\x1fQ\xf5\xb4\xdc\x81\xc1\xd0[\xdaq!Y5i\x11\x85\xfcU\x9fw~\xa2\xc7,\xe4K\xaa\xab~N\x8f\n\xb5\xc2\xba+\x11\xa8\xe3a\x8b\x10\x19w\xfb\xe4\xc0\x90W\xcf\x87\xae\xda\x00\x82n\x03DR\x86\x8eY\xc8\xbd\xc0\x0f\x07\x86\xfcIK\x1fF/MXi\xfd\x1fA}\t\x086\xf9\xe9\xea\x84\x0c\x14\x82pl\xc4\x17a\x16\xebxhK\x9d\xf3\xb5\x19\x89q\x18\xe0\xcc\xa1:R\x96@g\xe5\r,\x1f\x97\xd6\xc8\x9b\x8f.\x1b\r\x8f\xa0\xfb\x1aj\xe2\xd2_\x87KU\x14s@\x9da\x91A*6\xd1\xfeA5;\n\xb1Uf\xb7\xd5\xae\x8a\x89\x0e\x13\xac\xd9?g\x83\x19\xbe\x8dS\x9dC-9j\'\x04\x9a\x8b\x10Z\xf1\xd5\x96\xad\xdd\x95\xc45\x97j\xe0\xb5\xd08\xbcG?\x08\x03\xa0\xdf\x97[\xb5\x96\xa4\x85!\xfe\xab\xf3\xf5\xb5\x16\xd8\x82\xe0\x02y7=FD\xac\x9d\x02\xd3\xdb4\n\xc7G\xd0\xc5\xf4\'\xf4\x8e\x0b\xdc\xff\\\xb4+\x1c\xe3\xcc\x81}1\x19\xdb\xdf\x8fv)\n\x0eV-s\xe0$\xd1\x9b\xbaq\xd5\x0eGP5\xb4d\x98(\xf3\xdf\xcc!\xa4\xd9y\x9f \x97\x99\x82\x04 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16793 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862119521 + ack = 2922048777 + dataofs = 5 + reserved = 0 + flags = A + window = 517 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\xc5\xd5\xfdo\xf1\x18\xe5\xcd\xcc\xa8c>\x14\xbfcj\x0e,\xa6\x81\x99\xdc\x84\x8asR\x02,c\xef\x0b*\r\x8f\xb4=\x03P\x10\x19\xb8\xe5(\xde\x12\xd1\x0eE^l\xc4b\xe7\x82V\x15c\xbf\x96\x1d\xaaf\xb9\x0b\xcdFV\xdb\xf4\xb0\x10\x8e\xc9=Q\xe4\xba\x82m\x1a0\x98:(s&\xad\xfe\x95M\x94\xee\xe7\xa6\xf0\xa2(W\x05\xacXC\xa9\xb5+/q\x94\x93\x94H\xd8\x06L\x9c\xd3\x0b\xab\xce\xb2\xe8\x1c\x0c@F\x96\xa9\xd2\x10\x841\xb7\n%U\x810m\x16|\xe6\x89\x14\xe3w\xfd\xec\x0cI\x8b\x8e\xdf7\x05\xd0S\xb4\x85\xe9\xaa\x94\x82A\x96\xdf\xb9 (\xe76\xd6\xab\xbc_\r\xee\x9b[S\x10L%\xa0\x07\x84D\xba\x17G~\x12{\xfe\x12=\x8a\x03\x16\xfa\x88g\xc7/\x1e\x01HH\x84\xa2\xb1Si\xe3e6B\xec\xa1\xb5\x7f\xfc\x13_\x84\x9bI\xd1V\xe4O\x17;\xb5[\xc0L\x9d\xbf\xb5\xb8\xef<\xa7\xab&xk\xda\xb3\xe0\x04\nn\xabb\xe4\xe1\x1f\xdf\x8f*\xd8\x1f\x1a\xea\xfa\x83V\x89\x9b\xec\x11Qn\xf3P\x96\xec\x12%Y\x9cU\xde9\x8a\xc5\xe0\xc3\x85\xed\xa8\xa6\x16\xf9\xb1\xe4\xcf\x00\xb8\xbd*Cw\xc3\x00\x98\x08\x08\xe9\xa7\ng3\x0e\xda\t\xe8\x1dz\xd9\x1a\x93\x99\xeat\x01C^,\xdb\xc4K\xc3\x98=\xe6\x0c$\x15=G\xa5[\x96\x95\xaeH\xe9D\x03h\xd9\xe3\x0e\x0e,\xa9\xb0\x90\xfa\x8c]au\x90\xb2\x12\xc4P\xb8\xd3a\xca\xff\xa9`L\x1aJ\x1a\x9a;\xa5\x0f\x9d\xca\x01\xabt\xbb\x13\x01bZ\x88;\xd0\x88($\x0c"\xd9\xad5e\x89\xed\xb3\x93/\xec\xae\x13\xbe\x1a\xff\xffU\xdf\xc2`E\x07\xe2\x93\xcf\x9aZ:\xbeTH\xb2i\xf5\xb0\xc6\x84\xfe\xef\x17\x0c*\xf2:?\x84\xbb)\xe3"\xf6?\xe4\xe9>\xe7\xdc\xa2\xad\xe5\xdf\xb3LV;\xfc(\xed\xeb\x14"\xe4k\r\xd6[\xe2\x16\xd0\xa3AO\xcf\x04\x04\xffG\x10\xd8\xa2\x12\x8a\xec\xa2B\xf3\x03\x9cZyl\xe2C\xf0RR\x15{,\xc1\xa2\xb4\x95T"Nk-\xca\xb5wo\ri\xed\xe2\x06!1\xa0W8\xb0*G\x894\x84\xf4.\xa9\x88\x02\xd9\x85%|\xcby\xe7\xc5\xd7\x80\x02\xcf\x7fh^\xb1F\\\x19\xd8\x02\xff\xaaP\x08\x8c\xe4j\x03x\xfau\t\x90!\xdfD9\xca\xc1\x96\'*H\xab\xe8\xfcs\x07\xb2\x1bSx\x10\xfd\x08\x83\xd8\x82\x9a\x8bRw\xa4\xd3\xf4N\xc9\xbfx3\x15\x02\x8a \xf8\xe2\xc2V\x0c\x85r\xa3\xce\x05z/T\xc9\x8bj\x9f,(iN8a]\xa0o\x1c$6\t\tO31\x12{\x9c\xefs\xb2\xe3}\x08\xea\xce\xfc\x99\xf3\xcb\xdd=5\x8f\x0e@m_\x18Nk\r\x05\xba\xacC\xac\xed]\xf9-s\x1e`\xf3\xdb\xa2s\xfa%\xd7\xe99\x80b\xea7\xdd%\xbc\xf2\xa9*\x17!\xafW4\xe6\x86\x1aE\xd2\x80\xe8/\xec\xbd)r\xa4Hu\xe6\x922\xdfm\x1d\xf40w`=\xa0N\x12\xdfm(U\xeb\xc0\xeb}\ni\xd6\xf9\xac\xab\x82\xbf\xdc\xe8]\x8b0\x02\x8e\x1f\x0b\xf8\xa9\xd8\x0e\x0e\xec>\tV\xc9\x1e\xf5\x80\x95i\x13\x92\x08\xb3\xe8I\xb9\x90\xb1\x02cgO\x15^iv\xb7z$\xb9\xb2\xcc:\xaf\x0b\x14r\x86\x8f\xa4\xc1r\t\x7f!}0j\xb6\xc14\xd3Y\x9d\x8e\xee\xfas)mS\xaf\xf4\xf3)\x8ee\xd4~\x84\x134\xd3\xeb\xaa\x97S;\xa3\x022\xb8\xaf\x91-&%\x19\xaf\x16\x97\x9e\x94\xcfd\xf6@\xd3\xd3\x8eW^\x06\x7f\xb0\xa2\xb1a\xe7\x8c[\xdc\xb3%\xb5\n\x82\x15e\xaa|\x8d\xecV3M4\xdc~N\x0c &\xc2\xe9;Ih\x1f\x90\xaf\xc3\x8e\x96~\xe9\x8b\x7fV\xd4\xf1O\x04f\xee.8@E1,]\xad{\xf0\n\xea\xe0-v\xee\x929\xf7K\xf4~\xe8p\xf5\xdb\x93bB3\xe9;\x03\xb5V\xbdBU\xed\x9e?\xe7\xcb?\x8c\xe4\x92\xf4\xd5\x8b_\xe6\x10\xd4%\x86;o\xf9,\xf1\x97\xae\xc7\xca\xb3\xdbJ6^\x8fY\x13\xe6\xe5L\x9c\x13\xaao\xc1|J\xa8\xf4\x1b\x84\xd7\xe9\xc6\xf2\x0e\xe2|3Yz\x06\xa0\xd8\x8b\xedN\x14\xcfEE\xe2oX\x90*zsi\xabm\x7f6\xa6?\xabb\xf6\x1b\x17\t\xad\xe5\x83\xa3\xf2\xb0\x04o\x12,\xfft\r\xe4?C\xf5UG4\x06UuIe\xbb\xf5\xaf\xd3\xb4\x11\xa7l\x0c?\xc9\x14\x0c\xb0\x1e$C9M\xf9\x82\xea\x90#\xbax\xc2p\x83\xc8\xdc>a=8Z\x9e\xa7\xd5\x0ew\x8e\x19\x82q\xd1~\xe5\xb5\x1d\xdf\xc4~\xdf%\xcb\xb3p\xef\xac@\x99"\xc4s&|\xc5M@g\x81\xcb\xd6\x88\xb3u\x900\xac\xc8\xf4:\x95\xa3u\xc4pF\xad\xcd\x9a\x03\xcatk\xa3\xe2\x8e\xe7\x1bwv\xef@**\x04u\x07\xf2\x8cb\x00\x0b\xafg\x94cA\xa9\xf0A\x1b\xfb\xedS\x12U]\xd5\x8f\x06\x9b \xca\x18\xccH\xf4fg\xacE\xf5\xbc\x13!\xac\xcf\xf4\xa0\xcc\x96\xf5\x01L\x82@\'\xb2G\x08|\xa1Gz\x1b{v\x89\xa1C+\x90|\x04\xca\xff\xca7\xd0&\x1dTE9J\xe4\x99\x8c4\xe8\x8a\xb0\x9eU/\xbb\x80\xb3\xf3\xc4\xe0Q\x84\xcf<\xeb\xf0\x7f\x15\xcan\xb3\xc8\xf6\x87\x91\x12D\xcb\xb0\xd3lJ\xf2\x07\xa3/\x99E%\x00\xc6\x85S\xe5J4\x11\xc3:\xbe4c\x92\xa1\xbf\xf7.\n\xac\x15\xbbf\x08\xb2",\x89iVFS\xd5\xfeF*\xbe\x9a\xa3r]\xdci81\xb4ay@\x8f9\x0f\xecF\x0cbp\xa1\xbfc\xce]\xff\xd8HJ\xa6\x19\xf4y\xae\xfa\x0f\xeb\x9d\xe5\xd6\xf4\x12\xc6\x99\xba\x14\xab\x86W\x03\xd0\xa0\xef\xa9O\x89\xd1\xe0h\x87_N\x9e<\xb7\x9fj\x8b\x85\x01A\xbb\xab1\x9bY\xe1OZ\xad\r\xb6r}\xe2' + + +2024-12-12 23:54:17.540178 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1178 + id = 16794 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862120961 + ack = 2922048777 + dataofs = 5 + reserved = 0 + flags = PA + window = 517 + chksum = 0x6b2b + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x85z*\xf6\x8aYa\x19\xac{!\xc1\x1b\x07\xa0\xfc\xf7\xcc"\x00p\x16@\x1fh&+H`w\xaf\x08\x9ar/\xcb\x19\xcf\xff7\'\x9d$\x11\x85\xf3\xbc\r\xa9%.C\xd8\xc1\xc6\xc2<\xcexyR}-?\xb5\x92\\~\xf7\xb3\xf9=9\xae\xcd\xfa\x0c\xa2\x00M\xb2dh\xe0\x87\xf7 \x83\xcc\xd0\xc3\xe4\xcd\xca3d\xc4~\xa6\x8ae\xb9\x83\xf6\x93\x83\xf4D{#\x05>\x9b\xd2+\x9c)\xa2\x0bII\xfa\xf7}\x0el\x12~\xe1oO\xee\x9a\x9d\x1cX\xbcd p\xfb\xbd\xbdmz\xd0\x90\x97P\xdf\xf8\x03S\x9a\x0c\xb6\x92\xcc\x86+tZ\xf9X\x05\xb8\x19,#\xc6\xc0\xc0\xe74k\x9aFr\nn\xe6\xfd\xd9NgO\x80\x03\x86I\xbah\xa1\x96\xda\xac0R4\x8e7\xe2\x1c\xba\xd1 s\xec\xd6\xe1\xd4k\x0b\x9f\x0ek\xfe9\x890\xc0\xfa\xfem{\xdf\xa8\xce\xd7\xe7\xd6\xd8\xb8;N[\xac\xf5\x91H\xf9\xa6\x9f\xa6\xf5\xe57s\xe8*sC\x84\xab\xbb\xca\xdb\x96\xba\xbd\xc7`cL:\xf6\xc1\x1d\xfb\xe53\xa87\xea\xc4@\xe4\x90\xacex\xf4,\t\x0b\xbf\xd8\xf7\r\x01\x1c\x02\x01\xa6\x92\x1bO\r\xd7\xf0i\xbb\xa9\x05\xd9\xcfg)m\xc1l\\=I\xcecw\xd2t\x9c\xb3Y\x91^\n\xf1\x8b\x7f\x9aD.H\xb9\xb2E\x14\xfe\xbdj1K,\x9an<\xe7\x01k\xd0k<\x10#QM\xa9\x15\x0e\xb0\x86\x1d\xe5&\xe9\xb0_\xf2\x0ewo\xaau\x00s:\xb3\xe9y\x7f"1&\xa8\x01\x7f\xab\x9b\xa1\t\x93\xff!8x\x19\x97\x07\xd05_\x1do3\x02\xac\x18F\xe7\x1b)\xc7?\xea\x03\xdc\x14\xb9\x15\xc0\\\x1bf\x1bm:\x02ai\x0b\xff\x16\x8a\x06\x13\xd4{%P\xd9V-\xbd\\?\xf2Jm\xc59\t\x1b`\xdf\xf8\xdc\x1b\x9b\xcd\x9a\x08<\xa3\xb4&\xdd!r\x8bX\xbd_\x9d\xc6\xcfLb\xbb\xa8\xf3_\x07;\x8b`\xa1[Q\xf3+\xdb=\xd1\x08\xc5\xaac\xd8PQs\xd1\xf1\'\xe7\xb0\xa0EvB\xcd\xbeO\xe7\xa8\t\xc3\xd4\x99\xd8Zo\xa9\x05U\xd3&Y\xab\xac\xe3\xb3L\x88\x87=\xbb\xd7\xec\xcc\x83\xb60\xc4\x95}\xde6\xf40\xc3\x8d\x8e\x7f\xac\xf0\x9cw)?j@ Z\n\x02\xc1\xcb\xc3-\xf16\xac\x19\x8f\xa00kO\n\x92V\xde`\x8c\x9ee?\x0c+a\xd8\xde!\xbc\x83;1W\'*U?9Gg\x8f\xf9\xc7\xc2\xadZ?F\xf5M}\xcc\xd5\x03t\xebO\x05\xa1\xff\xb48\xb3\xb4\xdf\xc9\x93<\xce\xcc\x87\x19\xc8\xeb\x15p\xab\x88\xe6\xe0`B\xb4\xe1V\x7f<\x92\xc04qu\xff\xccu\x03\x0c\x0f\xdf\xf6\x0b\x914\x1dgh\xd8/\xd9\xfdW\xeaNr.\xcc\xfbN6\xbae\x9e\xd7\x10#\xca\x121Fx\x07\xca7\x80\r\xfe\xad\xe5\x0e\x9ac\xe2@\xcb4\xd7\x9b9\xb2J\xd7\x9dmF\x84\xef~!\xba\xec\n\x8c\x1c\r\x12\xa0E\x87\x81-\xd4\xf1\x0b\x86IiiK\xe8s\xe5\xc6s\xe75\xa3\xbdu"Hh\xdb\x93c\x991\x95\r\xf6\xd2\x8a\x19C\xbe\x12#\xd6#\x94\xd1\x1b\x18\xc0N\xf0\xc4 \xe5\xd5sm\xa9\xb8\xc7N\xa9\n\xa5O\xdc\xfc\xa7\xc30SN\xf6\xc2\xa6d\xf0U9\x97F\xb4"v:\xcc\xb0\x1a:\x0c\x93p\x1c\x05\x1f\xfd\xe2\xe4>\x9b\xe4P8L6w\x0b\x12\xec\x1e\xc6\x83\xf0\x9eF<2\x05@P\xaaG\xe7H"I\x96[^\x08\xbc\x8e\x94l\xda\x06tY8\x01\x1fx\x9d\x8d\xec\x00\n\xfcdv\xcdrw\xac\x9b\xcf\xc2\xc8mS_~h\x8cMD\x1c\xef\xa7d\t\x10y\xb28\xb1\xd0\xea\xe9\xd4v\x15QAg\x92\xebT\x90M\xa3\x16\x0b\x17F\x92\xcd\xe1\xe6\xbc\x1f\xcb\x81\xbc4\x88\xf1\xf43\x8e\xbfC\xf6iA}|\xdcS?\xb8&\xd8\xfbw\x04x\x8d\x86\x1c\xdb!\x89\xc4>s\xe6\x83\x98z>\xe3C\x02\xa8\xc6h}W@\xb6uG\x86\xab\xbe\xc6\xd5a\xd2\x1f\x9a\x89dD\x84cV[\xe5\xb1\xbc#\x11\xdf\x00\x81\xce\xe4E\x0eV\xf8\xc7\xff\x95\xd2g\xd0\xb1\x13\xc2\xd7\xee\x0b\xdfg0W\xdcw\xa9\x83\xaf\x8a\x8fqB\xfc\xb6mSKU\xd2\xc5\xe0\x0b\xbet\x16\xa4\xb0f\x81\xa54\x9a\xfa"\x94x)U\x86\xf5\xceL\x8c\xf3\x9d\x8cQ\xb0\xf2\xfb\x06\xce\xdb\xa0\x00(\x95\xf9\x04\xb4p\xbc\x9aqm\t\xcc1 \x02cJ\xee\r\x86\x07\xea\xb9\xaf\xda\x8f\xaa\xbb[o~ew\xf0\x1d^\xd4m\xc7\xc9\xfa\x7fx\x96\x98\x07\x94;.\x81M\xa1\xd0\xcb\x8cH\xb3\x1b' + + +2024-12-12 23:54:17.546858 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 479 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc56a + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 459 + chksum = 0x81a1 +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: urn:schemas-upnp-org:service:WANIPConnection:2\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842bb::urn:schemas-upnp-org:service:WANIPConnection:2\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.552300 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 497 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc558 + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 477 + chksum = 0x3a9 +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842ba::urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.561134 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 426 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc59f + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 406 + chksum = 0x8394 +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: uuid:d15f795f-9d12-458e-874b-cb38ba3842ba\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842ba\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.570411 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 465 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc578 + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 445 + chksum = 0x8a6f +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: urn:schemas-upnp-org:device:WANDevice:2\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842ba::urn:schemas-upnp-org:device:WANDevice:2\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.577068 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 426 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc59f + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 406 + chksum = 0x8392 +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: uuid:d15f795f-9d12-458e-874b-cb38ba3842bb\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842bb\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.582255 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 485 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc564 + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 465 + chksum = 0x7632 +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: urn:schemas-upnp-org:device:WANConnectionDevice:2\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842bb::urn:schemas-upnp-org:device:WANConnectionDevice:2\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.587669 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 426 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc59f + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 406 + chksum = 0x83e4 +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: uuid:d15f795f-9d12-458e-874b-cb38ba3842b9\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842b9\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.594064 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 489 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc560 + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 469 + chksum = 0x502d +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: urn:schemas-upnp-org:device:InternetGatewayDevice:2\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842b9::urn:schemas-upnp-org:device:InternetGatewayDevice:2\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.601584 - Ether / IP / UDP 192.168.1.1:60364 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 417 + id = 0 + flags = DF + frag = 0 + ttl = 2 + proto = udp + chksum = 0xc5a8 + src = 192.168.1.1 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 60364 + dport = ssdp + len = 397 + chksum = 0xc02c +###[ Raw ]### + load = b'NOTIFY * HTTP/1.1\r\nHOST: 239.255.255.250:1900\r\nCACHE-CONTROL: max-age=1800\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nNT: upnp:rootdevice\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842b9::upnp:rootdevice\r\nNTS: ssdp:alive\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:17.605721 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40468 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x91d + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922048777 + ack = 1862115201 + dataofs = 5 + reserved = 0 + flags = A + window = 16385 + chksum = 0xef0b + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:17.610812 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40469 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x91c + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922048777 + ack = 1862119521 + dataofs = 5 + reserved = 0 + flags = A + window = 16385 + chksum = 0xde2b + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:17.617922 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40470 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x91b + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922048777 + ack = 1862120961 + dataofs = 5 + reserved = 0 + flags = A + window = 16379 + chksum = 0xd891 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:17.623045 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 134 + id = 40471 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x8bc + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922048777 + ack = 1862122099 + dataofs = 5 + reserved = 0 + flags = PA + window = 16385 + chksum = 0x678c + urgptr = 0 + options = [] +###[ Raw ]### + load = b"\x17\x03\x03\x00Y\xb2N_d\x1c\xfcR\xffV\xba\xd6\xa1\xd34\x06B\x03\x11\x91\x15'\xc3\x03b\xed\xdf\x1a\xda\xc92\xb6+j\xae2_\xfe,\x85P\xfbS\xddRc\xfc\xd8\xcf\x85\x9e\xf1\xa0`Xs\xc9\x0f\xf8\x1f\xc6~\xf5\xb8\xaf\x9c7@\\-\x16\xaa{\x8f\xdb:\xc2\\0H\xe7\x1f\xf1\x16\xcc\xf3\x83\x933\x8a" + + +2024-12-12 23:54:17.626155 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 75 + id = 16795 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862122099 + ack = 2922048871 + dataofs = 5 + reserved = 0 + flags = PA + window = 517 + chksum = 0x66dc + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00\x1e1\x9b\xa96\xf1"C\xbe062I \xe7Q\x81\xe1X\xa1\xc2M\x0c\x8f\xe9\x94\xf9\xe6<\xc97' + + +2024-12-12 23:54:17.823852 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40472 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x919 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922048871 + ack = 1862122134 + dataofs = 5 + reserved = 0 + flags = A + window = 16384 + chksum = 0xd399 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:18.232918 - Ether / IP / UDP / mDNS Qry b'_233637DE._sub._googlecast._tcp.local.' +###[ Ethernet ]### + dst = 01:00:5e:00:00:fb + src = 6a:6d:6b:7b:d0:03 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 89 + id = 13211 + flags = DF + frag = 0 + ttl = 255 + proto = udp + chksum = 0xa4fa + src = 192.168.1.90 + dst = 224.0.0.251 + \options \ +###[ UDP ]### + sport = 5353 + dport = 5353 + len = 69 + chksum = 0x3246 +###[ DNS ]### + id = 40 + qr = 0 + opcode = QUERY + aa = 0 + tc = 0 + rd = 0 + ra = 0 + z = 0 + ad = 0 + cd = 0 + rcode = ok + qdcount = 2 + ancount = 0 + nscount = 0 + arcount = 0 + \qd \ + |###[ DNS Question Record ]### + | qname = b'_233637DE._sub._googlecast._tcp.local.' + | qtype = PTR + | unicastresponse= 0 + | qclass = IN + |###[ DNS Question Record ]### + | qname = b'_googlecast._tcp.local.' + | qtype = PTR + | unicastresponse= 0 + | qclass = IN + \an \ + \ns \ + \ar \ + + +2024-12-12 23:54:18.448530 - Ether / IP / UDP / DNS Qry b'edgedl.me.gvt1.com.' +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 64 + id = 49708 + flags = + frag = 0 + ttl = 128 + proto = udp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ UDP ]### + sport = 51505 + dport = domain + len = 44 + chksum = 0x839a +###[ DNS ]### + id = 19690 + qr = 0 + opcode = QUERY + aa = 0 + tc = 0 + rd = 1 + ra = 0 + z = 0 + ad = 0 + cd = 0 + rcode = ok + qdcount = 1 + ancount = 0 + nscount = 0 + arcount = 0 + \qd \ + |###[ DNS Question Record ]### + | qname = b'edgedl.me.gvt1.com.' + | qtype = A + | unicastresponse= 0 + | qclass = IN + \an \ + \ns \ + \ar \ + + +2024-12-12 23:54:18.468873 - Ether / IP / UDP / DNS Ans 34.104.35.123 +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 80 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = udp + chksum = 0xb740 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ UDP ]### + sport = domain + dport = 51505 + len = 60 + chksum = 0xb76f +###[ DNS ]### + id = 19690 + qr = 1 + opcode = QUERY + aa = 0 + tc = 0 + rd = 1 + ra = 1 + z = 0 + ad = 0 + cd = 0 + rcode = ok + qdcount = 1 + ancount = 1 + nscount = 0 + arcount = 0 + \qd \ + |###[ DNS Question Record ]### + | qname = b'edgedl.me.gvt1.com.' + | qtype = A + | unicastresponse= 0 + | qclass = IN + \an \ + |###[ DNS Resource Record ]### + | rrname = b'edgedl.me.gvt1.com.' + | type = A + | cacheflush= 0 + | rclass = IN + | ttl = 247 + | rdlen = None + | rdata = 34.104.35.123 + \ns \ + \ar \ + + +2024-12-12 23:54:18.476437 - Ether / IP / TCP 192.168.1.11:28583 > 34.104.35.123:http S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 60212 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 34.104.35.123 + \options \ +###[ TCP ]### + sport = 28583 + dport = http + seq = 2135170824 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x7bd + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:18.488053 - Ether / IP / TCP 34.104.35.123:http > 192.168.1.11:28583 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 56 + proto = tcp + chksum = 0x3b2e + src = 34.104.35.123 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = http + dport = 28583 + seq = 3269188664 + ack = 2135170825 + dataofs = 8 + reserved = 0 + flags = SA + window = 65535 + chksum = 0xba44 + urgptr = 0 + options = [('MSS', 1408), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 8)] + + +2024-12-12 23:54:18.494745 - Ether / IP / TCP 192.168.1.11:28583 > 34.104.35.123:http A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 60213 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 34.104.35.123 + \options \ +###[ TCP ]### + sport = 28583 + dport = http + seq = 2135170825 + ack = 3269188665 + dataofs = 5 + reserved = 0 + flags = A + window = 517 + chksum = 0x7b1 + urgptr = 0 + options = [] + + +2024-12-12 23:54:18.501129 - Ether / IP / TCP 192.168.1.11:28583 > 34.104.35.123:http PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 300 + id = 60214 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 34.104.35.123 + \options \ +###[ TCP ]### + sport = 28583 + dport = http + seq = 2135170825 + ack = 3269188665 + dataofs = 5 + reserved = 0 + flags = PA + window = 517 + chksum = 0x8b5 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HEAD /edgedl/diffgen-puffin/kiabhabjdbkjdpjbpigfodbdjmbglcoo/373a55a0a5f464cc99fe9447d053af1e691362c0a103644fba9ebad2e6e0a090 HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nUser-Agent: Microsoft BITS/7.8\r\nHost: edgedl.me.gvt1.com\r\n\r\n' + + +2024-12-12 23:54:18.506917 - Ether / IP / TCP 34.104.35.123:http > 192.168.1.11:28583 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 23550 + flags = + frag = 0 + ttl = 56 + proto = tcp + chksum = 0x1f3c + src = 34.104.35.123 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = http + dport = 28583 + seq = 3269188665 + ack = 2135171085 + dataofs = 5 + reserved = 0 + flags = A + window = 261 + chksum = 0xf8da + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:18.516197 - Ether / IP / TCP 34.104.35.123:http > 192.168.1.11:28583 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 589 + id = 23551 + flags = + frag = 0 + ttl = 54 + proto = tcp + chksum = 0x1f16 + src = 34.104.35.123 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = http + dport = 28583 + seq = 3269188665 + ack = 2135171085 + dataofs = 5 + reserved = 0 + flags = PA + window = 261 + chksum = 0xecc7 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\naccept-ranges: bytes\r\ncontent-disposition: attachment\r\ncontent-length: 2208\r\ncontent-security-policy: default-src \'none\'\r\nserver: Google-Edge-Cache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-request-id: 1306ecef-49a0-4c11-9785-6010be54cad5\r\ndate: Thu, 12 Dec 2024 20:12:03 GMT\r\nage: 9735\r\nlast-modified: Thu, 12 Dec 2024 20:09:52 GMT\r\netag: "3a236bc"\r\ncontent-type: application/octet-stream\r\nalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000\r\ncache-control: public,max-age=86400\r\n\r\n' + + +2024-12-12 23:54:18.552332 - Ether / IP / TCP 192.168.1.11:28583 > 34.104.35.123:http A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 60215 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 34.104.35.123 + \options \ +###[ TCP ]### + sport = 28583 + dport = http + seq = 2135171085 + ack = 3269189214 + dataofs = 5 + reserved = 0 + flags = A + window = 514 + chksum = 0x7b1 + urgptr = 0 + options = [] + + +2024-12-12 23:54:18.568559 - Ether / IP / TCP 192.168.1.11:28584 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49709 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28584 + dport = 64920 + seq = 1934915718 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:18.574118 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28584 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28584 + seq = 3648089825 + ack = 1934915719 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x112e + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:18.580543 - Ether / IP / TCP 192.168.1.11:28584 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49710 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28584 + dport = 64920 + seq = 1934915719 + ack = 3648089826 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:18.586568 - Ether / IP / TCP 192.168.1.11:28584 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 244 + id = 49711 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28584 + dport = 64920 + seq = 1934915719 + ack = 3648089826 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x8443 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'GET /d15f795f/WANCfg.xml HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nAccept: text/xml, application/xml\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:18.591865 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28584 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 16564 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x76bf + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28584 + seq = 3648089826 + ack = 1934915923 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x8850 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:18.602136 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28584 A / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 2960 + id = 16565 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x6b56 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28584 + seq = 3648089826 + ack = 1934915923 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x0 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 2943\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:26 GMT\r\n\r\n\r\n10GetCommonLinkPropertiesNewWANAccessTypeoutWANAccessTypeNewLayer1UpstreamMaxBitRateoutLayer1UpstreamMaxBitRateNewLayer1DownstreamMaxBitRateoutLayer1DownstreamMaxBitRateNewPhysicalLinkStatusoutPhysicalLinkStatusGetTotalBytesSentNewTotalBytesSentoutTotalBytesSentGetTotalBytesReceivedNewTotalBytesReceivedoutTotalBytesReceivedGetTotalPacketsSentNewTotalPacketsSentoutTotalPacketsSentGetTotalPacketsReceivedNewTotalPacketsReceivedoutTotalPacketsReceivedWANAccessTypestringDSLPOTSCableEthernetLayer1UpstreamMaxBitRateui4Layer1DownstreamMaxBitRateui4PhysicalLinkStatusstringUpDownInitializingUnavailableTotalBytesSentui4TotalBytesReceivedui4 192.168.1.11:28584 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 252 + id = 16567 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x75e8 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28584 + seq = 3648092746 + ack = 1934915923 + dataofs = 5 + reserved = 0 + flags = PA + window = 490 + chksum = 0xeca5 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'Events="no">TotalPacketsSentui4TotalPacketsReceivedui4' + + +2024-12-12 23:54:18.612127 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28584 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 16568 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x76bb + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28584 + seq = 3648092958 + ack = 1934915923 + dataofs = 5 + reserved = 0 + flags = FA + window = 490 + chksum = 0x7c13 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:18.617278 - Ether / IP / TCP 192.168.1.11:28584 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49712 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28584 + dport = 64920 + seq = 1934915923 + ack = 3648092959 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:18.621796 - Ether / IP / TCP 192.168.1.11:28584 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49713 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28584 + dport = 64920 + seq = 1934915923 + ack = 3648092959 + dataofs = 5 + reserved = 0 + flags = FA + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:18.626918 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28584 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28584 + seq = 3648092959 + ack = 1934915924 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x7c12 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:18.630973 - Ether / IP / TCP 192.168.1.11:28585 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49714 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28585 + dport = 64920 + seq = 98805809 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:18.635958 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28585 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28585 + seq = 3268682563 + ack = 98805810 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0xb12e + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:18.639424 - Ether / IP / TCP 192.168.1.11:28585 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49715 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28585 + dport = 64920 + seq = 98805810 + ack = 3268682564 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:18.645632 - Ether / IP / TCP 192.168.1.11:28585 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 318 + id = 49716 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28585 + dport = 64920 + seq = 98805810 + ack = 3268682564 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x848d + urgptr = 0 + options = [] +###[ Raw ]### + load = b'SUBSCRIBE /d15f795f/evt/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nNT: upnp:event\r\nCallback: \r\nTimeout: Second-1800\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:18.649465 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28585 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 3373 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xaa46 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28585 + seq = 3268682564 + ack = 98806088 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x2807 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:18.655032 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28585 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 296 + id = 3374 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xa945 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28585 + seq = 3268682564 + ack = 98806088 + dataofs = 5 + reserved = 0 + flags = PA + window = 490 + chksum = 0xf9bd + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 0\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:26 GMT\r\nTimeout: Second-1800\r\nSID: uuid:d15f795f-9d12-458e-874b-cb38ba389303\r\n\r\n' + + +2024-12-12 23:54:18.659243 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28585 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 3375 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xaa44 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28585 + seq = 3268682820 + ack = 98806088 + dataofs = 5 + reserved = 0 + flags = FA + window = 490 + chksum = 0x2706 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:18.663493 - Ether / IP / TCP 192.168.1.1:59624 > 192.168.1.11:icslap S +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 60 + id = 53240 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xe766 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 59624 + dport = icslap + seq = 462283154 + ack = 0 + dataofs = 10 + reserved = 0 + flags = S + window = 14600 + chksum = 0x4deb + urgptr = 0 + options = [('MSS', 1460), ('SAckOK', b''), ('Timestamp', (503983722, 0)), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:18.667731 - Ether / IP / TCP 192.168.1.11:28585 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49717 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28585 + dport = 64920 + seq = 98806088 + ack = 3268682821 + dataofs = 5 + reserved = 0 + flags = A + window = 512 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:18.671347 - Ether / IP / TCP 192.168.1.11:28585 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49718 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28585 + dport = 64920 + seq = 98806088 + ack = 3268682821 + dataofs = 5 + reserved = 0 + flags = FA + window = 512 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:18.676254 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28585 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28585 + seq = 3268682821 + ack = 98806089 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x2705 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:18.680145 - Ether / IP / TCP 192.168.1.11:28586 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49719 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28586 + dport = 64920 + seq = 1719042837 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:18.685072 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28586 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28586 + seq = 3480265420 + ack = 1719042838 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0xe990 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:18.688743 - Ether / IP / TCP 192.168.1.11:28586 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49720 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28586 + dport = 64920 + seq = 1719042838 + ack = 3480265421 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:18.694442 - Ether / IP / TCP 192.168.1.11:28586 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 363 + id = 49721 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28586 + dport = 64920 + seq = 1719042838 + ack = 3480265421 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ba + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesSent"\r\nContent-Length: 309\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:18.699089 - Ether / IP / TCP 192.168.1.11:28586 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 349 + id = 49722 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28586 + dport = 64920 + seq = 1719043161 + ack = 3480265421 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ac + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:18.702677 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28586 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 36023 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x2abc + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28586 + seq = 3480265421 + ack = 1719043161 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x603c + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:18.706796 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28586 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 36024 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x2abb + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28586 + seq = 3480265421 + ack = 1719043470 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x5ee5 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:18.712650 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28586 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 579 + id = 36025 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x289f + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28586 + seq = 3480265421 + ack = 1719043470 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0x2bfb + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 351\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:26 GMT\r\n\r\n\r\n18853964\r\n' + + +2024-12-12 23:54:18.716204 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28586 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 36026 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x2ab9 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28586 + seq = 3480265960 + ack = 1719043470 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0x5cc9 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:18.720685 - Ether / IP / TCP 192.168.1.11:28586 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49723 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28586 + dport = 64920 + seq = 1719043470 + ack = 3480265961 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:18.724249 - Ether / IP / TCP 192.168.1.11:28586 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49724 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28586 + dport = 64920 + seq = 1719043470 + ack = 3480265961 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:18.728593 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28586 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28586 + seq = 3480265961 + ack = 1719043471 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x5cc8 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:18.732940 - Ether / IP / TCP 192.168.1.11:28587 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49725 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28587 + dport = 64920 + seq = 3617359199 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:18.738137 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28587 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28587 + seq = 719594517 + ack = 3617359200 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x9963 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:18.742677 - Ether / IP / TCP 192.168.1.11:28587 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49726 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28587 + dport = 64920 + seq = 3617359200 + ack = 719594518 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:18.747198 - Ether / IP / TCP 192.168.1.11:28587 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 367 + id = 49727 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28587 + dport = 64920 + seq = 3617359200 + ack = 719594518 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84be + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesReceived"\r\nContent-Length: 313\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:18.752227 - Ether / IP / TCP 192.168.1.11:28587 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 353 + id = 49728 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28587 + dport = 64920 + seq = 3617359527 + ack = 719594518 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84b0 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:18.755444 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28587 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 2767 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xaca4 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28587 + seq = 719594518 + ack = 3617359527 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x100b + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:18.759391 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28587 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 2768 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xaca3 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28587 + seq = 719594518 + ack = 3617359840 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0xeb0 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:18.765206 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28587 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 596 + id = 2769 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xaa76 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28587 + seq = 719594518 + ack = 3617359840 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0x57c5 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 368\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:26 GMT\r\n\r\n\r\n569712294\r\n' + + +2024-12-12 23:54:18.769212 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28587 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 2770 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xaca1 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28587 + seq = 719595074 + ack = 3617359840 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0xc83 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:18.773284 - Ether / IP / TCP 192.168.1.11:28587 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49729 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28587 + dport = 64920 + seq = 3617359840 + ack = 719595075 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:18.776804 - Ether / IP / TCP 192.168.1.11:28587 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49730 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28587 + dport = 64920 + seq = 3617359840 + ack = 719595075 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:18.780294 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28587 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28587 + seq = 719595075 + ack = 3617359841 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0xc82 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:19.517933 - Ether / IP / TCP 192.168.1.11:28306 > 142.250.200.67:https PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 125 + id = 1366 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 142.250.200.67 + \options \ +###[ TCP ]### + sport = 28306 + dport = https + seq = 4007117280 + ack = 554599869 + dataofs = 5 + reserved = 0 + flags = PA + window = 511 + chksum = 0x1961 + urgptr = 0 + options = [] +###[ Raw ]### + load = b"\x17\x03\x03\x00Pry\x88,\x1b\xf6\xcf\xed!\xcfU\x94\x9c\xd2\x0bTr\xcc\xd1g=\xc5\xb1\xe9\xdeLR\xe6,\xec\xbf\xe9O\xc4\xd6\x01\xe7yy\xc7\x1f\xa9\xb7\x94v>#\x02\xde7G\\\xfb^\xa0_\xaa\x04's\x93C\xfas\x04\xa4\xfe7\xf9\x86\x04\xd3~`2\xc8\x9b\x7f\xb0\xb7" + + +2024-12-12 23:54:19.548195 - Ether / IP / TCP 142.250.200.67:https > 192.168.1.11:28306 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 7030 + flags = + frag = 0 + ttl = 119 + proto = tcp + chksum = 0xf69 + src = 142.250.200.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28306 + seq = 554599869 + ack = 4007117365 + dataofs = 5 + reserved = 0 + flags = A + window = 1043 + chksum = 0xcaa9 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'#\tRd\x00\x00' + + +2024-12-12 23:54:19.566349 - Ether / IP / TCP 142.250.200.67:https > 192.168.1.11:28306 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 144 + id = 7031 + flags = + frag = 0 + ttl = 119 + proto = tcp + chksum = 0xf00 + src = 142.250.200.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28306 + seq = 554599869 + ack = 4007117365 + dataofs = 5 + reserved = 0 + flags = PA + window = 1043 + chksum = 0xc300 + urgptr = 0 + options = [] +###[ Raw ]### + load = b"\x17\x03\x03\x00c@\xff\x97Ph\x86V5\xf9ogwT\xd2\xa7#zs\xadVL\xa5c\xe7\x8c\x96\xed\x93Z\xf6\xe9\xfa\xa7O\x85nm\x0fm\x8f\x86\xbb\xe6F8\xf6\xd9\xd5(\xd7s\xf9''\xdc\xe9\xdd\\j\xf2\x04Sl\xc1\x93\xfdR/\n\xf5P8P\xc5U\xd4\xc4\xf5\x06\x16U\xb1\xfe\x91\xae\xd0l\xef\x01\xd2\xa27R\xc0\xd3.Y\xc1\x82" + + +2024-12-12 23:54:19.572090 - Ether / IP / TCP 142.250.200.67:https > 192.168.1.11:28306 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 114 + id = 7032 + flags = + frag = 0 + ttl = 119 + proto = tcp + chksum = 0xf1d + src = 142.250.200.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28306 + seq = 554599973 + ack = 4007117365 + dataofs = 5 + reserved = 0 + flags = PA + window = 1043 + chksum = 0x3f84 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00E?\xb4)k&\x87\xfb\xc2E\x08u\x83\n\xcc\xda\xd1a\xc8\x8al\xa3\x05\xba\xe2kA\xc0\xa0\x0e|\xfb\x14\xeb[\x9ch\xcal\x97\x85I\xaf\xaf4O\xa9-\x1ekY\xc8]}\xdfK[\xda\xef\xfc\xb0\x8dz\x0b\x82\x88\xc4\xdfP\x88' + + +2024-12-12 23:54:19.578771 - Ether / IP / TCP 142.250.200.67:https > 192.168.1.11:28306 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 79 + id = 7033 + flags = + frag = 0 + ttl = 119 + proto = tcp + chksum = 0xf3f + src = 142.250.200.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28306 + seq = 554600047 + ack = 4007117365 + dataofs = 5 + reserved = 0 + flags = PA + window = 1043 + chksum = 0xb9b9 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00"\x16Q\xd4iU\xe3(\x8c\x81_\xc0\x94\xb3#\xf1\\"\xad\xdak\xed\x92\x15x\x98c\xef)\x1a\x95\xd1IH\xa4' + + +2024-12-12 23:54:19.583193 - Ether / IP / TCP 192.168.1.11:28306 > 142.250.200.67:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 1367 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 142.250.200.67 + \options \ +###[ TCP ]### + sport = 28306 + dport = https + seq = 4007117365 + ack = 554600047 + dataofs = 5 + reserved = 0 + flags = A + window = 510 + chksum = 0x190c + urgptr = 0 + options = [] + + +2024-12-12 23:54:19.588854 - Ether / IP / TCP 192.168.1.11:28306 > 142.250.200.67:https PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 79 + id = 1368 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 142.250.200.67 + \options \ +###[ TCP ]### + sport = 28306 + dport = https + seq = 4007117365 + ack = 554600086 + dataofs = 5 + reserved = 0 + flags = PA + window = 510 + chksum = 0x1933 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00"\x8b\xfa\x9f\xe6,\xd9R\x15\xca\x1f8Z*\xa6\x85\x87\xfd\xbb\x9a\x17\xba\x93_K$\xa63\x11\xecm\xa5\xf5fG' + + +2024-12-12 23:54:19.593730 - Ether / IP / TCP 142.250.200.67:https > 192.168.1.11:28306 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 7034 + flags = + frag = 0 + ttl = 119 + proto = tcp + chksum = 0xf65 + src = 142.250.200.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28306 + seq = 554600086 + ack = 4007117404 + dataofs = 5 + reserved = 0 + flags = A + window = 1043 + chksum = 0xc9a9 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'n\x98T\x93\x00\x00' + + +2024-12-12 23:54:19.598317 - Ether / IP / TCP 192.168.1.1:59624 > 192.168.1.11:icslap S +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 60 + id = 53241 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xe765 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 59624 + dport = icslap + seq = 462283154 + ack = 0 + dataofs = 10 + reserved = 0 + flags = S + window = 14600 + chksum = 0x4a00 + urgptr = 0 + options = [('MSS', 1460), ('SAckOK', b''), ('Timestamp', (503984725, 0)), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:19.813041 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 153 + id = 16796 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862122134 + ack = 2922048871 + dataofs = 5 + reserved = 0 + flags = PA + window = 517 + chksum = 0x672a + urgptr = 0 + options = [] +###[ Raw ]### + load = b"\x17\x03\x03\x00l\xb4\xc2D\xd1\xd4\x19\xaeE\xf5UU8\xb3/$!\x9fa\x97u\xf8\xeb/\x11\xb3\xba\xa2\x9d\x1a\x10\x1b\xa8\xd4\x17>\xe0\xb1\xea\x01\xc3\x93\xb0\xae\xe0\x91xe\xd8\xaelmm\xd5\xb7\xbe9\xee\xcf\x1c\xca\xe0e\x1f\xeah_\xe9\xe4\xc3\xd0\x9b=\xa2j\xba\xa6\x81\xe0\x9cf\xb7\x08\x051\xfc@x\xc6t\x96\x19EF\xc3\xd1\xf3\x1f\x87\x81\xb0(\xb9\xf1'%[\xa0\xcc" + + +2024-12-12 23:54:19.828186 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16797 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862122247 + ack = 2922048871 + dataofs = 5 + reserved = 0 + flags = A + window = 517 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03(\xaa\x8e~%\x95d\x80\xf3t$\xb6gy\xe9^\\\x9b\x8d\xca\xb58\xb3\xfeGY\x07C1\x96\x03\'\x1e\xed#\xb0\x1d\xe5\xad\x15\xdcdo\x93\xd4/\x9c\xce\xb9\x07\xf1\x8b\xdc\xff\xeaR\xd8D\xa4_8\xfa\xc0\x8d\x92\xbcw\x07\xe6\x12\x9f\x8adz\x15\x0bf\xb8\x1cw\xab?\xdf3E\x83\x16}\x7f\xa2\xb1\xc0\x86]\x14ST\xb5\xd7\x8d\xda1\n~\xc7%\xb0\xf4s\x0e\x8c\xeb\x7f\xed\x91\xeb\x84_J&\xcc\xa8\xeeq\xc8\x88\xe3\xc3\x9ee\xa0\xfe\xcf\xb4\xf39\xeb\xb90`+z\xfdj\xf7\x12"\xbb{D\xa6\x1e\x8a\x14\x9fq\xf8)\x7f:v\x1c;\xe4Q\xdd\xcb\xcc\xcba\xd3\xfe\xab\xff\x9b\xe0\x15~f.\xf6\x03\xa7\x98|_R\xfck\xe5\x10=\xc7(\xca5\x1b\x1b/98#\xca\xb5;\xb2\xa57[oc`\xce\xf1\x86\\\xc3\x8c\xd2L\xfc\xc6\x97\xfe#\x91\x1bKs\xe6\x0e\x15\xd9\xdfv\x0f\xf6\x1f\x9f\x9d\xac!\xb2\xaa\x1e\xf7w#\x1d&\x8fU\xdf\xffj\x10\xab6\xd2\xb4;\xc3\xd6\xeb\xd4\xe3\x8a\xc6r\x82d\xea\xdd\xef\x82\x10J\x12\xf9x\x8a\xe0\xf8\x00f\xc18]\x9e\xa3\xf5\x0b;\x97\x9e\x84p\xd4\xb8{\xeb\xa9d\xf7l@)\xfa\x91\xdf\xc1\x08\xe8ey\x83Z\x04\xd3\xa0\x1e~\xfa\xc3C\x1d1\n$\x8a]\xd4\x15\xd2X\x06&i\x11\xdeS]\xd4\xe6\rzJk;\x98\xd4\x00\xa4\xdb\xcd\x11\x96S@\xe8\xe1\xc3\xf2_\x05\x1b\x04\xfb\xaa\xf0\x0e\xbbI\xcd\xed\'\n\x96#3\xae=\xe8\xe4F\xdd\x80?77<\x1f\x17=5@\x12\x86d\xee\xe5,\x02g@\\\xfe\x1aN\xd1S.`\x83\xb9\x83\xfc\xa9<9\x90\xe6\x83\xee\x95\xd8\xb5\x19\xd1\x06\xc0\x98\x10u\x85l+\xbd\x06\x14\xc3\x01\x8ac3$E\xa6\xdak\xcdP1-\xec\x86\x1cs!\trWq\x08[\x83\xe9UL\xd7\x7fp\x12\xca3\xb1(\x83\xcbU\xdf9\xe6\xb8J#\xa5<|\x17\xcd\xa9\x8e\'\xbf\xba\x96\x07\xe2B\xee\x9e\xc1\xa5l\xac\x01\xf4\xee\xb3\xb4\xc6t\x17\x11\xc0\xa8\xc9\xf0k\x8e\xb0\x17\xa5)(\xdcB\xdc{Gy\xef\x0c\x10\xc1r7\xbd\xb2\x9e\xaf\xfb1\xd4\x9d\x7f(L\x8c\x8c\'\x89\xd8\xf7\x84\xb0\x08g+\x95\xe7\x99\xc5=\xe8<\x83?~~\xa7V)\x17?\x89\x85\xc3\x15\x8d\xe0\xad*-\xc5\x8f\xc4\x9b\xe5\xc8\xb2\xb0\x8c\x9c$\xa43\x19a\xe9\xd4]Y\xd9*\x01\xc9\xf5\x03%\x9d[\xccp\x18\xa4\xee&CL<\x14\x9e\xacz\x94\xab3\xc0\x06\xdcI\xcc\x1e>\xf6\x93\xd0\xbeW\xc0.\x1a\t\x99\xb4\x08\x1d\xc6|\x00\x8c\x05\x1f\xf5\'s!\x8f\x91\x1b\xd1I\x83\xf9\xc8g\x8e\x10S\x88$\xf1\xfb\xab:\x7fM\xce\x12\x0c\x1a\xf9\xff\x89>\x19(\x8b\x9d\x0cXHz\x93\xe0\xbf+5ebe\xebpeI\xc3\xdes\xac\xde\xa9?\x96{r(\xbf\xc8\xd0\xc5\'\xe0\xd7m\xfe\x01Dw\x0e\xd0]\xfd\xff`\x19\xcd$=\xbb\xbb4\xe8\xfe\xd63\xc1 \'\xa8(\xdf\xb3V\xdd/S\xc0\xc5\xcd\xd1\xc6\x93|N\xee\x8f\t\xee\x10\x1c\r\xc5\x99\xb1\xab\xa8\xb6\xe3>\x9d\x98E\x7f\x99\x99\x0eR\x86O\x01\xb4\xd4v\xdap\xf6\xb2\xfcB\xcc\x1e\x9a?\xb1\xff\xd9\x85\x82\x10>\xd4{3\xaa\xd6\x03\x98\xc0\xcc\x04\x07o\xe7g\x02\x16\xc8\xb6\xd9h\xe3D7\x13\xc1\x9ayO|7\xbc?\x15&\xc4\xab\xabBJs\xa4l\xc5=\x1d\xf5p\xd6,\xbd,\x868\xae\x94\xff=\\1\xf7\x95\xa6K\xa9\xc2\xd8>\x96V\x95z\xb8q\xad\xec\x18<\xecA\xeaA\xdc\xa9\x17\xa3\xe1L\x01\x0b15y\x8f8\xc2\xae\x13\xb3\x08\xd5\x91\x17\xdb\n\xb7\xd3\xdb\x91D\xf2\x1fj\x00\xfc\x8d\xfa1\xdcr\xdeh3\x97?\x87[\xc9\x13\x7f\xd2\xfb\xe8vx\x8a\xaf\xa6\xa8\xf7\xc0b\n\xa8mf\xf9\xac{\xe0\x94\xadv\xfb[l\xbe\xc2o\xa4BX\x95,\x8e\xfb\xc4\xc0\x80\xdd\xfa\xa8\xf3\xa2\xb6`%\x87q\ty\xa31\x1e\xc5\x81fWn&\xe2\x03\xa5D\xb4\x8b\xa0\x10\xbc`U\x13U\x87\x7fy\xc3\x85Gph\x90\xe6\x91.\xe1z\xbb\xdc\xfdB\xb5\x16\x0b\xb0\xb8\x15\xabf\xdbT|\x81\xb1ZY\xe2\x95"M\xc2\xe4\xb3,\xb4C\x0c\xd9\xfbi\xef\x15\xe7\xdf(\xb58\xbaGb\xcd\xcb\x8d\xd9\n\xe6\xb11er"\x9c\xf9\xb9yN\x92\xc9\x99o\xc8n\xea\n\r\xfb\xab\x97Q\xfas\xea0\xc1\tt\n5eo\x80\x1c9\x13\x07\xee\xc0\x16\x1c\x86\xf9\xc7x\x82\xf5\xfdL$\xbf\x0f\n\x80\xfc\x99gD\xd2\xd4\x81\x1bW\x97\x160\x8a\xfe\x17\xeb\xbc#\xddf\x9f\xe0\xd6\xb7i\x157\x0c\xd8\xfd\x127\xee\x88\xac\x8a\xa3\xce\xa2\xcc\xcfJ\x99$al!\xbb5R\xf5PM\xd2AcL\xcbjY\x86\x14cs\xb7&\xe6\xa49\xad_>\xe1b\x8a.\xec\xe4\xd6\x0f\xadH\xb4K\xf5\xe3\'\xd6\xc1\x8a\xba\x9c\xc5Ls\x89\x9e\xfasr\x93\x1f\xa0\x15\xfbE\xc3\x01j\xd7\xb6\xee\xe3^f\x84\x9eXz\xbbd \xe3\xbfYi\xe5\xda]\x0f\xecJ\xb8\x96\x18h\xd7\x10\xc2\x17{\xb4\x8b\xba\xde\x11\xb5\xffF\xbf\x93\x8a\xcf{\xef\x81Nn\r\xfc\xa7\'\x179;\xba\x019\xac\x8d\xd8\xf2Z3g\\\x1bD\xcf\x02;\x9131\xe6A\xb2RCJ\xefB\x86\xbd\xb38\x0b' + + +2024-12-12 23:54:19.838166 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16798 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862123687 + ack = 2922048871 + dataofs = 5 + reserved = 0 + flags = A + window = 517 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\xc4\x00{i\xad1\xb8Z\xc9\x83\xb7\x90\x80\xb0\xf5Z\xcd\x90(\x8d\xf0F \xc2\xda\xb8\x0c\xa5&T\x17\xb3\xbe\xccU\xecO-P\xe2\xb7\x8e\x9e;\x81\x82\xc6c\x18L\xf2\x9e\x8d\xe3\x1c\x96\x9b\xd8\xd1\xc4?*\x95P\xcdRun\xc6Zen\xa0q^\xae\x8eh\x8d\xf3\xb7@I\x82j\xd0\xc0MQ\xa7a$\xf8\\\x01\xb6;\xb1\xd5\xae\xa5W\xac,\x80\xfd\xad\xf8\xc6\xb9\xb7\xcan\xaa\x8bMd\xc9\x0c\xb1H9\xb6\x99\'\x06\xb8R\xd4\xd3\xe1\x18\xe4\xb5\x82~k\xe0>Yo-\x8a6\xc2\x92\x16h\xd6S;\x025|:\xa6K\xc8\xb81z\x8c\x025\x0e\x84F\xd7e\xef\x98\r\xe3\xcd \r\x08\x0b\xb9Al,\t\xe5\xf73D\xef\xcfN\x19\xa4h\xa3Jr\xc48P\xf4u\xefL\x8aG\xa1\xc3\xb7\xa8Ec\x7f\xf5\xb5\xc2F\xc7\x04\xb00`\'\xec%\x1eq\xf4\x1cz\xfe\x96\x9e\x97\xf42Sl\x060\xd33\xdd\xb34Nt\x0c\xf5\xddX\xce\x98\xa7\xdf"R}\xc3A+\xfa\x97t\xe6p\x9d\xa8\xfa\xc6tp\x148SgY\x8b\x91\x98\x80\xed\xf10\x92S8\x9d\xf0\xda$5\xca\x97\x8aA\xae\t)\xbbHE\x10\x06h\xc3\xde\xff\xa8\x9a\x12dct\x06\x85\n\xf3v\x1f\x04\x9cg\xab1\xed\\\xb4-3\xf5\x7f\x13#\x86\xac\x07\n\xb2\x1a\x87!\xad\x866\xd4j\x85\x9aEa\xb0\x9ae\x00\xaa\x12\xaa\xffu\t\xbf\xb0\xf1\xd4\xde\xa7#T\xa8\x91h\x93\x08\x1a\xd1\xb9\xb6\xf6\x9d\xe3>@\x87\x00.\xa2\x8cZ\x0b\x80]\x1aC\xc7s\xb4\xdd\x9e\xe2\\\xcdM\x8cIF\x1aw\x8cn\xe1\xa3"\xac\x00\x80\x081cl(\x91\xef\x0cKT~G\x9a\x06\x95\xf0\x12\xcd(Z\x96\xbe\x1a\x8b\xc1\xa3\xf7v\x03\xd4\x13\xbeUF\x1f\x91\xfb\xda\x97\x03@\x83E\xf3F\x9b\x15\x07L\x95K\x12h6\x95x\x0b?\x14\x95\xafr(\x1e\x8f\x93\x19\x8e\x01\x82\xdb\xdc\xa3D\x15:\xe5F\xea\x11\xbb\x108\x01\xd6\xa9\xc9x\xe81\x06F\xea\xb2\x83!\xe6\x18\xef1\x9d*\xaeY\xb09\x18\t|\x91\x0c\xbf"\xcd\x9f^\xde\xeb\xf7\x15(4?or\x99\xbc\x8aB(\x14\x1a\xcc\xdb?M\xed\x85\xae\xafr,B`\xe4\xeaJ\xd9-\x88\x1d\xc6\x08\'\xd1\xb7`\x8a\x1b\x8b\xeb\ro[\n\x85\x19\xae}\x02S\x8b\xb7\x8a\x1b\x9f\xe3\x1eg6q\x7fT\x99Sz\xe6\x10u\x00\xc5D\xfa\x01\x1c\xd7\xf2\xda\x06\xfe\xc6@\xa2\x9b\x89\xbc\xa9\xab\x06\xcf\n\xda\xd6\xa5Z\xb7\x1dS0\x99\xe0\x87\xacqK\x13\xf9)g\x91\xc3\xcf\xe2\xe5aQ\xee\xc7Y\xa6\xc1\xc8Kc\x81^\xec\x8a\x9b_\x02\xdcy\x90\x85\xb8\xe4_\x81{\xc4\x93\xbd\xf7\x86\xe9L\xadC\xe3\xac\xb6_q\x92(\x9e~7U6Ny-X?\xd4\xe1\xe3\xb7\xc1A\xca;\xe4\xa0\xba\xc3\xef\xec\xa6\x92\xdc\xfb\xcc\xf1\xe9o\x9a\x7f+o\x0e\x94\xab\xc4\x9b\xe3\xcd\xa5d\x8c\xec\xdd\x92W\xa2\x0f\x12\x14\x9c\xa2\xd9\x17,=\x8e\xf8L\x1f\xf4\xdc\xa1\x9a\xa36\x01N-$\x9d\xe8\xf2\xb0\xea\xc2|G\xac_gEDN\x01M\x97\x8e]\xe1\xf7@\xa5\xf8\xc4x\xd0*\xb2s\xe8\x01\xd9%\n\x19q\xe0\x0f\x9b\xe8\x1a\x92F]\xad\xfay=6\xac\xd5\xd4\xb4\xa6"\ni\xd7Y\xbb0fTB0\xbaG\xc1\x11K\xda{\xa2\x13v\xe7M \x9b\x9bJ\xae\x0f\x1d\x08\tv\r,\x15\x8b\xe9\x95\xa3L\xe6\x1fqW\xbc.\x9f`\xfa\xf3\xb2\n<\x0c\xa6T\xa6XM>\\\xe8\xbcX\xffl\xcf\xc7E\xad\xb8\xce2\x8bJb\xb4(\x94\xe7\x0b\xf2\xbe\x9e\x98\r}\x17\xd5\xf8\x94\x0c\x7fZ\x90\x99(=N\x1c;\x12rY\xcc\xf7D\x8c!\x85H\xacv\xed\x13()\x0bUd8\x9a=\xc6}\x14JM\x91\xac\x9aF\xe1F{>|\x19_\xa1|\x82~\xe4J\xc6\xab\x11\x00\xf9T\x17V\x96%2p(\xf8\x17\xe5\x96j\xff\xec`\x0cm\xf5\xe5<\xf9\xfb^\x83o\xaf\xd6\xd3\xd4\xf7]aic\xc9\x8d\xa8~\xcd\xde6\xbdf\xa6\xa1?\xf4M\x01\x05\x80\x05\xbd:D\xf5\x0e;\xe3ud.\xb1\xe0\xd1yd\xba\xc0\xf8fFB\xb3\x99\x14\x8cq\x8c\xf3\x97=\x8cU~\xd2_jZJ\xee\xab\xbd\xf1\xa1\xc4\x91\xdfQM\xc9\xf2\xe5/\xa4k\xf1u\x01\x9d\x04 o\xb1\x06\xc3\xa6\x0f\xb1\xe6\xe9X\xf9\xd9\x93m\x06\xce*\x9b%\xe2\xc2\x99\xda\x95\x12\xbb\xbb\xa6\xa8\'#a\xcb@\xbe\x8c\xc3ix:\xdc\x8b\xd9\x1e0\xdb\x10?\xe9\xd2z@\x08\xbcW\xb4\x90uw\xd9\xba\xdd\xf1\x05\xa87b:\x81N\x1fIeg\xe7\x83\xf2\x86\x0e\x01\xbc\x0f&S\x81\xff\x13\xd4b\xec\xd4X4\xd0h5\xdd\xd8\xb6\xb65\x9d\xec\x03\xf6\xb0\xe3%Z\x0cs\x9dN\xde\xdf\x11T\xcf\xca\xab\xc4H\xb8\xb6\x8e\xb2\xf5h\x95_@\x81\x1b\xb5%4\xe9\xac\xc4a\x83\xa3\xc0UZ\x97H\xadkz\x18\xd9I\x02\xcb\xee\xd5@\xeb\xfb,\x88\xbbCP\x1d?\xcd\x16b\t\xbc\x82\xf5\xa0\x9b;OIw\xaa\xa2zFy\x10\x0b\x06\x08\x7f=\xd1\xc83\xfc\xf3\x11\xbdvG\x0e\xb9\xb9n.m\x16B\xc1-@E\xd0\x8a,v\xab\x1d\x9f\xb7aa\x8a\xca\xab|\xb9\x96\x1b>\x080Y\xf3\xd8,\\\xde\xa3\x10\xcf\xb2\xbd\xa5\xba\xa4\x98\xa1\xcd\x81\xae\t6\x93\x13\xcb$C\x1c\xbe\xdeB!m\xdc!s\xfb\x90\xb1\x08\xa8Z\xc6\tR\xa3O\xb6\x18\x83\xe5\xb9\xc8S||{d\xbc\x83\xc5\xa0}sk\xbej\xd0"\x8a\xebR\xf8m>\x8b\xce0a\x89\xa6\x9d\xf5\xd5F\x95hG\xa3\x9d\xd31\x91le\xfd\xb4\xdf\xdeu<\xd1\xea\xb4GS\xe2$7\xfb\xf1\xce\xc1\xe0\x14\x99q\x03\xd3DP\xf08Z"' + + +2024-12-12 23:54:19.846761 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16799 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862125127 + ack = 2922048871 + dataofs = 5 + reserved = 0 + flags = A + window = 517 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\xf8\xd5\x98\xa1\x1d\xaf\xdda\x00\xc5\xf7\x14\xc6Q0%\x1f\xbc\x130\x9b\xec\xfd\xc1\xc1\xf26\xc5\xc7t\x0c.\x00r\x03\xe1Lr$>\xa4\xab\xa6G\xfa\xce,O\xa76&2\x9d\x07\xdb\xc8K\xbc\xb3\xd4p0\xc1\x0fa}L_\xd5$yHT\xdf\xe2\x08\x80~^JZm\xcb\xfc4q\xde&\x15\xbf\x08!\xea"*\xbd\xc4`m\x98\x8b\xb4\xbc!l^-\xcd\xff\xf1(\xc1\x90\xe6\xc6b\x81c\x8f\xb0$Q2wa\x10\xbc\xcfoQ\x86E\xb3\x025t\xa5\x8ckq\xce\x0fSffH*\x86W\xcb\x16\x86\xa6Of\xc1\xd4\xcf"\xc6\x1f\xd6\xe8\x00L\xd6\x9c\x0e\xbe\xa7\xeat\x1a)\xce\x9b\xfb\x07/ ]\xcf\xbf\x88\xf1\x96\xb2b\xf8\xf9!\xb9\xf3\xd29\xdeD\x8a\xdc*\x1c\xf2\x070@\x8b\xf5\xad\x92w\xadI\xb6\x9b\xf35\x91\xa5s\xf7\x90M\x8d\xea\xfbV\xa9\xefo\xe1\x9e\xe1\x984\x80\xedwPo\xd3\xfd\xb3\xafKS=\xcb\xcc\xf4o\xb7X\x14\x8d\xc6z\xdb\xf8\x02c\xe5\xfcQ\xe3\xef\xcb5\x06~\x18\x8c[|\xab/\xd0\x0c\x05t\x12H\x8b\xf6\xad\x1c\xcd\xfb\xd6|G\xaa\xc8L\x1aU\xeec\x7f\rG\x9e\x8c6\xd5\xdc\xc5\x12\x9a\xab\xcc\xb3\xec\x00\xf0\xe6\x06\xeb\xc7\x1f\x01\xea\xe3_R\xb5\x8en\xe2\x9f\xc7\x93\xa6\x1e\xf1\xde/\x86\xc4\x7f\x1d\x8d3\xd4\x0f\xb0\x83\xda\x8b\xca\x88\xe5SRP\x0blV\x83b\xeedn\xd4K*l\xb2T(\x15 \xe1\x96\x9e\xb0\xfb\xea9Mw\xdc\xab\x99zE%\xfe|\x13Fh\xae\xbd}\x9aZ\xde\xba~A\x06\x93\xc1\xedG\xad\x05\xe5_W]\xc5m\x96Q\xe8p0\xd3!e\xdfur\xa4\x12\x93J(\xbfH\xf9\xc6\xd1h\xb7\xa9O\xcdx\xa6S\x8d\xc2\xc9\xbc\x04\x8ae?{\xa9\xbe\xfc\xdb\xe8\xd9ON\xcc\x08!\xf7\x9e\x84$\xe8\xac\xd0\xa9X\xc7;\xd8\xc9[\x99\x87\\\xbb\xc6\xc5\x1b$\xa6\r\x9a6\xa4\xc0\x9f\xc5\x8a\x1a\xa0\xacW\x14Vr\xa9-p{\xfab\xc6\xc5\xca&\x9a\xaf\xd0\xbcC\xc2t\xe36\xde\xe1\x19\xa6\x06t\xb6\xaa\x8b\x9b*\xe9\xe4\x1e\xf7\xc7Z\xc2h-\r?hSv\x9b\xd2.\xc8\xb6\xb5!GU\xf6\x89\x89@\xa3\xbbS7\xa6\xc8A\xbc\xe2\x96\x01\x83\xa7\xed\xba\x06\x18* \xbc\xad\xa5\x1c<\x84\x83\xed:<1\xdf(\xc0\xe2,-\xa7\xa7\xbfiM\x16\x04\xa8\xaaQ!\xfb-\xce9\x04\xd8%Rj\x0e\xbf\x9d7\xf0\xa1\xb4]\xaa\xfd\xad\xb9\x83H/\x8c\x0b;l\xc2\xbd\x06\xb9E\xf94\x82\x84\x16u\x8eA\xc5*\xd6\xe7%}\xde\xa9\x0c\x8f\x84\xc7A\xa7\xd5\x05s\xe60\x8c\xab\xacz\xa2\xee\xefdd\xd4\x8a\x9ekA\xeb\t\x9d\xd7\xcc\x0e\x07l&\x18\xbcR\xda7\xc9\xc3;\xd8\x11!V\xe7\x89\x99<\xed\x96\x02\x8b\xf7\xb9\x99\xfa\xa9+B\x92\xcf2&d\xad\xba\x92)\xf8\x1e\xea\xf9\xe1M\xc0,-\x7f\xa6^t2Q\'\x9c\xbf\x07?_(\xa4\xf9\x0b\x8c\x85\x04\xab4\x9f_\xe0A\xb5\xd1t:tP7!\xfap\xb1Se\xf0*\xf6\x95e\x02\x85\xe9\xd9x\x96\x9d\x9d\xa1e\xd9\xd4\xd1V\xc1\xaf\xe9\x92\x9b\xd5\xcd\\\xc0\x15\x08\x8e\xe8}\xf8\xd1\xb5\xaa\xb4D\xca\'i\xe9\xaeu\xfd\x98%Z\xd43\x00\xa3\xb4W\xc0\x18\x90\x13\x80\\\xd1\x91\xc9\x88\x810@\x05\xcf\x13@\x10Z\xae\xa5\xfdex-\x15L\xb9\xf1k\xe0BI|\xdf\xe70\xb7\xc6az^\xc0#\xd4\x89,$\xe1\x0b\xc1\xf6JT\xcf\x97|\x18W\xa3n[\xda`\xaa\xa8s\xaa\xedQ\x1au7!\xfa\xa4\x9c\x08Ub\x06\x1e\xd9\x8ee/\xe4\xbf\xd7j\x8f\xe2\x1bIFh\xf0\x0b_\x8f\xf9b+\xe5l\xf5vW\xe2\xfa\xcaE\x12\xec\xc7@\xfdB)\x01\xce\xa8>\x81\x98\x1b\xb2\x80\xdd\x99RI\x94i\xa7\xc5\x896\x93k\xfb\xaa\xd7\xea\xc0\x0eC9\xda\x0c\x96\xf0\x89\xa8\x07b\x04\x8f\xc5t\x01q\xd8\x0bs"y\xed \x9dP\xc5Z\x1dU\xce\xd1\x05\x93\\\x90I\x1d8\xe0dM\xf3\xa2\xe7 \x00\xc9P\x9c\x1d\x98U\xcb\x06\x16\xdc\xd5\xe4o\xe0!x\x12\x92W~pO\xd5\xe5\xc9us+\x89\x8e\x13\x1cAC\x00\xf8}HC\xce@V\x0fs\x87\xc3U\xdc\x15K}\xfb\xd2\x1e\xce\x89\xa8\xab\x1cg\xc9\xaa\xac\nJ hy\xa0:\xfaS\xd9\x8d\xc6\xb0\x8c\xe7\xb6\x94\xc6\xb6 $\xb5\xc6\x0c\x9b\r!pE\xe1\x10\xbf-{\xce\xe0\x0f\x9bi,\xc3\xf5' + + +2024-12-12 23:54:19.854089 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16800 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862126567 + ack = 2922048871 + dataofs = 5 + reserved = 0 + flags = A + window = 517 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\xf38\x81\xdf\x91Zy\xd4;@\r\x12!\xb5gx\xc8\xc8\xb8\x84\x99\x9d\x8c\x1a\xab!\xf8=\xda"\xf4\xa05z\x91\xec\xf5\xcd2:\x83\xf1\x81\xe7\xb4U\x04\xbc\x82\x13\x0b\x93\xd8\xef\xd6O\xf2\xefTi\xf104\xcc\xba\xe1_zgV\xcfp\xa8\xd0\xc8\xdc\xc6h\x9b!\xaf_l\xf5\x97\x0f\xf0;\x8cEk\xbd\xb2\x97\x16\xa2j\x94\x8e\xf1\x8a\xc6\x1cd\x9d\x90\xd9\x1c\xa2\xae\xdaJ\xdf\x03\xa8\x1e4\xac\x05\xc8f9\xac37\x8f\x99J\xc6\xbd\xe0\x15\x01\xe19\x7f\xaf\xaf>\xf2\xde%\x0f\xc2 \x82\xc5N\x9c\x850\xd0\x9d\x86c\x11\x8d\xb0.v\x86\xe6\xe0\x99*\xcd\xb1;\x99\xaa\r@%\x1aa\xfbh\n\xa4\xa2\xa9\x83\x85Vo\x83{\xc0\x04\xa6\xce\xa1\xfa\xcd}\xfe7\x0c\xa0t\x90\x81\x8c\x96ud\xe3OF\x03f\x00\xd67,\xfer\x02"jC\xbf\xf7\xf4\x84\xbaKq\xd6-H\xac\xd0\xf3(u\x86\xf0?(\xc8\xdb\x19\x08\xddO\xfc+\xe9J&7\x00g5\xcf\xfa3\x07Fho\xf8Lp\x08\xcbg\xdb2\x05\xd4\x81\xf0\x8f\xe1~\xaaMX\x91\x8f^\x1cp6\xb3\x19\x07\xde\xc9\nJx\xa9y\xf2\x84\xefL\x1dd\xeb\xe3\x80`-\x99\x82ZT\x7f\xa6\x02\x87GE,\x06\xb76\xac=,\x1an,\xbe(S\x08\xe7W\x9b\x18\x10\xf35-*\xe6L\xf8\x83Q\xfe!\xdf\x97\xd9>\x0e`\x04#O& \xa7\xf5\xba_\x9a1l\xf4\r\xac\xec\x83\xf9F\x90\xb5\x17\xcd\xdf\xd8\x03\x13\xafi\xe5\xac\xc6]j=\x86\xc4\xa2*-\xd7\x14^\xb6.c=\x8fSD\x90\xdd\xcd\xb6\xf3\x9b\x1a\x99\xed\xf2O\'\xfb\xe5UP\xd455\n\xcc\xb2\x87\x85fi\xe9\xe9k94c\xe7\x90\x02\nQ\x02\x8a\xe8\xb0\xb51\xd6%\xa6\x9b\xfbgOg-\xbb<\x9d\x96o\x11m\xb0C^\xff\xfe\xf2$\xfe\n\x96?\x16\xdd\xc7c\xe4\xc3\x85\xceE\xd4f\x19\x8d\xf6B\x03\xce\xb9\x98\xed-]\xaa[&\xd3C\xd1\xa4/i\xd9)\xc2n\\\xca\xd0x\xb2\x8f\xae\xd4>\x8f\t<\xb5\xe5\xcd\x1dF\xe2(\xb4\x94\xff,0\xe6\x83{\xd5\'%\xa2#\xdf\xed,\x98\x97\x8f\xb3\xee\xa0U$S\x06)\xf8\x8a)!^\xb2\x966\x90_\xecM\xc2l\xc1\xd7g\xe1.80\xa1\xb9N\x85\x8e\xe39\x06\xael#\xd7m\xcf\xfb.:3\x07\xf5u\xb3W\xc9$b\x1c\xf2\x90\xc1v5\xd5\x94Bs\x04\xb0X\nW\x98\xe6\xf0\xd4 t\xc7\xb3\xf0\xa0\xc5\xe8\x82\x10\xc9\xb3\x88\xee\xf5\xbb\x9f\xe1\xe2rN\xe2\xfd\xf9"?\xe3\x96\x99\xf5\x16p\x99_L\xcb,\x92KB\xb9\xb4\x9ew%\xa9i\xc9\x9c\xd2n\x1d\xe9\xa3\xf2Ge\xe7\xd8qP\xac\xb0\xcc^\'o!\xed\xb3\xf1\xe6\x84\xba+X\xa7;\x00\xf3\xb6\xb4,M\xf5\x91S5N\x94\x81\x8f\xe0\x11\x9f2\xae\xc8\xc6\xaaM\x98\xc1uYY-\xc1\x04m\xa9\x92\x8e4\x17\x846\x1d\xd5\xcbTXA\x1b\xb6\x01\xa5:\x9c5/{\xf2\xca\xf4+v\x03\xd6\xc3.V\x8b?\x1e\xd53\xf8\x9c\xda\xab\xd3\xcfUF\xb9\xbbe\xc6\x10\xb3E8q\xb5\x8bw%M\r\x91lvn\xa5\x9d\xc4\xbcN\xa8\xb4\x98\xc6\xf6KY9\x94\x81\x82\r\xe7\x19)@\xca^\x93\xfe\x85J\x91+\x1a8\xf5\x81\x8a\xe2\xb0c^\x92\xa9\x0e\x9a\n\x8c\x80\xd2\t6\xb7\xb9=|m\xa6|\xdf\xbb\x90\x16D*\x98\xa0qW\x80Tq\xefQ\xba\xea\xe4\x9a\xea\xc9\x7fsl\xfb\xf2}+\xe0\x96;\x19\x8b\xe6\xf5ER\'\x1b\xc7\xf9\xebR\xac\xe6L\xcb\xbd\xe4\xcd\xa0\x0e\'\x7f\x03\xb8n\x07o\xfdo\x94E\xa9I\xee\xfa\x807d\x01\xfe1\xe0%g\xa7\x85\x06Q\xe9\xe4\x08^\x84\x9c\x12\xa5\xf6{\xee\x99zF\xfbo\xa3\xca@\xc9\x95\xc8&\xcf\xecy\x8a\\m\x84\x17\xcc\xb7\x85\xd7\xb9\xa3\xd4\xf6z\x11\xf7\x19\x118s\xc7%C\xa9\x1c.\xd6\xa1\xafE8\xb7\xb7\xa8\t\xbf\x94\n\\\xea\xed\x85\x1d\xcf\xd5\xae_\xc8\xca\x07\x08\x16\xa3i\\W\x07\xda[A\x0e\xfd\x91\xc8\x81\xc5\xb1\xb1\x10\xeb\xda\xd7.\xb5\xbcu\x02\x1b\xc2\xaal\xa6J\x1c\xa6_\xca\x85\xca&c\xbdS\x9b\xd0\xfd3}c\x88\xe4\xbdN\x89\xf4\x98{O\xcfV\xcc\xb9\x11*3\x13/\x80>]\xfe\x15\xfd\xf1\x1e\xa6t\x02\xb3\xae\x1d\xb9:\xe4,\xd5\x80\xab\x01\x97-8:Pi\xf7D\x98X\x03\x0cn\xc5\xe2J\xd1I.CvU\x9a\xdd\xafP\xa2\xd1Kx\xe3\xd8hP<\xc9l\xdfXD\xf6\xab\xb5\xa7\x8c|\xbe-9\xb1\xec_V\x03-\x13\x84\xa0\xad\x81\xcc\xffb:\xc1\x1a\xd3\x15h\x91\x94\xb9*n\x13\\+\xec\x08,\x8c\x9c\xb0\x19\xa1P\x88\x18U\xe3\xb3/~ffT\x0bt\xe0\xbb\x7f\x8bY[:\xf8\xdd\x99\x91\x9dG\xe3\x91\xf8\xeb\xfbvx\xc9Wo\xef\xb9\xd1\x93\xe6}s\xcf\xd9;2a9\x80\x0b\xe1#\xc4\xfa>\xe6\x82I\xd9\xd2\xe9\xc8\xa9 \r\xf4\xe8$\xe1\x16(\x89\xa3\xf5\xb9\xe5\xb9\x87T\xb9\x0e<\x93\xd7\xadM\xf2M\x0c\x8d\x9f\xd3YlWu\xda7\x81,G\xc4\xf6\x10\xab\x9e9\x1b7\xb5\xb5_\x94\xea\xaeL\x90S\xde\x85\xecPD\xa5\x84T\xb2\xac\xf3\xa3\xb3\xed\x1e\xd0\xe1\xe7\xd37\xa4\xf3Y\xb8\xa8\x08\xa6\xb3w>\xa1ik;\xf3\xcc>\xe7\xa2\x94\xed%R\xfa\xc7\xe12\xf6\xd2\x1c\x8e\xean\x13\xdb\xb7\x9dMAFgv\xc0_\xf0\xc8\xe7\xb8\x94\\f\x8c\xa7\x9c\'\xa5y\xd9o\x14\xac*\xdd*S\x143\xf1\xc37YIV\x05?\xfa\xad\xa7\xc8\xf5\xbf\xcbN\xfb\xc4C\x7f\xd2Q\xd5\x96\xe1f\xf9\xe8\x17\xf2\xcf\x92\xaepx\xd3\xdb\xf2!\xb9\x99RR\x8b\x82\x1c\x9d\x04M)\x19]\xb7F\x1e' + + +2024-12-12 23:54:19.862987 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16801 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862128007 + ack = 2922048871 + dataofs = 5 + reserved = 0 + flags = A + window = 517 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\xe4\xa3\xa4\xfa\x93\x94\xb4\x82)p\xf0!\xef.-\x0f\x97g\x97\xf3%\xdd,yn\x06\xe4\xe9\xe3o\xfd\x84\xab&\xaf&\xdd\x94\x0e\xe1\xd7\xdf\xcc"\xd1\x04\xb4\xf0\xbf\xb9tF\xf5\x00\xd8\x8b\x17\x15\xc5\xa9\x1dk\xcf\xc1<\xb6W\xa7w\x96Y\x0e}\xb3\x9e\x15\xc2X\xa1ui\xd6\xcf@\xe3.\x87J\xb9t\x03\x1f\x15f\xe8\xb4\x91LD\x9c\xa7*ljM\xad\x06\x80\xac\x03+\xae\x0f\x07\x02"\x95l\t\r\xe5n\xce\xf6\xf6\xdaF\x1b/\xe8V\x14\x84\xd3v\xde\xac\xddv\x18E\x13\xb6\xdd\x81\xb8\xb3\xebA\xab\x14tg\x93\xa1R\xac\xe1\xb4\xd1\xbd"\xdcr\x99n\x12?\x12\xb4\x13\x891\xc8\xcf\xda\x13_hm.\xde\x17\x97\xcd6|y\xd4\ne\x0f\x08!\x05\xa01P\xa1;&\x0e.(z\xa4e\x0b\xb6\r\xcd\xf4PH\x05fy\xd2\x96Ji\x98y4\xa4\x03q\x15\x9bzzv\x01X\x8f\xb3\x95Q\x02\x97\r\x19\xfe\x06!\x802\xd2\xc3\xdf;_p\xfd\x8d\x13p0\\\x1b\xfc\x80\xc2\xab;\t[\x0c\x02\x9e\xb4*[~\x04<\xe8\xbe\x17\xfb\x1f\xd5\'U\x87\xb6\xa6T!^\xdbc\xb5\x0b\xac\xddMv\\\xbc\x02)\xcb\xe8\xf4T\xe6)\xf0\xd3\xae\rqK3\x9c\xe2q\x1f\x10K\xa7 c\xe7\x89\x91V\x13c)\xcf2bi\xee\xef\x03\xbf%\xcfq~M\x95F\xfa\xa3\xd6+8\x8f\x8c\x8a\x96 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16802 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862129447 + ack = 2922048871 + dataofs = 5 + reserved = 0 + flags = A + window = 517 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\xcf\xa10\x98MK\xe1\xca\xebR\xaf\xc1\xf0\x1eK\x1c\xa5\xff\tW\nE\xf8\x97/\xc1F\\\x0c\x81\xa2\xc9C\x80\x99y\xee\x90\xd4I\x05\xe0+\xbb\x85Xy\xe8\x17 O\x97\xac\xdb \xdd\xda\xfdh&=\x17\xf8\x96I\xa9\x04\xbf\xd7\xc0\xe8iH\xa8\x90\x93r\x19\x19\xb1\x0b\xaa\x1f\xa8\x94CA\xa9\x10$\x9b\xf6B\x0e\xb0\x1a{\x04\xec\x9e\xf9\x814+&\x9d}\x1a\xb5\x03\x16\x19Y\x82[7xU\x892\x15\x8b\xd5\xbf\x97\x9b\xf4\xde*\xb9\x94i\x14\x9as\x85\x9d\xa2r\xa1\x9a\xbfn\\<\xb5\x06@\xc1\x02\x0e\xb3\x94\x06\xd6\x1d\xb6:\xe1B\x14_\xe4Dq\xb5\xf6I\xacW\xa7Qh=\n\x19\xce\x9f\xe4\x99l`@\x1eO%8k\xb9_\xb3\xb42\x98~\xd1\x96\xa7\x119\x10\xc7\x1e{\xcd\x92\x1d\xf0\xe9;Fd\xe8F\xed\x18\xa1\xabG\xe4\xb5\x08\xaf&\x0f\xcc\xf8^\xd3i\x96\x1c2|\xa6G\x87\xda^\x1b{\x94\xf3\x7f1xgg\xf2\xf5\xca\xee\xb4\xf9l\xdc\xda:F\xc7\xf3\xf4\xb0\xdf\xcd\xf0\x004\x81\xe8\x1b\xb0\x18\x08u\xa1\xb0\x9d\xaa[\xc4}\xd1\xe0r>\xe1@\xa5\xbah\xb6\xf61\xa4X\xaa\x8c\x83!\xd4\x80s\x0b\x90\x81+\xb3#\'\xe7\x87+\x1c`\xf5\xa1\x02\xfa\xdeA@\x0b\xf8\x85Ul\xf5n\xbe\x158\x9f\xcd\x19\x93\xe2\x1ff\xaa\xe6!\xd2[\x9a\x05\x1e\xc6\xcc\xbbT\xcc\x91Z&*|\x98\x99\xa1\x11\x03\x80\x9e\xd3m3\\\xef\xfd\xbf\xe4\x13Z*\xbe"lUI\x1ct3r\xe3\x9a\xbb\xa4\x1aU\xde\x17,\x1a2\xae\xb9I\xb3=\xb7C2\x9coM\x0b\xec\xad\x98V\x10w\xc3sc\xe0a\xc5\x8d\x7f\xcc\xdb\x82=\xe5\x9bo\x95;\xdb\xdd\x9d\xb8AV\x15\x00\x81E\xb8\xd3\x1d\x1b\xcc*\x89\xd9Q\x8aE\x91\xa7&\xae\x1aG\xeaQP\x03\xa6d\xd3\x8e\x86\xe8x\xd5\xde:V\xb8\x80/+FVUJ\x12\x7fa\xaf3f5DU\r! \x99Sk\x80\xa2+\xe9\x85\n\x10S\xc2\xc8E~7\xb0\xd9\xb5\xdb\xd8\x06\t\xdb<\x91\xac\x99G\xe2\xc3\xe5\x89w\x1d\xc1\x000\xa3E\xdbkP\xe2D\x13]\x82\x7f\x8fd;\xb7X\xa8U\x0b\x936\xa1\xf8uw\xd9\xe5\x1dAqa\x7f:\x1ee:\x83\x10\x1e*\x1c\xdd\x89\xd3S\xf6\x0e\xb0\xb8\xa7\xee\x89qn!\x93Q\x9edjci\x8d\x03\xe1z\xaf\xe8n\x1e\x84\xa0\xe41S\xce\xdeb\x94i\x10\xf2\xae\x9e\x85U\xe0!K\x0e\xf0\x0e\xbfs\rN\xc2SN\xffP3\x90yR\x95\x19"\x10z\x04#\xc5\x8a)\xe18\x9a\xd9\x1aPh\xe0_\x95\xba\x12\xd6X\xc5{2\x86\xd6P\xa5X\x96\xd6\x8b\xf3\xbf\xd4\xb7\xf7SAJ\x90\x91G[QW)I5p\xc2W\xa8\x8a\x18\xef\xc7o\x9cz\xbe\xf1i:`7\x0f\xdd\xca\xf0\xe7\xa9\xdf\xf5\x9aa\xc2N\x8b\x01\xb1\x0eR\xb10"\xb7-\x17\x1c\n\xf1\xdd\xed\x0cFz\x03\xa25\xcd\xf0\nKT\x84>]?P\x9d\x16\x18\xa0\x10n\x07\xa1\x13\x04\xcc\xe2\x0en\xe0\xefv\xd5v\xf2\\czM\xc3\xb4\x8e\xd2U\x0c\x16\x06\xe5hx9\xf9F\xa6\xec+U\xca4\xf9B\xe2b\xea\xad\xb0\xb0\x1e\xd3\xd5\xcb2=\x9a\x8a\x9a,\xe0\x85\x9a\x14\x119\xc7M1\xf6/\xbcI\xb9k\xcb\x85\xb6\x8b=\xb7\x13N\xabh\x98\xfb\xa92\xf5{\x16 \xd8~|\xce\xf8]\x86\xf72&\xee1\x02\x95\xadilw\xa0\xebO\r\xaa\xf8\x1d\xdcg\xe0g\xe7\xb7f#\xb6Yv\x12\x7fn\xc2R\xd8\'"\x18\x9c\xae\xcc\xf57SU\xf3\xac^\\\x1b\x19(\x00x\xd2\xaaf-\xec\xf7\xfb\\\xe1K\xbc\xbe\xc1\xae\x9biD\x03 \xfd\xb7\xbf\x8d)=\xeb)\xbd\xbd\xc6\xd2\xb5\xbdYP\xbd\'Xw\xa2\x13s\xa7\xcc\xc5\xe1\x99"\xa0D\x89\xbf\x1c\x18\x9eb2O\t\x8f\x99G\xe7\x050,\x03O\xf6\x13\xa5O\x18\\\xdf\xc9)b/\xd7a\x00\xc9P\'VHq\'\x8b\xef\x9a\xb7\x05\xe4n\x16\x0en\xee1V\xe7\xb8Xg*\xf3f\xb1q3\'\xd7s\x85\xa5\x9ewv\x0f\x82\x0b\x9f\xdf\x91\xcf\x94\x85\xe6\xcf\xe5>>\xa0\x96\x8f\x00oMr\xccc\x81\xa912\x19\xec\xeb\x91P\xaf\x08\xe8\rB\xf9\x0eU\xec\x19}\x18g[a\xbd\x91\xe8hM\xfer\x8ay\x8f\xf3\x852\xb3\xc8\x019\xc6\xfb\x8aF\xb4\xb0Y\xac\xa1\x97\xf8\xaa\xc5\xf2\t{#\'\x99\xaaW\xaf(\xc9(\x931\x8b>\x1a\xac$M\xe9\x1c\x03Lq,mK\x0cA9\x91\xc1&\xd5\xa7J\xb9\x1d\x06\xd0\t\t\xa7\xacJ\xc63\x89\x1f\xdb\xb8\xee\xe7\xde\xd5\x8c\x1d\x97\xff\ry\x8c\xc3\xa7\x05\x8d\x03D*m}\x890):\xc5V\x99\xeb\n\x82\x89\x1f\xb8\xd2Yl\xec]\xb7\xb1\xab\xda\xfa6\xd4>`\xe24\x85C\xcf\xeb_\xad\x9dUK\x8d\xacrAbbd$\xc0\x1cWA@\xf3\xdd\xb2\xa6\x02\xd6\xd4>\xc6p\x87\xcf&\x01-\x17H\xa1\xd5\x88\xc0D\xef\xbc\x07\xe2y\xd0b\x94\xba#\x88\xfaU\x11\xf5\xf5\xb6\xd6\x9cG\xe6e\x9a\xc3Y\x8e\xeb\xec4\xbf\xfc*U\xd0\xc9\x91\xcf\x8a#y\xc1\xb1M\x0c`\xa0C\x0eR\'\xb0|\xc9Ax\xa0\x1e:}u\x11K\xce\xaa\xe9E\x8bq\xe2\x11\xde\x03\xef\xd1}_\xe3l\xc2\x17\x87*|\x1f@,\xbc\xb6\x82z\x8e*pv.\xaf5\xf1D\x9d\xfaf*\x8b\x9ej\xb8W\x16\x1e\xc8zP\xa8 {\x94\xb7i\xdaD\xf0\x91\x12\xdd\xee\xdb9\xc0\xf27Y\x8cG\x05\xdf\x85\xcdY\xf9\x9bj\xb7\xb2\xdf\xf0\x1c\x02\xe2\xf0\xbe\xc0\x0ef[-\xee\x1dQ\x96,\x1aj\xf0\xb4\xdd`c \x07=i\xf3\x15\xf8~\x036\x9e\x18&\xe8\xe0p\x0fhr\x1f\xb0bA\xe9\xac\xf2' + + +2024-12-12 23:54:19.882991 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16803 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862130887 + ack = 2922048871 + dataofs = 5 + reserved = 0 + flags = A + window = 517 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\xf1\xe3|\xd9\xe1\xbc\xb4\x94\x1c\xbf\x0b\x15\xfb\td\x06\x82\xc2\xd1Ei\xedqz\x80\x18>\xe0k^\xf9@P\xf9\xb2e\xc1\xaa\x9a\xebe\xc1XPE\xca\xa1\xf8\xc2|\x06\x11h\x82\x19\xf7\xd9\x88x\xf9\xc7\xa5GIe\xf4\xef\x84#B\xd2\x83\xf8p\xa9@\x1a\xae,\xa4\x17\xbbH<\xea4\x8c\xe2\xb5\x8a@\x9b\xfb\xa5]\x07VFLE\xf2<\xa3F4\xe3\xaa\x94\x86wk\x9c\xd5L^n\xda\xdf\xc5\xc0p\x02\xdfA\x18\xcc\xdd\x88\xaf\xe0\xf1/\xe3R\x19\x1cz\xfd#8\x12\xe4\xd9\xe3\xc1T\xa2\xb1+\xb0\xfb\xf9J\xd8\x18&\xef\x16\xeen\x07k\xc0t\x08\xbe\xa9\x8d\xcd`\xa9N\xa9\x8c\xa4wz\x12\xb3\xaf\xc43R\xb9~g!G(\xb52\xc3\x1b\x91\xcb5\x84\x9eL\xc2K\xfa\x82\xd8\x15c\x97\x1fX\x81R7\r%\x9d\xc3XJ\x9b\x90@\x93\xad\xb1\xadY\xf0\x0e\x1d\x15`e\xbf\x8f\x96\xb87h\xb2T\xfa\xf7?\n\xe2\xe1\xac\x18\x10pV\x8a\txBc+^\x8c\x0fV\xfcFTX\xe5\x12>($\x11\xb2\xd3L\xbcH\xb8\xc1\x15\x13\xfer:7\x06z\xd7f\xf3\xb8J\x92x]\xado\xf1\xe3\x1ce\xb3J-<\x8c"A\xbe\x91\x1b\xe1l\x88\xbf\xcdOK\\\xb8\xb4\xfa\xfe8\xd2C(\x11\xf4\x91\xfc\xfa\xe9\xb3\\\x18i\xcc\x8a(w\x95\x03\xec\xd0\'E\xbe\x99\xad*~\x87\xf1\xb9,y\x180\xbf\xed7\xf4\x84\x06\x00U\xb8\x12\xef.RIBf\xfd)\xf6.\x10\xdeI4\x0c;\x13\xf3\x9e$\xda\xb4\x9d\xb03\xc5\x1b\xbc\x97#@\x1b\xcd\xa8/\x97,\xa9\xfb\xbeE=Z\x14\x1a\x1e\xbd\xa7\x9f\xbb\xab\xe9\xe8\xb01~\xb8\xd1\xd2\xaa\xc9P\x8e\xf4\xc1\xa6]x\x05 [c\xb5\x14\xd4\x01\xfdu>r\xd8\xe56\xf4\xfc\x8c\xca\x13\x963I\xce\xd7v:|w\x1cj\xf4I\xef\xbcQp[\x02\xd0\x84\x1e\xd7\x1cZ\x19R\xd9\xf83\xec\x04\x15{\x10t>"\xd4_\xaa\xb0B\xeb\x9a\x13\xd60\xab\xc9u\x0e7;\x87\x12z\xfb\x0e\x01\xceK\x10\xf5\xfd\x03\x9f\x13%\xe0\xf8\xe9\xb7C\xae\n\x07U\xe4\xe1\x9b@\x93\x1f/+\x81\x1e\x85n\x0f\xabe#\xc9\xca;\x9d\xdb$\xd2f7\xe6\xbf\xf9F\xcb\xe6`\xa3\xc6\x88\xc5}\xf7\xeb\x06o\xa2\xca1\xd3ri\xc5\x97\xde\xb8\xed\x01\xe9\x1e=)\xab6:\xdeU\xe7\xe9\x8e\x06\xade8?\x821\xcd\xfb\xb9\xba\x7f\xe2x\xbcb\x8fV>\xe2\xbeq\x87\xb1\xd4:Q@1\x9f\xb3j\r\x13\xb1\x9f\xc8p\xbdc\xf3*\xe9?`=\xcf\xa7\xb1\x12\xdf}\xbd\xa9\xdc=`\xed\x85\xaf\xc9M\xe9\xaa\xbfb\x19fG\xd4\xbci\xe8\xdd^\xb4\x98\x93\xfc\xd3\x94R\xb5\x07\x9a\x1dA\x88u8tSV\x9aZ\x1e]\xed\x89\x05\x025\xb9f\x95\xf1\xc7\xf4\x93q\xe8\xe4\x14\xbe5x=\xc7\x0e\xa3\xcfD\x04\x9d\xd0M;\x9f\x89\xd5.~j\x08R\xfcoO\xc2J\xf4o\x92\xda\xef\x8b\xbb_WP\xc7;\xd0\xae\xc3\x9b\x1a% z\xa5\xa2\xd7\x14\x94\xe8\xb27\x14\xcc\xae\x87\x8dz\xef\x17\r\x9e\xfdH"S\x14\xb3\x0ec8\xbc\xf2\xc9\xd3\r\x898\xae\x88,\xf9/\x9c2N\x11\x89\xb0L\xb0@~*\xc4:9GI!\xf6\x93\xff*\xa1\x17VG\x10\x83\xc0\xb7\xafPh\xa5\x01\xf8?\xc4#r,\xad\x1f\xd6a\x11SOp\xe9\xe5\xf1B\x97z\x93\x8e\xf6\x80\xbay\x8b\xf0Ac\xa5\xd7;i\x1a\xad\xf5\xba\x12\x94\xdf\xa2\xdcI]z\x07K\xd3\xfc\xbd}!\xa6Y\x1d\xa2\xe7`mI\x02\xa3\xd0\xd7\xcf\x98\xab\xc4\xc1\xaf\x1cl_c\xca\x0f\x05H\xf5\xf6\x89\x15\x94\x89\xb3<\xad\x98\x01\x84\x99\xbd\xf8o<\x0b\x94\xf2G\x96}&uY\xb9\xc91.\xbf\x14\xda\xee\x97f\xcai"x\x83DG\x98Q\xfbE\xdf\x1f(\x1bd\x11\x1a\xecU:\xe40o\xc7+\xce\xf8+]\xc8\x96I\xa2X\xd1\x84\x1b\xe6\xb2\xe1j\xd3;)\x9a\xc5\xc8\x0b\xac\xab\x18\x0f\xdc\xd1\xd9\x84\x8ej\x9e\xfdRb\x00\xa0%\xcdjjA\xee\xe6|\xc6\xd9o\xe5\xa1~J\xb9jc\xf0\xdc\x1d\x0c\xff\xef\x9f\xd9\x1b\x9b\xe8\xc1\x88H\x98I?\xc5+\xfe\x15\x80G\xe4\xc2\xf5(3\x9a\xd0\xfa\x03\x12\xeb\x14in\xf0\xad\xbb\xf6\xdf\xb3\xde\x1b\xfa\xf2NM\x19\xe5\xe7 \xe9\n\xa5\x8a\xbbL\xb7C\x99\x0b\x0f\x03\x96\xfe\xeeE\xe7\xd8\xfb\\n1\x89Y<#\xf3~\x88\x0f\xa2\xbaZHTE\xfcF1\xc0\xc4\xba\xa0\xe5\xfc{\x1c\xe4\xe5\xba\xa0\x02S\x84\xa7)\x87\x00\xfc?\xde\xbeV\x03\xb3\xc7\x86\xcf\x96\x8b\x16F\x0e\x0c:\xa9\xe0\x92\xf32\x04&\xab\xe3}\xb5\xfa\xc0\xbd+\xb9:t\x98b\x02\x84g<\xb8\x08\xd5\x12\xe2\x95ci\xed\t*e\xd9\xaea\xb9\x1c\x83\xc1\x0fu\xf7*\'m\xc0#\xcb\x8ccRj\xd7*\xf8\x01!l\xbeL$\xdc\x045\xd9\xc5\x9a\xc3\xa3\x80\xd8\xf5]\xe3m\x1d\x0b\xe9\xe7jW6\x98\n\xc0(&\xea\xaa\x9cK-\x7fz8/!\x7f\xf8=\x8f(2\xd7\xea\xdf\x97`CB\xb4^\xd6\xa94\x1c\x9e\xf7K\xf6M\x9c\xa3\xa2\xe7@\xf0r\xee\x9c\x96\xd2\x1e\xddy\xc2\xe6\xa1\xf3<\xdb|\xd39\xbb\x8c"8\xa1\x10\x19U"\x15\xae\xaa\xcb\xe7%7\xf81\xef\xae\xbdM:\xb96|h\x98\xd0\x01.\xf2\x9d~\xd6d\xc9\xde\xe35\xfc\x1a\xf3\xd9\x9d\xde!\x10x\xff\xed\xa19Y\xeep\xcb\xe7k\x88\xb9%\xcdi\x7fr\xfd\xce&:\x9f\x03\x04\xd4]\xbfp\x15\x99`tj-\x8a \xbfm\xe0\x00\x16\xf7\xb0\xa8\xc3\xa3\xe4\x08\xc4\xf3\x9bi\xb4\xac\x7f\xd6\xd4=\x8f\x83\x8e+\x00\xb3\xed\xe0\x89\x8f\x195N\\a\x87X\xee\xf4,\xaa\x16Bp\xe9@\x84' + + +2024-12-12 23:54:19.894507 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 375 + id = 16804 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862132327 + ack = 2922048871 + dataofs = 5 + reserved = 0 + flags = PA + window = 517 + chksum = 0x6808 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x0e\xfd34\x86\xc7\xe8\x1b?\xd5\xf2U\xe7\x9cP\xddS\x06\xb0\xc3\xaf,\xdc\x16\xf0#V\xa1q\x93\xe9\x9f*\xf3nP\x99\xb0c\x93\x0b\x0b\xfd\xe63D>L\x91A\xd7\xfa\xb3\x80\xcc"\x84XJ\xbf\xcc\xcc\xdf \x8c\x12\xc9\xd7[\xfd\xf6Ga\xd7\xe5\xa9\xde\x7ff\x86p\x11\x07&7\x84\xa8\x88\x1f:\xf3tJ0\x8bn\xffs\xbb\x80!\xde/:|\x87+xT\x956\xcf\xcc\xcb\xc98:\xcb\xcf\\fi\xd0D\x06\xa3\xd0\xd7g\xec\x14\xf1o\xb5\xb9r\x10\xae\xb9\x15$N\xc8\x11$\x17\x11\xd9\xea\xa7\xf5{\x07P\n\\\xc3e\xf6\x91xM}\x9c=T\xd7\x94\x1exM\x0be\x92\xfa\x8aZ\xe4\xe6CK\xbb\xad\x90g\xfd\x95BY\xe2k\xc0u\xbf\xd0T\xfe\x94\x12h\x82\xee:\xcal\xb6\xf2[\x7fS\x163t\x8f\xbd\xd8\xdeR\x96\xf7\xc2:\x88r\xf5\x84\xd0\xb3`\x7ffK\x12\xb4!\xc7\x94z\xa4a\x10.Gd\xfb\xc2\x19K*\t\xdc"\xcf2\xeb*\xf2A\n\xfb@\xaa(\x8b\xd28\x8c\xb0\xc5\x10\xb8/\xbc\x91|A_\xbbZ\x91\xd2j\xb3>\x1b\xc6lQ\x15\xec\x1aAF\xb1\x18\\\xaf\xee\x16\x9b\xc7\xc5\xf7)\xc9I\xc1@\x80O\xa1\x01\xc3\xaf\xbb\x7f\x00\xc1X\x0c\x9bw\xf6\xf2Xq\x94\xdd\xbf\x1c\xb0\x8f_\x00\xa1' + + +2024-12-12 23:54:19.900571 - Ether / IP / UDP 192.168.1.1:ssdp > 192.168.1.11:58001 / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 485 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = udp + chksum = 0xb5ab + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ UDP ]### + sport = ssdp + dport = 58001 + len = 465 + chksum = 0xd0c4 +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nCACHE-CONTROL: max-age=1800\r\nDATE: Thu, 12 Dec 2024 22:54:25 GMT\r\nST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842b9::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\nEXT:\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:19.905510 - Ether / IP / UDP 192.168.1.1:ssdp > 192.168.1.11:58001 / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 491 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = udp + chksum = 0xb5a5 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ UDP ]### + sport = ssdp + dport = 58001 + len = 471 + chksum = 0x11ec +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nCACHE-CONTROL: max-age=1800\r\nDATE: Thu, 12 Dec 2024 22:54:25 GMT\r\nST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842b9::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\nEXT:\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nLOCATION: http://192.168.1.1:64920/d15f795f/IGDV1/rootDesc.xml\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:19.908530 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40473 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x918 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922048871 + ack = 1862123687 + dataofs = 5 + reserved = 0 + flags = A + window = 16385 + chksum = 0xcd87 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:19.912930 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40474 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x917 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922048871 + ack = 1862130887 + dataofs = 5 + reserved = 0 + flags = A + window = 16385 + chksum = 0xb167 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:19.917128 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40475 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x916 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922048871 + ack = 1862132662 + dataofs = 5 + reserved = 0 + flags = A + window = 16385 + chksum = 0xaa78 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:19.921505 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 134 + id = 40476 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x8b7 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922048871 + ack = 1862132662 + dataofs = 5 + reserved = 0 + flags = PA + window = 16385 + chksum = 0x20bc + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00Y\x95p\x8e\xd7x\xfe\x85\x9b\xb5\xf0~\\\xb0\xc7\xc6\x86\xa6\xde;0\xa2\xe7QC\xfeew\xc7S7t\x17Acr\x1d\xe3\xa8\xc1\xe3\xe6q4h\x84\xc0\x80n@\x07\xd7~\xe7%.\x9c\xc7c\xc2Z\x1fjz=\xb2\x9b(\x96A\x02\xa6\x02\x8a\xbe\x83\x83\xb6x\xf5]#\xe6\xeb$\x0fW\xddk/' + + +2024-12-12 23:54:19.959596 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 16805 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862132662 + ack = 2922048965 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x66b9 + urgptr = 0 + options = [] + + +2024-12-12 23:54:20.008730 - Ether / IP / TCP 192.168.1.11:28403 > 20.50.88.234:https FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 34133 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 20.50.88.234 + \options \ +###[ TCP ]### + sport = 28403 + dport = https + seq = 4226051033 + ack = 3187211950 + dataofs = 5 + reserved = 0 + flags = FA + window = 515 + chksum = 0x2eea + urgptr = 0 + options = [] + + +2024-12-12 23:54:20.049470 - Ether / IP / TCP 20.50.88.234:https > 192.168.1.11:28403 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 21121 + flags = DF + frag = 0 + ttl = 107 + proto = tcp + chksum = 0x8e7f + src = 20.50.88.234 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28403 + seq = 3187211950 + ack = 4226051034 + dataofs = 5 + reserved = 0 + flags = FA + window = 16385 + chksum = 0xabed + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:20.053565 - Ether / IP / TCP 192.168.1.11:28403 > 20.50.88.234:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 34134 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 20.50.88.234 + \options \ +###[ TCP ]### + sport = 28403 + dport = https + seq = 4226051034 + ack = 3187211951 + dataofs = 5 + reserved = 0 + flags = A + window = 515 + chksum = 0x2eea + urgptr = 0 + options = [] + + +2024-12-12 23:54:20.099663 - Ether / IP / TCP 192.168.1.11:28388 > 142.250.200.142:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 41 + id = 2613 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 142.250.200.142 + \options \ +###[ TCP ]### + sport = 28388 + dport = https + seq = 3398300860 + ack = 2597447648 + dataofs = 5 + reserved = 0 + flags = A + window = 512 + chksum = 0x1958 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x00' + + +2024-12-12 23:54:20.111924 - Ether / IP / TCP 142.250.200.142:https > 192.168.1.11:28388 A +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 64176 + flags = + frag = 0 + ttl = 119 + proto = tcp + chksum = 0x2fd7 + src = 142.250.200.142 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28388 + seq = 2597447648 + ack = 3398300861 + dataofs = 8 + reserved = 0 + flags = A + window = 996 + chksum = 0x2b69 + urgptr = 0 + options = [('NOP', None), ('NOP', None), ('SAck', (3398300860, 3398300861))] + + +2024-12-12 23:54:20.192906 - Ether / IP / UDP 192.168.1.11:58001 > 239.255.255.250:ssdp / Raw +###[ Ethernet ]### + dst = 01:00:5e:7f:ff:fa + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 165 + id = 4433 + flags = + frag = 0 + ttl = 4 + proto = udp + chksum = 0x0 + src = 192.168.1.11 + dst = 239.255.255.250 + \options \ +###[ UDP ]### + sport = 58001 + dport = ssdp + len = 145 + chksum = 0x7102 +###[ Raw ]### + load = b'M-SEARCH * HTTP/1.1\r\nHost: 239.255.255.250:1900\r\nST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\nMan: "ssdp:discover"\r\nMX: 3\r\n\r\n' + + +2024-12-12 23:54:20.279392 - Ether / IP / TCP 92.223.84.84:https > 192.168.1.11:28467 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 79 + id = 38176 + flags = DF + frag = 0 + ttl = 54 + proto = tcp + chksum = 0x3ca2 + src = 92.223.84.84 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28467 + seq = 624978547 + ack = 4211386632 + dataofs = 5 + reserved = 0 + flags = PA + window = 11 + chksum = 0x48a0 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00"g\x9e\xd91E\xaa\xd5\x7fq\xb7\xe2k=%\xbfEA\xbc\x06j\x80\xff\x05\x1b\xd8\x0b\x8c\xa2S\x18\x00\xda-\xa9' + + +2024-12-12 23:54:20.285482 - Ether / IP / TCP 92.223.84.84:https > 192.168.1.11:28467 FPA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 64 + id = 38177 + flags = DF + frag = 0 + ttl = 54 + proto = tcp + chksum = 0x3cb0 + src = 92.223.84.84 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28467 + seq = 624978586 + ack = 4211386632 + dataofs = 5 + reserved = 0 + flags = FPA + window = 11 + chksum = 0xf7a + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00\x131mL\xab\xae7\xca\xe5\x91\xb6\xf9\x13\xcb\xe0\x90\xf3W\x868' + + +2024-12-12 23:54:20.291663 - Ether / IP / TCP 92.223.84.84:https > 192.168.1.11:28467 FPA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 64 + id = 38178 + flags = DF + frag = 0 + ttl = 54 + proto = tcp + chksum = 0x3caf + src = 92.223.84.84 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28467 + seq = 624978586 + ack = 4211386632 + dataofs = 5 + reserved = 0 + flags = FPA + window = 11 + chksum = 0xf7a + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00\x131mL\xab\xae7\xca\xe5\x91\xb6\xf9\x13\xcb\xe0\x90\xf3W\x868' + + +2024-12-12 23:54:20.296077 - Ether / IP / TCP 192.168.1.11:28467 > 92.223.84.84:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 7724 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 92.223.84.84 + \options \ +###[ TCP ]### + sport = 28467 + dport = https + seq = 4211386632 + ack = 624978611 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x7301 + urgptr = 0 + options = [] + + +2024-12-12 23:54:20.299117 - Ether / IP / TCP 192.168.1.11:28467 > 92.223.84.84:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 7725 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 92.223.84.84 + \options \ +###[ TCP ]### + sport = 28467 + dport = https + seq = 4211386632 + ack = 624978611 + dataofs = 8 + reserved = 0 + flags = A + window = 513 + chksum = 0x730d + urgptr = 0 + options = [('NOP', None), ('NOP', None), ('SAck', (624978586, 624978610))] + + +2024-12-12 23:54:20.306764 - Ether / IP / TCP 192.168.1.11:28467 > 92.223.84.84:https FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 7726 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 92.223.84.84 + \options \ +###[ TCP ]### + sport = 28467 + dport = https + seq = 4211386632 + ack = 624978611 + dataofs = 5 + reserved = 0 + flags = FA + window = 513 + chksum = 0x7301 + urgptr = 0 + options = [] + + +2024-12-12 23:54:20.310030 - Ether / IP / TCP 92.223.84.84:https > 192.168.1.11:28467 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 38179 + flags = DF + frag = 0 + ttl = 54 + proto = tcp + chksum = 0x3cc6 + src = 92.223.84.84 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28467 + seq = 624978611 + ack = 4211386633 + dataofs = 5 + reserved = 0 + flags = A + window = 11 + chksum = 0x97f2 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:20.999492 - Ether / IP / TCP 185.89.210.180:https > 192.168.1.11:28533 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 86 + id = 38375 + flags = DF + frag = 0 + ttl = 49 + proto = tcp + chksum = 0x65f9 + src = 185.89.210.180 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28533 + seq = 4238760357 + ack = 2315656846 + dataofs = 5 + reserved = 0 + flags = PA + window = 40880 + chksum = 0x8b81 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00)\xfb02\x8d:af\x0b\xa0\xa8\xf1\xab\x14\xb3&\xbcPb\x97\xdd\x8cW!2\xb0\tGM\x11\xc1\xac\xef\xa6\x98\xbdb\xc3/\xfa\x97\x8d' + + +2024-12-12 23:54:21.006457 - Ether / IP / TCP 185.89.210.180:https > 192.168.1.11:28533 FPA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 71 + id = 38376 + flags = DF + frag = 0 + ttl = 49 + proto = tcp + chksum = 0x6607 + src = 185.89.210.180 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28533 + seq = 4238760403 + ack = 2315656846 + dataofs = 5 + reserved = 0 + flags = FPA + window = 40880 + chksum = 0xf12d + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x15\x03\x03\x00\x1a\xfb02\x8d:af\x0c{\x98\xab&\xc4\xa7\xc9\xe2"\xb5\xbdsJ\x83\x81\xdf\x9a-' + + +2024-12-12 23:54:21.012306 - Ether / IP / TCP 178.250.7.6:https > 192.168.1.11:28534 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 79 + id = 40208 + flags = DF + frag = 0 + ttl = 53 + proto = tcp + chksum = 0x2ce5 + src = 178.250.7.6 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28534 + seq = 784073143 + ack = 2401337754 + dataofs = 5 + reserved = 0 + flags = PA + window = 63 + chksum = 0x7d81 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00"7p\xaf7\x9d\xcag\x04+F\x8e\x84q\xa5J\xcc{\x82\x88\xf6\x8c\x8e\xa8\xf2P\xea\xc7\xechA"\xdd\x8e$' + + +2024-12-12 23:54:21.018176 - Ether / IP / TCP 178.250.7.6:https > 192.168.1.11:28534 FPA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 64 + id = 40209 + flags = DF + frag = 0 + ttl = 53 + proto = tcp + chksum = 0x2cf3 + src = 178.250.7.6 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28534 + seq = 784073182 + ack = 2401337754 + dataofs = 5 + reserved = 0 + flags = FPA + window = 63 + chksum = 0xe35b + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00\x13\xec\xb8\xc9\xc7h\xcb\xc3\xbc\xf6\xd1\xaa\x81Q\x1d\x8b\xbel8\r' + + +2024-12-12 23:54:21.025783 - Ether / IP / TCP 178.250.7.6:https > 192.168.1.11:28534 FPA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 64 + id = 40210 + flags = DF + frag = 0 + ttl = 53 + proto = tcp + chksum = 0x2cf2 + src = 178.250.7.6 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28534 + seq = 784073182 + ack = 2401337754 + dataofs = 5 + reserved = 0 + flags = FPA + window = 63 + chksum = 0xe35b + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00\x13\xec\xb8\xc9\xc7h\xcb\xc3\xbc\xf6\xd1\xaa\x81Q\x1d\x8b\xbel8\r' + + +2024-12-12 23:54:21.032742 - Ether / IP / TCP 3.78.168.176:https > 192.168.1.11:28531 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 79 + id = 19898 + flags = DF + frag = 0 + ttl = 241 + proto = tcp + chksum = 0xce3c + src = 3.78.168.176 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28531 + seq = 122602388 + ack = 2590292784 + dataofs = 5 + reserved = 0 + flags = PA + window = 17 + chksum = 0xb143 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00"\x0b__\x06S\xa6UiT\x8d\x1e!iy\x02l\xd3T\x9e\x02\xae\xb1,\xff1\x05\x0c\xb5s\xc0Zl\xaa\xca' + + +2024-12-12 23:54:21.041839 - Ether / IP / TCP 192.168.1.11:28533 > 185.89.210.180:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 64107 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 185.89.210.180 + \options \ +###[ TCP ]### + sport = 28533 + dport = https + seq = 2315656846 + ack = 4238760435 + dataofs = 5 + reserved = 0 + flags = A + window = 62894 + chksum = 0x4ddc + urgptr = 0 + options = [] + + +2024-12-12 23:54:21.049282 - Ether / IP / TCP 192.168.1.11:28534 > 178.250.7.6:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 5658 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 178.250.7.6 + \options \ +###[ TCP ]### + sport = 28534 + dport = https + seq = 2401337754 + ack = 784073207 + dataofs = 5 + reserved = 0 + flags = A + window = 507 + chksum = 0x7bce + urgptr = 0 + options = [] + + +2024-12-12 23:54:21.053256 - Ether / IP / TCP 192.168.1.11:28534 > 178.250.7.6:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 5659 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 178.250.7.6 + \options \ +###[ TCP ]### + sport = 28534 + dport = https + seq = 2401337754 + ack = 784073207 + dataofs = 8 + reserved = 0 + flags = A + window = 507 + chksum = 0x7bda + urgptr = 0 + options = [('NOP', None), ('NOP', None), ('SAck', (784073182, 784073206))] + + +2024-12-12 23:54:21.059900 - Ether / IP / TCP 192.168.1.11:28531 > 3.78.168.176:https FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 27709 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 3.78.168.176 + \options \ +###[ TCP ]### + sport = 28531 + dport = https + seq = 2590292784 + ack = 122602427 + dataofs = 5 + reserved = 0 + flags = FA + window = 509 + chksum = 0x6dcc + urgptr = 0 + options = [] + + +2024-12-12 23:54:21.070092 - Ether / IP / TCP 192.168.1.11:28534 > 178.250.7.6:https FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 5660 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 178.250.7.6 + \options \ +###[ TCP ]### + sport = 28534 + dport = https + seq = 2401337754 + ack = 784073207 + dataofs = 5 + reserved = 0 + flags = FA + window = 507 + chksum = 0x7bce + urgptr = 0 + options = [] + + +2024-12-12 23:54:21.076563 - Ether / IP / TCP 192.168.1.11:28533 > 185.89.210.180:https FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 64108 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 185.89.210.180 + \options \ +###[ TCP ]### + sport = 28533 + dport = https + seq = 2315656846 + ack = 4238760435 + dataofs = 5 + reserved = 0 + flags = FA + window = 62894 + chksum = 0x4ddc + urgptr = 0 + options = [] + + +2024-12-12 23:54:21.081385 - Ether / IP / TCP 178.250.7.6:https > 192.168.1.11:28534 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 53 + proto = tcp + chksum = 0xca1c + src = 178.250.7.6 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28534 + seq = 784073207 + ack = 2401337755 + dataofs = 5 + reserved = 0 + flags = A + window = 63 + chksum = 0x8140 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:21.086010 - Ether / IP / TCP 3.78.168.176:https > 192.168.1.11:28531 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 64 + id = 19899 + flags = DF + frag = 0 + ttl = 241 + proto = tcp + chksum = 0xce4a + src = 3.78.168.176 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28531 + seq = 122602427 + ack = 2590292785 + dataofs = 5 + reserved = 0 + flags = PA + window = 17 + chksum = 0xf30a + urgptr = 0 + options = [] +###[ Raw ]### + load = b"\x17\x03\x03\x00\x13\xd9\xba'\xdb\x87\x9ep\xd4\xd6\xea\xee\x90\xaa-\xf9\xef\xae\xed\x03" + + +2024-12-12 23:54:21.090512 - Ether / IP / TCP 3.78.168.176:https > 192.168.1.11:28531 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 19900 + flags = DF + frag = 0 + ttl = 241 + proto = tcp + chksum = 0xce61 + src = 3.78.168.176 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28531 + seq = 122602451 + ack = 2590292785 + dataofs = 5 + reserved = 0 + flags = FA + window = 17 + chksum = 0xb02a + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:21.095530 - Ether / IP / TCP 192.168.1.11:28531 > 3.78.168.176:https RA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 27710 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 3.78.168.176 + \options \ +###[ TCP ]### + sport = 28531 + dport = https + seq = 2590292785 + ack = 122602451 + dataofs = 5 + reserved = 0 + flags = RA + window = 0 + chksum = 0x6dcc + urgptr = 0 + options = [] + + +2024-12-12 23:54:21.099876 - Ether / IP / TCP 185.89.210.180:https > 192.168.1.11:28533 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 38377 + flags = DF + frag = 0 + ttl = 49 + proto = tcp + chksum = 0x6625 + src = 185.89.210.180 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28533 + seq = 4238760435 + ack = 2315656847 + dataofs = 5 + reserved = 0 + flags = A + window = 40880 + chksum = 0x5202 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:21.206201 - Ether / IP / UDP 192.168.1.1:ssdp > 192.168.1.11:58001 / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 485 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = udp + chksum = 0xb5ab + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ UDP ]### + sport = ssdp + dport = 58001 + len = 465 + chksum = 0xcdc4 +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nCACHE-CONTROL: max-age=1800\r\nDATE: Thu, 12 Dec 2024 22:54:28 GMT\r\nST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842b9::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\nEXT:\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nLOCATION: http://192.168.1.1:64920/d15f795f/rootDesc.xml\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:21.216922 - Ether / IP / UDP 192.168.1.1:ssdp > 192.168.1.11:58001 / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 491 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = udp + chksum = 0xb5a5 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ UDP ]### + sport = ssdp + dport = 58001 + len = 471 + chksum = 0xeec +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nCACHE-CONTROL: max-age=1800\r\nDATE: Thu, 12 Dec 2024 22:54:28 GMT\r\nST: urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\nUSN: uuid:d15f795f-9d12-458e-874b-cb38ba3842b9::urn:schemas-upnp-org:device:InternetGatewayDevice:1\r\nEXT:\r\nSERVER: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nLOCATION: http://192.168.1.1:64920/d15f795f/IGDV1/rootDesc.xml\r\nOPT: "http://schemas.upnp.org/upnp/1/0/"; ns=01\r\n01-NLS: 1\r\nBOOTID.UPNP.ORG: 1\r\nCONFIGID.UPNP.ORG: 1337\r\n\r\n' + + +2024-12-12 23:54:21.450262 - Ether / IP / TCP 192.168.1.11:28391 > 142.250.178.174:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 41 + id = 12882 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 142.250.178.174 + \options \ +###[ TCP ]### + sport = 28391 + dport = https + seq = 3269317138 + ack = 831716888 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x378 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x00' + + +2024-12-12 23:54:21.480517 - Ether / IP / TCP 142.250.178.174:https > 192.168.1.11:28391 A +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 9105 + flags = + frag = 0 + ttl = 119 + proto = tcp + chksum = 0x1cd7 + src = 142.250.178.174 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28391 + seq = 831716888 + ack = 3269317139 + dataofs = 8 + reserved = 0 + flags = A + window = 1035 + chksum = 0x1335 + urgptr = 0 + options = [('NOP', None), ('NOP', None), ('SAck', (3269317138, 3269317139))] + + +2024-12-12 23:54:21.715261 - Ether / IP / TCP 192.168.1.1:59624 > 192.168.1.11:icslap S +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 60 + id = 53242 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xe764 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 59624 + dport = icslap + seq = 462283154 + ack = 0 + dataofs = 10 + reserved = 0 + flags = S + window = 14600 + chksum = 0x422c + urgptr = 0 + options = [('MSS', 1460), ('SAckOK', b''), ('Timestamp', (503986729, 0)), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:21.774561 - Ether / IP / UDP 192.168.1.11:51195 > 142.250.200.110:https / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 57 + id = 56560 + flags = DF + frag = 0 + ttl = 128 + proto = udp + chksum = 0x0 + src = 192.168.1.11 + dst = 142.250.200.110 + \options \ +###[ UDP ]### + sport = 51195 + dport = https + len = 37 + chksum = 0x1953 +###[ Raw ]### + load = b'T\xea\x99\xa6M\xe7\x97=\xab\xb9\x1c\xcb>\xeb\xf1*T\xc0/\x92\xc1s\r\x9b\xa2\x9d\x05\x01\xad' + + +2024-12-12 23:54:21.799623 - Ether / IP / UDP 142.250.200.110:https > 192.168.1.11:51195 / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 54 + id = 0 + flags = DF + frag = 0 + ttl = 56 + proto = udp + chksum = 0x299b + src = 142.250.200.110 + dst = 192.168.1.11 + \options \ +###[ UDP ]### + sport = https + dport = 51195 + len = 34 + chksum = 0x85b8 +###[ Raw ]### + load = b'K\x92\xe9g\x94L\xfc\x12\xac)\x02Q\xa0(\x8d\x97\xf0K6\xec\xff\x16\xb8Y\x16\xe1' + + +2024-12-12 23:54:22.294076 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 154 + id = 16806 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862132662 + ack = 2922048965 + dataofs = 5 + reserved = 0 + flags = PA + window = 516 + chksum = 0x672b + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00m(z\xa0\xf86\xf2\xc98(\x9c\x08K#$\xfe`:5\x1a\xd4S\x1fqP\xd4J\xb8\x0b5\xe7g\xdde\x98\x018\x03\xa3\t\xc8\xea;\xbc\x04\x0e\x9f`\xb6\xb8\xdb4\x08\x93\xa6\x07F\x16]\x8b\xaf\x19\xaf\x03\xda\\U\xa0\xb8\xc1\x04\x92B\xe3\xea\x0c\xce\x0fG\x86\xa6\x1a\xf0\xd5`|\x98]h\x95\xf1\x7f\x92M\x1e\xb6m\xa2\xed\xe7\x1bJ\x83\xf2\x03\x04\x15\x86\x88O' + + +2024-12-12 23:54:22.306268 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16807 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862132776 + ack = 2922048965 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x030\xc7\xc1B\xd0\xe1K\xa7\xa2\x19\x9f\xa0\xbbw3Q\xfc\xf6\xb1 \xfa\xfa1T)\x82\xdc=\xf7/\xec\r\xb3FXI\x12\x0f\x96\xaf\x95,,\x1c{\x04\x82d\x92$\xc4\x8e\xb0\xdf0\xe4\\\xf5\xd1|[\xf0\xcf;\x8c\xf3\xc2\xd13\xfa/\xc3X\x00\xfd\x1f\x0bX\x85=\x17p\xc03\x1f\xed\xcb`\xe1\x9cl\xf7Y\xa4\xf4 \xf0\xc0\xads\xc0-`\xa2\x17\x07\xc5\xd5M\xcd\xb6\x04\xce5d\xb7A\xd6WV(\x128M\xc3z\xce\x06\x07\x85\xfe\ng\x96\xfd\x9c\xfd\x89\xc2\xf9\xcc\x99\x19|\xa2\xbf\xfd7\x13\xc1y\xb7L\xc3:][\xf0*9\'\xc5\x0f/\r\x1b\xae\x0cl\x9d\xc0\x83\t\x17bC(x\xb4NZi\xcd\xf5\xa2\xa8L\xd0\xfd\xea\x96*]\x008\xac\xfa\x189\x10\xd0\x1di\x7f\x1ba\xc4JS`\x8b\xd1\xa6\xb0\xa9#aqS\x83_\x07^[8t\xdd\xad\x013\xb1&\xfd\xc0m\xc2\x1c\xe6\xb3)\x1b\x95Sa\x9a\xa7A\xbd\xf1\x85)\x98\x8c\x88\x01\xa7\xc6\xf6d1hP\xf2\xc7\xafCd\x0ex\xc1\xf4+\xec\xfd\xc4kC\xf3\x0e\xbdG\xd5\x07\xd5\'\x9c\xe3+\xe7T\x02\xfaO\xde\xaf\x82\x19\r^m\xdd\xf5\xb2\xa8\xd2\xc4\xef3\x8aj\x17\x87<\xbc\xca\xd2f>\xf3\x8f\x93\x19z[\x15\xe4\xe0e|\xbb\x05\xe1"\xf4\x17\xc0~\x12\xd6\xea\xd6(\x92\x91f.x\x9c\xb7\x92\x99\x05T0\x99\x81-\xff\x19\xb4\x1b! \x90\x1e&0\x9d\x16\x16\x07h7L8\xcbv\xf8\xdd%\x86ho\x85U\\\xfb\x95\xf1\xee\x8f$\xb5\xc8?r\xd6t\xfb\xbb\x1f\xfa@\xe0\xfc"z\x13\x9a\xd0_`mwk&\xe8\xf4\xf8\xdfk\xcf=\xca\xb2\xb4\x7f=\x15\x19\xf0W\xc2\x91")\xf6\xcb\n\xc2\xf8\xf7\xbdE\xa39\x16p\xc8 \x17\x9cc=X\\\x9b\xae(\xecg\xc7\x08&z{_\x11\xd6\xddEP\x95\'\x8e\xf9\xc92\xe9z\xb5\xf9ly\xf5\xf0;\xfc\xe7U\x98/w2_\xae?w\xed\x8a\xfa\x81\xc1@%\xc2\x0c\xa5\xfe\xdb\xe6y\xbe"\x93\xb7\x87\xb9\xe2ER\xd8\x85ZB\xefVi\x88\\\x85e\xfa\x93\xccK\xee\xa7\x1f\x831\x1aQ|\x94\xa6*\x91>\xd9\'\xc1*\x07\xe5|h\x17\x04O;\xb4\x84\x82\xafg\x12\xe3\xe7S:\xca0\xb1\x01\x7f\x88\x89\x9b\xd4\x91\x86y\xac\xe6[J\xc1\x90\xd5|\xe5\x1d>\x90P\xebwY"I\xef1y^q\x0bMvqWB\x0e5\x18\xdf\x93\xb5q\xb2*\x1e\x18G\xa5t6w\x1a\xd8\xdf\xd1\xc34v|\xb1\x8c\t)\x84|X:\x13\xb9\xe6\x8ab\xb6\xbf\xf2\x07\xd9\xf7\x9f\xe7i\xe3^\x1bx\xe9XR\xb9\x98\x16\xbe\x02\xd6~x\xec\x05\x1f\xdc\x1e\x1a\xb56\x17\x9f*\xba)\x11\x1d/q\xeco\xba\xc9\xa17\x95;\x9d\xae\xe2\xb2\xff\xe9S\xcf\xe2\xeb\xbf\xc0\x8em\xfb{\xc1\x9b\xa8\x94\xdaH\xf2\xd8\x8c\xe9\xcb\xc0-#_b\r\xc4\xdc\x98\xa3}\xdbV9\xcc{-\xbdg\xae\x1b\x8e\x01\x81\xc1O\x19\xc8\xcd\xa7,n=b>B\xfc\xbe\xba\xd5C\xdc\xe9c\xc4\xbf\xabk\x17\xa0\x91\x95\x13\xab\x14[0\xfdx+!G\xeb\xdbQ.e \xb1\xbf~\x8f\xbe\x8e\x12\xa9\x18\xd4\x06 \x98\xd0D\x07\xdb\x95\x8b\x9d\xcf\x86\xb0A\xb0\n"\x80\x84`\xe2\xc2{(\x9e\x00Y\xc7\xd5\xe1\xc8\xe1x]\x8dz\xaas\t\t\xd1`\xd9x\xc4\xaal\xeaE"\'\x93m\x9d\x113\x9c)G\x90F\x89R<\x06p\x91\x16,\xcf\x9e\xfay\xafh*\xb2\xa4\xb2\xba\x99\x9b\xbf\x87\x81LeT\x177rvBT)\x91/\xc5\x02:\r\xfbf\xd194\x94\xaaF\x92i\xb2\xe7\xec1\xcc\x88\xd5\xee\x14\x08\xc8\t\xc0\x14\rd\xcf\x96\xa9\xeb-\x13\xc2\xfd\xb7\xdar\xf9$\xa8 \x05&\x90\x97;\x8f4(xt\xe8\xf1\x00\x9c\xad\x15\xca\xe9\x83b\xb8m\xfcc\n\x08\x1f\xdeY\xe8\x7f\xeew\x9a3\xb5\x08\xd8\xec\xb0\x7f\x8dA\xcb\xde\xb6\xfe_!\x9c\x98^\xachK\xf4B\x1e\x07\x86N\xac_\x86\xd5R\xf4\xbf\xfcx\xc6\x14\x14\\\xe9\xe3\xa2\x8b\xfd4\xc6\x8f\xcb\x91\xddi\x9a\x17\xf9\xc7/y,:i\xa4^"7T\xaa\xa6\x8a\xa7\x92]\x86C\xad*/\xb2\xb2\x14\xed\x039\xdcP\x031\'Hp"\xe8\x00-\x96o\x16dI1n\xa7\xfe:h\xf37\x92\x9b\xf8\xe8\x0b=Y\xd6\xcb\xae;\x9a\x8d\x89n\x854PJ\xb7M\xa1\r\x8aG\t\xb5R\xb9\x9b\x8bt\x06\xff{`|\x9d\xb2\x9f\xff\x85u\xd3#\xb5m\xf5\xebW\xdb,\x16B\x97W\x1b\x88\xd02\x83H\xf1 ;\x87\x02\x1c&\x1e\xfbH\x89\xeaX\x8c\xc8\xe0\xc0-\xd6"\xfc\x13)\xba\x9a\xc8\xce6\x95\xbb\x83xY\x8ff\x9d\x89\xcdQ\x84\xe5\x12GL\xdd\xda\x88!`\xb4\xc1\xf2\xc8\x18\x08M\xe4\xfd\xc4\x9d0\xdf%\\\xfe\x13\xa7D\xf4\xe2Q\xf7e~TMT>\xf5j\r\xf6\x00\x00\xe5vU=t\xa6\xb2\xea\xbddn\x86X\xb4E\xe8\x16\xf9\x87\x92j\xaat\x16\xf0x\x9f\xbcy\xbdV1\xc7\xac\x92\x14\xab\xf4\x14\xbe\xd9\xc3\x05\x05\xa9\xbb\rV\x90\x8a\xe4\x0c\xbcD\xd0I\\&\x0f\xb6\xc7\xf4:\xea\xdb\xd6\xbcgD\xc4\x02\xbc0\xdcIr\x14(\xb9\xd5\xceV\xa3cFQI\x88\x83\xa9J\xdcV\x83\x13O\xd5\\\xc4P\xfe\x9b\xd6\xc0\n\xfe\xda\xcc\xc9A\xa1\x81\x19\x15),\xcc\x85H\x91\x01\xb9,\xdf\x85\x91\xd8\xe7\x82\xa2\xc7D\x1e\x16\'F\x8c\x1c\x19\x87\xa6\xfe_z\x84\xc6\x88,\x89\xddr ]\xea\x8b5\x90\x18\xe6\x96\x12\x89W\x90\x06KP\x049\x11J\xa1\xe4\xcf\x1d\x1d\xf0\t\xf0\x10tvp\xfb(\x9e\xe5\t\xad\xd6\x1fh)\xc9\xf1\xdc\x1c5\x8b5\x82`!\x10N' + + +2024-12-12 23:54:22.319785 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16808 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862134216 + ack = 2922048965 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'J\xf7\x9b\x07MC\x8c\xb1\xe3\xeb\x15\xb2q.|F\xbdP\xa1S\xb6\xecL\xb4\xaa\x04V\xb8}\xaa\x00\x8ee`\xfbN\xed\r\xb1\x04i\x04\x98\x8e&\x11oN\xad\x10\xf8\x08\x7fn\x1e&C`I\xd6\x84}\x01\x1f>\x8b\x95\xe3\xef\xf7\x85\xfd\xaeM\x16\xce\xc4\x0e5\x91\xdd\xb48\xfa\x7f N_\xfc3\xdaV\x07\xf5\x12\x01~\x04\xbf2=\xb4h\n\xda\x81\xd3[\xcf\xdd\x98\x04\x12\x12"\xfe&\x93}\xc6k\x9c>Rz\xdd}\xd0\xd1\x00\xe2\xd2\xc4v\xeb{?bA\xbe\x15\xb5\xc3+.\x9dLd\x01\xeaUE\xc4\xda`\x8f\xf0!\xd2H\xd4\xb4\x13\xd6e\xaf\x1bZ\xf9;\x89\xb8\x8a\xf6\xb1\x8d\xd4Nj\xc5\xd9\xdc\xe1\x14*\xc97Q\xa43\x81%*G\x15\xc3w{\xa5I\xe1\xfbh\x17\xe7\x0b\xae\x11\xeb\\5\xcf>\'\xc4\xc7\x82J\xf7Y\'\xc1l\xaf\xfb\x01\t\x99\xe7<\xdd\xcc\'z\xcf\xe1_\x1d\x8a\xf8\x86\xa5O\xf0Z\x93\x19\x01\x03\xce\x19-\x1d\xa1\x85i\xc5\x84\xbb)\xb2VL8\x8c\xa1\xa7L"\xf3E\xe7\xcb4\xec\xb6^\x08`J\x019\xccL\xb7"[\xc82\x0b\xa8\x05\xa7\xa8\xfa\xfa\x02\xed\xe8q\xf1\xd0\x0c\xbd\x91;\xf9WB\xc1\xf3\x11\xad\xa3\xe8\xb7\xe4\x9ckG\xc2\xd5\x9a\xb4\xa6\x0b\xbfJRJo\xdf\xaf+\x1c5\xb8Ue>\xcc,;;\xbf\x9e\xd9\xd5\x88(\xc6\x990\xef3w2\x1e.3\x14Y\xe0\x04i\xa9\xde\x00tb\xec-\xc0\x9e\xbe\x90"(\x1b[\xbb\xe8\xc1Y\x17\xd8\xcb\xa1\x15O\x86\xd1\xf9\xa2\x9fZR\xc6k\xcbm\xc7\x87\x9f\xce\\\xa7\xd5WTK\xc8\x92P\xf1\xb5\xb8b\xf3nh\xe3\xd7K\xb3K\x1d\x0e\tJ\x9d\x92u\x88\x9ck\xdd\xa57\xf5\x1a\x1e\xc3\xe2\xed\xfc\xda\xbbGu\xed\xa2\xc7z\x93\x1f \xc5\x1f\xedS]-\xa5U\xd1\x99\xf2~\x15\xd4\xed\x973>\x9e}\xb1S\x05f\xf8\xd9\r{\xc0#\x9e\xd1\xfd\xe2\xc0R\xdb\x94\x7f\xd2:\x91\xd8X\x03]A\x87\xbd7\xc5\xfb\n\x147\xee\xbaN\nf\xbcHdy\xb8\x87\x88\xb2\x16\x02wy\x18z\'\xafs\x10\xa3\xec\x0f\xa5\xed\xe6\x01\xb1\x9b~2\xf2\r\x9e\xb7G\x9bQ\xa0\xcb4\xc3:\xcd#a\x03}c\x9f;PD\x1f\x00\xaf\xf9\x91\xbe\xc6K\xc5\x11jm\xcfC\xfe\xe3\xb86_\xa9\x91C\xfd7c\xe8\xfe\x07\xdb\x1cr\x98\xc8\xf8G\xb6(!x\x8e\xbaI_\x83[\x0e\xc4\xfe\x9f\x8c\x98\x14\xbc\x9d\xfe\t\xa3fJ\x1fg\x98\xc6\xd6\x11^\x97\xb6Q\xf2\x8fn\x9d[\x8c]5\xde\xad\x96\xe4\xea2_.\xd4\xd3f\x1f\tii{\xf3`\x03^|\xee,\xb1}{a\xb9B\x06\x8ar\xf5\x84\xea\n\xcf\xf5\x98\xd8\xcc\xe2\xd0{f\x81\x8eb\xdfhO\xdc\x98\xf09\xf3\xc77#\xdf\xc0J\xf2\x06P\xff\xf6Z\xe4}w!D\xca \xec\x83\xc2\xd4\xca1\xb3|\x8a&\x9f?\xa6\x87u\xbbi\x1a_"\x1cUH\xae\x89!\xbe\xde\xc72\x07\x0f]\x1b/\xc7\xcd\xf4\x7f\xdf\xe6\xfb\xfa6\xca\xc5\x95#v\xfb\xeaNk&X\xd4@\x15k\x14\x9f\x85\xda\x18\xc3\xbb\xe7\xb0\x13\x87\xe3\x83q\xc1\xcaB\xf9\x87\xe0m\xe0\x12R\xd48\xa3\xa8\xae\xd7\xc9~}\xc2\xab?/\xa9y\xe5\xff\xbb\x16\x1e\xec\xd3\x17\xa1Y(\xb8?$-\x91\xb3\xe7,\x8d\x80C\xf94K\xc3*6\x7f\xcf\x80\x18\xd1\xdfmmY\xc8fn H$\xd0K\xff$\xf1\xf8\x0ek\x87\xa2j\x98:\x1f\xda8\xaa\x026\x19\xffn\xd01\xed^\xe0\x81\x8a(\x7f\x00\x84\x99\xdc\x142g\xf9\xf8\xd5$\x88-\xd2\xc6\xeaf\xf1\xa5\xd5\xf5s\x02\xe7ZO\xe5\x9d\x05\x85~c\xf8\x98\xf3>Z\xf4R\x1b\xfcA\x95A^\x7f\xc7\xabR\xa0\x1few\xfe#\xa9C\xc5\xccq\xa2\x89Db\x82UVx\r%\x80\xb3\x16\x83\x100\x1aC:\x02e\x0eC^u\xba\xe3\xeea\xaa\xa2"\x0e\xf9S\x17\xda0\xe2\xaa\x06\xecA\xd6\xc0\x87m8\xa3\xc0cH\x00O\xedi\xe6\x94\xa2\x93\x13b\x1f\xb3\xb0`\x12\xba\x91E/\xcbT\x99\x19-\x0c\x17WEq\x84\xc9\xf2#s\x0f\xbe \x1f\x15q\xd9g~\xea\x81\xff\xc6hx\xdb\x03B\x9e\xc4F\x02\x1een\x80\x07\xcf\xa9\xba\xca\x82I\x96\xf1\xe0\xd4\x06Fz\x11V\x16\x9dRGC\xa7\xcc\xa4\xde\x1cQ\xd1\xdbod\x11\x98E?\x05kE\x85R\x06\x80\xbd\x96\xebv\x92\xb0\x8d\xf6"Tv\xc0\xdf\x98\xe91(oRy\x93I\xa1\x0e>\x00,hW\x8ce\'9\xd0om\xadj!q\xb5\xf3\x96\xf9\xb4\xa1E\x83\xcb\x03\x977\xd3\xa84\x95\x81o\xca\x90\xefE\xb3+\xbfxR\x99X\xb9EN.\xccM\xbc\xd2 \xe1f\xf6\xaf\xf2\xab\xeb\xcc\xf7\x84\xb4H\x08\xfcg\x8b\x83D<\xdc\xca\xb6\xd3\x1e\xc3\xbc\x91\x9c\xb4g\xe2\xa9\x1c?\xe7\x96\x9d]O\xe6h\xee\xb9^\x97\xd9`9\x10\x0b\xe7 \xcc\xe6\xe3q\x82u\xfc\x0f\xd9\xba#\xf6m\xd7\xb2\xef\x1cDy\xb5\xcd>\xbe\xf4\xc0\xc8\xf4\xb9\x04\xfb\x93\x079\xac#\xbef\x12\x01\xb2\x89\x9a\xb7\xccUu\x1a\x98\xeb\x9f\x07g\x06\x01q;\xf1N\xb5\xa2\x10\xf7\x1b\xed\xcdh7\xf2x\xaa\x97V\x04\x0f1k\xd6J\xa4N\xbb,_v\xc5\r\x1e\xb7\xf7\xfaa^\xa8\xb1\x1f\x94Z\xfb\xf1\x96K=NQj\xd1\xfa\xa5r\xf4\xc1\x9cN\x056@\x93(q\xe2\xa1"\xa6\x87\x15\xee\xcd\xef\x1e\xe1\xc0p\xb2FT:]\x12\xa61\xec\x97\n\x8a\xa0\x80g\xe3;\xbaj\xc3V\xd1C\xfc\x8b2\x8d\x0e#\xad\xaf\xc9}\x9d\x85\xcf1\x0f@\xf5\xed\x91\x8a\xd4\n\x04\xec`\x8b\xd5w\x0cv@\xb0\x9a\x9e\x9f\x98\t\xc7\xa6uL\xf5\xb3q\xe1\x8e\x85\xd2\xae' + + +2024-12-12 23:54:22.328337 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16809 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862135656 + ack = 2922048965 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x7f\xaa\xbb\x14$\xd3\xe0_\xf5\xcf0\xa9\x04K\xfa[V\xea\xdb\xab\xe9m\xb5\xf2\x93\xd4\xd0\x81\xc9\xa0Ey\xb7\xbb\xc2C\x87D\n\x9f\xffT\x81\xf4\xb0\xca\xa8\xe9\x88\x1b\xe3k\x81\x0e\xe0\xe6\xe6(\xbcl\x8bN\xbbGn\xae\x89\x158t\xdd\xc1\x9cg\x89\xbc\x97\x06\x9d:\x0f\x8f\x10\xe2\xbf\xbe\xc3\xb8\x0b\xf2\x06t\xcc\xca{\xca\xfd4iS"\x83;\xd0\xd6\xf6S\xa4\xa0K\xec\x06|\xafJ\xdc0\xd7j\xc8\xff\xe8\xd5\xbd\x8d/l[X\xe7\x15R\xeb\xa8\n\xf5\xbbDm\x0bb\x9eM\x86\xbe\x18\xf3\t\xbf3\x0c\xceHM\xcc\x896\xdf\xd1z\xd1dj\xf10\xc6\xcb._\x11c\x13e\xa2E\x93\xd9\xa3\xa1,&\x1f*\xadWBw\xc9\xf0\xc0\xfe\x82\x1b\x12\xd6\xd1\x11\xc0\xdb\x0fE\xb0\x10\xa4\xec\xb2\xc3\n\xd4\xb7F.9[\x19\xbd\x8f\x92a\xe5r\xa7\x92\x1b\xd9\xce\xa2W.\xb1"&\x80\xda\xb1N:$6jG\xe9\x0c~\x19\x13\x12\x05O\x05\xe6\x88\xd8\xb2`:\xd0\x874M\nL3\x8dj\xa3H\x08\x88\xa4-\x92\xdc\xa0\x97\x85\xce\xb4\xff5\x1d"\xc8^\x9eJ~\x7f\xc9\x03a\x1f\xdc\xceW5>74\xfe\xa1r~\x99\xf1$\x96\xba\xcd3!\x83\x1f\xd0\xb6\xa5V\xab\xee\x97[\xb5\x88\x9fUn\xb6\x19\xec\x13\x1f\xca\xa6\xfe\x9d\xac\r\xe5\xd1o^P*\x13\tj{\x8a\xbc\xbcN\xec\'\xdc\xfd\xd8q\xdf\x9c\x8d\xed\x13a\x8e\xc8P\xa0-\xf1\xb9zW\xb9C\xc1\xaa-\x88o[t\xee\xde\xb3M\xb8w(\x9c\xd9\xd3\x8b\x17\xfb\x99\xf0\xd1\xa1W9-\xec~\xfb\xe9\xe5$\xc1{\xb9h*\xdcL\xd9 \xe4\xc8\x1a\xd2[\'L\x8c*D?qH\x995\xd9`|~\'^g\xe5\xfd)#v\x02\x0e\xdb~H\xe05U/40Rc\xe7)K\n\xea\x1d\xe2\xe2\xe0\xa9|c\xad\xa3T\xa3\x17\x05)\xc9th\xd4?\xeaS\xc6\xd6\xdd9\x8f\xbe\x19E\x8b:\x18\x0b\x9c\xb0\x08\xff\x06\xeb\xfe\xc6\x93\xbc\xb3\x112\xba\xb2\xe0\x04M\xe05\x1cKn\xc0F9\xe2I\xd1\x9c\x01I\xe1M\xae\xcbr}\xb9\x85R\xfc\xb4:\x8bR\xa6X\xc8}.\xa0\xb2C\xda\x90\xbb`\x89kx\xa7\x1c2a\xc5\xfd\xd0\xb0\xc3L5LH*y\xca\xe6\x82\x15\xae\x17<\xe4{:\xb8\xbdQ\xf2\x99\x88*\x7fI\xbfGPI\xf3\xcdS\x8d\xba\xb0/\\h>\x11I\x84\'\x86\xd7\x1d\x0c*\xac\x03\x07\xe9\r\'\xc19\x1d\x9fbR\x8c]\xd7u\xd6\xf2\x0b\x9a(\xdc\xabwJ\xd6\xd3\xc1\xca\xe9\x9d(\xb0c\x9f\xd5u4\x08\xe1\xec\xbf\x10~\xc2\xfe\xc9f\xc3\xb8\xfc!\x0f\x97\xeb\xa8\x08\xe9M\xd7\xce\xae6\xaa\xf6\x8a\xf2\xd3$,\xe9Kw!\xbd`t\x86\x14Y#7\xdd\xbb\x8cI\x86\x00\xc5\xcb\xc1\x89\xe7\x01O\xdb\x06Ve0r=\x05\x00\xbf\xd5y\'\x04z\x1a7\n{\xb8\xe9\xd0i\xf8\xb8\x95)-\xe2e\x05\x01\xba%\xc6$\xadc\xa0;\x89~\xa5\xe5\xf0\xee\x0b\x16\xba\xb6G\xa2\xa4k\xa2\xd9\xed\xee\xd5\xa3\xe5J;\x95\xear\xee\xca\xaa\x84\xfe{\x12\xe2\xcf\xb7t\xbc1Q\xd1>\x04\x9a[\x9e\x89\x99E5$\xa9\xd5[z\xc4R\x9f\xcf\x86,#\xf6\xe9N\x9b3\xd2\xc1\xff\'\xd75\x01m9)\xcd\x9c~\x87\xce&NQ\x8c\x85y\x8bd\xdbD\x08;y\xad4\x96\x99\xf8\xe8/|\xb8\x1dP\x94\x9b\xa7#\xf3P\xb1\x83\xc3B\xdaRx\rA\x86W\xd3@W\xc8\xe3\xd1}T\xd0s\xafk\x9e\xc6\x1d\xef9\x0c\xa8V\x8e\x99\xce\xe5\xf0M5k\xacxt{\xa4{\xee\x1d\xbd\x96\xf31\xb2P\xb2\xd6\x124e\xf7G\x0b4\xabB\xc8\xb5iy\x8b/\x83\x16\x98\xf3 \xd9\xbf\x1c\x19\x1f\x00\xe9\x0c"\x05\x8b)\x8b\x0c\xff\xf3-\xf0z\x17\x0f^8_w\xab\xc4\x08\x9fN~N\xe8.\x18N\xd4\xe5\xa1\x020t\xcccI|\xcad\xe3\x8e\x08\xd2\x7f\x16\x05\xba\x84WG\xdf h\xcc%dI\xb5a\xca\xd7/"O\xf9\xe0\x95\xfbTE\xda\xe7\x84E\x10\x8d]\xc6\xa4\x04M\x87v\xc8\x04\x92$\\\x8cpI*NM\xe6\x1co\x10B/t\xc8[\xec\xf1h\x88\x9d"\x9b"\x8d^\xd9$@\xd9\xca\xf8\xd3%\x00\xa5V\xf9\x05\x1f\x89@\xb7|\x1e\xfe0\xc4{\xbc\x81\xf3\xe0L\x87pv\xb1.7\xfbTD\xec\x0f\xa4\xa1\x80H\x14\xac\x1e\x1dc\xa115\x90\xe4BI\xf2}fM\x9d\xa5\xe8S\xd2S\x07\xea)v\x08\xdd\xe5Q2\x0f/\xd6 \xbcte\xc5G\x94l\xf5Ok"\x19\x95.\xde\x1b\xd6s\x9f\xf1\'_\xf59\xd3\xca\xe99\xcf \xb2\x87(\xe2\xb1~E7\xea\x85\x1c\x12\x84@\xa5\x16\xbawq_ 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16810 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862137096 + ack = 2922048965 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'7\x99\xfc\xcb\x8b\x15\xb7\xbb\'Q}\xda\xe4\x1b\r\xa1\xb8f\xc4,x{\xff6p\x9b>\x9f\xca\x92@A\xef\xe9\x97\xda\xd3\x0c\xd1\xe6\x8c\x0fZn1%%\xf3C{`\xe2g=\x98\x8e\xcaP\xd2\xa0\xa9\x1a\xd8\xa1\xbf"\x00;}\x1d\xfbB\xac\x17\x99\x9b\xa4\x8f\xcc\xcc\xd3\x95$\xe1\x01"\x87\xa2\xd5Z\x90\xbe\xf7\xb4\xbd|\xe9\xad\x1e\x13\xcc$u2\xe9\xb1a\xb9!\xf6L\xa1\xc8\xddh\xc3sCq\xfb\x1b\xef\x95\x81BJ"\xae~\x0eBR\x83[\x8c\xfa}<\xf1\xde\x05\xf5\xc3T\xbft}\xfbSOD\x1f\xee\x8fW\x87:\x90jH\xbaF\x91\x0bK\xce\xbc\x98\xa8\xbb\xf2#\xc4\x0e+\x82\x03\x12\x9c\xcdy\x83(|\xd9\x13\xc8!]\xdf\xee\x93\xb8"b|W\xd8\xa5\xe2l;\xb3\xddK\xb3\x0bU4\x0b\x01"v`#\x8d\x8clF6\xb1\x13\x9a"\xd1*z\xd9\x905%\xdeX\xbd\xf1k\xa2\xb3\\<\x15tK}\xddh\xd9\xa8\x16\xfbfmm\x84uY\xd0\xba\xd6;\xd6:\x97\x83CC#@y\x85"M\x07\xb5\xfc%\x08\xeb\xafF\xbf\x01DX\xca\x16\x96\xc2\xfc\xb6\xe3<\x9d^\x12B4\xf0\xe6\x0b\xa3\xc9\xfa\xa3\xbb\xa9\x0e"~t\xeeL\xd05\xf1\xb0V\x88\xc4)\xfdIR\x9c\x9b\xafO\xb3mOY\x00\xe2\x8c;\xcc\x05\x023g\xe3/P\xd7\xb5J\xf2\xbc\x93\xd4f+\x81B\xabwo_\xff\xb0=\x875\x81;\x0f8\xf4\xc4%\x1d\xb2\xd8\x19\xf9\x85}\xb2~\xd7\x01\x14G}\xc0\x087f\xec\xce\x9c\xf3\xae\x07\xb0\x18\xfbUQ\x15\x85`\xfa`c\\\x01\xcd\x9bl\x9e\x8a{\xc7\xdb\xa0w\xccM\xf3~\xdf\x05\xaf\x14uyVt\xb8\x00\xb0\x9ba9j\x9as_8|z{G\xc2\x8cKK1\xf9\x8cP\xaf"\x7f\xeb\xab\x13\xea\x1a\x83\x9d\xaf\x1dvrw\x84\x9d>r\xe4p\xc8\x15\xb6\x81 \x07\x19v\x8c\x0c\x0e\xef\xd1\x0f@{\xde\xdc~5\xe2\xa6\x08\'1\xd1\xae2p\xa68\xe3\xae\tA\x9b~n\xed\x0c\xb3\x0e\xaa\x11s\x1e\xb2\x81z\xa3\xae\xe7r4\x95?(\xe6\x92\xcct\xbb\xb5\xe9\xb9\xa5\x8b\x8dc|\x10\xa1,\xd4\x0e*\x08Uk>\xc6\x9c.\xe3\xd3,\x116-]:\x19h\xd5\x8b\xa3\x81\xc3\x8a\xc6\xb9\x83\x86\x80\xbd\x13\xde\xcfvG\x1c\x12\x14"y\x15\x8f\xe1\x15!\xd5\x14\xcb\xb3,\xb2\x13\xa6\x98\xbfK\xa5\x90\xa6Uq\xcd\xdb;\x87\xfcI?\x17\x18\x1e8\x8a\xfce\x8f\xc1\x9a\x07\xe4\xc2\xfa\'\x8a\xee\x05uz\xd9\xfc\xa0\x98\x11Wqs\t\x87rB\x989\xa6\x06\xf8\xeedVS\xff 1(\xb9\xe2t^\xcb$t\x10]i]\xb5\xbaw;\xc5\xa8R?\xddl\xcd\x14\xdd\xe5\x06\xe7\xda\xfd\x08\xab\x85\x0bK\xf3\xc0\x87\xc0\xd6\xaf\x82\xd9\xa1\xeaJ\xe4\x8f\xec\xe5\x14\r\xf9@\xe6\xa39^\xdd\x97^uS3\xad\x89\x07\x01\x1fx\xbd\x8bm\xb0.}\xd6.\xde\x19\xc097\xa6+\x16\x81Xr\xc9\xb9\x8e\xd5\xdeC\x1d\x1e\xa2E\x9a\xd1|\xce*\x85i\x07@' + + +2024-12-12 23:54:22.344777 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16811 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862138536 + ack = 2922048965 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\xd3~*9\x1b\xff\x93\x9fRd\xa4\xeds\xab/2I\x1b\x0bc\xde\x89W\xd2\x8fOhc\x10>\xf0\xbc\xec\xc0,\x9b\xe4\xc4j\xbe\xdeI\xd5-8\xa3\x87\xf4\x1dE\x87\x0c+\xc1%\xfb\xc9XRI]v\xf8\x8e\xd3\xa2\x0bn\xd3K8\xe2*\xc8\xc0\x19\r\xdcE\x96\x96\x8d`\x1dP!(\xb2\x18\x92\xbbt\x1ed\x08:`\xcb4\xd7\x08\xa7\xdeJ\xf2\xb5\xa8\x88?Z\x1b\xce\x12]#\xda\x89rg\x053\xdd\x1a5\xb3\\\x13\x9bA\xcbu\xff\x02Q3\x89\x96\xa09\xfa\xecPj\x8c2+\x8c{%\x84\x18\x16F\x8c\xcbC\xdc\x8b\x95aU/X2\xbb\x0f_Tbq\x83\x91\xed\x87\xc9\xe4\xe2\xdd\x9dD\x00\x0e\xda\x7f\xd3\xf4\xeb=*\x11%\xd8\xf1\x9a\xbc\xea\xa2\x90 \xc3\xae\xfaa\xfc\xd3\x10\xb2.P\xf1\x9e\x91\xd62\xa8\xa5\xf8\xf5\xefz[\x8e\xe7\x0ex\xa5\xae\x9fX\x9e\xfa\xeeN\xdcS\xa4nE4\xcd\xb2$\xde2\t\x19\x82\x8bP\x8c\xe4\x7f\xee\xc2\xd3Z\xe5h#\x8e\x17,\xe6\xbcU\x00\xa9k\xeaJk\xe1\xf4d\xa6\'@\xd8\x1dU\xb9\x1fQ\xfd\xd3&\x10\x12j\x15\xc8 \xffg%\x91\x18P\x85VA_\xeb"\xcc\xd5r|h\xae\xba8M\x17k\xe6E\xa7\xca\xe2\xf8\x93\xf5A\xdb\xf4:\xa7V\x14\xce\x1f\x8eH\x933\xeb\x0ey\xfa)\xbb\xef\xc8HS\x03\xa6\xc3I\xfcv\xb5>\xc9\x82\xa7m\x94\x92$\x82\xfd\xed\xac\xa4~\xe8J\xdf\x9f\xc6k\x01\xda\xe3\xf0\xaf\x06\xa0Ow\xab\xd6\x04xL_\xd3\xf2\x18\xd1h\x16\xd2\xbe\xb4Y\x0b\xd5\x15YDvn\x8fi\xb7,34\xad\x89\x08\xf8\x90\xd1\xd1b/t\xea\xd0\xc7\xd0\xd4\xcd\x00pk\xa3<8\x14\x91\x07\xf7\xfe\x19QD\x19h\x7f\xfeA\xffu\xbc^\xde\xe3\xc4\x1dP\x8c\x0bgli\x92d\x90\xf2${Y+\xacLW\xa3\x155\x14jp\xffK\x85:\xf6\xdd-\xfe\xc7\xd7\x95\xd9\xda\xe9 \xebd$y\x18g\x1d\xf9m\x8ap\xd8>\x1a\xf1\x10O\xc2\xfa:\xde\xba\x83g\x03\x98[q\x98\x8f\xde\xc1\xecRR6a\x85\x16\xe5\x8cJ=B\xf4\x8b\xde@\xe4=\x15\xb1V\xcd\xf4QV\xeb#\xbfi]\x7f\xde*o\xaa\xde\x17IYh\xa1Z55\x07\xd8O\x1eL\x07\x16\xef(b\xd0\xd9W\x91\x85\x1b\xe0\xb5\x9d\xb9\xfa\\\xe8\x14\x15\xb4\xa5\xd1\xd1\xcf\xeame\x8b\xd1\xe1\xdd\xd1J\x94V\x0e\x01PL\x12r\x0f\xc2x\xd1M\xc0\xb91|\xf7\x1e\xe7\xee\xa4W\xda\x8d\xfa\xf4xz=\x8e="\xfa\xe2\xdb\x98\xf6\xe7\xd4\x9e\xdb\x1eCpO\xfdlr\x97v\x02\x02l\xc9\xb9\x1f7\xe5\x0c}O\xaa+\x9c\xf8\xcf\xce\x08\xf4u\xd3\xbe\xfad\x80\xc7\xb3\xd1\x07SB\xbc\xe3\xe7<\xeeq{\xd9\xf1\xcd\x80\xce\x06\x80\xd7(1\x00\x82\xe1G/\x86A:\x1cL\x03*F\n\xb8\xbc\x03ca\xa2)|w\xefX\xea\xc0%Z\xdd\x17*@\x1fn\xa5]0\xc3\xb4U\xa6\x07|\t\x97\xc1\x8f\xbe\xb9\xeb\x8f\x13\x18#\xd34P\xb0\xe58\xfb\x8b\xf8\xc4o~\xa7S\xde*L\xcd\x94\xd9m8\x96\xda\xc5\xc3\xaf\x119\xee\xe22\xbd\t^\xbaOM\x80y\xbf$~J\x84/;;\xef\xb7\xde\x1c\x95\xad\xc7\x0byq\x8c\xe5\xa4b\xca\xd8\xea17\r\xfb\xe7\xe4{F\x123\xd7\xc1\xe98\xad"\x93\\YoJ-J\xda\xa3\xc1F\xf99\xa2\xfb\xc2Ar\xcaPd\xd1u\xcf\x9e\xfbf8g\xf7\x93\xfe\xc1a\xca\x9a\x95\x83\x9a\xee\xd1\xf2\xdc\x16m\xc6\x7f+9\x85\x12\xd0\x07I!\xe9\xf2\xban\xd6:\xc1|\x05\xfaJ\x12ocE\x91\\a3XP\xb0\xc1\x10\xcaK\xa7\x1f\xd9\xd6"\xb0\xe5g\rpA\x9d o\xb6:"\xd5E\xd3j\xcd\xf0\xcb\xda\xfbvW4\x00\x1e\x17\xb0\x1d~\xdfm\x0e\xec\xa4\xe6+q\xe4\x18\x0f\xb9\xbcK\xc3\xe3\xd8\x1d\xb7\x02\xd7\xfe\x9a\xd5x\xba#\xd4\xc2V}p\xf0\xe9\x9b\x92\xec5\xf8`b77\x06z<\x15\xe23[:\x0eP\x06\x88\x94\xe3i\xff\xa8\x8f\xfeh\xe5\x85c\x81\x0e\xbd\x1b\xe7\xef\x81\x9d\xf4\xf2\xf0\'J-\xd8\xddu.\xf6\xa61}%ha\xe6\xe3\xe4\xe0_\xc4P\'.l\n\x1do \xf7\xed\x98\xfd\x87\xd6\x87{\x19\xcf\x0fJ;2\xf3#Yo\xb3?d\xb2\xaf\x15\x10\xec\xec\xc09h\x93\xaf\x8b\xa2\xed\x8a\x07>\x02\xad;\x92\x04\xa5\xcc#\xfe\x8c\xa3\x84\x92\x9e\xcf\x15&{\x94D\xba\x11a\x8a\x03\x1eT\x10\x97\x0eu)\x96s\x1b\x13\x9b\xc5\xb7<\xa9x\x08n8\x19G\xff\x12c\x00\xa8!W\n\xa2\x8aK\xc2*S\x01\x9f\xcfe\xa5>\xe2#\x82\xe6\xadE\xb5\xf6\x87wJ\x88#\x10\xb4E\x82\xc13\xe9zu\xa1\xd2j\xc2\x12B\xf6\x15\x1c\'\x047\xed\xfe\xbdNU<\xcf\x8cg\xe3\xa1h \xd9C\xec\xdei\x9d\xc52j\x97\x93\x10JE-S\xe1\xc9\x9b\xca\x16l\x03\x11(\x8c~q1\xe0\xd5\xa4\x8c%\xa6\x8c\x84\x00\xfd\x93\xd6\x92\xb0\xe264\x9fEw%d\x7f\xe5\xf61;\xd8*\x1f| \x03X\xfe\xfel\x93\xcbT\xa4F,\xc38W\xc2:\\*\x0c:x\xfa/X\xe5\x82|,o\xb4\xd3\xfa\x7f\t\xc8&\xeb|$\x95\xdb\x17\xb8\xa2B!\xda/\x80\xf3\xde\x0e\xc4\x0e\x05WW\x97\x1c\x19\x1d\xc9}\xa5\x1ba\xa0Q1b2$\xeb\xb5rW^(\xe0a8\xa9\xa5;^\x93\x18\x0b?F\xba?\xb7\xf9\x0e\xf1[\xccY\x84\x92:7\x1d\xf3^A\xa9\xa2Eh\xd9\xda\x10\xd1\xd8Rb1\x9b9\xb2]lF\xb1o\xde\xc7B\x08\x085\x93\xf6\xe2b\xea\x12\x8fo\xa1\x9b(\xa9\x12\xe0\xf9\x82(\x19\x01\xb1h\x111k\xbe`#{%!_' + + +2024-12-12 23:54:22.353275 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16812 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862139976 + ack = 2922048965 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x97\x85\x92\xaa\xa5\x0f\xa1\xc0\xb0m\xf1\xd158\xa4am\x91\xca\xe3\x91\xe0\xa5\xcb\x16C\xdf\xe5.\xbe4\x96s\xe9\x81\xc0`p\x19\n6-\xae\xe1\xf9\x88\xbb\x0b6b\x9b\xd6D\xedoa\xa2\xd6\x8f\xe7\xfb\x07\x91\xe6\x8b\xa7F"/\x97\xef\x04\xe2\xd8&;#jC\xdb\x83\xcd\xa7\xbb\x1c\xb1\xa5v\xda\x84w\x02\x04\x00\xc2i\xcfm\xa0c\x1d>\xcf\x8d\xd0\xa7\xef\xefxt\xcc\xa3L\x01\x15\xe0>\x85`\x93\x97\xda\xfd\xee\xda\xddd\xc4\xde\xdb\x11z\x84\x1bLHn\xd0U\xe5\xc5\x18\x929\xbd-0z7\n\xa7\xec\x9c!\xbb\x1c\xf8;\n\xa1\xd5\xdb\x06@\'\x85\xe7\xa5\xcb\x7f\x08\x88\xc4)\xb4 \x94\x8a\x81\x99\x94\nj\xf9\x1b\x08t\xbf\xa3~\xc6\xd6\x7f\xb6p"\xdc\x04\xc6sZ\x9d\x17\x96\x10\xfc\xd4a\xe6\xaa\x0e\x0e\xbf\x80\x8c\xaehW\xac\xd3\xa2\xd3\xd0\x8c\xcb8\xe15N\xeb_\xd6\xaab=+\x98\xf9\x9b\xda\x1c4\x9f\xa4i~\x04\xa5\xa1E\xed%\x06\x9b&\xf1\x16m\xebP\xef\xb4\x05\t\xacR\xfc\x98\xfe\xf5\x8a\x1d\xc7\xb3\x94\xb7\xa4b\x94\xe34\r-\x83z9\xe8\xd9\x92\xe2\x9e\xa56\xad\xa3\x9c\xc2\xe4\xb8,Z\xbe\xc5\x88\xe8)h\xa3\x8fJ\xd3;\xfb\x97\x86\x9e\xe4\xe7<\x17^\xfdA\xe8\x1be\xa7q9RAW\x14X\x81\x8e\x94\x8b1\x80\xd2\xb9\x1e\xbd\x9f\x03\x04Hr\xf5t\x8c\xb8sUw\x9f\xf6\\{o\xa9\n!J\xf9\xb5\x05\xc3y\x0f\xa2\x98{G\x12+\xc5p\x8a1\xc6\xa3\r\x89\xb2\x8b\xa1==#c\xe8`\x11\xdc\xa1x\xef\xb2\x05\xff\xb8\xc4\x1e.ZM\xfa,\x18\xc9\xd11\'g\xe0\xd6\xee\xc6\x1a\xba\x85\x92\x9eN\x83C\n\xe2mP\x18\xc4\xc6\x9f\x1a\x00r\x98\xa1\xd8\xce/W\x05W3\x89\xaf\xe0Z\x9d?\xbaL?\xd1\xd0\x0c2\xf1\xa3/\xd9\xad\xa5\xb4,\xabo\x17\x85\xcb\xac?\x82r\x14\x90#pr\xd7\xba\xfa<7C\xb1\xe6\xc4\x0b\xb4K\xae\xa2\xb6\xe5n\x05O\xb4\xa6\xa88\x16\xfb\xb1\x9eT\xdb\xeb#@K\x85|\xdel\x9c\x19f\'\xd8{Sc\xae\xff$!\xb0\xa6\x8a\xab\xd5&\x9c\x9c\xc6\xc8l\xe6v\xb3\xac\xf9@T\xaf\xd7S4Z\x87\xbfL\xd5\x93(0tU+\x07\xe0\xd9\xa2\xb2~2\x04{\x91\xca\x8e\xf5\x1b\x16\xa8\xf9R\xf6\xab\xc7\xee\xac\xca\xe1\x1f\xdc\x8a\n\x07\xd3/\xbd%\xa6\x9a4*\x9a\xdc\xf2\xf8\x02\xe1\xb7UZ/-,\x98\xc0\xdc`\x86S\xa7\xd7j\xb5\x85g\xf0\xf0SF\x01+\xff\xa2\xe5\xaf\xday\x1d\xc6x\xda\xd6\x00R&D4O\x9b\x9a\x038i\x92\x02\xd5\x95\x85\xf0\x83\xdab\xa5\x9a\x91\x1f\xd8I\xce\xe5\xbc^\x98\x89%\xd2\xcb\x9c\xa1\x07N\xde\x9e<\xbc)\xd1Gw\t3u`\xe35w\xa8\x8a\xcd\xa6\x12\x8d\x0c \xe2\xd62\x9b\xae\xc0\x1e\xbc\x8c\x0f\x85\x08\x0b\xc0E:\xd3\xbc\xc3vUET\xe1\xa7;\x80\x88\xf23\xb2\xdc\x15\x86\xa8\xf9\x01\xd3\nK\xc1\xb9;\xa9\\\xb8\x0c\xf8\x85\xa2\x9f\x1e\xd0\xc2\x82SA\xf3\xe6\xdd w\xa9\x83\x106c\x1a7\xa6\xe7\xae\x12\x88\xfec\xae\x84\xc7\xf4\xc2\xcdf\r\xd17\xc0\n\x18<\x11\xf2\xac\x97*\xde\xc2\xb5\x8c\xfa\xfb\xdeW!\xc8k\xd11_\x87\xce\xbb\x19\x01\xe7\x87P\xc7\xcf\x82\xdc}\xc5\xd8\xdba \x1f?\x85^W\x1cM%s\xa61\xa60\x86\x05\x86\xd9\xe7\xf4\x92O.\xd8\xd48b\xe1\xdf\xe1\xdc\xc5\xf5\xa6W\xc8\x9eHbSI\xb3\x9d\r\xc2k\xbe\xb29\xbe#72\xb3\xf0\x073\xad\xba\x0001`,Q\xaf\xdc\x83\x8e\x88\x0e\xddu\xff\x80M\xcc\x9em\xc8\x0f\xa0\xbe\xcc\xbbC\x83JV\x88a\xecW\xa1\xc4\xcb\xaf\x1d\xba\xb4\xbf\x06+\xfd\xd8\xf4\x08F\xd2l\x12\xd67\n\xd5\x87\xba\r\xcb\xb1\x0e\xd8\'M\x1bY\xdc4\x1f\xc6\xb7l\xd4\x82\xa4v*\xe8K\xd5\xb8\xd0\xb0\\\t\x0e!0\x14_)\xccO&\xee\x8f\xf5\xb0\xf2b\xe3\xfbQ,\x18\x1ft\xea}\xc9\xb3\xed\xbe\xe1\xb6\x0f\x0c\xab\xbeYu\xe2n\x1d\x84\x8e\xde\xc7v\xca\x8b{Go\xc5$\x06\xd2~+\x7f\x8b\x9e\x95\xcc(L+:3l\x9c\x96\xb77\xf8\xf2\xc4\x9cu]\xc1\xe9\x9bE\x98\xd8g\xf0\xc9\xa2(\x13,C\x8b&\xbaN\x82\x95\xb4\x12\xc2\xfb\xa0)\xeeA\xd5\xe7\x81\xc3\xc0w\x84\x92\x80\xed\x97\x1e\xbb\x1cT\x92\xf1\x875\x85N\x84xM\xfb3\xcf\xaf%\xe8\x94\xe6\x9dV\xbb\xd1\xaf\xcdO\xab\x9fz}D\x84\xbb\x1a\xa9\xa9m\xe90P\xf2\x1beg\x9d_\x15\x96\xc0\xfd\x00>\x80\xee\x01\xbb\x84\xd3\xebp\x98\x0emy\xee\xc4\r\xd0:\xb6\xba\xa7\xa3\x05v7\x0b\x10m \xcc>o\xbf\x8ep\xf1_c\xe8\xab\xb1vN\xf4\xdf|%\xa9P\x93\xf7\xa7N\xc2PhW\x97\xc3\x1agX\xa3qo\x9c\x03\xe1lS\xbd\xbd\xc5B\xa3H\xf1|Y\x97\xb28\xf2\xd84\xc4_\x8d\x17/\xe0\x03)\x0f\xb9\xf9\x05j\xcc?(\x1d\xceBkf\xfbJ\x0e\xaa\x8d\xc4\xb6KW\xd3\xa1\x03\xba\xe8:\xd2\xdaK\x07\xe1s\\\xe5v"\x7f\x99\xa1\x96\x8f5{\xf9W\x02\x03L$X\xb8\xc0\xa3A~\xf3\xb3\xfbMA\xd9eq8q\x019\x83>%\x00))c\x9b9\x97\xa0`\xd0A\x91\x02\xe0{\n\xdd\xf9\x02\xdf\xe1\r\x84\xc6!T\xf9KwO\xe7\x16\x9f\xc5\xbd.;\xa2\x01\x12\xa6\xb6-\xc0\x96\x13\x96\xdfxa\xa7c$\x146\x04Y\xdd\xc4\xff\xa7_@\xc00\x8b\xa3\x12g\x11\x9b\x88\xba7\x00\x91\xd3!C\x1f6\x85\xb1\xc3q\xbe#Cm\x9e\xed\xad\x9b\xef&:6J\x01\xbe\xa5bU\xbc\xdbs@"\x98\xf3\xda\x9e\x97$\xcd\xfc\x81&\x87!\xd3\x15\xb9\x8cV\xfb\xdcX\r\xfc' + + +2024-12-12 23:54:22.362714 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16813 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862141416 + ack = 2922048965 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\\\xf2\x08\x1c\xe6aL\xa1\xc6\x9aE\xba\xb34|?\xd7\x97\xd6wF\xf0\x07a\xe4\xb0\xee\xb5\x9e\x19(} L\xaf\xf4\xd5\xe3\xf7\xf9*\xe4S\x1d{\xbc\x88-=.\xddr\xd9\xc4\x0c\x00%\xa2\xdc\xb4mW\xf2k\x07\xfcj\xa9\xb6\x85\xab+,\rV\xc9M=0\xda\x98=7T\xf8\x87\xa93?\x82\xc1\x02\xdb\xdd7\x81\xb1\x86\xe9\xd5C\xd2\x00\x7f\xc0\xb3\xc4#\x85&\xcb\x89\xc8\x8a\x08\x96\xc8\xe4\x8e\x89\xa5\xf3\xf7\xff/\x0e\x02n\x83e\x9a\x82\xae\x08H\xda\xa7\x0c\xc8\x81\xfb\x19\xf6u2\x8a\x0b\xed\x8e\x80\x0c\xcdP \xd5G9\x873\xa5\xb7\x11\xcc \xad$0\x1es{\xc0\xba\x07q\x16\x16aQ\xb6\xe2kK\x08\xe2\x94vEQ\xf6\xfdL\x16\xc8\xd15\xa7@x\x91#\x06\xc2\xd3\xdd\x98\xf4\x1e 2\x169\xabq\x0b\xac\x94k\xe0\x81`\x0e\xf2\x08Z\xce!\xf6X\xee\x90r\xd9|^P\xf3p\xc8-\xfb\xdf"gIwe\x0cU\x9c\xfbT\xd7&~J\'\t\x98\x1c2\x1b\\\xccC\xbd28\x7f\xe8\xa4\xba\x85f\x12Q\x12\xa2\xc1\xfc\xf2<\xb2h\xee\\\xf5O\x18\x1a\x11\xe9\xe5\xd4\xa1z\xb6\x95\xf3_}_\xbb\x95\x80\x0c\x8d\x83\x88\x1b4\xf2\xbb\xcf2\x80\xe6\x14\x10\xe3\xe5\xcc\xb7\x14_\x98\x9e\x85-W\x07\xfc\xc8\xa9\xe1\xdc\'7\xce\x8ff \x16l\x01\x7f\xf3*\xc49\x8c-6\xe5\xd3\xcd\x1e\xcd\xc5\x00\n n\xe2\x03\xf7\xda\xb2\x0ct\xc9\x18\x1e\x83\xa3\xf76\xee*\xaa\x87\x9a\xe5f(\x1f\x8f\xf0\x9cD\x01\xab\xc1]\xedQ:\xc7\xcfDJd:u\xc9\x1f\xc8\xd2\xe8D\xe8\xf1el\xa3\x95\x078\x80\xf8~lGe\xe1\xb8\xbf\x1bq\x1d\xfbB\x85Y\x08K\x96\x8aC\xdc#\x836\x0cr\x02\x0c\xe7\xc8\xb0\xf6\xce\x1d\xc4\xa4d\xc9O@\xf0\xedn\x1e\xcbP5\xa8\x0b\\$\'@\x8a\xadja>\xb0\xf5\x8c\x7f"\x19{\xd7\x05\x1d\xd8\x11W\xfa\xe2XJ\x07\x86\t1\xc7\xf1Mj\xaco\xecI\r\x9c\xa0\xd3\x0c2\x12\xbbM#GC\x88\x93\xae\xcd30\xd3%\xf7\x88\xe8d\xea\xe1\x19\xeaFPV\x1dE;\x0cx\x0f~M\xd0~\x1f\x14\xcbjE@8\xf3-Ek\xffW.\xf7\x80Z\xd3\xaeuzS(Q\xd4_\xde\xf0\x92\x1ey\x8aj\xef\x92\xe8=\x86\x1ejub\x08\r\xcf\xb9B\x82\x13\xd1\x12Y=+<\x15D-\xa9\x91C%\xd5D}\x9a\xcc\\\xc2\x15lI\x0b\x028\x1dtU\xe9\xad\xed\x8f\\d\x1cU\xd2\xb7\xbd<\xeba\x05\x01Q\x11\xff\x8cl\xbd\xc5\x1b}\x8eH\x11\x85\xda\xb4\xfa\xa6n\x97\x8bY\xc8Vc:\x16G\xfb\xb1\x12\x9f\x91\xd2u2F*\xf3\xbc\xc1v6^\xcd\xc4zZ\xde\x91\x84\x81\x9b\xc6\xc9$>\xa7\xb9B\x14\xfaj%\x19\x9e\x817\xd6m(\xdf\'C\xe4{o\xd8\x01\xc8\x0e\xc5\xee\xd7^\xbc\xb3>\xe8+J\x83\xc6\xe8\xad\x95\xd4$\x14\x90\x9e\x0f\xbb\xa4\x96\xacgG\xd1h\xbc\xda4\xec\xa2K\xca\xbaU\x9e\xbe\xa0\x87\xf0s\x01\x1a\xe5\xdf\x087\xa9&\xd6\x08$\x87O\xa8\\\xa1\x90\x87\xb0\xbb_\x9e\xc6m\xb5\xeb\xf0\xef\xcb\xfa!u\x9e\xaf\xe3\x1f\x0c\xca`\xa3\xf9&\xf8\x8e\xb1\x10\xd0\x856\xa6\xb4\x13E\xfdH\xe9\xe5\xcc\xc7\xa0[\xd8\x15\xc8\x1dT\xc1\xb1z\xe6!\xc1;\x93!\x01\xd5\xf9\xfd\x1a\x00o\xa2\x84\xaf5\x17\xfa\xb1z\xec\x03$\xe5%\xe9\x86K\xe8\x13\x18\t?\xcf\x9f[\x98\xfdTs)\x98\xb8u+\xef\x97\xab\xb3$i\xaa"\xf9\t\xc0\xf9\xfcZd\xb7\xe2\xeb\xf1\xa0}\x94\xea\x9e\xca\xf1\xaf9q9\xa0`' + + +2024-12-12 23:54:22.368748 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16814 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862142856 + ack = 2922048965 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\xaeY\xb8\xecf\xd8\x0f\xa0,\xeb[[i\xba\x0c!\x0c\xf7C\xa2\xae\xc2\xe5\xc6/$"\xf5\x19\x9a\x8b\xf2\xbdNO k\xa0+\x89\x8b\xa8\x89\xf2\x93\x16)\x1f\x84"\xbe\x9b\xb4\xce\t]\xbf\xb9u\x06\x13\xf7t>\xae{\xe2K\xaeq_\x14\x9b\xeb\x98\x80e\xb1\xba\r*\xe4\xbe]\xb5\x88\xe5\xdb\x0ft7\xc6L\xdfn\xb5\x9e\x03\x08\x8ea\xd4\xb4\x9e\xf6dL6p\xb4o\xd9\x9c\x93\\\x89Opt\xd3\x0e\x03T\xcc\xbak\x02e\x0c\xbcz\xeb`\xd2f\x9ex\xcbK\xc2\xc3v\xf7\xf1\xf9B\xfd\x81<\x120\xfc$\x9b\xec\x91\x8f\xce[G\xa4\x14W\xd5\xf0\x9b\x84\xee`\x7f\xfdkn\xa8aB\xf9\xf71Z\xe3\x0fz\x0c\xae\n\xdeVZ\x15\x99\xb3\xb4-\x14h\xd1g\xd3\xc9N\xddR4\x14$\x90F\x80x\x16\x85\xa9\x08\x17Z6\xfb\xda\xa5\xcci\x05=\x1a\xd0P\x99\xa9\xe9\xa3\xd6\xe0 \xc9*u7\xdb\x86(O*\xdc\xdbSE1@\xdf\xc3\x82\xb4\xaf\xccs\xb5q\xee\xe7\x90\x9e2\x89\xcb\xd6\xe3`\xab\'\xb6\xe0\x16\x02\xec\xacU\x7fMQw\xa70\xa2\xe1\x81\x9d\xcc\x0c\xe2\xa9W\xe7_\x99\x81\x1f\xfd\x1e!\rrf\xf4\x08\x8a\xc2S\xf5\x878pGP\xcf\x9b\xb1\x9a)\x14\x91\xb9\xeb\x16Vb\xde\xe0P\xdf\x91\xc0`\x0f\xcb>\xe7\xc7A\xf8&)-\xc9\x1b\x12\xb73?/F\'\xdb=l\xc0\x82\xd9x\xe3QI\xaax\xfe\xe0\xab\xb6\x84\rm\xca\xbb1/\xba\xf4\x1c\x8e\xbe \xe8\x0b\x0c\xa1x\x1b\xc4/0"\xae\x8c\xc3f`\xcd\xe27\x13/W}\xab^\xa5g\x88\xc7Tq!\xa1\x13\xe1T&D\xbcG\x9fg\x137\x86\xdf\x88\xc1N@6\x95\xda\xcc\x9e\x14E\x9d\xa2\x0e\xf6\xd9\x15\xb0\xfa@\xc3\x02!\x7f\xe4R\xe4\xa3fr?\xf33\xf4\x9e\xd8\x05\xf7/\xa9\xb7\xd2x\xd7\xc5Zz\x8cAJ7&\t\x88\xa3\x164$\x12\x9b\xf7\x90X\xdc\xd2*/`/\r\x97?qkn\xcb\xa9?\xb7s5\xbc\xc9\'!eZ1\xbf\xfaL\x1c\xa2\xdf\x8dP\x94\xa3u\xb9A=\xab\x82\xf2t!~\xa1\xef\xc87Q\x11%`z\x87V\xe0\x11\x140X\xa2\t\x1d\x8e\x92\x81\xa8s\xd7X\x82\xd4}Q\xd4B\xf4|\x8f\x99m*Xqv]d\x13\xf5b\xa4\xf3Vz\x10V\x0b\r\r\x10\xa3\x0fv\x0e4\xf2;\xe54\x0b\xbd\x01F\xd5\xf0\xdf5Y\xd8\xf4\xdaZ1n\xd1\xf2~zIl0!o\xaaf\x90\x10\xe4!xd\xb3\r\xe6@:\xe61\xb1X\xca\x84\xacw\xbd\x03\x00\r\xd20\xad\xb1\x85\x03\xb8\xb8v\xb7B\xce\x0f<\xcc\x01\x045\xff]\x04J1\xe1ZP[\xb8\x9a\x19/\xe0\xb6\x83\xbf\xadS\x8bJ\x856)?\x8930\x8c,\x06\xaflb\x076\xef\xbe\x87)\xa4\xf8S8\x03\xbcv\xad\xd2\x15&\xe9\xe3\xd0\xef\x1a\x00Evx\x9fdr\x8d\xc5a\xccz\x0c\n$\xf6\xd7\xc4\xfb\x8a\xa8\x13o\xe1q\x85\xadc62\xd5#\xac\xcd\x19!\x15\xa0_f\x19\xeb\x9a(.b\x08/:[\x19\x03\x93\xbf\x00iU@\xe1dv\x03\xf6\x92\x06j\x107\xbe0\x1eD\xe1\x13\xfa3\xda\xd7\x19\xd9\xaa,\xbc\xeaW\xe7\x14z$\x03DF0\xe4P\xd0\x1dO\xe9\x9a\x02\x9f\x97\xa4\x9c\x17\xdd`itF\xe48}\xd7B\t\xc5\xfdd\x9f_\xeb\x80\x8b@\xd5\x8a=\x07b\xa1\x913\xbc\xd57_\xc6A\xc5&\n<\xc3\xe4\xc1SD\xd1\xb6\n\x8d\xd9\xeb\xf2\x98\\\xc9?\xf0\xb6\xec\xc5]\xa2E\xdf_\xfe\xa0\x1al;/\xe3\xa6\xd9\x1e\xd3\xc3\xb4KH\x02\xe7\xb1(\n\x14\x8a\xb5\x9f:\xb9#\xaf_\x9b\xaafj\x01\xe9>"\xc6\xe6\x86\xfc~\x97M(-\x85\x01\xd1u|j\xb3\x9d*\x13\x80\xfd\xc2\xf6,t\xcf9L\xebq\x1b\x8d\xba\xb08\x8e\xbaI\x93\x18\n6\xe1S>\x0f\x13\xfb1b\x00N\x98\xaa4Sx\xee<\xed5\xb5ar\xb1\x9enei\x13C\xfe\x8b%\x12\xc3\x11G\xdc?\xaen4\xa6\xdb\x8cY\xa4\xce4\x86op\xf5\xac\xcd,\xc4\xc4\xbdM\xad\xbaj\n\x18IK=PC\xa2\\pCg\xc9\x9e\xe8)x\x02-DCE\xc7\x995\x0f\xa3$\x81\xac)\xa3#\xb3[G\xc1D\xa2\x15\xb3\xe3N&\x00_Z\xbde\x9f\xcc\x99\xc0{a\x06\xdf\xea9p\x8b\xf5n!\x17\x03.\xef\x9d\xe1\xb7\x1b\x1e0\x12\xe8\xb8\xbb\x9e!\x00\xf3\xd0E\xa3=\xce\x03v:^Q\x9b\x8bz\xb5\xfe\\\xbe[\x96\xf5\x0b\x0c1\x18\xb5@\xbeL\x1frb\x8e\x01~V"\x18\xf1\xee\x8e\x11\x19\xc7S\xd2\xe6y\xc6QR\xc48\xac\x9a\x98\x0b\xf6\xbb\x9f\x85\x80\x8f\x93\xd6\x16\xb2?~\xe4\xa8\x8b\xfd\xf4V,H_\x13\xc6,ut\xcc\xca\x92\xd3f\x1etAe-\x08\x8fB?j\xf1\xc5\x03\xfb\x803\xddTM\x19\x90F:\xb05\xa3\xc6\x8d\xfdF\xe5$\xa7\x1e\xe6\x9a\x07\x0c\xec\xf8\x1b\xce2\x9e\x82\xd1\xd9\xfd\xcey\x80\x9f\x10\xa1h\x87\x85<\xf1\xd1\xc9\n\xea\xd3/\xd3+\xdd\xbd\x84\xf4\x8c\x06\xe2s\x99\xd5A\x06\xa2\xec_c\xc7\xed\xa3=\xea\x02\xffC\xecn]\r,wn\xebK\xf8o\x0b\x85\xd5\xd7\\\xf1' + + +2024-12-12 23:54:22.377041 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1012 + id = 16815 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862144296 + ack = 2922048965 + dataofs = 5 + reserved = 0 + flags = PA + window = 516 + chksum = 0x6a85 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x99\xaa\x967\xafg\xb9\xc4\xab^Is*iqF\x107ub&\xc4,\x9d\x85L\xf6\xe3\xc5\x0e\x96\xa9H\xd5\xcb\xe4\x87\xe1n\x89v\x1f&\x96\xd4\x13C\xc7\xe2\x81M~s\xff=\xf93M\xbaY\xf8\xcc:Q\x99\x10\xc4\xed\x13\n\x05\x08\x19Iy*\xda\xd4\x18\xd6n\xb0\xaf\x8d\x8c\x9d:\xb8\x071\x04\xbe\x08\x00\xc7\r\x99l\xd2\xb5\xf6\xe4\x94K4]\x19J\x9b\xc8n\xed\xd9\xd6\xf5L\x84\x0c\xb8\xb24\x9bm\xa7\xc9\x06a!\xca\x02\xeaa\'\x88es\xee\x1d1\x92\xd0\xb5>\xd1X\x8f\x9dQ\x19\xa3lX\x1f\x04\xa0$:\x01Y\x0b\x1b}\x94\xe5 \xd6\xc7\x0f6\xdc\x9b\xbf\x03\x93\xb7m\x97@#\xe0\x93tqk\x1c\xafk\xd3\x08\xe3\xe4\xbe\xf0\x10G\x92=\x9c\xbe\xe4K\x9f\xc7*:+\x84<\xc1\xd8\xef!}\x1b\xc3z\xba\xb14\x038\xc3\xca\xc2\xfb\x9c\x80\xe2)\x88W\xf7\xd0\xb3\xc6hg\xe3\xc5\x80\x18bJ\xf5N\n\xba#$F\xb4Q\x8c\xa59\x19\x92r\xb3^\'f\xe1\xaae\xd9\xcbu%\x85\xe6\x93\x99,Mj\x1e\xa1\xd8I\xe2\x8f\\*\x8c\xd9\xdc\xac\xc7/%\xc9\x05ZM\xe1(\xf0d\xe5e\x06\\\x89\x80C\xca\xf5H\xda\x06\x19[UR\xf3@\x17Z\xc2\xdc\xbd\xa1\xa4\x13\xb6d(\x80w\xd2DT\xbc\xa9wN\x1e~\xadlu@\xeeq\x08%\x0e\xb4\x80\x90\\j\xce\xc2\xfd\xba\x08\xdfj>\xe60\xde\x1dh:3\xfa\xca&h\xd7S\xdd\xf6\xde\x19\xc9r\x84z\xccu\x9e\x97re\x05q\xbb\x93\x94\x90p\x91\xe7gP\xeb\xc1\xbc\xbeh\xd1\xccO\xf6\xf5Hm\xa7\xf5\x95\x8b\x82_\xb7\xb9Rr\x9e1\xd5\xac;^\xc3\xc0\x04\xa2\x8c\r\xa3t\x0e|Bm\xbdl\x10\x1e\xe1\xb5\xf5}X\xd4\xf2\xe9\x9b\xd79\x04\x1f\xee\xc9\x1a\xd3\x94w\x88\x0f9\xea\xe8\x81\x97=\xbaT\x1e\x8bs\xd4\xc0\xda\xf9\x8d0@v\x82\xf1m^\x9c\xf6ev\x95\xaez\xeb\xac\xb4\xeb \xc3\xe6\xda%y\xae\xdcs\xa8R\xb1\xfa\x11\xbb\xaf\x15\xcd\xf5t\xb7"\x1c\xa1\xces\x9a\xdfD\x08\xb9s\xe6\xcfRx\xbb\x8e\x83\xd0\xc1\x1b\xab\x88<&Y\xc4\xf5\x8b\x94\x16Vwb\xc6\x06v\xf7t\xfe-\\y\xf7\x1fW\x95\xddK\x95X\x99P6\\\x18q\xa2\xed\xdf27\xf2\xf7;\x17\xa7\xf8U\x11\xae\x87\xb8y\x9c>\x19B\xfc\xcc72\x14M\x1c\x97\xa7\x9e\xbf\xf1\xd0\xfd\xbf\xbc+}@\x96\xc8\x82d\xc5\xa2\xf4\xf8\x90\xdd=\x01<\xa2<\x97m\xd8\n\xe6\xad\xf3\xae2\xa6\x14\xbe:\xa3F\x07\xca\xd1\xc0}8\x9a\xbc\xc8\xf1\xbb\xe3M\xe6\xa6\xb1\xa3C\xb1\x06\xa4\xbc\xd8\x88\xc9M\x90\xdf\xf6\x01%f\x7f\xbe?NF\x93\x0b8\xc9\xd5\xeb@\x13b\xb6\xb37\xcd\xe9T`\x1c\xa3\xa7!\xd8V\xd7\xe8\xe5\t\xb81\x9c@\x91\xc1\xec\xccs\xe2jS\xe8\x01\xc1\x7f\xc6l\xe7\x1e\x9d\xd7\xc5\xac\x07\'\xb8\xa2\xd3P\x19A{\xf4)\xdd\xf4h\xe6\xb3\x8b\xe7\xb6\xea\xcc\xf6\xd3\xb1\x92B\x9fq_\x10K\x0f\xea;\x84\xd4^\xe5\x0cH@\xdd\xb6\x12P.\xf5\x02\x14\x08\x1d@\x9a\xf7\xfe|\xa9-\xf5\x0f%?2\x91$[\x05\xd4OrN!\xc2\xd9\x1b\xe9z\xba\xa7\x9cs\xd2l\xbc\x8a\xdf\xf4\xefiG\x8d\xf6\xb6\x1f\xf1A(\xc5@&0\xf2\n\xda\xd1\xa3\xf3I\xc6\x1a\xca\xfbZ\xf0a\xa7\xf6KB\xb3\xa7|\x13Y\x87\xda\xb1\xd1\x91T7\x06\x1d\x0cC{|\x0e\x8bx\xf8f\xc0h\xe9\xf2{\x12\xabg\x95W\xcaT\x8e\x0c\xdf\xb7\x8d\xfc\xd2\xff\x14\x9a\xb6Tw\x0b(\xf5\x8c\x8dN]f\xe6\xd3gj\xefv\x85r\xde(\xe3\x8b\x85\xd8\xf6\xad\xc0\xf3\x8c\x8c[idv\xbfA\xa0wS\xdb\x0b2W\x94\xa5$\xdf\n\x07\xa2\xed\xad^L&\x8dpPV\xfc`\xeb\xac\xb8\xc4g\xcfd\x1a\'\xe7\x91.\xdc' + + +2024-12-12 23:54:22.390987 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40477 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x914 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922048965 + ack = 1862134216 + dataofs = 5 + reserved = 0 + flags = A + window = 16385 + chksum = 0xa408 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:22.396407 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40478 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x913 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922048965 + ack = 1862137096 + dataofs = 5 + reserved = 0 + flags = A + window = 16385 + chksum = 0x98c8 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:22.400554 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40479 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x912 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922048965 + ack = 1862144296 + dataofs = 5 + reserved = 0 + flags = A + window = 16385 + chksum = 0x7ca8 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:22.405732 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40480 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x911 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922048965 + ack = 1862145268 + dataofs = 5 + reserved = 0 + flags = A + window = 16381 + chksum = 0x78e0 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:22.410150 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 75 + id = 40481 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x8ed + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922048965 + ack = 1862145268 + dataofs = 5 + reserved = 0 + flags = PA + window = 16381 + chksum = 0x7cd7 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00\x1eaM\x9e{\xff\x9cu+\x131\xd8\xd1\x1f\x85\xcdV\xd0\x80)\x010A\x96\xe5^;\xe2m\x8c\x01' + + +2024-12-12 23:54:22.442652 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 16816 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862145268 + ack = 2922049000 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x66b9 + urgptr = 0 + options = [] + + +2024-12-12 23:54:22.537564 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 134 + id = 40482 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x8b1 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922049000 + ack = 1862145268 + dataofs = 5 + reserved = 0 + flags = PA + window = 16381 + chksum = 0xc05d + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00Yo@?b\x13\x9d]{\x9aA\xdca\x0bY]Pa\xc7\xb4\xab\xaa\xa5\x1f\x0ci\xca\x05\'\x8eh{\xf3\r\xb8\x98+\x92\xb0t\xe8\xc97\x18\xea\x0f@\xa8 52.168.112.67:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 16817 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862145268 + ack = 2922049094 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x66b9 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.222387 - Ether / IP / TCP 192.168.1.11:28588 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49731 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28588 + dport = 64920 + seq = 1864543714 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:23.229859 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28588 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28588 + seq = 862205191 + ack = 1864543715 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0xbfe7 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:23.242585 - Ether / IP / TCP 192.168.1.11:28588 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49732 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28588 + dport = 64920 + seq = 1864543715 + ack = 862205192 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.253783 - Ether / IP / TCP 192.168.1.11:28588 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 244 + id = 49733 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28588 + dport = 64920 + seq = 1864543715 + ack = 862205192 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x8443 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'GET /d15f795f/WANCfg.xml HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nAccept: text/xml, application/xml\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:23.262917 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28588 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 30084 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x41ef + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28588 + seq = 862205192 + ack = 1864543919 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x370a + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.275959 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28588 A / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 2960 + id = 30085 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x3686 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28588 + seq = 862205192 + ack = 1864543919 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x0 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 2943\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:31 GMT\r\n\r\n\r\n10GetCommonLinkPropertiesNewWANAccessTypeoutWANAccessTypeNewLayer1UpstreamMaxBitRateoutLayer1UpstreamMaxBitRateNewLayer1DownstreamMaxBitRateoutLayer1DownstreamMaxBitRateNewPhysicalLinkStatusoutPhysicalLinkStatusGetTotalBytesSentNewTotalBytesSentoutTotalBytesSentGetTotalBytesReceivedNewTotalBytesReceivedoutTotalBytesReceivedGetTotalPacketsSentNewTotalPacketsSentoutTotalPacketsSentGetTotalPacketsReceivedNewTotalPacketsReceivedoutTotalPacketsReceivedWANAccessTypestringDSLPOTSCableEthernetLayer1UpstreamMaxBitRateui4Layer1DownstreamMaxBitRateui4PhysicalLinkStatusstringUpDownInitializingUnavailableTotalBytesSentui4TotalBytesReceivedui4 192.168.1.11:28588 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 252 + id = 30087 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x4118 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28588 + seq = 862208112 + ack = 1864543919 + dataofs = 5 + reserved = 0 + flags = PA + window = 490 + chksum = 0x9b5f + urgptr = 0 + options = [] +###[ Raw ]### + load = b'Events="no">TotalPacketsSentui4TotalPacketsReceivedui4' + + +2024-12-12 23:54:23.288034 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28588 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 30088 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x41eb + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28588 + seq = 862208324 + ack = 1864543919 + dataofs = 5 + reserved = 0 + flags = FA + window = 490 + chksum = 0x2acd + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.291773 - Ether / IP / TCP 192.168.1.11:28588 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49734 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28588 + dport = 64920 + seq = 1864543919 + ack = 862208325 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.296096 - Ether / IP / TCP 192.168.1.11:28588 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49735 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28588 + dport = 64920 + seq = 1864543919 + ack = 862208325 + dataofs = 5 + reserved = 0 + flags = FA + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.300471 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28588 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28588 + seq = 862208325 + ack = 1864543920 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x2acc + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.305350 - Ether / IP / TCP 192.168.1.11:28589 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49736 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28589 + dport = 64920 + seq = 1919196340 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:23.313286 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28589 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28589 + seq = 383349866 + ack = 1919196341 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0xaafa + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:23.318494 - Ether / IP / TCP 192.168.1.11:28589 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49737 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28589 + dport = 64920 + seq = 1919196341 + ack = 383349867 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.327319 - Ether / IP / TCP 192.168.1.11:28589 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 318 + id = 49738 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28589 + dport = 64920 + seq = 1919196341 + ack = 383349867 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x848d + urgptr = 0 + options = [] +###[ Raw ]### + load = b'SUBSCRIBE /d15f795f/evt/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nNT: upnp:event\r\nCallback: \r\nTimeout: Second-1800\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:23.333240 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28589 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 13504 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x82b3 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28589 + seq = 383349867 + ack = 1919196619 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x21d3 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.339902 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28589 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 296 + id = 13505 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x81b2 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28589 + seq = 383349867 + ack = 1919196619 + dataofs = 5 + reserved = 0 + flags = PA + window = 490 + chksum = 0xf72e + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 0\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:31 GMT\r\nTimeout: Second-1800\r\nSID: uuid:d15f795f-9d12-458e-874b-cb38ba384e0a\r\n\r\n' + + +2024-12-12 23:54:23.344306 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28589 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 13506 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x82b1 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28589 + seq = 383350123 + ack = 1919196619 + dataofs = 5 + reserved = 0 + flags = FA + window = 490 + chksum = 0x20d2 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.348409 - Ether / IP / TCP 192.168.1.1:59625 > 192.168.1.11:icslap S +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 60 + id = 13241 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x83a6 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 59625 + dport = icslap + seq = 3470553877 + ack = 0 + dataofs = 10 + reserved = 0 + flags = S + window = 14600 + chksum = 0xf6d5 + urgptr = 0 + options = [('MSS', 1460), ('SAckOK', b''), ('Timestamp', (503988396, 0)), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:23.353967 - Ether / IP / TCP 192.168.1.11:28589 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49739 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28589 + dport = 64920 + seq = 1919196619 + ack = 383350124 + dataofs = 5 + reserved = 0 + flags = A + window = 512 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.357529 - Ether / IP / TCP 192.168.1.11:28589 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49740 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28589 + dport = 64920 + seq = 1919196619 + ack = 383350124 + dataofs = 5 + reserved = 0 + flags = FA + window = 512 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.363162 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28589 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28589 + seq = 383350124 + ack = 1919196620 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x20d1 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.369225 - Ether / IP / TCP 192.168.1.11:28590 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49741 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28590 + dport = 64920 + seq = 1060607221 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:23.373696 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28590 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28590 + seq = 436024747 + ack = 1060607222 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x2181 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:23.378284 - Ether / IP / TCP 192.168.1.11:28590 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49742 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28590 + dport = 64920 + seq = 1060607222 + ack = 436024748 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.384588 - Ether / IP / TCP 192.168.1.11:28590 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 363 + id = 49743 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28590 + dport = 64920 + seq = 1060607222 + ack = 436024748 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ba + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesSent"\r\nContent-Length: 309\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:23.391049 - Ether / IP / TCP 192.168.1.11:28590 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 349 + id = 49744 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28590 + dport = 64920 + seq = 1060607545 + ack = 436024748 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ac + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:23.394795 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28590 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 30059 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x4208 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28590 + seq = 436024748 + ack = 1060607545 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x982c + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.400832 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28590 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 30060 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x4207 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28590 + seq = 436024748 + ack = 1060607854 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x96d5 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.407076 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28590 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 579 + id = 30061 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x3feb + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28590 + seq = 436024748 + ack = 1060607854 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0x63e9 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 351\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:31 GMT\r\n\r\n\r\n18879971\r\n' + + +2024-12-12 23:54:23.412526 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28590 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 30062 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x4205 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28590 + seq = 436025287 + ack = 1060607854 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0x94b9 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.418592 - Ether / IP / TCP 192.168.1.11:28590 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49745 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28590 + dport = 64920 + seq = 1060607854 + ack = 436025288 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.422512 - Ether / IP / TCP 192.168.1.11:28590 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49746 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28590 + dport = 64920 + seq = 1060607854 + ack = 436025288 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.427607 - Ether / IP / TCP 192.168.1.11:28591 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49747 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28591 + dport = 64920 + seq = 1221761838 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:23.431611 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28590 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28590 + seq = 436025288 + ack = 1060607855 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x94b8 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.436654 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28591 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28591 + seq = 2933633063 + ack = 1221761839 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x251 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:23.439559 - Ether / IP / TCP 192.168.1.11:28591 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49748 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28591 + dport = 64920 + seq = 1221761839 + ack = 2933633064 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.447049 - Ether / IP / TCP 192.168.1.11:28591 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 367 + id = 49749 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28591 + dport = 64920 + seq = 1221761839 + ack = 2933633064 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84be + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesReceived"\r\nContent-Length: 313\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:23.452695 - Ether / IP / TCP 192.168.1.11:28591 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 353 + id = 49750 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28591 + dport = 64920 + seq = 1221762166 + ack = 2933633064 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84b0 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:23.455468 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28591 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 61709 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xc665 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28591 + seq = 2933633064 + ack = 1221762166 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x78f8 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.460592 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28591 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 61710 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xc664 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28591 + seq = 2933633064 + ack = 1221762479 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x779d + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.465884 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28591 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 596 + id = 61711 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xc437 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28591 + seq = 2933633064 + ack = 1221762479 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0xc4b5 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 368\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:31 GMT\r\n\r\n\r\n569715018\r\n' + + +2024-12-12 23:54:23.469514 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28591 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 61712 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xc662 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28591 + seq = 2933633620 + ack = 1221762479 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0x7570 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.472600 - Ether / IP / TCP 192.168.1.11:28591 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49751 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28591 + dport = 64920 + seq = 1221762479 + ack = 2933633621 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.476562 - Ether / IP / TCP 192.168.1.11:28591 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49752 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28591 + dport = 64920 + seq = 1221762479 + ack = 2933633621 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.479736 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28591 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28591 + seq = 2933633621 + ack = 1221762480 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x756f + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.483105 - Ether / IP / TCP 192.168.1.11:28592 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49753 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28592 + dport = 64920 + seq = 3324287599 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:23.486251 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28592 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28592 + seq = 2782374623 + ack = 3324287600 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x9408 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:23.488841 - Ether / IP / TCP 192.168.1.11:28592 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49754 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28592 + dport = 64920 + seq = 3324287600 + ack = 2782374624 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.493547 - Ether / IP / TCP 192.168.1.11:28592 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 363 + id = 49755 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28592 + dport = 64920 + seq = 3324287600 + ack = 2782374624 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ba + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesSent"\r\nContent-Length: 309\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:23.498010 - Ether / IP / TCP 192.168.1.11:28592 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 349 + id = 49756 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28592 + dport = 64920 + seq = 3324287923 + ack = 2782374624 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ac + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:23.503058 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28592 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 60373 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xcb9d + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28592 + seq = 2782374624 + ack = 3324287923 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0xab4 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.507085 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28592 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 60374 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xcb9c + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28592 + seq = 2782374624 + ack = 3324288232 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x95d + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.512797 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28592 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 579 + id = 60375 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xc980 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28592 + seq = 2782374624 + ack = 3324288232 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0xd670 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 351\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:31 GMT\r\n\r\n\r\n18879971\r\n' + + +2024-12-12 23:54:23.516864 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28592 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 60376 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xcb9a + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28592 + seq = 2782375163 + ack = 3324288232 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0x741 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.520322 - Ether / IP / TCP 192.168.1.11:28592 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49757 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28592 + dport = 64920 + seq = 3324288232 + ack = 2782375164 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.524520 - Ether / IP / TCP 192.168.1.11:28592 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49758 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28592 + dport = 64920 + seq = 3324288232 + ack = 2782375164 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.528526 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28592 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28592 + seq = 2782375164 + ack = 3324288233 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x740 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.532954 - Ether / IP / TCP 192.168.1.11:28593 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49759 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28593 + dport = 64920 + seq = 3789619633 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:23.536075 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28593 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28593 + seq = 704282507 + ack = 3789619634 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0xb83a + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:23.540091 - Ether / IP / TCP 192.168.1.11:28593 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49760 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28593 + dport = 64920 + seq = 3789619634 + ack = 704282508 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.546161 - Ether / IP / TCP 192.168.1.11:28593 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 367 + id = 49761 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28593 + dport = 64920 + seq = 3789619634 + ack = 704282508 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84be + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesReceived"\r\nContent-Length: 313\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:23.551005 - Ether / IP / TCP 192.168.1.11:28593 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 353 + id = 49762 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28593 + dport = 64920 + seq = 3789619961 + ack = 704282508 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84b0 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:23.554252 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28593 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 16077 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x78a6 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28593 + seq = 704282508 + ack = 3789619961 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x2ee2 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.557548 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28593 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 16078 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x78a5 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28593 + seq = 704282508 + ack = 3789620274 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x2d87 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.562878 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28593 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 596 + id = 16079 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x7678 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28593 + seq = 704282508 + ack = 3789620274 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0x7a9f + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 368\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:31 GMT\r\n\r\n\r\n569715018\r\n' + + +2024-12-12 23:54:23.566916 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28593 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 16080 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x78a3 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28593 + seq = 704283064 + ack = 3789620274 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0x2b5a + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.570533 - Ether / IP / TCP 192.168.1.11:28593 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49763 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28593 + dport = 64920 + seq = 3789620274 + ack = 704283065 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.573620 - Ether / IP / TCP 192.168.1.11:28593 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49764 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28593 + dport = 64920 + seq = 3789620274 + ack = 704283065 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.576980 - Ether / IP / TCP 192.168.1.11:28594 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49765 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28594 + dport = 64920 + seq = 3904456833 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:23.580227 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28593 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28593 + seq = 704283065 + ack = 3789620275 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x2b59 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.584279 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28594 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28594 + seq = 2585129853 + ack = 3904456834 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x8683 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:23.588011 - Ether / IP / TCP 192.168.1.11:28594 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49766 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28594 + dport = 64920 + seq = 3904456834 + ack = 2585129854 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.593770 - Ether / IP / TCP 192.168.1.11:28594 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 363 + id = 49767 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28594 + dport = 64920 + seq = 3904456834 + ack = 2585129854 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ba + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesSent"\r\nContent-Length: 309\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:23.598646 - Ether / IP / TCP 192.168.1.11:28594 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 349 + id = 49768 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28594 + dport = 64920 + seq = 3904457157 + ack = 2585129854 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ac + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:23.602581 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28594 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 45621 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x53e + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28594 + seq = 2585129854 + ack = 3904457157 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0xfd2e + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.606333 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28594 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 45622 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x53d + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28594 + seq = 2585129854 + ack = 3904457466 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0xfbd7 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.611857 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28594 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 579 + id = 45623 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x321 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28594 + seq = 2585129854 + ack = 3904457466 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0xc8eb + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 351\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:31 GMT\r\n\r\n\r\n18879971\r\n' + + +2024-12-12 23:54:23.615597 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28594 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 45624 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x53b + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28594 + seq = 2585130393 + ack = 3904457466 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0xf9bb + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.618781 - Ether / IP / TCP 192.168.1.11:28594 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49769 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28594 + dport = 64920 + seq = 3904457466 + ack = 2585130394 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.622049 - Ether / IP / TCP 192.168.1.11:28594 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49770 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28594 + dport = 64920 + seq = 3904457466 + ack = 2585130394 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.625778 - Ether / IP / TCP 192.168.1.11:28595 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49771 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28595 + dport = 64920 + seq = 2808518480 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:23.629637 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28594 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28594 + seq = 2585130394 + ack = 3904457467 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0xf9ba + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.632585 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28595 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28595 + seq = 3158387835 + ack = 2808518481 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x1ddd + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:23.635853 - Ether / IP / TCP 192.168.1.11:28595 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49772 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28595 + dport = 64920 + seq = 2808518481 + ack = 3158387836 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.641341 - Ether / IP / TCP 192.168.1.11:28595 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 367 + id = 49773 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28595 + dport = 64920 + seq = 2808518481 + ack = 3158387836 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84be + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesReceived"\r\nContent-Length: 313\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:23.646221 - Ether / IP / TCP 192.168.1.11:28595 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 353 + id = 49774 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28595 + dport = 64920 + seq = 2808518808 + ack = 3158387836 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84b0 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:23.650831 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28595 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 27951 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x4a44 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28595 + seq = 3158387836 + ack = 2808518808 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x9484 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.654598 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28595 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 27952 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x4a43 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28595 + seq = 3158387836 + ack = 2808519121 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x9329 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.658935 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28595 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 596 + id = 27953 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x4816 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28595 + seq = 3158387836 + ack = 2808519121 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0xe041 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 368\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:31 GMT\r\n\r\n\r\n569715018\r\n' + + +2024-12-12 23:54:23.661439 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28595 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 27954 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x4a41 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28595 + seq = 3158388392 + ack = 2808519121 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0x90fc + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.665362 - Ether / IP / TCP 192.168.1.11:28595 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49775 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28595 + dport = 64920 + seq = 2808519121 + ack = 3158388393 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.668744 - Ether / IP / TCP 192.168.1.11:28595 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49776 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28595 + dport = 64920 + seq = 2808519121 + ack = 3158388393 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.673340 - Ether / IP / TCP 192.168.1.11:28583 > 34.104.35.123:http PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 372 + id = 60216 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 34.104.35.123 + \options \ +###[ TCP ]### + sport = 28583 + dport = http + seq = 2135171085 + ack = 3269189214 + dataofs = 5 + reserved = 0 + flags = PA + window = 514 + chksum = 0x8fd + urgptr = 0 + options = [] +###[ Raw ]### + load = b'GET /edgedl/diffgen-puffin/kiabhabjdbkjdpjbpigfodbdjmbglcoo/373a55a0a5f464cc99fe9447d053af1e691362c0a103644fba9ebad2e6e0a090 HTTP/1.1\r\nConnection: Keep-Alive\r\nAccept: */*\r\nAccept-Encoding: identity\r\nIf-Unmodified-Since: Thu, 12 Dec 2024 20:09:52 GMT\r\nRange: bytes=0-1119\r\nUser-Agent: Microsoft BITS/7.8\r\nHost: edgedl.me.gvt1.com\r\n\r\n' + + +2024-12-12 23:54:23.676150 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28595 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28595 + seq = 3158388393 + ack = 2808519122 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x90fb + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.678958 - Ether / IP / TCP 34.104.35.123:http > 192.168.1.11:28583 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 23552 + flags = + frag = 0 + ttl = 54 + proto = tcp + chksum = 0x213a + src = 34.104.35.123 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = http + dport = 28583 + seq = 3269189214 + ack = 2135171417 + dataofs = 5 + reserved = 0 + flags = A + window = 265 + chksum = 0xf565 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\xae\xaf\x00\x00\x00\x00' + + +2024-12-12 23:54:23.684940 - Ether / IP / TCP 34.104.35.123:http > 192.168.1.11:28583 A / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1472 + id = 23553 + flags = + frag = 0 + ttl = 54 + proto = tcp + chksum = 0x1ba1 + src = 34.104.35.123 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = http + dport = 28583 + seq = 3269189214 + ack = 2135171417 + dataofs = 5 + reserved = 0 + flags = A + window = 265 + chksum = 0x3fef + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 206 Partial Content\r\naccept-ranges: bytes\r\ncontent-disposition: attachment\r\ncontent-length: 1120\r\ncontent-security-policy: default-src \'none\'\r\nserver: Google-Edge-Cache\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\nx-xss-protection: 0\r\nx-request-id: ada37683-b584-4b1a-be4f-ffc05069e0a7\r\ndate: Thu, 12 Dec 2024 20:12:03 GMT\r\nage: 9740\r\nlast-modified: Thu, 12 Dec 2024 20:09:52 GMT\r\netag: "3a236bc"\r\ncontent-type: application/octet-stream\r\ncontent-range: bytes 0-1119/2208\r\nalt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000\r\ncache-control: public,max-age=86400\r\ncoprocessor-response: download-server\r\n\r\nPUF1\x00\x00\x00\xbe\x08\x01\x12[\n\x07\x08\xf0w\x10\x8f\xe3\x01\n\x07\x08\xc0\xe1\x02\x10\x96\x04\n\x07\x08\xe8\xeb\x02\x10\xfb1\n\x06\x08\x90\xa4\x03\x10\n\n\x07\x08\xf8\xab\x03\x10\x9fU\x12\x07\x08\xf0w\x10\xe8\xb1\x02\x12\x07\x08\xa0\xb0\x03\x10\xf8\x04\x12\x07\x08\xb0\xbb\x03\x10\xb8U\x12\x06\x08\x98\x97\x04\x10(\x12\x07\x08\xa0\x9f\x04\x10\xd0u\x18\x83W\x1a[\n\x07\x08\xe0w\x10\x8f\xe3\x01\n\x07\x08\xb0\xe1\x02\x10\x82\x04\n\x07\x08\xc8\xeb\x02\x10\xfb1\n\x06\x08\xf0\xa3\x03\x10\n\n\x07\x08\xd8\xab\x03\x10\x8bU\x12\x07\x08\xe0w\x10\xe8\xb1\x02\x12\x07\x08\x90\xb0\x03\x10\xf8\x04\x12\x07\x08\xa0\xbb\x03\x10\xb8U\x12\x06\x08\x88\x97\x04\x10(\x12\x07\x08\x90\x9f\x04\x10\xb8u\x18\xfeV \x01\x17C\tQT\x93~\x08\xa0\x91\xb2p\xfe~\x03t\xae\xdb\xaaK\xd8\'q\t\xe6\x8b{O\xb9\x15&^\xa6\xd4\xa2fN8\xe0)E\xf4"\x8c\x88-\xb1\xef\xfaX\xee\xb8\x84\x02\xe2\x93\xb6\x87\x87\xb6zj\x9e7oE\xa9\xd5\x82 \xc5$\x11M\xb7\xe9\xd0\xa2\xcb\x82M\xfd\x1b\x98\x06\xd8\xd9A\x01\x00\x88c\xb7tLg\xf4:2\xb3\xcfK.\xa7\x10 Q\x03\x00\xa3\xe9\xa5\xe5\xadqO\xd1\xc8\xf1h\xb9\x10m\xc0\x13\xed5\xc6 \n\x8e<\x87\xc6"+1BE\xa0\xbd(\x17P\xbc\xf8\x97\x8fA\xbb\x90\xad\xfe\n\xd2$"\x95B\xbc`\x13\xc8#\xa8\x00 \xd6\x12|\xd2\x89\x08\x03\x06vLU\xe8?\xde\xd1\xbf<6\x95\xa4f\xbc\xe9K\xd4\xf5\xf8I\r7\xa4#\xd1\x17\xb1\x00\x19\xda\xc4\xe8\xb8S\x16\xd4O\xb6\x99\xd2$K\xa5\xa8c\x02\xdf\xb2\xe9G\xe0\xefP\x0f\xe6\xa5\x13\xeb\xe2\x9e\x93\xe5\xda1\xfd\x1a\\\x97\x95\xed\xedb\x1a\t\xe87\x1f\xa1\xbbo\xd5\x08\xda\x0c\x14\xb6\x98\x93A{\x15=4\xad\xa7\x1d\xd0\xc5x\xea\x0f\xc2{\x14C\x8d?\xbf&Z\xb9p\xd5\x10\r\xffc#_:\x07\xeac\xed\xf7}Rm^\xf2E\xbc\x97\x0c\xfb\x81U\x87e\x0b0\xa8!\ts\xff\x19\x1e\xb2\xbd\xfe\x97C\xd3\xb8\xb5\x95,\xfc\xc5_\xa6\xe6$\x8e\xce\xe9\xb5\x08YVe\xa5R\xedW|\xc1\x18\xbd\x0b\xefD\xf82<\x1d\xf3\xf5Y\x10\x1aH\xc3\x90\x0e\x8bl\xc9\xe1c\x8fD\x7f^|\xaa\xdb.\x1eQ\xab\xbfx\r\xfd\x19\x13zh\xe6\xf8\x1e=\x8f\xe8\xbf\x8b\xfa\x91\xf4\xc9\x19J\x91\x05AS\xf66&y\xfb\xd3D\x94\xf1w\xae\xa3b!\xcaC)\x9f=\xa7\xf0{kf\x08\xad\xc9a\x12\xde`c\xe7\xfcA\xa8sz\x81\x12\xfav\xfb\xbd{\xee\xda\r\xf1qjI\xf9\xc1\x19+\x01,\xe6w\x07[\x06\x84\x9b\\\xb0\xa8)/V\x88\xbf\x83\xfe\xf5J\x18FG\xdc\xd6\xbf+n\n\xeb\xb0\xd9:8\xfd\xb7%\xb3N\xc2\xd7\x837\xd1\xe2\xd66\xcd\x14`\xe8G\x11\xb7\xa2\x1a\x94\xc0\x1b\xca\\\x02\r\xb3\xaf\xd5}\xe5R,\x95\xe8\xebk\xf8\xb6lyD \xf9\xbd\x8b\xadU\xa3\x8b\x82K\x06U?\xe5"\xd2\xdbo\xf7\x8fY&X\x7fq\xfc\xdbS\x99z?\xf4z\x04\xca\x8b\xb2\x01\x12J\x8c\xa9\x97l\xd8\xa6\xa6\x15$B' + + +2024-12-12 23:54:23.688915 - Ether / IP / TCP 34.104.35.123:http > 192.168.1.11:28583 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 363 + id = 23554 + flags = + frag = 0 + ttl = 54 + proto = tcp + chksum = 0x1ff5 + src = 34.104.35.123 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = http + dport = 28583 + seq = 3269190646 + ack = 2135171417 + dataofs = 5 + reserved = 0 + flags = PA + window = 265 + chksum = 0xa5e0 + urgptr = 0 + options = [] +###[ Raw ]### + load = b']\xe7 34.104.35.123:http A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 60217 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 34.104.35.123 + \options \ +###[ TCP ]### + sport = 28583 + dport = http + seq = 2135171417 + ack = 3269190969 + dataofs = 5 + reserved = 0 + flags = A + window = 517 + chksum = 0x7b1 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.694735 - Ether / IP / TCP 192.168.1.11:28596 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49777 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28596 + dport = 64920 + seq = 3974506047 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:23.698030 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28596 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28596 + seq = 1406647800 + ack = 3974506048 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x205a + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:23.700424 - Ether / IP / TCP 192.168.1.11:28596 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49778 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28596 + dport = 64920 + seq = 3974506048 + ack = 1406647801 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.703821 - Ether / IP / TCP 192.168.1.11:28596 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 363 + id = 49779 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28596 + dport = 64920 + seq = 3974506048 + ack = 1406647801 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ba + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesSent"\r\nContent-Length: 309\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:23.707123 - Ether / IP / TCP 192.168.1.11:28596 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 349 + id = 49780 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28596 + dport = 64920 + seq = 3974506371 + ack = 1406647801 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ac + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:23.710139 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28596 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 64654 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xbae4 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28596 + seq = 1406647801 + ack = 3974506371 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x9705 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.712546 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28596 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 64655 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xbae3 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28596 + seq = 1406647801 + ack = 3974506680 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x95ae + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.716684 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28596 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 579 + id = 64656 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb8c7 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28596 + seq = 1406647801 + ack = 3974506680 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0x62c2 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 351\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:31 GMT\r\n\r\n\r\n18879971\r\n' + + +2024-12-12 23:54:23.719002 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28596 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 64657 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xbae1 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28596 + seq = 1406648340 + ack = 3974506680 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0x9392 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.721062 - Ether / IP / TCP 192.168.1.11:28596 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49781 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28596 + dport = 64920 + seq = 3974506680 + ack = 1406648341 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.723990 - Ether / IP / TCP 192.168.1.11:28596 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49782 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28596 + dport = 64920 + seq = 3974506680 + ack = 1406648341 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.726553 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28596 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28596 + seq = 1406648341 + ack = 3974506681 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x9391 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.728662 - Ether / IP / TCP 192.168.1.11:28597 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49783 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28597 + dport = 64920 + seq = 1954317597 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:23.731338 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28597 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28597 + seq = 1279827545 + ack = 1954317598 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x6113 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:23.733905 - Ether / IP / TCP 192.168.1.11:28597 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49784 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28597 + dport = 64920 + seq = 1954317598 + ack = 1279827546 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.736471 - Ether / IP / TCP 192.168.1.11:28597 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 367 + id = 49785 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28597 + dport = 64920 + seq = 1954317598 + ack = 1279827546 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84be + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesReceived"\r\nContent-Length: 313\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:23.739893 - Ether / IP / TCP 192.168.1.11:28597 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 353 + id = 49786 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28597 + dport = 64920 + seq = 1954317925 + ack = 1279827546 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84b0 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:23.741779 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28597 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 57307 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xd797 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28597 + seq = 1279827546 + ack = 1954317925 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0xd7ba + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.743510 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28597 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 57308 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xd796 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28597 + seq = 1279827546 + ack = 1954318238 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0xd65f + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.746909 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28597 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 596 + id = 57309 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xd569 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28597 + seq = 1279827546 + ack = 1954318238 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0x2378 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 368\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:31 GMT\r\n\r\n\r\n569715018\r\n' + + +2024-12-12 23:54:23.748788 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28597 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 57310 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xd794 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28597 + seq = 1279828102 + ack = 1954318238 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0xd432 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.750547 - Ether / IP / TCP 192.168.1.11:28597 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49787 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28597 + dport = 64920 + seq = 1954318238 + ack = 1279828103 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.752082 - Ether / IP / TCP 192.168.1.11:28597 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49788 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28597 + dport = 64920 + seq = 1954318238 + ack = 1279828103 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.754141 - Ether / IP / TCP 192.168.1.11:28598 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49789 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28598 + dport = 64920 + seq = 3656637208 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:23.756716 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28597 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28597 + seq = 1279828103 + ack = 1954318239 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0xd431 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.758866 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28598 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28598 + seq = 2569367125 + ack = 3656637209 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x88c6 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:23.761851 - Ether / IP / TCP 192.168.1.11:28598 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49790 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28598 + dport = 64920 + seq = 3656637209 + ack = 2569367126 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.765532 - Ether / IP / TCP 192.168.1.11:28598 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 363 + id = 49791 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28598 + dport = 64920 + seq = 3656637209 + ack = 2569367126 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ba + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesSent"\r\nContent-Length: 309\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:23.768757 - Ether / IP / TCP 192.168.1.11:28598 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 349 + id = 49792 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28598 + dport = 64920 + seq = 3656637532 + ack = 2569367126 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ac + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:23.771229 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28598 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 12252 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x8797 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28598 + seq = 2569367126 + ack = 3656637532 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0xff71 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.774395 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28598 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 12253 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x8796 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28598 + seq = 2569367126 + ack = 3656637841 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0xfe1a + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.777046 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28598 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 579 + id = 12254 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x857a + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28598 + seq = 2569367126 + ack = 3656637841 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0xcb2e + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 351\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:31 GMT\r\n\r\n\r\n18879971\r\n' + + +2024-12-12 23:54:23.778987 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28598 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 12255 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x8794 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28598 + seq = 2569367665 + ack = 3656637841 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0xfbfe + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.781035 - Ether / IP / TCP 192.168.1.11:28598 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49793 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28598 + dport = 64920 + seq = 3656637841 + ack = 2569367666 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.783084 - Ether / IP / TCP 192.168.1.11:28598 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49794 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28598 + dport = 64920 + seq = 3656637841 + ack = 2569367666 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.784807 - Ether / IP / TCP 192.168.1.11:28599 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49795 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28599 + dport = 64920 + seq = 3834157841 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:23.786299 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28598 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28598 + seq = 2569367666 + ack = 3656637842 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0xfbfd + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.788707 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28599 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28599 + seq = 19401357 + ack = 3834157842 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0xb9fd + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:23.790780 - Ether / IP / TCP 192.168.1.11:28599 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49796 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28599 + dport = 64920 + seq = 3834157842 + ack = 19401358 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.793131 - Ether / IP / TCP 192.168.1.11:28599 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 367 + id = 49797 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28599 + dport = 64920 + seq = 3834157842 + ack = 19401358 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84be + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesReceived"\r\nContent-Length: 313\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:23.795755 - Ether / IP / TCP 192.168.1.11:28599 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 353 + id = 49798 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28599 + dport = 64920 + seq = 3834158169 + ack = 19401358 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84b0 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:23.797920 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28599 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 19226 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x6c59 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28599 + seq = 19401358 + ack = 3834158169 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x30a5 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.799908 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28599 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 19227 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x6c58 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28599 + seq = 19401358 + ack = 3834158482 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x2f4a + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.802673 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28599 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 596 + id = 19228 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x6a2b + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28599 + seq = 19401358 + ack = 3834158482 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0x7c62 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 368\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:31 GMT\r\n\r\n\r\n569715018\r\n' + + +2024-12-12 23:54:23.805054 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28599 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 19229 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x6c56 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28599 + seq = 19401914 + ack = 3834158482 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0x2d1d + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.810002 - Ether / IP / TCP 192.168.1.11:28599 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49799 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28599 + dport = 64920 + seq = 3834158482 + ack = 19401915 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.812506 - Ether / IP / TCP 192.168.1.11:28599 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49800 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28599 + dport = 64920 + seq = 3834158482 + ack = 19401915 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.814730 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28599 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28599 + seq = 19401915 + ack = 3834158483 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x2d1c + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.817508 - Ether / IP / TCP 192.168.1.11:28301 > 172.64.155.209:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 41 + id = 22998 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 172.64.155.209 + \options \ +###[ TCP ]### + sport = 28301 + dport = https + seq = 2398962134 + ack = 3276998151 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x9e1 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x00' + + +2024-12-12 23:54:23.820151 - Ether / IP / TCP 172.64.155.209:https > 192.168.1.11:28301 A +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 21378 + flags = DF + frag = 0 + ttl = 54 + proto = tcp + chksum = 0xe77c + src = 172.64.155.209 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28301 + seq = 3276998151 + ack = 2398962135 + dataofs = 8 + reserved = 0 + flags = A + window = 28 + chksum = 0xc3bb + urgptr = 0 + options = [('NOP', None), ('NOP', None), ('SAck', (2398962134, 2398962135))] + + +2024-12-12 23:54:23.872782 - Ether / IP / TCP 192.168.1.11:28600 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49801 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28600 + dport = 64920 + seq = 3688691819 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:23.876118 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28600 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28600 + seq = 4264869430 + ack = 3688691820 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0xb497 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:23.879216 - Ether / IP / TCP 192.168.1.11:28600 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49802 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28600 + dport = 64920 + seq = 3688691820 + ack = 4264869431 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.884568 - Ether / IP / TCP 192.168.1.11:28600 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 267 + id = 49803 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28600 + dport = 64920 + seq = 3688691820 + ack = 4264869431 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x845a + urgptr = 0 + options = [] +###[ Raw ]### + load = b'UNSUBSCRIBE /d15f795f/evt/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSID: uuid:d15f795f-9d12-458e-874b-cb38ba389303\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:23.888732 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28600 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 64805 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xba4d + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28600 + seq = 4264869431 + ack = 3688692047 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x2ba3 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.894879 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28600 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 226 + id = 64806 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb992 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28600 + seq = 4264869431 + ack = 3688692047 + dataofs = 5 + reserved = 0 + flags = PA + window = 490 + chksum = 0x9b2c + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 0\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:31 GMT\r\n\r\n' + + +2024-12-12 23:54:23.898390 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28600 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 64807 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xba4b + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28600 + seq = 4264869617 + ack = 3688692047 + dataofs = 5 + reserved = 0 + flags = FA + window = 490 + chksum = 0x2ae8 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.901670 - Ether / IP / TCP 192.168.1.11:28600 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49804 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28600 + dport = 64920 + seq = 3688692047 + ack = 4264869618 + dataofs = 5 + reserved = 0 + flags = A + window = 512 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.904560 - Ether / IP / TCP 192.168.1.11:28600 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49805 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28600 + dport = 64920 + seq = 3688692047 + ack = 4264869618 + dataofs = 5 + reserved = 0 + flags = FA + window = 512 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:23.907433 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28600 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28600 + seq = 4264869618 + ack = 3688692048 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x2ae7 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:23.983238 - Ether / IP / TCP 80.15.235.255:https > 192.168.1.11:28492 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 79 + id = 34341 + flags = DF + frag = 0 + ttl = 56 + proto = tcp + chksum = 0xbec1 + src = 80.15.235.255 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28492 + seq = 3178119063 + ack = 2708029645 + dataofs = 5 + reserved = 0 + flags = PA + window = 18 + chksum = 0x6b + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00"\x17V`d\xfff\xe3 192.168.1.11:28492 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 64 + id = 34342 + flags = DF + frag = 0 + ttl = 56 + proto = tcp + chksum = 0xbecf + src = 80.15.235.255 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28492 + seq = 3178119102 + ack = 2708029645 + dataofs = 5 + reserved = 0 + flags = PA + window = 18 + chksum = 0x7c9d + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00\x13;\xcb\xfd\xc8s:5<\x02\xf8\xfaX\xa0\xd3}S\x8e4I' + + +2024-12-12 23:54:23.994114 - Ether / IP / TCP 80.15.235.255:https > 192.168.1.11:28492 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 34343 + flags = DF + frag = 0 + ttl = 56 + proto = tcp + chksum = 0xbee6 + src = 80.15.235.255 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28492 + seq = 3178119126 + ack = 2708029645 + dataofs = 5 + reserved = 0 + flags = FA + window = 18 + chksum = 0x617c + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:24.000275 - Ether / IP / TCP 192.168.1.11:28492 > 80.15.235.255:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 4578 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 80.15.235.255 + \options \ +###[ TCP ]### + sport = 28492 + dport = https + seq = 2708029645 + ack = 3178119127 + dataofs = 5 + reserved = 0 + flags = A + window = 512 + chksum = 0xfddc + urgptr = 0 + options = [] + + +2024-12-12 23:54:24.004771 - Ether / IP / TCP 192.168.1.11:28492 > 80.15.235.255:https FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 4579 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 80.15.235.255 + \options \ +###[ TCP ]### + sport = 28492 + dport = https + seq = 2708029645 + ack = 3178119127 + dataofs = 5 + reserved = 0 + flags = FA + window = 512 + chksum = 0xfddc + urgptr = 0 + options = [] + + +2024-12-12 23:54:24.010202 - Ether / IP / TCP 80.15.235.255:https > 192.168.1.11:28492 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 34344 + flags = DF + frag = 0 + ttl = 56 + proto = tcp + chksum = 0xbee5 + src = 80.15.235.255 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28492 + seq = 3178119127 + ack = 2708029646 + dataofs = 5 + reserved = 0 + flags = A + window = 18 + chksum = 0x617b + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:24.376791 - Ether / IP / TCP 192.168.1.1:59625 > 192.168.1.11:icslap S +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 60 + id = 13242 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x83a5 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 59625 + dport = icslap + seq = 3470553877 + ack = 0 + dataofs = 10 + reserved = 0 + flags = S + window = 14600 + chksum = 0xf2e9 + urgptr = 0 + options = [('MSS', 1460), ('SAckOK', b''), ('Timestamp', (503989400, 0)), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:24.481549 - Ether / IP / TCP 192.168.1.11:28291 > 104.18.32.47:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 41 + id = 807 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 104.18.32.47 + \options \ +###[ TCP ]### + sport = 28291 + dport = https + seq = 2273401242 + ack = 4151354721 + dataofs = 5 + reserved = 0 + flags = A + window = 512 + chksum = 0x4a10 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x00' + + +2024-12-12 23:54:24.490359 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 154 + id = 16818 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862145268 + ack = 2922049094 + dataofs = 5 + reserved = 0 + flags = PA + window = 516 + chksum = 0x672b + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00m\xb1\xea\x9c?\xd6N\x0b\xf51\xf0\xdd\r\xd0\x01\x9b\xf2e\x06\x16@"\x9dc\x1c\'\xba\xb1>h\xba\x9c\xa8hP|?\xbf8\x87z\x95\xad\xcc\x08\xd4\xe0\x04\x92\n\xe9\xd6\xa7\xd9\xe4\xfb]#ZY\x9e\nL\xc1\x9e\xe4\x95\x9e0\xa3\x1e\xbc\xf1\rea\xb4\x93\xceH\xd7\x0b\xb0W\xb8p\xe1-M\x89[\x1e\xa6#\x93\xc5\xb5O\xc1\xad\x14s\xe2fX\xb6y!i\xdd' + + +2024-12-12 23:54:24.509815 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16819 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862145382 + ack = 2922049094 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x030\xc7\xc0\x19\xce\x0cX\x98\xfc\xdeb\xbd\xec\xa4\xbc)\xb6\xe6\x98uN\x1f\x9a/V^\xa5c;\x1f\xdd\xc9h\x97VT\xbev\xf4\x14Mm\x8c0\xc1;W~Y\xa6\xb0\x9ahM\x92\x81\xf0~\x9f9+\x07\xcd0[\xc7D\xc5S\xacC\xf2\xbf\\\xa9\t\x02\x7f\x8dH\xec\xffw\x9f \xdfl\xbf\xef\xc2(\xa4\xf2Tq\x88\xe6\xdeOx\x0c>`e{\x00\xbf\xf4\xc7U\xfc\xa3\x157R;>q9\xfa\x19\n\x06\xc00\xb6\xc2*\x9c\xda\xac\xf0n%P\x1f\xad\xa3\x97c\x971\xf5\xb2VxB.\xf2\x07Mz\x0e~\x8f|%\xe9$Y?l\xf4\xc7\x07\xf1\x1dt\xb8\x07\x05\xbb\xc2\xef\x91\x95^R\xcex=r\xc1\xd8a\xff$\x8aRT\xe1\x83\x07k\xdb\x016\xca\xba*\xde~\x00o\x9e\xa3\x0c\xd9\x1c\xc5\xc6\xb2Z\xb74h}#\x93\x0b\xfc\xc8\xd5\xcah\x06\xbc"\x8a\xd9\xa6\xaaZ~\x01\x90Qh\\D\xbc\xe1\xb7:"\x828h\xd3\xf0d\xe8j\xeb\xf0[\xd1\xf6Bv\x9d\xc8\x92\x91\xd0_j\x15c\x8f\xb8\xe5zs\xfb\x99\xe1^\xc8>\x81M\x87\xc3\xf3\xe6]\x16\xbe\xb9\xb86\xa2Mt\x03\xa0\x0e\xc8\x03|v\x05\xf9\xcf\xd7\xac\x01\xbb\xccz\x90\xa3\xb2\x13&\x16(\xdd\x90\xba\xcfQ\xb4\x9d\xbb\xe3]<*@\xfe&OPT\xd6?)\xb2\xd5\xe5A\xbb[\xff\x1c\x08P\xd1\x7f\xf3\x16\x06^o\nw\x94\x99\xae\x83\x8c\\\x92/\xca<\x01\xb1\xab\x15\x99\xcf\x17\xbae\xad(D\x87\xa3\xba\xbeE\xd9\x10{\xbd\xc2\xed\x8ag`>j\xd2\xa8\xb3Ck`\xf8\x8e\x08G\x9e\x1b\xf5}<\xceW\x08\xa5b\x1a\xbc\xbb\x96a1\x1e\x87\x1a\x89\xd6\x83\xd6C2\x9e\xaf\x19-\xb6\xd36R>%\xb5\x1cj2\x1b\xb4i\x08 \xb0\xfc{$\xd1\xc0\xc9\xcc\x0f\xe3e@\x1bw\x13\xf0)\xb8\x14\xb8\tL\x9ce\xfa~{\x8f\x07}/\xaf\xdc\x1d\x97\xd43\x02\xd9@\xce\x0cvj\x98\xe4\xfa\xab\xcb\x1d#\xc8\x07\x06~\xb2\x9aLz\x03\x9cy\xe3YP\x9bq\x92w]\x14\x9bo\xc6\xb0\x0b\x06\xcd=\xd5\x0e\x89\xf3\xc4\xae\x14+f5\x95\xf6\xaa:p\x97\x85+\xf3\xfe9L\x85D\xb1\x81\x90F\xe1g\xe4b\x8e9\x95\x9d\xee\x96n\x80\xae\x82\xbd\xdeJx2=9\x81F\x97p8\xcaC\xc2\xde\xdd|\xbb\x18\xc1\x1c\x1c\x83\x04V\x85\x8a<6\x03\xc2\xd7\x0c#\xd0\x08I\xd1(b\xa6u\xde\x0c\x8f\xd8*,\x08$,\x8e\xdd\xce\xad\xc3\x8a\x1a\x89\x9d\x8d\xac=\x07\x19\x02sO\xa7\xe4\x98\xe0g\xf0\xf5\xc7\x84\xa2\xfa\x18\xfc\x1c}aVA\x1c$\xe8\xae\x04\xf2\xc6\xa4\x1c\xec\x18=\xf5U\xed\x93\x03\xe4\xda\xc3\n\x82\xdd\xd0\xcd\xc7+\xce\x7f\xff,A\x99|\xae\xf1H\xb1\x9c\xa9\x18\x86\xb7\x8c\x997Di\x08\x8c\xa5y>\xe6A\x95\xba?\x887N\xeb\xb6\xaey\xbc\xfe\xf8\xaev\xdd#\xe0\x88\xb4sA\x0b+\xe7A\xcf\x8dF\xfd\x1b\x05\xc2\xd1\x91\x19\xf0\xc9uU\xe5J=\x8c\xe3:\x89\x805K\xe2I{\'\x1d9-U\x1a\x81\xc1\xb1q\x9b\x84\\\x7f+\x8d!\xb44\xe1|\x9e\x1eh\xb8\xba\xa3kA\xdb\xb8\xca\xc9\xd4C\xa4\x80\x95\xfb\xdfk\x80\xb5\xeb\x93*\xe0>\x83\xeef\xdf\xde\xc0\x9eeg$fj\xf6\xebj\x9ac\x8e\xc9\x87S\x8e\x1ap_/vF\xb8P\xa6\xad\xd4\xf5\xe9\x9f[\xe2:j\xc6\xe34@0\x90\xa9\xb4/T3gR\xea\x87\x01*{\xd8\xe7B=\x8a\xba\x02\x12\xdd\xbb\xb0\xbf\xdc\x06s\xb9o\xba+t\xa2=~\x0c\xeb^\xa9u(\x08":]\xb0!\xcc\xdf\xd8\xc3\x82Z\xc3\xc5!\xbe\xe7\x8f\xc6\x7fd\xc7Q\x0f\xfbO\xd7\xde\xbdL\xac\xa4\x96\xabL\x99S\x1b\x17\x90V\x8f\xcbl\xa7\t\xab-\xe9|\x0e\x07\xe3\xee\x01O\x1c\xf7\x94&\xa1\xfd\xe5\x1e\xdc\xd5\xbc\xd1\xecp\x86\x0b\xf9\'Q\xb9\x9ee\x9b\xdd>\xee]\xd5\xf0\xa7\x86Z\xadb\xad%\xb4\xdb-\xeaeW\x0b@\xebN\x16b\x7f\xb8)\xed\xb77\xec\xa9\x04XF;\xbaKG\xcb\xfa!1^\x8b\xda\x13\x88n\xd2\xde\xfe\xba\xc8\x19H\xa3\xe7\xcem\xd96\x12\xf6\xea\x12\xcd\x84\xebH\x06\xf9\xd2-\xba\xedxS\xec\xa8\xda\x98\xe5\x10\xc6\xc6Y^$\xa3\x1f\xd6\x84LD7\xe6\xae)\xf60\x9d\x9d\xf3\xd7\xe8\xa48z\x03a\x9e\xdaU)X?\xc8B1\xf6\xe1\xd9(\x0b\xf2\x89\xe1\x03\xffr\x17\xcd*\xb3\xe1Z\\\r\xdf\x8f5\'\'i\xaa\xc0\xa5\xb3\x02K(\xba\x9f"\xa0\r\xa5P\xe7\x00\xbb\xf9-R\xbb\xddj\x8d\xbb\xbb\xa71v/\x0fb\x8a\xf5\x16\xcc5\xfe\xb1\xdd\xe8l\xfb\x03f\x102\x15H\x98\x89m\xb3\xa4\x13j\x04\xac\x8f\xa8\xb0\xb1K\x88\x97\xa0\x18\xb2\x85\x84\xed\x93\xbbW\x89F{f\x05\xab$\xb9\xb8\xdd\xa4#/\x88\xed\xa8\xf9\x8eg\xdb\xd6\x81\x847\x9e\x97U7\xa5\xab\x99_+\xf4\x03=\x0fVp\xfb\xb6\xa1 \xfdy\xc9\xb9\xc3CA=\x9d\x88\xb9\xfe\xd42\xac<[\xc8\xcd\x85gv\x06Cp\xd0kjo\xc8\xe7\x9c\xab\x15y\x95s\xe0\xb5\xc8\x0c\xe8\xf5q\xc6\xdc|\x8a\xe9\xfd\x99\xc5!2s\xbbb\t\x8b\x89A\xb0\xf7\x0c\xd9\x9b\x82\xf2\xe7\x12>@\x18C\xa9\xc1z\xd3N\xc6\x92\x95\x05\x19p\x7f\x11v\xd9\xbe\xd5\xce\xcc\x19\xae\xcb\xd3\x97\x9e\xf1\xa3O\xfe4Iv\xb8\xd9#:\xd4\x8c\xdb\x80\xd8Bm\xc3\x04d\x07\xe5\xa5\x98\xcd]\xed\x0f\xdc \x00>\x9c\xf1\t\x81o\xe0\xfa];d\x15{\xd11$2\\<\xfa4\xbb\x98\x9c\x0f\x8c\xcf\xf7\xdf\xf0E\xe3\x13xM\xbe\xf2\x17T\xcf:\x9a4\x00\xba\x13\xe9.a\x96\xb0\xf3\xa4\xa1C\xf5\xd4x\xaf!\x9c\xbf\xed' + + +2024-12-12 23:54:24.520099 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16820 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862146822 + ack = 2922049094 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'(\xe7\r\xe8\xd7\xe8S\xffV|\x0e9~\x03g\xe1\xe9\xb08\xf4\xe4\xc6\xb6\xa7+\x8a\xc4\xa3\xf3h2\xe2\xa8k\xdax\xed\x8c\xfe\x81XU\xa4GmF\xd9\x8f:\x0e\x05~\xf0\xc65\x10\xe42/\xfe\xd3Ut\xa6\xae\x12\xb5\xc39l\xdb4\x91AG\x14\xd0t\xb6\xce\x7f\x9c\xe4s\xe4\x03\xf3E#\xbd\xe8\xae\xdc?\xe2\xb6\x1c\xa7\x81\xb5G+\xbc\xd4\xc2\xe7\x07\xc78\x08\x95\x13\x15[\xc9u/\xf4 \xd9\xf1\x01w\x06\xcf\xd5\x8e\xb4\x96\x9e\x06d\xfd\xd4\x8d\xacD\xf7\x11\x95\xe1\xfe\'v\xdfa.\xebJ\xe8X\xf3\xb2T\xae\xf1\x0b]DYP\xbc\x12\xf6,c\xa9*vU\x9b\xf8\xf4\xabRa03GL\xa0j\xc2\xadz\xc0\x93\xe0\xc7\xab;\x10\x8d\x01\x16\x19\xbb!\x8b6h1M9\x8e\x99a\xb1\xeb\xda\xdc\xbd\xc2<\x0ba\xc5\x93uH\xaf\xb3{n\xb9\xa8\xe6\x9dP\x02B\xc6x}V2\n\xearx\x9ft8\xa8[\xe6Br\t\x82\xebx\xff@W\x0c\xf1\xa4\xfb\x00U5D\xb4\xaa\x9b\xc5\xca\xbf\xc0k\xd8Ea\xbb\xf5(\xd9\xd6B\xc1\xd3\n\x17\xb6\xca\xf0f\x7f\x08S\xfc\xa9\xe8\xd9\x16:\x1a\xb8\x0fU\xad;-\x0b\xcc\r\n\x94xv\x0b\xdf\xa7\xc5\r\xfe?\xfb\x9d\xf0\xd2m\x0e\xc4\x07\xc8v\xf3GXj3\xa2\x853p%?\x01\xdc\x11\r\x0cC\xf7\xdd\x9f\xa43\x8cH\xff\x9a\xfb\xc8U\xc5\xd1\x91A:\xd508\xc1\xd31\xda\xed%\n\x97}\x855\xb0\x8ck\xcc\xff^uQ\xc3\xae\xa2\x81\xf4\x18\xd3\x01qzb\x05c\xe4\xfa\xbf;\xdc\x01\xf0\x87w\xa6\xaa\xc7\x17^}\xee\x8c\x08\x98\x93\xfcR%\x14\x02r]\n\xd2Y\x8d\x0cs\xd2\x8eIQMp\xfe)\x9b\x08\xcaPP\xad\x16m\x04Ts\xa6\x9b\x8b_\xe6\xac\x112\x94Q\xb4\x1c\xb9;\xde\xec\x0f\xf4)\x02\x0f\xe9\xe6\x02\xb3\xfa\r\xef&)\x8cOU{%\x9b\x15\xed\ny\x9a\xf7T\x0f\xf4\xd9\xdc\xfe\xa9\x04\x01\xb6\xb9\xc4\x7f\xb0\xc63\x03Vk^\xb4\x89\x1b\x13\x8b\x96\xd1(\xbb\xda\xa5J\x87\xd0"\xa7\x03)g\xfdwp\x92\x87N.r\n\x96=\xf0\x95o\xf1\x0b\x0eD$\xdb|Ia\x80\x8b\x8c\x00n\xf5\x99\xb5*E\x99\xf9\xb8\x01u\xc6\xc1\x03\x7f\xb0"a\x1f\xc6v\xd5O\x85\xb1|\xa8-\x07\xd7\xedKL\x08\xa7 \x16N\xa6\xb5\xe4\x1a\x80k\x8b<\x9a\xd3\xd1,\xd8\x11\x13\xc1?h\xf9\xa0\xf8r\x8b\xa9\x9fm\xd4g\xbfU7nO\xdajP\x1a1n\xbe\xf3K\x84\xe7\x1e\x08\xb1\xc3\xafz\x0cMD\x98\xe3>\xf1\xc8<\xf7\xb1\xfc\xbe\x93\x98nPh?\xae\'1\xec{\x0bO\x80\x02A\x01\xa7x\x10<\x9ad\xf0\n\x020\xd8i\x83\xdc\x8d\xfa\x13\xb5<5M\x1fI\xf0\xac\x00\x86\tn*\xd0[\x98J\x7fwER\xdf\xa7\xe0p\xa5\x1a\xc1a\xca`\x1b\xdb\x15\xa1_O\x89s\xbd\x0b\xf4z\x92\x90\xfb\x19u-\x84\x8cAt\x10p\xc8\xe6\x1f\xba\xe7\x91\x95\xce\'p\xfa\x98\xeb\x84\x9f\xc4\x89\xc7\'\x81\x89\xae\x08i\x90\xbc\x97\xa1\xc6$\xb1bMxaf\x9a\xc6\xc9\x90\x1e\x88\x0f\x92\x7f\xad&\x8b\x7fbj2\x145\xcc\x00v\xf6\xe2\xec\xbc \x07\t`\xf1\x18\r\xcd\xbex":\x81\x12\x02\xab0\x00\xff\x87\xb5\xb1\x8e\xd9P\xa9\x8e!Y\x14\xb9\x95\xfa\x81%\x8c\\[5\xa7\x83\x95\xc2\x1b\xa5\x8e+l\x01m\x8b\xcf^\xa1r\xe4\x87w\x03\xe6\x07\xa6\xf4I\xe1\xff\xc7\xa5\x8e\xf5\xc3\xb6q\xa5\xca\x8bhQ\xdd\xb4\xc7\xea\xce\x95\xca\xf1|\xca\xb3\xb1y\\T&\x1b\xee\xeeCn\x8a\x8f3\xabD\x05\xe7\xc6[$\xd2mE\xc9\xfb\x1e\x8e\x1a\x8fnp\xa4+\n=\xfezz\xda\xf7\xc9\x89X\x83\xb3\x95\x90&m%X\x9de\xcb~\xd7:\xe9X\xd7\x81I\x0b\x83k\xcfMx\x935\xff\xfa\xce[\xa64)\xd6.\x08#\xbf\xf4|4\xca\xad\xed\xb0E\x02\xb3j\xcd\xa4\x9c(\x8c\xd1\xc6\x10\xa5\x88}\x1d\xed\xd1\xf0Pb\x8a\x19\xb5\x13\x01\xe6S\xa9`\x0fk\xc5\xef\xf8@]o\xf4\xd2\tr\xdf\xf9\xf54\xab;\x85\xa1\xb2#\xac\xf8\xe6\xe1\x13\xa8?\x8c}\x85\xc2\x80\xd4\x95\x02\xf04s\xc4^\xed\x84?;\x97\xf3\t\x89\xbb\x8d\x91[\x8a\x8e\xab\xcaw\x98\x81\x8d\xa0#Z\x84m\xb4\xcf\xa8\xa6:utV\x93X\x12\x85\xdb\xce+\xf0v7\xcc\xc8\xe8\xd1\xbd\xb3\xcfR\xd3\xd3&\xb7E\x12\xc0\x11CNiZ\xc5\xbc8F\x90\xbf\x0e[\xc0\xf8\xc9\x11\x92\xb6\xee\xc1\xb7' + + +2024-12-12 23:54:24.528325 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16821 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862148262 + ack = 2922049094 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'6rSGx*]\xfa\'\xa9n\xbc`&?\xc3\xa67\xa3\x7f(Vb~[\x16T\x830R\xd9\xbd\xcf\x1c?uKB\x85\xbc(\x96C\xd8\xda\xeb\xf6%)P\x86p\x00o\x11\x8c\xcf\xf0\xad\xb8:)\xf7\xac\x96\xaf\xefw\xfam\xda<\'\xe7\xdb\x1d\x1c%\x8c\xba\xba\x82\xae\xef\xadp\xd1V\x86\xa9\xd6Yi\xf3~\xe8`\xa709\xd7\xa0\xaf\xe3\n\xfd\x84\xcfP\xd8\x1e\x83V\xc0\xed_\x90\x96\xf3*\xe3S\xddi\xb3|#\xcc\x9c\xc9\x80\xbe)\xadt\xb1G\x00\xe1\xaa\x82\x85\xbdB\xd7\'\x17\x9f\xec\xd0\xffRB\xf8\xbe_3\x8cuj87\x00\xc4\xa8\x88\xb8\xd9\xcb\xd3aT\x04@\x82f\x98\xfe\xee\xf5\xf9\xbcv\x8a\xe6v"5T8;5\x96{K\xb9\x90\x14%\xf3\xcdk`\x97&B\x8e\xaa1\x8c\x0f#\xc9\x0b\x02D\x9d\x1d\xe2\x13\xf8H\x12\nn\xb6u\xc1\xac\xf2\xaf\x92=\xd5V\xbf\x18\x0b\xb1\xa9\x1e\x81\x11\xe1\x9f\x04\xf2H\xc1\xdf\x1d\xb89\x07\xe6K\x0c6M\xe3\x1a\xb9U\xfb\x01\xe7\xd7\x9b\xf9W-\xdcsr\xcf\xcd\xaa3_\x9e.jP\xe6\xd5\xe6D\x0e{\xa2\\H;\xded\xff\x0c\x87\xb7\xa5f8\x1e?v\xad\xf0\xb4\xe8\x07-y_\xc0\x02\xe0l\xfe\xf2\x13\xd3\xa0[\xd3\xcft\t8\xee\xba\x83\x04\xd3\xc6\xd3\x95\xef5\xce\xcex\x89\xd3\x1d3\x01\x7f\xc7\xfb\xc3R.\xc7\xea\xba\x96\x045\xdd\xd3j\x83(\xc20\xba\xbb\x1a`xHzCL\xc2\xd5\xbc\x9e\xa0\xe2\x90{\xda\x1f\x95Fe&\xc6\'\x8b\x7f/S\x95\xc2\xcc\xeb\xa1\x1e\x01%\x17\x07Bd\xfd\xbe\xf0\xf2\xd0\xd4\\j\n\xfa3[\xbc}\x1a\x06\xd7\xd4\x98\xcc\xb4/\x00g\xed\xd8>\x16\x0f\xe5\xb0\xc0\xb4\xc5A\x88M\xb9\x11^E\xd1\xb0+\xf6c>\xe8\x88\xdb\x1f4W\xb5$\xd3\xee\x05\x96\x12v3\x11\xc9\x19\x1e\xbb\x0c"\xd8E\xf1I\xe2f\xf4B9\x85\xc7.\x07\xd7\xe0s\x13\xee\x96\xcf\x07\xfbG\xca\xda\xa3\x13\x9e\xe8\x08\x7f\xc3a\x18\x8eQMp\xef33\xd5\x9c\xa1<\xb3\xfd\xb30\x10\xaa\xb9\xbcPz\xfe@~\nAJA\x93\x95\xb50\xb8\xec\xc2\xdf6g\x8c\xd8A+\x0f\x83.T: l^\xf2A\xcb\x1f\xaf\xcal%\t\x00\x95\xff\xa1\x84%\xd6\xff;o\xea)\x91d\x9e\x88/\xdeU\x83\xf0\xf3`9\x8b4\xb2\xe2F\xb1\x11\x85\xaa]@\xaf\xb1\x86\xec\x9e\xa4Iug\xb0\x8a\xb7+6,\xd6\xd7\xb0Bj\xfd\x86\'\xb3\xabw$\\$\xca1\xf4\xc8\xeb7\xf3\x9e\x85\xcaQ\x8d\xfa\xffT\xe7\xc7\x92\xe0\xec\x9c&jZ/IM&@S\x04\xa7dv\xba\x0f\xcb\xceV\xc0\xcaL\x97\xf7\x95\x16\x8c\xdaH\xa9\xca\xb1\x9fNtO\xdf\xa9\x92%\xf1;\x1b\x81\xcarFl]\'y;Z\xdbxT\xfc\xc1\xa3/\xee\xe8\x1b\xab;>\xceh\xbaO[ KN\xe9,K.\xc9\xc9\xfco\xb2\xbe\xf5Et\xc2G\xd1\x94Y\xbf\x07\xcb\t.K\x1a\x01\x05Q\xe4\x93\xc8B\xd4\x02\xeaE\xf0"\xf9\x0f\x06\xbaO1\x96ys\xa76\x07\xc9\x04\xa6\xa6{\xf6KG\x80\x16\xec\xe0\x07\xbaZ\xd9\xe8\x134\x99\xfe/\x96\xe4p\xce\x00\xa9*\xa5w\x08$t\xc4\xe5`\xf4W\xda\x90\x9ay\x9eu*\xf7\xc4x;0A\xa1\x0e\xad\xac\x94\xfb\xd9F\xaa\xe8\x7fq\xba\x8c\xe3\xcd\x87m\xa4\xe0\xbf`yT\xc1P\t&L\xf7_\xcd\xa6\x0f\xf2\xd4\x8f\xa7\xab\x7f\xf9\x17\xb5\x8c\x95\xfa\xb2\xa5&J\xd5r\x89\x87\xa5\x1c\x0e\xdf\xd9\x89b^\x8c\xeft\xf3\xf5\x00Ye\xbb\x92\xd6L\x9b5\x84\xaa\x08m\xab\xa0_$\xd9\xf6\xdaP\xd8\xa6\x17+ \x9c\xaf\xe7\x1b\xeb\xea\xa2&\x91\xe70\n\xac\xb3O\xbb\xcd-\x189K\x94\x88\xddw\x8f\x0c\\[\xbd\x9d\xcbRp\xc8p\xdb\xda\xf0\xf5\xee\xf7\xe1=K\xae\x9c\x0e\x16\xa5\xe3\xb5)\xbc\xe0;\xa6\xbe+\x0e\\*I\x920Fz\xa5\xd9\xe4a\x91s\x01o\xce\t\x0cM\xafZ`\x07\x8d\x87\xa5\xd8v\xbd\x161`\x18=\x19\x1f:\xf5\xc40?2\x04,\xc0\x84\xa2%\xa1\xb5\x8b\x19\x8bw`\xc0[\xbay\xaf\x15\x9c\x89\xbb\x9bLO\xa3\xec\x85\xdeGK1\x96\x8fq:1!\xa0S}\x9df\xaba1\xf2\xbb\xe4\xbeT\xdeqa1\xd4\xbe6\x82\x1e\xe5m\x06\xe9\xc1.\x88%\xe9f\xce\xd7d<\xd9\x97\x14?1\x8b\xfd\xcc#b\xb8%\x80M\x93swe]\n\xd6\xdcg\xdf\xe9\x80\xfc\xf2\xf7\xc6u\x8c\x93\x92\xb4\x17\xba\xf2\xcb\xbdl,ru>b\x8a\xe5\xf6\x9f\x81\x86\xa0e:\xb1\xed\x06\x1e\xa7Y\xdd\x17\xe7\xf8V\xcf\x8b' + + +2024-12-12 23:54:24.534908 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16822 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862149702 + ack = 2922049094 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x80Mn\xa5\x8d49\xae~\xe7\x9a\x88\xe0IV\xf6\xe3O.\x94\x14\x17@\xae\xf3_<\xc9\xb0\xb038\xca\xca\x86M\xa5\xb9W\x80#\x11O :x\xbd\xb4\xe0l\xa0\x1f\xc1hIFM\x95ZN\xa9\xf70\x87\x97\xf5\xa3x\xcf~\xc4LAH\x89\x08\xd3.\xdd\xb7nUNj8m.\x08\x83\x15\x8a\x88b\x9e;\xfbc\xca\x9cd@uM{e>B\xdb\xaa\xa6\xa3\xcb\x06DdYI\xfb+\xba\xb7\x84\xec\xccr\xe8\x1e%\x94\xa6\xb9\r\xa8y\xdc\x83\x15\x87\xe2\x84\x95\x9ai4\xcf\xdfx\x1e\xe8T\xb8\x19\xca\xa9\n\xf1:oxZ\xfd\x03\xfdz\xfb\x821y/\xd9\xda\xacO\xf7\xc9\xf3huP\xfcm\x8a\xceI\xd4\xca\xbfP\xed@\x8e\x80\xca\xfeD\xdcX\xcc\xef\x06\xfc\xe2\xc5\x04\xff\xd7ib\x9f}\xac\xae0qbU\xc6\xe4\xf4\xbe\xf7\x95\x8d\xf4\x0e\xaf9_\xed$m\xcb_S=hP\x9f\xb5h\xbe\xa7\xee\xd3\x84\x85q\x1b\x8a\xd5\xe7\xec4i\xcc\x08U&\xde\xceee\x0e\x8e)\xe02\x9bS\xe7\x0f\x0fw=\x80E\x18\x9cz)LZ\xac\xf7f\xa8\x9fn\xaf\xca\xf0\x8c\xe0\r\x83k\x13\x9f3p\xd3\x001\xf9Y\xf1{\x04\xec_\x01\xa3\xed\xfb\xd6\xf73\x85\x1eR}\x95,]E6%\x9b\xfd>W\xce9\xdb\xf6\xcd\\A)\x9d4\xb8\xd8!\xb5)\x08T\xde/u9\xd5*\x9b7z*\xb2\xdf4\xee4\x85Hr\x07\x04\xa0i\x97\xe2\x85\xcb\xe8\xfe\xd4\xc9\x0c)\xf8j\xb0$\xd7\xa6\x14K%\xbeOG\xf6(\x84\xef./\xcf\xa6\xcd*\xcf)\x96\xb4\xede\xe50N\x88\xa0m\x8b\xd8\x02\x10\x87M\xec\x9eb\x97s\x986\x94N`\xb0T\xb9\xad\xef\x91\x8c\tg\x84hZ^\xd9q\xab\xb9\xba\xd27\x1d>\x9f\xe9z\xc7\xae\xe2\xf4\xf6}3\xc8\xe7d\xe6\x0c\x8e\xaa\xb9\x00\x93gsF\x8b\xe4\xf6 %\x0cvL\x9b\x8d\xc0Q\to\x87[[P\x02\r\xb3l\x01\x8e\x15\xc2\xae\x8c\x0b,!\xdf\x03!`?\xb9\xb3"\xdf>z\x96\xe6p\xcd$\x8e>a\n\x01\xa1T\xd8\x1a,\xfd|y\xe7\xbf\x87%\xcb\x97\xab\xa5\x1e|\'K\xd7\'<\xe2\x01S\xd0\xd5\xd9\x08\xd3q$pI6\x88\xfc\xd7(\xd2\xcb_\x1c=\xf8ge\xcc\xfa\xab\xd4$g{\x07k\xeb\xf7l\xd7\xea\xe7RR\xcbg\xdaF\xe3\x8d\xb8\xa3j?~J"\xe5]\x13}\xfay\xc7\xfe0zG\xf6\xb6\xd0\xacG;\xb7?^\xd2\xa9\x8d\xf7q\x04J\x8e\x0b\x99#\xd3w.8j\x9f\xfady\x11\xaa\xc8\xe9P\xac\x81\xecK\x9b\x18\xc8\x15\xc4\xcd\xe6\xf0\xbc\xdd\t\xae\t\xac\xb1\xd2\x83\x89\xb0\xc5\xf9\x92\x08\x01E\xc6\xb61o2\xc9\xbe\xfam\xbe\xf9\xf3`\xf1\xec\x0e\xed0\xc0\xf5>\x17\xc3\x1c\xabYzv\x8a\xc0\xee^\xe0[\x8eI\xc5d3\xf3\x82\x9d\x1f\x1cG#\xcd\xb7\xf0`s\xcb|\xe6\x0e\xab\xf94\x9e\x06\xa8[\x8d\x89&;\t\xb6(zA\xb8\xaa\x9c\x00\x9aB\xc3\x99\x0c\xae\x10\x82\x84\xa4<\xc8-\xd3>\xed\xac\xc4\x9b=\x87\x9a\xe1\xdf\xd6\xa5X\xf3\xf1?.\x0eR\x99-BQ\x93z"\xc9j\x03\x00\xe8\x05\x9a\x83\'\xect\x07\xb2\xce\xbcq\x15N\xeb\xa7G`\xbd\xf9M\x95\x9f\x84\xd1\x05\xcfW\xce0\xb2\xe7\x06H3\x11 \xb1\xf1\x15\x7fwf\xfb%T{X\r\x0fW\xc9\x8e\xda\x02\xc7\xd9A\x87\xab\x96\xad2\tU|\x87\xb8a\x97\x1e\xe2\xca\x9e>\xb1\x81j\xe2\x01+\x1d]1\xaf\x05R\xd0G\x9d//oGK\xdb\xcd**\xb3\xd5F\xbd\xe6^[\xa3\xb9CA\xa4\x06\xe9\x065\x85[\x16\x99\xdc\x149fU\xdd\xde\x05\xb6\xea\x1d\xd81\x9d\xa0`\xef\x86>\xcd\xee\x81\xb0U\x0f\xeaa\xc1\xe3\xfa,\x0c1\xce\xf5*Vm)\xa1\x1e\x0b-8!\x11\xc4\x93\xb0\xf0\x06\xc8\x95\xeev1\xff\x1d\xdc\x82\x9e\x80\xa1\xd3\x17\xa1%\xdb\xf4\xe7\xae#\x8dmU\xa9\xaa[*\xed6\xaf\xbd\x16\xde\xe8BY\xa8\xfc\xaca1g\xb3\t\x9c\xb9\x081\x8c\x8b\x1aI.\x99\xcb9\x03K\xf9D\xa2\x17/EF\xfa\xc0\x0b\xf8\x8f\x8e\xea\x95\x84e\xb6D\x07\x9d\xda\xd4\xa6\xf0\x95\xbf\xe3k\xedo\x9cx\xf7a\x9fu\x97\xa6\xb4 \x9c:\xee\xde\xe5C\xbb\xe7\xd3\xc0D\xfc\xd50"o\x14\xd5X\x0b}\xc8\xae\xf6IZ\xe1g\xac\xffn\xab\xab\x9b\x96' + + +2024-12-12 23:54:24.541629 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16823 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862151142 + ack = 2922049094 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x7fB\xddm2f\xc1\x82$\xd2j\xc8\x16\x04\x8a\x9a\xbc<\xb8\x81\xc5\xd8m\x86X\x82c$\xb9:\xf8W\xe6s\x0e\xf2\xf0\xaa\xb0\xfa%\xc7\xca\t\\\xae\xd6\x1f<2\xf6\x00\x00\xd7\xe9Q\xed%\xe9\xa8\x89j\xfc\xb8H\x9e.J\xc0i\x82!\xc9\xe8\xd1}\xfax\xad\x0c\xed\xdao\xf4\\\xe4\xbd\xa0\xc04\x89\x92\xbd\xb6\xbe\x9c2\xdfU\xe9\x1dw/\xb4\x04\xd1\x99"M\x0c\xab\x9e7c\x91\x9eD{E!>\xc7\xf9\xd0/\xe9\xe2\xdf4\x06/\xc1\xb6\xf2}\x8f\xf4\\\x96\xcc\xe3\xaa\x98`\x1a\xe9\x83\xd7I"N4\x06JE\x83\x83\xd4:\x91\x8am\r\xd7dA\xc9\x90x\x0f\x1d\x04\x92_U68\xdeJt\x9e\'\xe7\x1a\x19%Q\xce\x1d"\xc7<[\x90+\xb9me\xcb\xc5e\\\xd5J\x80\xc9f\x0bg\x90\xcc\xe5\xa5\x82\x91\xe0A(\x1e\xadeGz\xd3\xe8E\xca\x88\xe1\x88\xc3\xb2=\xde}\x87\xa0\x99\t\xb0\x98\xacE(\xb6v\xcfk\x08\x1cu\xedt\x8b?G\x1flh\xdb\xf4\xb9\xc0\x83\xf11\xc8.\xbcE\xb6\xc1N\xd6\xf2v\x04\xd0\x9b\x12\xcb\xbd\xd0\xac\xe8\xfb\xb9\x9dkz\x89\x1c\x99\x01Y\xf2\x97G\\\xe0yw\xd2Z\xd6\x81S}0\x12\tZ\xdb\xa5\xe1\xe7\x87\x02 \xe0\xd0\xffD\xd9\r\xa73\xd6\xc28\x8d\xd3a\xe2\xe9\xc7\xda\x1a\x8f\xba\x89V\xd52J\x1a\xc2,\xa1x{\x82=yb)5\x9e{\x98:\'\xe3\xa8\x8f~\xa2\x03\x0e\xc4C\xda6\x0c\x85\xa4fC\x1a,\x15\xce\xf6 \x8c\xec^*_\xe57\\\xc5n\xbc(\xf8\x13G\x0f2\xedg\xed\xca[\xb4U\xa0\x05H\xf4\xf6\xa5]\x85\x886y\xda\xa4\x9c\xc5\x9e\xc2,\x80\xcf.\xbf\xc4R\x04\x9f"\x05\x83\x9f\xb4y\xc4\x85\x85\x86\xed\x04\x96\x132\xcf\xb8_\xffK2\x83\xf0\xf6\x88\x99\'a\xb9\xd4\xa7{\xabq\x13Cv\xe2|j\xaeTx\xb1;\x7fJT\xef\xfb\x84\r!\x91\x9f\xc6n\xfb\x0e\x00Y\xf7?p\xaa\xdf\xa4\xc6+\xa6\xfcr\x04\x11\xf3\xe9=}\x81\xe9i\\e\xd9\ri\xec\xba.\'\xb7M\xd5\x95Us\x04c\x97D\xe1i>{[k\x88\xc4\xdb\xae\n\x18>S\xe5\xcfy\xad\xf0\x18\xe9m\x94\xe5\xbd\x08\xb52k\xe8eHP\xb9N\xd9\xd3\x14w\xef\x0e\xd1\xc9\xc2+\xb3\xa0)2\xbd\xf0JU\xea\xefQ\xc6w\xb4\xe7\x1cx\x87s,\xe7\xe3\xef\xfepE\x85\x08\xda\x83\x17V&Z\x8e\x8df\xd2\x07A\x10\xf611\xad\xe0\xa3!\xe1\xc6PCj\xa1WQ[\x90\x0ei\xd9\x14O/*\x8f\x0c\xb8\t\x8c\xfd\xb8\xa9n\xea \xf1o\xb2\x01\x11\x81\xb7\xd9\xff\xd0\x8fv\x82\x12\xef\xcc8\x15\x13;\x94<\xdf\xb4\xdf?\x1f\xc5\xbd\xee1X\x10\x93\xf7\xb0\t\x89\xa2\x16T2\t\n\xfc\xa9\x8e\x99\xec\xad\x0f\xa92\xd8\xc2\xb9\xcaN\xc7\x8aa\xef\x99\x99;\xbcfI\xae\xec.6\xdc\xbf\x9bYM\x0c\xce\x89w\xfb\xdb\x1c\x19\x8f;\x94\xdaF\xe1\xfa\xc2\x02\x00\xf2\x0bc\xdb\x9f\xc2\x83\x15\xcdf\xb2\xc6\'\xf4\x89H\xf6\x8fe\x0fX"\x8d\x85PTwK\xf7H\x86\xaf@3\xd4\xdd9\x88\'\x8e\xa1*\x07\xa6\x94f- \x89\xb4\xd1|\x99\xe9\xe31\xbc\x9d/\x19e\x06\xf9T\x0fTr\x03m\xb3\xfaO5\xfcjej\xb2\x02\x1b\xa2\x0f\x8d\x1f@\xda)\xea\xb1ws:Z\xf0\xb5!NI\xeb\x98\x00Qz\xc0\x17\xc3\xfd\xbe\xf4\xe9b\xcdm\xc1\xb0KDIT\xeb\xa9~)\x83B\xb1]~\xf4\x8dW\xf7\t\x83,\xf3\xafgJ\x04\x9d\'\x1f&\xf6\xfc\x8a\x89\x18\xb5\xc3]&\xd8\xec$\xf6\xdc\x0203\xa1\x9bK\x8a\xbd)%2&1\x7fw\xcb\xfa\'e\x93\xe8\xaa\xb0\x15\xe8\x0f\xd9\xf1\xd2\xbc*\xfe\xa5\xf7g\xad\xfe\xc9\x97\xc4\xdc\xa2\x17\x96rpP\xf1\xffZ\xa1\xa3\xa0P\x906\xa0g\x93F\xe2i\xa3\xc4\xb4\xfc\xf9Z\x0fZKsx(^\xb9T\xec3\x862\xd9\x85k\x8d\xf0\xe2\x9e\x18\xa5b\x9f* \xff\x00\xd0P6YC#\xde\x97?;\xac\xe6*\x8b\xc1<\x9e\xaeMz\xebW\xe6\xabJ\xf7\x12!|\x04\xd2dd\xe9\x9fJm\xdaV\x0f\xbb\x1e\x02p\xd32\xba[\x9bo\xc2\x06\x053?\xb5\x02\x19\xe4\x865^#C\xe1A\x12\xd4\xedo{\x03\xc4\x15\x93\xdb\x0e\xf9\xb3\xa3\xd7\x05-M\xc6s\xfb\xe6\x06N\xaf=\xc3\xd5\x12\xe2\x14\x98\x17\xf8\xbbU\xd7\x90\x17\xfb\x8b\xb8\x00\\\x06\xb8F\xf0\xe4\x96\xdb\xa8x\xae\x93uU\xaf0\n\x02\xf6?\x03\xf4x&m\xf1$\xceWOp<\xff\xd0\xee\xa5\x89\x03\x87\xb9)\xfbv\x8e!\x95<\xff|NNC<\xfc\xc9\xf5m\xc5<\x10\xf8Z\x1a\xe7\xa2\x9c\xfck\xfa\xf5\xbd\'\xd1\x05\x99\xc2\xa2\t\xe7;\xc4\x1f\xf9\x97u\xc5q.\x9c\x89\x1d!\x06\x07Z\xfb\xa0\x17\x14' + + +2024-12-12 23:54:24.547573 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16824 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862152582 + ack = 2922049094 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\xba\x91&\x1d\xcc\x84k_Z?,CfM\xc6\x13\x8c\xda\xcb\xd7v\xd0\xa6\xa5\xa0\xa9\x07<\xf7\x98\x84\xca\xc9\xc3,K`\xb0\xb0\x8a\x90\x91\x8eObx\xf1\xa1\x8br\xfa%\xd7\xf0\x9c2\xdf\x01T\x1b\x89\xbf\x06\xe6\x98\t\rK3\xf6\xe6\xa9\x9a\xb6(\x0f\x8a\xc5\x93\xc7B\xa6\r/7EA\x93\x8b?\xc8Z\xaf\xd8\x12KY\xf29\x9e-q,\'\xab\xc792\x01\x99\xa2\x02Y\x18l\x1e\xd4P\xb1\x01\x12-jw_\x05\xc2\x88\xbax\x0fNV\xcfG`\x85\x9a\x90\xdc\x18\xf8\xab5\xe2\x16W\xb2\xd9\x10\x0f &\x16)r\x9c8(g\xe4\x11A\x8f-\x05\x07p\xa2\x18\x94D\xa8\xcc\t\x8e\xb1ao\x8a\x9d\x8e\xa0 z\xb0\xa9\xc8MS\xdfV\x10\xba\x90\x08\xfdN\xc5v\x02\xb3I\xfe]\x91\xa3\xfa5~l|\xaf\xa4iu\x97\xa8\xfd\xfe\xde\x9c\xb0z\x02\xe5\x94\x9f~\xa9\xdcy\x9cUz\xc9\xb9\xe8\xb2\x16\xbf\xaa\xaah\xea\xa7HpN#\xcf`\x04\xec\xa4\xd0\xd5u\x0f}\x04~\xab\xce\x87I\xffy\xba\xbb\xb7u}\x93\xbd\x7f\xba\xa3.\xf6\x92r\xbf\xefM\x06\xde\x87\xc4\xa7\xfa\r\xa5p\xad\xbc\xd0T[\xc7n\x14,\xed>\x04{\xa7\xaa\x0f\\Z\xdeLe\x86\xf7\x06\xb97\xc3\xbf1\xba\xf6f\xd5\xe9Y\xa6\x8ev\xf3\xad\xee}\x02\xcfi\x14\x14F\xb0\x87oi\xde\xef\xba\xf5k\x92\x14\xa89\xef\x81am\xa5B\xde\x8fB\xf7\xfd\x89\xe6\xad\x80\xcf\xf8v`p\x9f\x8d\x11\xafI\xd3\x91\x02\xc4\x01\x87\x8e\xc2x\x1b\x08,\x00}\x96*\xa3\xb0GQ\xecmt\x120\xdd(\x1b\xcf\xe0\x90\xac\x0c\xd0\xe9\x1b\xe7\x06/q\xe6;zg(\xd3\x03\xb5\x9e\xa0aZx\xbd\x93E{\xab\xe8e\xa8E\x80\xdd\x9d\xcb\xd5\xae\xb5\x1ehX\x87\x9a;\x90yu5\x81W\x89\xab\x80\xffa\xde\xfd\xdc\xe6\xa5\x91\xb7d\xdbT\xe1\xb6\xad\xc7\xf8\x80z^\x04\xee\xa7\x12\x16\xd1E\x7f\xac\xb5?a\x87\xa9\x00\xf5\xb4\xe8\xe2\x15^DkA[\x15\xd8*\xbcx2\xc8\xa6\xea\xafC\x93{L\xdc\xacN`\xf9-\x1c}\xbch\xa3P\x81\x05\x81\x8e\x98\xfc\x1d\x02\xe8g\x85\x0b\x1f\xe1l\\\xd3\xc1\x1c\xa9\xdc#\x8c[\xf3\xef \xa0=8N\xbbX\x86z\xf7;}Y\x8e\x93o&\xaf\xdd?8\x8b\x7f\x8b)d7\x0e\t2\xfep\x9c\xba|{\xe0F}\xc9u)\xfc\xa5\xf4\x9aHw\x8c\xe6s\xbd\x01-\xf9\x92\xcf\xde\xe9\x8eO:J\x9e\x15\xee\x83{\xe9\x07\xae9\x00\xfb\xf9\x06\x8bU,\xc2\x13\xf9YZ\xcd\xcc\xc0#\x89\xfe\x13p\xdd\xb23\xae\xccX:j\xe4p8i\x97_68\x0c1\xd5\xdcq\x1a\x9c\xa0=b\x85\xf6kmD\xb0N1\x13C\xb3v\xbb\xd5\xd4\x01\xb2\xd9\x82\xe1\x91\xc7\x1d\x95x`\x85X\xca\xb4\x1f\xff\xaf-\xe8\x9e\xd4\x8cv.\xadxg\xaf\x8c=\x82\'\xef\x19\x19\xa0\x16\x049G\xb6\x88\xf9\xb3\x17\x9by)\xfb\x93t\x1e\xc4P\xf7\xfb\x9d9\xcc\xf5\x8aC^OJ\x87\x1brnH\xcd\xc7f\xaa\xf1QH\xa1\xe8Bn\x14m\x826\xf799\x9b\x89\xea\xe0L/\x88\xe4\xd7O\xe3\xb1\xef\xc4$L-\x85\xfdd)\x876\xce\xbc\xb8\xad\x8fw\xc0TL\x1a\xedzh-zS\xd2\xd0\x9d\x98\xaf\xda+\xdf\xaf\xbe\xe7*\xe0\x8f\xa6z\xc8g\xf8t#\xfbN\xc2h6\x081++\xf5z\xf5M-\x0b\xfcm\xcb\xb6\x9dRd\xbaI\xb1c\x8e\xcc\xc8\xaf\x9a\xb5\x8f\x12\xe1\xc3J\xe97\x08+\x02!\xc2\xdb\xa9\xbd~j\xc5\th\x90\xadO6A\xc2\x9b\x08\xe7\xe0\xe4|!\x16\xf32\xd1\x9ecvh\xb6\xfb\x025\xbf\xb0\xac\xf9\xfb\xdb\xcb\xef\xd4\x1a9n#\xb8\x88\xf8:j;`\x028wY\x0b\x15\xfb\xf5\xdb\xf8it\x1cg\xd1|\n\xe2\xd2\x91\x16\x1c\xa1\x01Q\xbd\x1d0\xa4JN]\x00qU\xb0\xf2\xd0\xf4\x1f\x0b\xf3\x05\x9co\x17\xcc\xf3&\xc3\x9faCX~&\xf5\xef\x11<\xfc\xebT.\xd2U\x9e\xe2\xaf9\xb9\xb2\x06\xcb\xe4\xbb\xec\xdaednf\x97\x16\x80\xe3c7\xb4\'\xb1\xe5\x94\x9b\xd5\\P\x8aRb\xf8\xfd\xfc>\x9e\xcb\x97\x85^\xbd\x82\xc4\xa6\xa5O<*\xf2\xa1\xfd\xbb\xfb\x1d\xc5\xbf\x87\x89\xc3\xf2=c+*\x88]\xed\x88c7\xdd\xcb#\x86>\x8b\xa7w\xd8v\xa1\x1csS <8{\xb7c\x8b\x99\x91o.+\x08N\xdf:\x1b\x9f\xbc\x1f\xd8\x06<,aQ\x87\x9b\xef\x8a\x0f\xa8T\xa6\xca"\x82\xf4\xb0\xf2\xca\xf4\xaf\xa7\x00\xce.j\xf0#\xdc\xa5\x8fm\xb3\xce\x7f\x99\xcf\x01A\xad\x8d\x1f\x03Z\xdb\xe7\x86\xc2h\x9ab5\xa4_\xae\x82\xc6\xb5n\xd7\xa1K\'\x8ep\xe7\x8d\x9e\xd0\x0b(8\x05\xa76\xeaV\x8f@\xff\x8c \x04\x13\xfb\x08\x05V\x02\xe4\xc4\xf1\xf1+d=\x96\xc3k\x03\xce4:\x81B&j\x86\x84?a(\xd14\xe7d/I\x9f\xe2\x88\x83\xae^\xb2\x01\xd9Y\x1b\xfc\x10\x08"3B\xe64\xb8^\xca\xa4\x17^d\x85\x01\xe0\xf3{\x9a\xdc\xe9\xc9\xb8\xa0\x14\x91\xa1!sA\xd0\xd3\x87U{\xd5W\x96\xf2\xbd\xe6\xf9\xd5\xfa\x06\xb7J\xc6.G\xbdf\x1a\xb8\xc9l:\x19\xd5p\xb3 \xaf\x8f\x0eT\xae\xd9\xb3B*\x1e\x91"\xfa[b=\xcf\xd9\xc6hB\xe3\x07\x91\x91aSp\xd2?\xd9cQ\xe7\x14\xee\x8c(q|\xb5\x0b:FY\x86\xe0\xb1\x1b\x94v\x04\x19 \x8d4I\xacBnr\xb6\x00\xb8\xcd~\x82R\xa0\t\xc0\xe0\x9c2U\xfdd\x02\xe1/}\xc1\xc0\x93t\xe4\x101\xaa\x18Qxy\x03d^\x9bW\xac\xb3\\\xb1#[\x9e\xdd\x93\xfa,\xf4!J_m\xb3Z\x8cz\xd9\xcd\xa7\xda\xb6\xee1\x9ao\x9a\xfa\xaa\xcc\xe9' + + +2024-12-12 23:54:24.552144 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16825 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862154022 + ack = 2922049094 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x97\xa9\xe9\x08\x86dWf\xdd\xed#\x82\xe8\xe0j\xfb\x08\xe8UZ:\x9a&~\x18]m\x91\x03u\xce\xa90\x93\x1aH,=\x08\x8c\xcb\xf0j\xfa~~\xae\xb8x\n\xda\xafa\xec\xbd\xd5(R6i\x7f\xd4\xd5\x99\xfb\xd7\xa2\x1a]MN\x8d5\xd8\xaaNw\x0b\x0e\xa9\xa5"\xc0\x7f\xff\xc3-{p\xdam.)\xefx\xa4N=o\x0b?J\r\xcc\xc6\xa4\xe3\x06\x91\xfa\xc2K\x10hi\xd4O\x8bi\x07\xb9\x83O\xf8\xaa \x84I\xd4W\x07y\xc66;\xb6!\x19\xb5\x97s*o\xa1y\xc6\x02\xa7\xac\xd6\x9a\xce,I\x7f\xcc\x95K\xb7):\xf6ND\x15]\x17\xb0-\xdbCd\xb7w\x85\xfa\x01\x83h\xcf\xb4\x9e$\xa7\xff\xb68c\xd6\xbc=r\x02\xfb\x80\xf8\r\xe6\xe4\x1c\xbe\xe9\x9aC\xcdP6a\xb6\xbf\xce\xcd((\xe4\x85\xe0\xbbP:\x9c\x08xQ\tw\xe0\xe8\x0e]\x1c}k\xa8\x121\xf2\x0b\xe7S\xbcl\xe5\xf2\t+\x92\x8bj7D\x95t\x87H\xc3\xcc#\xaf(\xbe\xa9\x1a\x8b\x0c\x18\xe3V\xcb\xd0\x1f\x9b\x84\x07\xbc\xcd\t\xd5%\xad\xd9\xe18"l\xa9\x8e\x17\'\xfar\xdbpG\xd02\xe4\xf7\xf2\xee\xdf\xebh\xacz\xc5\xcb9a\xa6v.\x8a\xf6\xdezP)\x7f\x91\xdb\x15\x84>\xd8\x119\xe0\xa3u\xaa\xef\x13~\xef\x8cK\xf5\xd0\x97\xfc\xfc\xfet\x0bgG\x99f\r\x96\xe7U\x84\xfd\x13\xe6\xf5\x14\xe3\xfc\xafn\xcb\xedCL\x1b\xc4\x918D`\xcb\xe7<5\x9e\xd8\x01\x18}VP\xdd\x17\xb7\x87\x17\xc90+\x0f\x94\x01\xc7\xa6\xf7$\xc2!\xb6\x94\x93\xcb\xa8\xe7#m\x85\xd36]v\x08\xac\x8e\xabK\xb1\xbc\x99D\x1a\xf8.A\\i\xb6\xd0\xa0[\x00\x00@`\xe6\x98\xc6\xcb)\x15o\x88!f\xc0&\x18\xfdA|F\xb8`\xc5\x89]Z\xff\xba].w\xa3S\xad\x07b<\xf9\x00\x1bC,\'\xa1\xb2\xdd\xc5HJ(`O1\xa7bh%WI\xf4-\xdb\xd4\x8a\x9eg\x9c+\xabT0\xbc{\x9f\x18\xed]\x89\xed\xc0\x04r\xf5o@_*\x0c\xbe\xca\xc2\xa1\x95\xd4\xa5}~z\xee\x04T\x14\'\x9c\x05\xc6\xca\xaeS\x11\xba\x94,\xb7\x829\x1d9\x05\xd1\\x\xe6\x9e\xae\xe6a\x04\x96$.\xd4\xcc\xed\x10\xd4\xf0B\xebqBm\xa7:Da"\x1e\xc2&\x8f*^\x16\xdb\x84\xa7\x9e\x87\xbd\x8a\xe1\xe6\xd9\x8a\xd2g|\x06"n4\x08\x93\xb8E\x11\\W\x1ba\xf2sE\xff\xea\xae\xdd\x9e\xd0I\xa0\\\x81\x93^\x03aSD\x036\x0e\xe7\xed~\xeb\xba\x89RJ\x01\xc0o\x04\xaa\x19\x99\x1d8=A\x9e\xcc;\xd6\x96\xbf\xb8\xb8\x04&\x16\xd7\xfa\xb0s\xe5\xd6\xd4\xd5\x8f\xfboc\x9c\x008\x9b\x12\xcb\x06\x8f\xe62\x1c\x01\xe2A\x8b\xc7\xc5,\xe8\x87j3\x11o\xb8+\xbe/7pz\xe0\x8ap;>\xe3%\xfc*\xc6\xb7\x1d0vl\x11d5\\X!1G\x1e\'T\xc3\xce%\xe3(\xe6\x0e|\xf0\x840\xf3\x91\xbe\x14\x01\xbc\xad\x10^c:\x9fO\xb8\xf7b\xca\x0b\xa6\xb5t]\xf3C5\xc4`\xabqf\xb2\xa3\xe2L\x89\xbd\xde],\xfe\xc6w\xf8\xd8\x01\xe7.\x9bm\xbaZ\x97\x0e#\xb1\x10RMp\xd6:\xb6 \xd4\r<\xfbU\xfeTi\xc4\x84\xf4\x1d\xbc\x0e&$\x15\xe0\x1c\xfe\xaeMI\xe4i;l\xdf\xd6W\xd3"\x85\xe3\x0f\x1c\xb8J\x84Ll\xa6\x99\xf4\xf4\tnH\xbd\xb1\xd8\xdf"\x0b\xe6\xe3F\x12\x16u\xc7\x7fW\xb1\xda\xd7\xb7D\xf0\xc5\xdc\xb5\x99\x86t\xab\x99\x86l\xa8\x17\x9b\x80\x1a\xd39\x9fz\xba\x94\xb5\xea\x85\xe0\x00\xb6\x1a)\xee]\xf8H\x84\x9e\xbe\x82k\x88\xd3y\xf5\xb3\xca\x94f}>\xc5\x9f\xe44\x03\xe5B\xea\xeb;\x9f\xe4\x05\x0c\xd0F\x93\xe7qZ\x04\x80=\x9dj\x93\xd4\x05\xf8\xeam\xc6@\x8fM\xc1\xcd.\xb5\x93j\xf9M\x9ft$\x9c}\x94\x8cV:\x1f.\xa2\xa2yG;\x99\x8e\xa9D\xfa\x060~^{7\x8e\xb7\x12:\xfaN\xf0\x0f\xf0W\xe5\xfc\xd0\x07\xaf\xf1"6\xc6\xea+\xf0\xa1\xc4\x1a093\xaf\x13\xc1F\x8b\xf5_\x98\x079\x91\x84\x90\xe7\xafn\xc9L\xeb\xa6LV\xbe\xae\x11\xf5O\xee<\x0e\xc1\xa1\xae\xc0\x1a\x0e\xb3G\xf7\xfb\xd4\xbf"u?\xd4\xd6\x84`\xb3\xaf\xa1u\x86I\xaaU!\xc2\xea\xe1a\x84,\xc6\x02\xfd\x02\xbc?\xe5\xef\xc6\xc1r\xd4\xb8\xe8\x1d[r\x0f^$\x9cP\xbcOQ\xf51\xbeC\x84\x0b\xada\xa3\xaac]mc0"\xd6\x01\xd4\xeaF5y\xa4\xb6\xfd\x1d]\xd5K\x1dS\xbc\xab\xd8\x9f\x89T{\x92\x14/\xdbg\t\x94\x9c\xd7\xd6\xe0~t>0\x18\xa1 \xaf\xc3\xce_"/\xedt\xb8\xaa\x97\xe0\xaf\x82\xf6q\xea\x9a\xca\x14\x8f\\\xfe3\xa2\xd4\n\x89\xe3!\x9e\x8d\x1c\x8b\xa7\xcc\xda\xc2\xa8Z\x9e\xb8\x1a7H\t2\x88V\x11D\x0cM\x8dhx\x9e\xe7\xa5P\xe7\xca\xd3\r\x91J\x0cI\x05\xee\xcd\x8f|2\x10\xf5Y\x07\xb6\x9e\xff\x065:f\xb2\x96\xbc\x80[H\x07\xf8\xc0\x86\xcf\x19\x98\x08\xd4c\xa9,f;\xa8\x8e\x7f\xa7\xed\xd7\xbe_/w\xb2\x1f\xd85W0UT\x90\'\xbd\xfe}\xcc\x90\xfdO\xbb\x85\x86XssMU\xb3\xcb\x08\xca\xdf\xcf\xe1\rTA\x0eP\x92\xc4\xbd\xa4\x86\x13\x80\x91QP\xc9\x84\xd9#^\xf9[\xaa\xfe\x8e\r\x8d\xdc\xc1\x98\xb1\xfa\xa3\xbc+}\x90\xb6)s\rdP\xaa\xcc\x9aGAz<\x98\xf0i\xa2\xed\n\x98\xacL(\xe9\xfbH4w\xf6\xebb\xea\x1e\x9f\x07\xa9\xa0\x05\xac\x86\xa3B9h\xfe\xe0\xd4\xd5F\xd1}\xf7\x8f\xab\rT+wM\xd7\x11\x90\xbd?\x1f`\xb6\xe0\x10\x03y\x01\xd6\xb5\x9b\x97wi&-crg\x8e\xb0' + + +2024-12-12 23:54:24.559979 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16826 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862155462 + ack = 2922049094 + dataofs = 5 + reserved = 0 + flags = A + window = 516 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'qN\x8c&\x03\xc2\x86\xca\x01\xe57\xc0;Ixd\x18m-\x89-\x0eV\xc7\xb6|u9\xd9\x1e1><~\xe9\xf7\xc9\x93\xf8o\xa5 b\xf7@m8 w\x01\x83\x8e"\x93\xb4\xad\xc3\xef\x93Bk\x9c\x04`\xd3\xb8Q\x83\x95\xcd\xf7\xae\xa6n\x80Y\x86\xed%\x92\x9e\x12\xa6h\xdecR\xcc_\xec\xe3G\xbf\xd0\xe7M\xa6f\x10\xe2\x93\xc0^\r\xf5<\\\tF-\xe4\xb8\xcdS(\xd7\xf8X[+\xea\xb3\xeb\xd8\x0bt\xe6N\xb2\xd49A\xbb\xe4h2\xf3\x8a\xd8q\xdd\x13\xc9\x0c\x9d\xb6\x1bl\x01\x9cT\xca\x173\x13\xf4\x95\xf7\xf3\xddr\x86\xc1\x90j?\x15\x96\xdf\x11h S\xfd\x1b\x89\x8e\x1f\xde\xf0\x159\xa3\xf9\xe6\x9b\x91*\xf7},\x01\xd8\xa5d\xd4\xd6k\xa5-\x19\xca\xd5\xc9e\xfe\x08\xec\x86\xf3h\xa5\xd2\x05(\x04\xe9\x9e|\xb0\x92\xb2\x04a\xd36\xcb\x18\xa7\xb8\xbcY\x13\x17\x84qml\x9ex\xff\x05\xb7\xf6\xc3\x9e\xe6W\x0c\x80\x9a\x1f\x94\xbfUZ\x87\xe9\x95\xd8lu\xa1?\xeaJ\xc6\xfb+\xb8\x85\x9b\x93\x07\x9e\x9f\x1d\xcb\x16Di?R\x16*uqg\t\x90\xbb\x89D\xde\xc9\xff9\xc2\x9c\x0e*\xc6\xa7\xf3\xcc\xe1e\xa9j \x81\xa8\x99\'\xd4\xdb8\xbb\x1f\x84\x0c5\x00C\xe0\x08ug{Kfv\xd0y\xd23\x98\xb7\x94\x04\xd5\x1a\xc8\xc2\x97"\xc0n3\x8as\x15\xa8nJAv\xd8\x9d\x18\x95\xfc}\x899\xda\xdeX\xde\x15\xe9\xaeD\x08\xa8\xa8\xa8\x1e7b65\xfdX\xc5\xb9\x95\xc8\xfe8\x0f\xb1\xddy6\x8a\xdfz\xa8\x9ae\x024\xb8*t\xc8\xa8\x19\xb2:3\x96\xf5r\xb2\x00\xb6-\xd6D_\xc0\x14k\xfc\xcc\x82\xee&\x98\xc1\xfb\xfc:\xf8\xb4+\xd5h\xf5%\xc4u\xdaz\xc9I&\xe9t\x8a\x05 \'\xad\xa8\xee\x124\xa6\xd8r\xff\xac\xe9h\xfe\xb6C\x9b\xf4\xbb\x00pY1\'V\x90\xc8Z\xff\xc3rT\xd5\xfd\x13y\xbd\xe1;\x12\xfc\xb7\xb9u\xab\x97#\x06\xed\xfbg\xd0K>p\x90\x18\xf3\xe3?\xea\xf0\xa1\xb6>\xa2\xac3\x0f\xaf\x06u\xb7_\x0e\x14F\xe7\x14\xc8\xeb\xd7\x12\x8bR\xbbN\xb7!\xa7L\xa5\xa3\x16e\xc2\x0b\xb5\xbf\x91\xec\xbb]\xeb\x7f\xc1\xac8\x99e_1\xbb"\x9c\x9cs\xd1Ten\xfa\xa4\x8e\x9bD(4l\xbed\x17\xf1\t$c\x0f\x04\xb8\xa8 .\x8f\xf1\xcf\xfe.\xa4\x00a\x1b\xe8\x8c\xcb\x88\xa0\xfcIB\xa03\xa4C&)_\x9f\'DW\xf1I\xe0\xca\x0f\xc8\x12!r4\xf8(^]Ix\x97&sT(\xbc\xad\xcc\xdbw*\x19\xe8\xe6\x02j\xd3\xb2H]Y\x981\xff\x0e\xf6\xe0\x01\x88\xa7\x1fB&\xc3t\xae\xcf\xb6:b\xa7\x9c+0B\x868Qxh\x1b\xba#u\x8aA\x93\xbd\x80\x1a\x9c\x9dl\x18\x895E\xbc\x10?\xd3l\x17\x83 ?\xf6\x10\xc5\x0c\xd4\xd5\xd3\x85\xb0\xe4~\xa7X[\x11!&\xeb9\xcb\x01\x8b\x1b\xf80u\xbff1\x0f\xf4\xeb\x11W\xf58/\xdfN\xb1\xdb\x0e\x8a\x94Z\xe5\x90\xe7\x99\xd3\xd8\xb0\xf53\x01^\xf1W\x9fl$\x8c\x15\xc9kvX\x80\x02\x91\xb9\xf3\xf0P\x9b\xd0>\x1f\xae\xfc4\xda\xb5\xf7\x8fDx5\x94\xf0O\xd52\xc1A\'\x97\xcc\xc4OYm*\x1a\xd0j\xa4 \x14\x98\xda!u\x7f\x8d\x0c\x1dv[ Qx\x1e\x1b:\xa5\x99\xd9b\xefi\xd9\xfa\xc7S\x95\x8bO\xdd]R\x1f_\xc1\xdc\x89\x01}#\xfc\xed\x94s[\xe4~\x000C/\xcd\x88\x18[yhJ^\x88\x05a\x08\xf77\xb4\x82\xad\xc2\xaf\xc6164\xba\xf3\xce\x88k?3cq7cu\xe9\xc3/\xce\xa9\xde\xdb\xee\x04\xe3\xf2?\xf8\xd4\xee\x11?\x93_\x05!V\x96Rc\xd92\xc3iiZx\xdf\xf9zh\xe4g\x01\x8d\xd8\xd7Q\xe0\xd7a\xb2\x00A3\x1a\xd0da\x92\xf3\xc6\xc0!\xd6\xc5\xd4\x06\x91\xcf\xc6\x18\xf0\xfb\xeahY\xf8\xa1\xc4d\x9c\x8ct\x12iE\x06\x0bc\xe9\n\xf53t\xae\x93\xad\xf7\xc3\xf3\x9d\x14\x91\x98\x10J\xac\xe3z\xb1\x8d\xd4\x0f\xac\xd4\xce\x86\xb6\xe9\xd0\x9bR\xb1\xcb\x16\x13\x1a$\xa2)\xe9\rH\xe1\xdb\xa3D\xdbU\x0f$\xe4B0&\xcd\x8f\xfb\xff\xe3\x19\xed&\xb4j\x88\xb5\xb1"\xbc\n\xa7\x9e\xb8\x7f\xb3\xb4\xc1\x01e\x81\x12kn\x95\x8f\xd0]\xac\x9e9\xd6\xcd\xd0\xf3:5xv<\xeb&k\xac5\x9d\x95\x81\xff\xeb\xc8\xb5\x89\x9c\xe2\x95\xec\xd6\xb3\x90,\xc0\xe7d\xe4\xe6B{o 52.168.112.67:https PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1012 + id = 16827 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862156902 + ack = 2922049094 + dataofs = 5 + reserved = 0 + flags = PA + window = 516 + chksum = 0x6a85 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'o[\xf0\xcb\xef\x1eU\x89\x7f/\x08\xb7\xe0\xbc\x87\xe1\xaf\xaf\xa1\xda\xab\xf7C\xc3\xc2\x87\xf8y\x99\x95n\xcf\x1ce\xc3\x10\xe5\xad\xc7\xe98\xb0\xb6\xb4\xaaU\x9b\x05\x11P\x84Od}\x97\xda\xa61\xf0\xd9\xdc"7\xcd\x9cF\x9d\x19\x8e\x88\xc97\xf1\x0e4\nQ\x11\x1b\xc7:B\xf7\xc4m\xe5\xf4E\xd4\xb2\x13\xba\xab@\xe5\x80\xa3\xabR\x17hAQ+\xa2\xabz\xda-\xdbl\xcd\x9c\xe8\x96\xbfiH\x17\xab\xa7\x83\xf9\x06[%P\x96\x90\x97\xfc\x0ef\xfe\x98\xd7\xad\xb1\xc7\xc3\xe3\xc8\xba\x12_3""\xd2\xf6o\xc0\xf9\x93\xb6~\xd3\x19\x18\xce\x86np\x06NX\xf3\xf5\xfagYh\xea\xe2E3\xbb\xef\x0c\x80\xc2\x7fl\xfepl\xba\x80\xc5\xbe*S]t\xb11\x94\x1bQ+\x95\x87\x9b\xdd\xd0\xea\xb4\xf0\x1a\xb7(v\x03DQ\xdc\xc3\xe8\x19\x86=.<\xd0\x99\x19Q+\xc5snq\x15n\x1a\x87\x80\xb7\xfa0\'3L\x04\x0f\xfe[\xf8\xb1\x07\x92{\xcc\x8e\x863l\xfc\x8d\xda\x90\xcb\xe2I\xd3@]\x11\x8dL\xa3\xa6x\xdf\x954\xeeG\xd9\xaa\xf6\x93\xab\x80\xa20\xf5\xdd\xa3\xcau\xfd\x12\xb2)\t\xcfV\xd9\xbf\x9c\xb2\xf2\xc9\xcc\x8b\x87\x0c?\x86\xe48\x89\xb8\x07p\x93\xb8\xa8\xaf\x9f\r\xb1\xa9\xe5L\xd3\x03g)6\xd2\xe0\xec\x12Y\xf8\xcfj\x08 \n\xd8\t\xca\x0b|?\xcdRb\xa3\x18\xc0Xi\xb6)\xc2B\xd3\xcf\x1c$j\n\x82\xc6ze}\x86$\x108\xc0\xa4\xaa\x11v{\x1f\xc9:B\xd9S\x1f3\xf6\x01\x06\x16\x17G\x87\xe3\xf5\x00\x9e\xa4,-D\x1e\xdb\x9e\xb1\x1a\xab\xb56r\x0f\t\xd10\xc4\x9bv\xd6\xbd\n\xdb\x04\xd9\xa6\xf9Y\x84\xbe}\x85\x85\x82\xa3\xe7\x1d\xa9\xach\\j\xa9&\xa4/\xa6\n\x94\xe3\xc3W/\xec:\xc5X\xb0\x92\x0e\x86\x0b6\xd1\xd1\xa4\xcc\xc2\xfb[\xbf\xc9M\xf9_\x1c@\xf6X\x14\xd1P\xed\x99\x80\x1f\xa6\x06L\xc7\r\x10<\r\xbf\xc5\xc4GI\xd3\xb8\xa3h\xe68\xdf\x8b\xcc\x1c2B.&!\xfa\xcbw\xd9G\xe9r2\xb3f\xa10dY\x1f\x89\x0b\',\xdcey\x93\xedu-o\xcf\x7f\x81\x82]\x1dL5l\t\n\xd52\xe7\xc3Gx\xe1\x0e!\x96\x17\xe2\xf5@L\x94\x13\xb4\xa1\xcc\xbb\xc6\xec\x08\xff\xd4\xf3\n\xae\x1eK\x03\xab\x82\xf3\x9c\xca\x1b\xd0.\xbe7\xae\xf1\'\xfaa+\x02\'\xfa{\xa7(\xc6\xf2\xf0\x8a1!\xf6\x00\xf1\x0f+1\x13J\xbeG\x81\x02\x84\xdd5\x0b\xb8\xaa\x97\xc0\xda\xd3|p\xd1\xfd\xadv*n\xa3\xe6\xf0\xcf\x8a\xc9\xe9\x98S\xddIu9\xce\tF\xe8a\xf4\x8e\x9c(\xb4\xb3N\xe7\xffP\xf7\xdc\x1c\xed\x989\x93\xd0\x98\xca\x0f\xa9\xaeL\x98\xa0m[\x8f\x10\xce,\x11\xab_j\xe5\xeb\x98\x8c%\x9b\xae\x19oP\xf55Ea\xd4\xd2\x1f\xd8\xce\x1b\xb9S\xa6\xa7Q\xe1\xb1\x92\xa6\x17\xe9\x84\xe4\xd4t\xf5 \x831\xff\x1axj\xa6b\xf9q\x9f\xdc\xb20\xb8\xa0x\x10PfN\\\x13\x8a\x96\x16\xffPY5\x1e\xbeM=|\xf0D\x07\x8b\\F\xe5rz\x8f\xd1\xcb\xb8\xf0m\xfd\x8ec\xc4\x7f[\x16\x91\x9b\xba\tU\x8a\xc0\xc2\xd7+K\x8b\x85\xf4\xf4\x1d\xb5+\x04\xb3\\ni\xa5+`)\x87/E\xc5\x08\x8e x\xd9\xd0eXA\xd8\x91\xa34\xe9\xec2\xa8.\xecO\xdbCz\x9cSLb\x01\x01\xf9\x97\xd0\xda0\x00\x9eNw:\xc4\xf8&\x93P\x94\xca\xce^\xf4q\xc2\x84\xb3\xcf\xba\xb5\xef\xbcZ=\x0e\x9f\xf9E~m?\xaf\x8b\ne\xf9\x1f-c\xa5\xd1\xa8\xd1\xdb3\xa9\xe7R\xe0\xe2[\x00\n\xa7fA\xbe\xd09X9\x8d\xe3\xf6n\x02\x91\xd0K\x06=bI\xa6\xd0\xdb\xfe\x9aV\xfc\xb9G\xb0]\x08\xb8\x03\xb0\xd4\xa1\x85\xf4\xe0*\x05\xef\x1e\x18."W\x1f\xdf\x89\xb0\xfe\x99\xb6;\x84\xfb_q\x87' + + +2024-12-12 23:54:24.574920 - Ether / IP / TCP 104.18.32.47:https > 192.168.1.11:28291 A +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 23624 + flags = DF + frag = 0 + ttl = 54 + proto = tcp + chksum = 0x9e87 + src = 104.18.32.47 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28291 + seq = 4151354721 + ack = 2273401243 + dataofs = 8 + reserved = 0 + flags = A + window = 172 + chksum = 0x7eb6 + urgptr = 0 + options = [('NOP', None), ('NOP', None), ('SAck', (2273401242, 2273401243))] + + +2024-12-12 23:54:24.579851 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40483 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x90e + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922049094 + ack = 1862146822 + dataofs = 5 + reserved = 0 + flags = A + window = 16385 + chksum = 0x7249 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:24.584333 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40484 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x90d + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922049094 + ack = 1862154022 + dataofs = 5 + reserved = 0 + flags = A + window = 16385 + chksum = 0x5629 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:24.587967 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40485 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x90c + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922049094 + ack = 1862156902 + dataofs = 5 + reserved = 0 + flags = A + window = 16385 + chksum = 0x4ae9 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:24.592105 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40486 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x90b + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922049094 + ack = 1862157874 + dataofs = 5 + reserved = 0 + flags = A + window = 16381 + chksum = 0x4721 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:24.598309 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 139 + id = 40487 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x8a7 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922049094 + ack = 1862157874 + dataofs = 5 + reserved = 0 + flags = PA + window = 16381 + chksum = 0xa3e1 + urgptr = 0 + options = [] +###[ Raw ]### + load = b"\x17\x03\x03\x00^\x1cn\xd2C\x98\x1b\xfa\x99\xe8\x02\xf7\x01\xce\x869\x8f\x90\x01.d\x87\x93L\x95\xe0{~\x9f\\\x80\xe4\xb7\xf0\x1ep\xc6\x03\xf4^CfI\x98\xa1G\xbd\xbb\xe6{.\xb6*\xd6\xfe\x04\x1c\xba\xf9x\xaf\xef\x95\x04X\x11y\x10|\x12NDN\xa6\xfc\x0b\xb3t?\xba\x14G\xe8Qf\x1a'\xb9:\xf0\xb0\xc1\x8f\xc3\x88" + + +2024-12-12 23:54:24.604557 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 75 + id = 16828 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862157874 + ack = 2922049193 + dataofs = 5 + reserved = 0 + flags = PA + window = 515 + chksum = 0x66dc + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00\x1e;E\x1c\x8fYC\x1bB\x95\xe3\x05\xb6\xdf\x98\x88\x9d~\x1e\x00\t\x13]%\xe4A\xf9\x11\xc2\x1c\xed' + + +2024-12-12 23:54:24.888328 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40488 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x909 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922049193 + ack = 1862157909 + dataofs = 5 + reserved = 0 + flags = A + window = 16381 + chksum = 0x469b + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:24.945834 - Ether / IP / TCP 209.126.32.106:https > 192.168.1.11:28496 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 79 + id = 60081 + flags = DF + frag = 0 + ttl = 53 + proto = tcp + chksum = 0xa75b + src = 209.126.32.106 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28496 + seq = 1056258963 + ack = 3863614370 + dataofs = 5 + reserved = 0 + flags = PA + window = 32 + chksum = 0x3e3d + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00"j\xf8\x0b\x15a&\x8e\x01\xc7\x90\xb9\xf2\x98\x0f6\x9b\xca\xea\xa1A\x8dU\x06*}\x11Reuh\xc6\x9ch\x10' + + +2024-12-12 23:54:24.952385 - Ether / IP / TCP 209.126.32.106:https > 192.168.1.11:28496 FPA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 64 + id = 60082 + flags = DF + frag = 0 + ttl = 53 + proto = tcp + chksum = 0xa769 + src = 209.126.32.106 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28496 + seq = 1056259002 + ack = 3863614370 + dataofs = 5 + reserved = 0 + flags = FPA + window = 32 + chksum = 0xf782 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00\x13_\xad\xe43\xed\xa3Y\x80\xa0\xc36\x8f\xd5S\x97\x08\xb8 209.126.32.106:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 32502 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 209.126.32.106 + \options \ +###[ TCP ]### + sport = 28496 + dport = https + seq = 3863614370 + ack = 1056259027 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0xb3b6 + urgptr = 0 + options = [] + + +2024-12-12 23:54:24.968619 - Ether / IP / TCP 192.168.1.11:28496 > 209.126.32.106:https FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 32503 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 209.126.32.106 + \options \ +###[ TCP ]### + sport = 28496 + dport = https + seq = 3863614370 + ack = 1056259027 + dataofs = 5 + reserved = 0 + flags = FA + window = 513 + chksum = 0xb3b6 + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.047426 - Ether / IP / TCP 209.126.32.106:https > 192.168.1.11:28496 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 53 + proto = tcp + chksum = 0x9234 + src = 209.126.32.106 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28496 + seq = 1056259027 + ack = 3863614371 + dataofs = 5 + reserved = 0 + flags = A + window = 32 + chksum = 0x1657 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.300762 - Ether / IP / TCP 80.15.253.0:https > 192.168.1.11:28499 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 79 + id = 65366 + flags = DF + frag = 0 + ttl = 56 + proto = tcp + chksum = 0x348f + src = 80.15.253.0 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28499 + seq = 3123803258 + ack = 1624949016 + dataofs = 5 + reserved = 0 + flags = PA + window = 18 + chksum = 0xab16 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00";M\xda\xb2\x80\xcd\xc9\x1fp ^7we[,\x80v\nJ\x14\\u\x16\xc5\x08k\x04\x119uO=X' + + +2024-12-12 23:54:25.309303 - Ether / IP / TCP 80.15.253.0:https > 192.168.1.11:28499 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 64 + id = 65367 + flags = DF + frag = 0 + ttl = 56 + proto = tcp + chksum = 0x349d + src = 80.15.253.0 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28499 + seq = 3123803297 + ack = 1624949016 + dataofs = 5 + reserved = 0 + flags = PA + window = 18 + chksum = 0x52ae + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00\x13\xab\x9af\x86z\xc00\x94\nk\x98l2q\xb0\x80B\x1f\xd4' + + +2024-12-12 23:54:25.317238 - Ether / IP / TCP 80.15.253.0:https > 192.168.1.11:28499 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 65368 + flags = DF + frag = 0 + ttl = 56 + proto = tcp + chksum = 0x34b4 + src = 80.15.253.0 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28499 + seq = 3123803321 + ack = 1624949016 + dataofs = 5 + reserved = 0 + flags = FA + window = 18 + chksum = 0xdf11 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.321818 - Ether / IP / TCP 80.15.253.0:https > 192.168.1.11:28499 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 65369 + flags = DF + frag = 0 + ttl = 56 + proto = tcp + chksum = 0x34b3 + src = 80.15.253.0 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28499 + seq = 3123803321 + ack = 1624949016 + dataofs = 5 + reserved = 0 + flags = FA + window = 18 + chksum = 0xdf11 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.327636 - Ether / IP / TCP 192.168.1.11:28499 > 80.15.253.0:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 16279 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 80.15.253.0 + \options \ +###[ TCP ]### + sport = 28499 + dport = https + seq = 1624949016 + ack = 3123803321 + dataofs = 5 + reserved = 0 + flags = A + window = 512 + chksum = 0xede + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.333109 - Ether / IP / TCP 192.168.1.11:28499 > 80.15.253.0:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 16280 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 80.15.253.0 + \options \ +###[ TCP ]### + sport = 28499 + dport = https + seq = 1624949016 + ack = 3123803322 + dataofs = 5 + reserved = 0 + flags = A + window = 512 + chksum = 0xede + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.338612 - Ether / IP / TCP 192.168.1.11:28499 > 80.15.253.0:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 16281 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 80.15.253.0 + \options \ +###[ TCP ]### + sport = 28499 + dport = https + seq = 1624949016 + ack = 3123803322 + dataofs = 5 + reserved = 0 + flags = A + window = 512 + chksum = 0xede + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.344249 - Ether / IP / TCP 192.168.1.11:28499 > 80.15.253.0:https FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 16282 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 80.15.253.0 + \options \ +###[ TCP ]### + sport = 28499 + dport = https + seq = 1624949016 + ack = 3123803322 + dataofs = 5 + reserved = 0 + flags = FA + window = 512 + chksum = 0xede + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.350908 - Ether / IP / TCP 80.15.253.0:https > 192.168.1.11:28499 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 65370 + flags = DF + frag = 0 + ttl = 56 + proto = tcp + chksum = 0x34b2 + src = 80.15.253.0 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28499 + seq = 3123803322 + ack = 1624949017 + dataofs = 5 + reserved = 0 + flags = A + window = 18 + chksum = 0xdf10 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.354703 - Ether / IP / TCP 192.168.1.11:28601 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49806 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28601 + dport = 64920 + seq = 3948330222 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:25.359946 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28601 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28601 + seq = 398711500 + ack = 3948330223 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0xaa75 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:25.363389 - Ether / IP / TCP 192.168.1.11:28601 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49807 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28601 + dport = 64920 + seq = 3948330223 + ack = 398711501 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.371142 - Ether / IP / TCP 192.168.1.11:28601 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 363 + id = 49808 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28601 + dport = 64920 + seq = 3948330223 + ack = 398711501 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ba + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesSent"\r\nContent-Length: 309\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:25.376467 - Ether / IP / TCP 192.168.1.11:28601 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 349 + id = 49809 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28601 + dport = 64920 + seq = 3948330546 + ack = 398711501 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ac + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:25.380705 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28601 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 37399 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x255c + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28601 + seq = 398711501 + ack = 3948330546 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x2121 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.386742 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28601 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 37400 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x255b + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28601 + seq = 398711501 + ack = 3948330855 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x1fca + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.453641 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28601 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 579 + id = 37401 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x233f + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28601 + seq = 398711501 + ack = 3948330855 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0xefe0 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 351\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:33 GMT\r\n\r\n\r\n18894570\r\n' + + +2024-12-12 23:54:25.462909 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28601 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 37402 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x2559 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28601 + seq = 398712040 + ack = 3948330855 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0x1dae + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.471306 - Ether / IP / TCP 192.168.1.11:28601 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49810 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28601 + dport = 64920 + seq = 3948330855 + ack = 398712041 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.482137 - Ether / IP / TCP 192.168.1.11:28601 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49811 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28601 + dport = 64920 + seq = 3948330855 + ack = 398712041 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.487282 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28601 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28601 + seq = 398712041 + ack = 3948330856 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x1dad + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.499080 - Ether / IP / TCP 192.168.1.11:28602 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49812 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28602 + dport = 64920 + seq = 663183577 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:25.503069 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28602 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28602 + seq = 258401770 + ack = 663183578 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0xc798 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:25.509256 - Ether / IP / TCP 192.168.1.11:28602 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49813 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28602 + dport = 64920 + seq = 663183578 + ack = 258401771 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.517562 - Ether / IP / TCP 192.168.1.11:28602 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 367 + id = 49814 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28602 + dport = 64920 + seq = 663183578 + ack = 258401771 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84be + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesReceived"\r\nContent-Length: 313\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:25.526764 - Ether / IP / TCP 192.168.1.11:28602 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 353 + id = 49815 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28602 + dport = 64920 + seq = 663183905 + ack = 258401771 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84b0 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:25.536747 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28602 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 44244 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xa9f + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28602 + seq = 258401771 + ack = 663183905 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x3e40 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.543170 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28602 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 44245 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xa9e + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28602 + seq = 258401771 + ack = 663184218 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x3ce5 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.547407 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28602 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 596 + id = 44246 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x871 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28602 + seq = 258401771 + ack = 663184218 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0x80fc + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 368\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:33 GMT\r\n\r\n\r\n569718275\r\n' + + +2024-12-12 23:54:25.554016 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28602 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 44247 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xa9c + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28602 + seq = 258402327 + ack = 663184218 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0x3ab8 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.564675 - Ether / IP / TCP 192.168.1.11:28602 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49816 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28602 + dport = 64920 + seq = 663184218 + ack = 258402328 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.567545 - Ether / IP / TCP 192.168.1.11:28602 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49817 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28602 + dport = 64920 + seq = 663184218 + ack = 258402328 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.569664 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28602 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28602 + seq = 258402328 + ack = 663184219 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x3ab7 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.573336 - Ether / IP / TCP 192.168.1.11:28603 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49818 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28603 + dport = 64920 + seq = 3138997115 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:25.575755 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28603 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28603 + seq = 317548045 + ack = 3138997116 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0xc5b9 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:25.578004 - Ether / IP / TCP 192.168.1.11:28603 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49819 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28603 + dport = 64920 + seq = 3138997116 + ack = 317548046 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.583066 - Ether / IP / TCP 192.168.1.11:28603 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 363 + id = 49820 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28603 + dport = 64920 + seq = 3138997116 + ack = 317548046 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ba + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesSent"\r\nContent-Length: 309\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:25.585482 - Ether / IP / TCP 192.168.1.11:28603 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 349 + id = 49821 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28603 + dport = 64920 + seq = 3138997439 + ack = 317548046 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ac + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:25.589417 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28603 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 12119 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x881c + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28603 + seq = 317548046 + ack = 3138997439 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x3c65 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.592292 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28603 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 12120 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x881b + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28603 + seq = 317548046 + ack = 3138997748 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x3b0e + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.598285 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28603 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 579 + id = 12121 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x85ff + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28603 + seq = 317548046 + ack = 3138997748 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0xb25 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 351\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:33 GMT\r\n\r\n\r\n18894570\r\n' + + +2024-12-12 23:54:25.601336 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28603 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 12122 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x8819 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28603 + seq = 317548585 + ack = 3138997748 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0x38f2 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.603649 - Ether / IP / TCP 192.168.1.11:28603 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49822 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28603 + dport = 64920 + seq = 3138997748 + ack = 317548586 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.608864 - Ether / IP / TCP 192.168.1.11:28603 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49823 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28603 + dport = 64920 + seq = 3138997748 + ack = 317548586 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.611159 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28603 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28603 + seq = 317548586 + ack = 3138997749 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x38f1 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.616098 - Ether / IP / TCP 192.168.1.11:28604 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49824 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28604 + dport = 64920 + seq = 3477869551 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:25.618577 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28604 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28604 + seq = 101745050 + ack = 3477869552 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0xda61 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:25.627549 - Ether / IP / TCP 192.168.1.11:28604 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49825 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28604 + dport = 64920 + seq = 3477869552 + ack = 101745051 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.634642 - Ether / IP / TCP 192.168.1.11:28604 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 367 + id = 49826 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28604 + dport = 64920 + seq = 3477869552 + ack = 101745051 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84be + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesReceived"\r\nContent-Length: 313\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:25.639537 - Ether / IP / TCP 192.168.1.11:28604 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 353 + id = 49827 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28604 + dport = 64920 + seq = 3477869879 + ack = 101745051 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84b0 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:25.643159 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28604 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 51455 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xee73 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28604 + seq = 101745051 + ack = 3477869879 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x5109 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.648653 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28604 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 51456 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xee72 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28604 + seq = 101745051 + ack = 3477870192 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x4fae + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.652847 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28604 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 596 + id = 51457 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xec45 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28604 + seq = 101745051 + ack = 3477870192 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0x93c5 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 368\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:33 GMT\r\n\r\n\r\n569718275\r\n' + + +2024-12-12 23:54:25.657467 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28604 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 51458 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xee70 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28604 + seq = 101745607 + ack = 3477870192 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0x4d81 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.660697 - Ether / IP / TCP 192.168.1.11:28604 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49828 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28604 + dport = 64920 + seq = 3477870192 + ack = 101745608 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.666347 - Ether / IP / TCP 192.168.1.11:28604 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49829 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28604 + dport = 64920 + seq = 3477870192 + ack = 101745608 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.675834 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28604 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28604 + seq = 101745608 + ack = 3477870193 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x4d80 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.689308 - Ether / IP / TCP 192.168.1.11:28418 > 13.107.246.43:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 41 + id = 13173 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 13.107.246.43 + \options \ +###[ TCP ]### + sport = 28418 + dport = https + seq = 42922459 + ack = 565545791 + dataofs = 5 + reserved = 0 + flags = A + window = 509 + chksum = 0xc565 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x00' + + +2024-12-12 23:54:25.694287 - Ether / IP / TCP 192.168.1.1:59624 > 192.168.1.11:icslap S +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 60 + id = 53243 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xe763 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 59624 + dport = icslap + seq = 462283154 + ack = 0 + dataofs = 10 + reserved = 0 + flags = S + window = 14600 + chksum = 0x3285 + urgptr = 0 + options = [('MSS', 1460), ('SAckOK', b''), ('Timestamp', (503990736, 0)), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:25.707681 - Ether / IP / TCP 13.107.246.43:https > 192.168.1.11:28418 A +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 33975 + flags = DF + frag = 0 + ttl = 53 + proto = tcp + chksum = 0xfbc2 + src = 13.107.246.43 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28418 + seq = 565545791 + ack = 42922460 + dataofs = 8 + reserved = 0 + flags = A + window = 83 + chksum = 0xb92e + urgptr = 0 + options = [('NOP', None), ('NOP', None), ('SAck', (42922459, 42922460))] + + +2024-12-12 23:54:25.911813 - Ether / IP / TCP 69.173.156.150:https > 192.168.1.11:28540 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 31875 + flags = + frag = 0 + ttl = 240 + proto = tcp + chksum = 0xaa55 + src = 69.173.156.150 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28540 + seq = 269625289 + ack = 2614771291 + dataofs = 5 + reserved = 0 + flags = FA + window = 21170 + chksum = 0x35e2 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.916635 - Ether / IP / TCP 69.173.156.139:https > 192.168.1.11:28541 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 79 + id = 61497 + flags = + frag = 0 + ttl = 240 + proto = tcp + chksum = 0x3683 + src = 69.173.156.139 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28541 + seq = 2855188002 + ack = 626223646 + dataofs = 5 + reserved = 0 + flags = PA + window = 23360 + chksum = 0x8de6 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00"\xe1~\xe6\xb0\xba\xd8\x86\x17\xc2\xdc\x07DK\x1b\xec\xd8\xf3\xa9\x9b\xed\x15]\x1f\x14>\xcb\xed\xff\xde\x96n\x18K\xcd' + + +2024-12-12 23:54:25.922373 - Ether / IP / TCP 192.168.1.11:28540 > 69.173.156.150:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 1482 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 69.173.156.150 + \options \ +###[ TCP ]### + sport = 28540 + dport = https + seq = 2614771291 + ack = 269625290 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0xa411 + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.928296 - Ether / IP / TCP 192.168.1.11:28541 > 69.173.156.139:https FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 38479 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 69.173.156.139 + \options \ +###[ TCP ]### + sport = 28541 + dport = https + seq = 626223646 + ack = 2855188041 + dataofs = 5 + reserved = 0 + flags = FA + window = 513 + chksum = 0xa406 + urgptr = 0 + options = [] + + +2024-12-12 23:54:25.954506 - Ether / IP / TCP 69.173.156.139:https > 192.168.1.11:28541 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 59577 + flags = + frag = 0 + ttl = 240 + proto = tcp + chksum = 0x3e2a + src = 69.173.156.139 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28541 + seq = 2855188041 + ack = 626223647 + dataofs = 5 + reserved = 0 + flags = A + window = 24820 + chksum = 0x49d1 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.958429 - Ether / IP / TCP 69.173.156.139:https > 192.168.1.11:28541 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 35886 + flags = + frag = 0 + ttl = 240 + proto = tcp + chksum = 0x9ab5 + src = 69.173.156.139 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28541 + seq = 2855188041 + ack = 626223647 + dataofs = 5 + reserved = 0 + flags = FA + window = 24820 + chksum = 0x49d0 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:25.962591 - Ether / IP / TCP 192.168.1.11:28541 > 69.173.156.139:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 38480 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 69.173.156.139 + \options \ +###[ TCP ]### + sport = 28541 + dport = https + seq = 626223647 + ack = 2855188042 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0xa406 + urgptr = 0 + options = [] + + +2024-12-12 23:54:26.323757 - Ether / IP / TCP 192.168.1.1:59625 > 192.168.1.11:icslap S +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 60 + id = 13243 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x83a4 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 59625 + dport = icslap + seq = 3470553877 + ack = 0 + dataofs = 10 + reserved = 0 + flags = S + window = 14600 + chksum = 0xeb15 + urgptr = 0 + options = [('MSS', 1460), ('SAckOK', b''), ('Timestamp', (503991404, 0)), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:26.486776 - Ether / IP / TCP 192.168.1.11:28605 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49830 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28605 + dport = 64920 + seq = 3673938344 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:26.509034 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28605 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28605 + seq = 770989696 + ack = 3673938345 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x42e + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:26.513728 - Ether / IP / TCP 192.168.1.11:28605 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49831 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28605 + dport = 64920 + seq = 3673938345 + ack = 770989697 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:26.520123 - Ether / IP / TCP 192.168.1.11:28605 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 363 + id = 49832 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28605 + dport = 64920 + seq = 3673938345 + ack = 770989697 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ba + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesSent"\r\nContent-Length: 309\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:26.529715 - Ether / IP / TCP 192.168.1.11:28605 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 349 + id = 49833 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28605 + dport = 64920 + seq = 3673938668 + ack = 770989697 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ac + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:26.536019 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28605 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 5082 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xa399 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28605 + seq = 770989697 + ack = 3673938668 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x7ad9 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.541559 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28605 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 5083 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xa398 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28605 + seq = 770989697 + ack = 3673938977 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x7982 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.549559 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28605 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 579 + id = 5084 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xa17c + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28605 + seq = 770989697 + ack = 3673938977 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0x4998 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 351\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:34 GMT\r\n\r\n\r\n18894570\r\n' + + +2024-12-12 23:54:26.555674 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28605 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 5085 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xa396 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28605 + seq = 770990236 + ack = 3673938977 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0x7766 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.560410 - Ether / IP / TCP 192.168.1.11:28605 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49834 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28605 + dport = 64920 + seq = 3673938977 + ack = 770990237 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:26.565567 - Ether / IP / TCP 192.168.1.11:28605 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49835 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28605 + dport = 64920 + seq = 3673938977 + ack = 770990237 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:26.569765 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28605 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28605 + seq = 770990237 + ack = 3673938978 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x7765 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.575203 - Ether / IP / TCP 192.168.1.11:28606 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49836 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28606 + dport = 64920 + seq = 3646697825 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:26.581491 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28606 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28606 + seq = 427687670 + ack = 3646697826 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x2214 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:26.584557 - Ether / IP / TCP 192.168.1.11:28606 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49837 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28606 + dport = 64920 + seq = 3646697826 + ack = 427687671 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:26.588713 - Ether / IP / TCP 192.168.1.11:28606 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 367 + id = 49838 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28606 + dport = 64920 + seq = 3646697826 + ack = 427687671 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84be + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesReceived"\r\nContent-Length: 313\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:26.592540 - Ether / IP / TCP 192.168.1.11:28606 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 353 + id = 49839 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28606 + dport = 64920 + seq = 3646698153 + ack = 427687671 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84b0 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:26.594855 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28606 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 45980 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x3d7 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28606 + seq = 427687671 + ack = 3646698153 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x98bb + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.598899 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28606 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 45981 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x3d6 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28606 + seq = 427687671 + ack = 3646698466 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x9760 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.603185 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28606 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 596 + id = 45982 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x1a9 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28606 + seq = 427687671 + ack = 3646698466 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0xdb76 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 368\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:34 GMT\r\n\r\n\r\n569718275\r\n' + + +2024-12-12 23:54:26.607773 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28606 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 45983 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x3d4 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28606 + seq = 427688227 + ack = 3646698466 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0x9533 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.610298 - Ether / IP / TCP 192.168.1.11:28606 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49840 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28606 + dport = 64920 + seq = 3646698466 + ack = 427688228 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:26.613161 - Ether / IP / TCP 192.168.1.11:28606 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49841 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28606 + dport = 64920 + seq = 3646698466 + ack = 427688228 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:26.616344 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28606 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28606 + seq = 427688228 + ack = 3646698467 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0x9532 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.618957 - Ether / IP / TCP 192.168.1.11:28607 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49842 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28607 + dport = 64920 + seq = 1369990477 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:26.622141 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28607 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28607 + seq = 332984486 + ack = 1369990478 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x89d0 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:26.625267 - Ether / IP / TCP 192.168.1.11:28607 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49843 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28607 + dport = 64920 + seq = 1369990478 + ack = 332984487 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:26.627937 - Ether / IP / TCP 192.168.1.11:28607 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 363 + id = 49844 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28607 + dport = 64920 + seq = 1369990478 + ack = 332984487 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ba + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesSent"\r\nContent-Length: 309\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:26.632525 - Ether / IP / TCP 192.168.1.11:28607 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 349 + id = 49845 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28607 + dport = 64920 + seq = 1369990801 + ack = 332984487 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ac + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:26.634776 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28607 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 48604 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xf996 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28607 + seq = 332984487 + ack = 1369990801 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0x7c + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.636827 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28607 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 48605 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xf995 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28607 + seq = 332984487 + ack = 1369991110 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0xff24 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.642197 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28607 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 579 + id = 48606 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xf779 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28607 + seq = 332984487 + ack = 1369991110 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0xcf3a + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 351\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:34 GMT\r\n\r\n\r\n18894570\r\n' + + +2024-12-12 23:54:26.644212 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28607 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 48607 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xf993 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28607 + seq = 332985026 + ack = 1369991110 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0xfd08 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.648487 - Ether / IP / TCP 192.168.1.11:28607 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49846 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28607 + dport = 64920 + seq = 1369991110 + ack = 332985027 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:26.650805 - Ether / IP / TCP 192.168.1.11:28607 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49847 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28607 + dport = 64920 + seq = 1369991110 + ack = 332985027 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:26.652734 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28607 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28607 + seq = 332985027 + ack = 1369991111 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0xfd07 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.656894 - Ether / IP / TCP 192.168.1.11:28608 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49848 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28608 + dport = 64920 + seq = 3076397349 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:26.658812 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28608 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28608 + seq = 1553570528 + ack = 3076397350 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x7d46 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:26.661059 - Ether / IP / TCP 192.168.1.11:28608 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49849 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28608 + dport = 64920 + seq = 3076397350 + ack = 1553570529 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:26.665163 - Ether / IP / TCP 192.168.1.11:28608 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 367 + id = 49850 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28608 + dport = 64920 + seq = 3076397350 + ack = 1553570529 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84be + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesReceived"\r\nContent-Length: 313\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:26.667891 - Ether / IP / TCP 192.168.1.11:28608 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 353 + id = 49851 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28608 + dport = 64920 + seq = 3076397677 + ack = 1553570529 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84b0 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:26.669984 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28608 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 55147 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xe007 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28608 + seq = 1553570529 + ack = 3076397677 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0xf3ed + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.673745 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28608 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 55148 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xe006 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28608 + seq = 1553570529 + ack = 3076397990 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0xf292 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.676190 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28608 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 596 + id = 55149 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xddd9 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28608 + seq = 1553570529 + ack = 3076397990 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0x36a9 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 368\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:34 GMT\r\n\r\n\r\n569718275\r\n' + + +2024-12-12 23:54:26.678512 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28608 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 55150 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xe004 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28608 + seq = 1553571085 + ack = 3076397990 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0xf065 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.681795 - Ether / IP / TCP 192.168.1.11:28608 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49852 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28608 + dport = 64920 + seq = 3076397990 + ack = 1553571086 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:26.684448 - Ether / IP / TCP 192.168.1.11:28608 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49853 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28608 + dport = 64920 + seq = 3076397990 + ack = 1553571086 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:26.686201 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28608 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28608 + seq = 1553571086 + ack = 3076397991 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0xf064 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.690239 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 162 + id = 16829 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862157909 + ack = 2922049193 + dataofs = 5 + reserved = 0 + flags = PA + window = 515 + chksum = 0x6733 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00u_m\n\xd1\x83\x89q\xe6\n\x05\x97\xb9\x9c*=q(\xef$~\x1c?\x92nD\xfe\x10pin\x82\xde\xb7\xa8=b\xee\xad\x1a\xef\xe8e\xa8\x82\x84\x93\x03u\xaai#\x95\xa5\xe9.{\xdf\xf2\xb4w\xa7\x89\xf2\x8c \nd\x05=\xb6\x1dN{\x1e\xe9\x15\xfc\x8657\tP~%\xef\xecg\x80\xe6\xe3N\xb82\xbe\xee\xf1\xd6\xdf\xe9\x08kv\xeb\xd1\xcd5\x151\xb1x\xad\x92>\x1e\x05\xeak' + + +2024-12-12 23:54:26.693284 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16830 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862158031 + ack = 2922049193 + dataofs = 5 + reserved = 0 + flags = A + window = 515 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03@\x11\xc3\xbf\xc9\x16\x84\xdbJ\x07\xf7\xf3\xe6\xe9\xad\x1aW\x13k3\xe7\x99K\x9f\x88\x80\xe4.\xe2|\xa1\x06rzK0J\x80\xd0a 8\xe6\x9d]\xef\xf0\xb3\xd5\xdc\x11 \x94\xfd\'"\xe2H\xe3"/\xd6\xae\xd3\xf5&\n\xd2\x8dbu\xa2\xd8/\xd8\x84\x01&:\xab\xaf\xed\xc7\xf9\xf5\xe2\xd8\x91\xecm\xa8\xbf\xc3\xd0\xbe\x8c*\x93\xb2\xf1\xc1\xad\xf6F\xc3\x1b\xf0\x8d\xb7\x95F\x1c\xceQr\x0e\x92\xe6}}(\xe9\xa2b\xa0\x08\x06#3\xc1\xe9\xa6\xe7\x9b\x15\xae.gZ\x91\xed\xd1\x8b\x0b7\xa1\xca\xd3\x17\xb7\x81\x9diT\x91\xbc\xd6\x7f\xf0:*[+\xbc\xf3\xa4\xce\xb6+}\xdd\x04f\x95\xaf&\xa6\xaeYa\xe5\xe3G\x816c\x02^\xa0\x16^+D2\x97MR\x87ww\xc0\x8b\x9at^\xac\xdb\x17m\xc7x\x19\xfd\x01\'\x0b\x88j0+\x12\xa0\x14\xf7\x87\xad\x0e\xb4\x81\xc90\xe9\xbb\x8av\xa6\x7f8\x9f\x96\r\x10\x12\xaeu\x06\x81v\x00\xb0\x12_\x0b\x05\xda\x1f\xda\xc5\xc3\x100\xc9\xc4L\x1a7\xc2\x06Z\xf3\x18\x80_^\xf5&\xeb1\xff\x92\xbe\x0b\x06\xaeT\xb8\xf6\x06\na:\xd7\xd7\xd41d$\xed\xcd\xe6\xfe\xafCe-i\x06\xd7\xc0\tC\xbfkP)G\xc8FX\xbaT\x9c\xe2\xa3C\xe2*\x08\x81H@ \x0e\x87\xd3[\x8a\xc7\xdeVm\xf9\x99\xc5\xf8\xf8\x13\xfc\xf24%\xf2i\xef\x95\x05\xa5<\xff\x95\x9b\x82\xa0\xeca\xa8d\xb7\x8de\x88\x1b\x1b\x01U\xdc&8\xf9\xe2R\x93\xa5\xba\x05<\x05rv\x88\xc5\xcd}\x18T\x81\xd9\x8c\xe9\xe1\xae\xd2\x18\xa7dY\xc1\x8c\xb1x\x92W\x989e\x8b)"\'\xaa\x86\xc4\xbf\x9b\x0fCL\xbd;y\xf4\x91\xaa\x93\xbe\xce\xd5\x17\x00\xd2Ry\x1a\xb91. \'\xd9\xde\xea\x17C \xc5\xef7\xe8\t\xf5\xad.\x14\x1c,Y\xd0N\x9b?\x08L\xf0\x9e\xb5}\xf4:Z5\x97\x84a\xa7\xa7i"\x05\x92\x1c|\x9f\x96A\xd7\x84K\xea\xa8S\xbeA~G\x88\xc3\xbf\x14\xcct\x87{\x02\xc9\x8d=\xb0\x05\x1e/\xc3o:\x7f;\xac\xf7\x8b\x06Vo\xb4\x10@\x9e\xabm\x1b\xe3\xd2C\xf2\x01g\xd9^e\x81\x81\nQ\x04\x9a\xc1p\x02\xbeyNV\xac\xf9M\x94\xe0_\x83:\xff|ic\xe3\xdf\xe0\x1b\xff\xe7+\xe2\xdb\x184F\xe6\xb6m\xeb{\xfc\xa5\xb5\x00\xae\xda<\x12\xa6\x9c\x9dFQ\xe3\xd7\xd7\xb0\xfd\x18\xb65\\\xa5a\xa4\x14\x9e\xe3\x84:Q\xd2;l\xf2\xe0\x17D\xf8\xfeBUH+\x8a1\xcaR\xb6\x97\xf6\xb5\xce\xffi\xcc=\x9b\xe8\xae\xe0\xb73\xad\xa0\xcb!$8\xb45\x1a\x13\x96,\x0c:\n\xb1\x8atf\xe3~(1\x96\xb0\xaa4E\xabz\xa9\xe3[\xd3\x07\xaf\xb8\x85ry{\nq\x1c\x89Z&\x96\x15\x00G\x89\xd2\xee\x0f\x8c\x17M\xef\x8aOK\x8a\xe0\x9d\xb3\xda\xb8~p}\xdcF0-\xa1\xd0D\x9b\x90\xd6^\xa6\x05&t\x97*q\xf1 \x14h\xdd\x0fhz\x86\n\x1bo\xa9\xf9!\xcf\xa2\xac=s\xaba\x80\xacQ\xac\xa9\xe4\xbf1]\xb1\x19\xaa\x89,_\xd0n{kfu5t\xee\xb7R\x8d\x8dE\xfd\xa7\xef\xd5ma\x06&\xd8.\xb7\x99\xdc\xd6\xc07\xce\xd8i\xb4$g\xa6\xd5x\xbay\x142\xf1\xff\xc03\xcd\xff\xfaX\xda$\xc9\x9d\xdf\x98\xdaS!\xe8\xbfO\xd1-\xef]\x94\xccmA\xd8"\x9e\xaa\xa1\xb6\x12\x87\naWH\xff\x13\x8a\x16{\x02lH\xf3\xd5\xf2W\x1f\xb1&\x05\xd2\xc0\xcc\xaa]\x07:\xb1\xf0|~h\xa6\xed\xc5\x98\xaeTY\xfc\xe8SU\x8b\xfc\xed\xadJ\xdcI{\x83J\x0b\xa7M%\x92\xb6\xa8\xc8\xbb\xc6\xe4E\x0cM\xf6\x0b\x15\xc2vs\xdb\xc5\xbb\xc57\x84\xc6a\x83\xc9\xc3i\xe4h\xd1\xd8\xdb!Z\xca\xce\x99\xc3\xb6.jFq\xb5\xfa\x1f%\xe2]\x05\xfd\x17\xcc4D\xf6\x19/+Q\xd0}\xff\x17\x93\x01\xf0\xef\xed%\xa6\xde\xc3<\x83\x8a\xae\x1a\x01=\x88\x13`\xaaa\xf1t\xe9\xd3\xfdZ\x14=\xa9\x101\xb3X\xd9&Q\xban\x84\xb9^1\xc2\x11\xb9\n\x05\xf8N\x8e1\xcf\xb5\xa0ti\x0e\xfa|\xc2\xf4\xec\xe9\xa8v%\x98\xff\x9a<\xafpeC\xbadb\x0f$\xd0\x0b\x130\xe1\x02\xf3\x8f\xbe#$j\xfa\xdcE\xc6\xed\xf6\x1a\xdbd\xd9\xc8)M%HTS\xb5\xce\xfc\xfd\x01\xe3\x88R\xd7\x17M:r\x13\xca\x10\xcazt3?\xe3\xf1%\xf68@\x08%\x1b\x89\xa5!+J\xd9\x8d\xb9\xb5\x10\xe5{\xc9\x98\xaaw\xfaR\xd9\xc9\x9bf\x03\xa9\x9bk2\xe6\x87\xab\xa6ui~\x97\xa3\xaf\xa6\x13\xd7!\xd0\xad\x0f"\x80j\xf4\xcfX\xb2\x1a\x1c]\xaa\xc0\xb52\xe2\xfa\x88\xb0\xe0\x89\xd5\x84\x90\xe9\xb6\xb9\xe9.i`\x96le\xabl\xa7%s\xe39\xc1`\xa9\x1a<\x8b\xb8V\xff3\xbf\xde\xcd\xd47\xe9\x8a\x8c\xb9\xbcm\x97A-\x97F\xc0\x83\xd8\xc9\xd8\xab4d\x03u\x90\xa5Y\xf4^[\x06\xf7A\xb5K\x9c_\xeb\xbe\xe3<7>,\xd8\x1e\xec\xc0\xecQ\x9f0 (\x9fr\x06>w\xe7\x80\x0e\x1c\x1d\xfb\xbef\x9b\xc0\xbf|&\xce(C\xf6\xa3\xe8\x8c\xb1H\x90\xb3\xdb\xf3N\xf9M\'\x1e\xac\xaa\xc5\\*\x12j\xc1w\xe8\xc93A\xef\x99\xe8\xd4\xe1\x92\x81\xa9\xbf7VH\x10>\xbf\t\x05\x14G\xec\xa5\xd9\x81\xaeJ\xff\x01\xc1\xba\xc0\xbc\xee\xe5^S\x92\xb7_v\x08\xc1\x97\xd2\x0b\xfel\xadt\xaf>\x07,\xdf6@\x84\xf6\xf2\xa3Q\xc3\rJC\x10r,\xd3x\xf6\xe5\xcc\xf0K2\xdf\xb8\x82\xd6\xa4j(\xa1\xdbF\xb2/\x03\xfd\x08\xe7-6\xe5#S\xbaey/\x871\xc7P\xaf\xd1\x94N\xc2\xe2\x89\x85\xf9(\xe14C,t\xe0' + + +2024-12-12 23:54:26.697319 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16831 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862159471 + ack = 2922049193 + dataofs = 5 + reserved = 0 + flags = A + window = 515 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x85\xf3p9\x8d\xa7j\xee\x0b\x82\xb0\xf3\xe6\xd3To\x9az(\xf9\xe9\x1d\x8a\x01\xf2\xd3#\xa7+ sC\x0b\xd0(O\x07\xb8r\r\xed=d\x902F=\x1d\xe2\xd5\xd9\xbcH\x82\x01k\n\xd4i\xa4\xed\x9d\xd5m!.\xcb\xa7?f\xdc\xb7I\x97)\x1a0\xf2\xc8p?V\x8dU\xa4\x80e\x93\xf2\xbb\xe5_\x80p\xc2\x90\xcfhlG\x0c(,T\xf4\xd2\x89u\x14\x14\xdf\xe9\xef\xb5R\x10h^\x7f\xb8"\xe1\x82\xc2\x07\xabQ\x1d\xa5\x17\xaf+\xf1\x17\xe89\x1elk!\x84\xf5\'\x12mx\x9dS\x12\xf8z>\x00\xe6\xf3\x1c^\xda\xfc$\xd9\x18\x8f\xb6\x98\xce7\n\x97\x90\xaes\x89f\x0f|q\xd3\xfd\xb4:\xed\xbf,\x8a\x04\xea\xa6\x1bC\x91\x85Zr7u\x97\xc1\x95\xdaS\xb5\xfb\xe5tq\xe2\xdf\xa4(D\xe7\x89\xe3\xb9\xd6d\xb3\x94\xbd\x91Y\xa8o\xbf1\xee\xdc\xcb+F\x930\xe1\x015\x9c\xe99K4C\x8f\x91\xf3?[\xa9\xb8\x1d\xa2q\xb3\x88+\x1e5\x95n\xc6\xa7s3\xe4\x14\xaf.p_\x9eM\xbcYayWi~k\xd5\x1b\xe4\xd7\x1a\x99\xce\x8c\x16\x8d"\x8e\xc2\xddtB\xdbBu\xbc\xc0#%\x1an\xdf)q( [+>e$D\xa7\x9eP\xdb\xd6\xc2\xc6\x923\xb2\x9e)rj\x9a|(\xd4\xb8\xbb\x0e\x01\xa4\xb1\x19\x00\x12\x11\xcb\x1e\xd9\xff\xa7\xf3\x9f\xfa\x1b\x10Sj\x1f\xd7-\x1d\x85\x93\x0e\ne\x1e\xa6\xcdr\xcc\x90gu+zr\xf6&\x8f\x02m2\xec\xfd\x92\x12\xd6^\xe7\xbe\xbf\x83\x10\xee\xb0\xbe=\xc99\xc3;[]\xa0)\xe81m\xa5#\x9b\x1e\x8c#6\x13Em9\x90\x8e\xe3\x7fk\'w\x8fy\xd0\x19\xce}\xbbr\xf2\xb9\xfa\xcfy\x92w\x8brW\xb9=\x9cTr\xad)\\\x0c}k\xcbQ\xe3v\xe7E,\x86\xc1\xe7\xbe_rG\x81\xc2\x05\x98\xca\xd3\xc7q\x07\x0c\x19\xcb\xc1\x08\xc9IE\x8d\xa5\x110\xe2\xe2\x125\x85\xa1\x88\xd2\xe5\x94\x0c\xd5\xaa5\x9e\x96\x95\xad\xfd\xc3\x0829\xb2A+O"\x03\x82YM\xa4,Sb,\xeb\xb1\xce\x97\xe7U\x1cG\xbf 8\xa3\xc3\xce\xef\xeb/S\xeb\xcbE\xd0u\x8c\xed%\xdb\xb2x%c\x04\x0e\x1a;\x08\xda\xb9\xf0\x8d\xd4\xb4\xcfB\x01>M\xab\x93%\x15\tF\x91S\x91,j\xbb\x10\xa9\xb6k\x0bv\x1f\xbc3\x7f\xa0{\x16|\xf6\xe8 \xb0\x83\xf9\xba\xd4\xe5\x91!\x0c\xc2\x10\xeb\x80aQ\xd1\xeb\x1d\x92\x1e\xef\xd1s^\xd3\xdf\xc3\x15\x8d\xe07z\xdb\xe9\x13\x14\x7fo\xf3B\xbbN\xd1\x06\xaf\xaf,\t\x03\xe5\xd6\x16\'\xa6\xf3z\x95\xb6"?l\xb9\t\x0f\x82\tx\x9d\x82\xb4 OE\xb3\x99\xc1\xc3\xb0\x03\xa5\xe1w\xe8x{\xb0\x1c_Ks\xf1\x80\xee\xfe`=\x97YEj\xd9\xc5u\xc9\xe6W\x1e\'\xf0\xb7\xab\xe2\xdfa\x03q5\xff\xd9\xe7o\xc0\xca\t%\x85[Q\xdf\xf1u0x.\x1c;\n\xe4\x9a\xddrB"\x893\x99\xc3\xffk\x90\x1d\xac\xcbm\xd1\x99\xa7\xde\xb1{\xcf=pK\xee\x99Y\xd5\xca\xfb\x8e\x95;\xca\xea\xda\x8dy\x9d\x19v\xe0a\x9a5Q\xa8k\x01f\xe9\xe7\x0b\x08\x9dX\x16\x1cY\x06X"\xcc?y\xe2\xf2\xf4\xc6\n\xa9\xc5#\x8b\xcf\xeb\xad>\x8b$\x84\xf3F/I\xdeI;o~\xd2\xd2)\xd9\xcd\xce9\x96\x94]\xcd\x9d\xfa\x92\xe7\xca\xc3\x90\x00@\x92\xa6\x85]#\xd6\xa8\xd9J\xfa\'\xbc\xbd\xfe\xbd\x83\x9d\xd1\x0fJM\x8b\t\xc5R}\xf5\xe9t\x1d\xe8\xe0\x08\xf8\xca\xabt\xc2\xb4\xa4q\x1b\xb101v\x8f\xf25Td\x00V\x1b\xbd\xbeL\xb4g\x82\x06\xfb;\x85`\xe1\x03\xc0"U\xf9\xbd\t\x8cS\x9b\xc6\xfd\x13| \xa3!2\xe9\xfd+\xbd/\xe3u\x0eZ\x8b\xe56\xd7\x1c\x1a\xefg\x0b\xf8\x91\x88\xa9\xc8.\x17\xe3>\xac\xa9\xa3d2\xf0\xb6\xa4\xd4\x8c!\x99=\xe6\xf0\x93\x0c>\xed\xca2\x98\xe0n\xb4,\x8aQ\x0f\x97\x85\xe1X3\xa9\xe9:\xf6\x97"\xeb\xb1p\x92\'\xdf\xb7\xe5S\x91j\x17\xe9,\xe4\xd7`\xd7\\\xca\x83\x9c&#+\x1eP/\x88\x8ctL`\xde\x14\xb9\rw\xad,\xff\xca,\xe1tY\r\x162\xe8c\xc9\x7f\x1e\x00\x1b^v\xb5Pm4}\x0bg\xe6\x04\xb6\xfd\xca\xab\xaa9C\xc0\xb2%\xad\xe8\x0143\xc18b\xf6;4\x92P\xe8M\xc7Z\x97\x16\xd9\x1c\xf9IAj\xda(\xd1:\x81Eh\x0b\xe1\x89\xd5Dn%\xa6"\xb9L\xccu\xd7\xe5\xda\x8fH \xc8\xea\xb6\x97P\xf3Iy\x89\xadv\x99\x93\xfe\xf8\x8bD\x80\xdd\x99\xf9\xff\xb1\x82Si\x05|\xb5\xd7\xe7\xbd\xe9{\xc5\x8bp\x8b\xba\xa4\x87\x1bG#\x16\x97\xab\x1eGP\xaf\x14D\xfc\xd6J?\x9c\xc5\xc1\xf8D\xa84\xf4\xe0=R\x92\xab\xe6\xec\xd6\xf7\xdc\xc9\xe2M\x81gG\x8f\x81\x01\x10\xa4\xbb<\x9c\x05\xba}\x10\xb9,]Y\xc8\x10\x1a\x9c\x0b\xe5Rr\x11\xaf \xa7\x86\xd7\xd3\x9bB\x9b"\x8d\xe9Z56\xed6\xedE[\x91\xabU\xe0\x97sf\x10\xcf\xf0\xbd\xd8\x8c\xc2]5\x19\x0e\xcc\xe9\xcfqC\x9dn\x1d<\x8b\xca\x88\xb9\xfau%\x1br5\xb2j;\xd7\xef&u\r\xdb\xc5L\xa3sa7\x0czd\xb2a\xc2X\x8f\xb7t\xb6\xdbZ}\xbf\xab\xd3\xe7\x10\x83\x94\xb1Z\xd7a\xf5\xfcR\xbd\x04m\xf0\xea\t\xea\xb4@\xa7\xbb\xf6\xe8Y\xee' + + +2024-12-12 23:54:26.703543 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16832 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862160911 + ack = 2922049193 + dataofs = 5 + reserved = 0 + flags = A + window = 515 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\xbaqL\x9e_\x1b5`\xc9\xe6Lo\xd3\x07\xae\x92\xc4>\xae\x82\x8e\\\xb7\x19GY\xfe\xb7?\xe8\xa1\xc3\x8d\xc1\xc5h\x81#~\xd7\x9b]\x9b\x89c?y\x8cCl8T\x86\xa5\x17\xb9\xe0\xd2"c\x1f`\xfd\x13+\x83\x16v\x0cRf\xe8\x83\xc6\xfbz\xf9Y\x1cs9\xaer\xa2~\x04\xc0\xfe\xca\xc1\x08\xeaM\xd1\xa1\xab\xa2\x13\x06s3G[\xb0\x82\xd4N\x88{_-G}:\xff\x84\x89\xcd\x90\x9f\x1a\xd4/i\xf9\xc9J1\x0f\'\x9bcIo\x91u\xbe\xf0K\x929h\xb4\n\xe2\xbb+\xfb^:X\xea\xfew\xf9\xc9 \x98\xfa\xf6\x07\xdcj\x05O\x11\xc17\xf30\x8e\\L(\xddjM\xf1\xedc\x9cP\xc8\xa9n\xc9\xa7`\xac0\xf0i\x1b\xea\xb5\r\xaa]\xc7\x96\x91L|\x1c\x9a8\xd6\xdd\x05\xa7\xb7F\xa30\xb8:\x8f\xc1\xc6\xf3\x93u\x0b\xc6\xf3hK\xba\xbe\x1cd\xa3aK\xe8R;\x9ewKh\x8f\x8eu\xc9\r\x1ek\x1e\xe9c\x188\x86\x80]\x7fy`\xe5 p\xcb\xde*\xc2\xf6K|8\xe2\xee\xc8 \xb8v\xde\xbbU9\xa7\xaa\x8e:\t\xb2\xb5b\xc7\xc6>>\xdb8\x19\xdb\x0f\x82\xcf\x86kP\x96v\xde\xa0\x91\xfdq\x95\xdb\xf1\x16\xb8\x85\x83\x99\x94\xcb\xe0"\x85r\xea\\\xe49\x92XW\t\x06\xcd\xc7\x8c\x8d3\xd1\xe3\xa8\xf2zO\x0c$$^\x18\x98b\xf0\xc0<\x98\xd9o\xa0\x11;\xedkEG4K\xde;\xbc\x94\xba*\x1f\xee\x12\xaeK\xa36E\xaa\xd5Y\x1e\xcc+\xb3E\x18\x07\xff\xd2U\x9b\xdf\xcf\x07\xe5\x10zYm\t\xb7a\xf8G\x7fO\xedk\' \xb95HiAGz\xad]\x80\xa1Y\x0by\xad<\xc7N\x99\x86\x18\xa9(m\xe3\xd4\xed\xee\x91*|(\x05\xb4\x03\x86\xc9\xbe\xa8?\x8e\x1d\x05\xcb\xb6\x00\xf2\xd8c\xf7Fx4\x86\xd5\x01\xc4\xc8\x86+s\xbe\xd260i1\xc8\x8c0\xdae\x1b\x9c:\xa1\x0bb\x08\xc1\xdfip#(\x8d\xe0\x1a\xf5\xe6\xd4\x8c\xe4\x05Z=%5\xb87\x07\x07f"\xe4>use\x88\xbf\xad\xae\xc4v\xaa\xd9\x92M\x05\xba\x9e\xef\xc9\xd0g:\xb5M\xa8s\x07\x9d\xf8\x08$\x04\x01\xc5\x9a\xf2\xd7\x1c\x07\xda$\xefp\xd0A\x14\x11tQ\x0b\xef\xd3\xafw\x05R\xf2\xa0\xabN\xc8\xae\xcba\xa4\xec7\x19\xb0\x8b8\xbc\x06\xe2K\x19\x87\xd4.\xe7\xf7\xcc\xac\xc5\xad=\xd6\xd7\xac\xcef\x8c\xa3\xf5\x88X\x90Zf\x9fw\xe9\x04*\xab\x12j\xab`\xc2J\x99d\xce)L\xbf\xd0\x12$\xec\x12\x8b4\tK\x19\x93\x17\x19\xb9\x16Fu\xd6\xfa\xacnS\x8eEP=\xd0z\xe4f\xdaDS\x07\xf0\xb2\x8e\xbal\xecj{\xf5\xfb\xca\x98e\x7f\xa2\xc5.\x0c$D\xb4\x10\x16PM\xd9\xd3k,W\x87X\xc8\xe5#\xc4\x9e\x0b;\xe3\xa2_\xba\xdf<\xf5\x02z\xc8\xfc\x03\x19\x17\xec\xad\xbd\xff\xa8=\xcf4#\x1d\xaf\x97\xb28e\x84\xfdk\xb5\xb1jZ\xe4\x9d\xfbf\x95tFF\x92\x01?\x80\'W\x9e\xf3t\xde\xe6i\x82x\xec\xc0@z\x19@\xa5\xaf\x03s\xdc\x97\x96\xf9\x1e\xf0\x9b\x98\x89\xcf\xe7=\x93\x06\xbc|Y9e\xa27$G\xda\xde\xd8y3\xccR0\xaa:I\xba\x14\xbdT"\x92[\x9a\x81\xd0=6\xafH\xf9L\xbb\xbas\xff\xa0\xfe\xc3\xdb\xd8?\xc0\xfd\xec\xdbk\xa0`\x9f1\xafxp\xe34\xa8\xcf\xfd\xee\xf8\xe5\xe0=\n\xce5\xff\xf0\xb30t\xcaSk\xdd\xe8\xc1\xab\xc0\xcc\x1a"\xd0\x04\xc7\xd7\xbbI\x1e\xaemV`p\xdd\xed\x16\xa4\t\xd9\n\x0fpK\x8f\x925g5\xb0\xdacr\x98t\x0f6r\x80;a\xb6\x98n\x99XB\x90\x9a\xab+\x84\xe7*k\x02\xb2B=G\xd2\x917\xaf\x05%\x94/\xd7\xf8\xecU\x89\x9b\x0b\xd6jp\x02@[<\xc9|8\xf9\xf5\xed\xd0>SEq,TL\xde-\xec\x13W^\xa1\xc2,\x13)\x9f\x80@\xbf\x9b\xc5HI\x97\x8a\xdb\xcb\x82\xba\x8e\xf9*}\xe6>US\xb1\xae\x9c\xa5\xaa\xdc\xfc\x83\x84\x12I@Nu\xa4"Tb\xa5\x90\xbc\x86r\xb6;H\x8d\\1\xd1\xdc\x8e\xac\xba\xce\x92\x16\xc2P\xce\xd7A\xc2\xbb\xed\x9d\xe7\xf7;\xd5\xbc|\xe2\xdbR\xd2\xf6(_Z\x81w\x1bm\x84\xba1\xaf\xec0\x9cpx\x9d\xb8r\xa5cx}\xc1\x9c\x85\xd1 +V\xbd\xd1\xbc\xc8\x02\x12\xf9\xaeM\x8f\xee\xd8\xbe$p\xf7cW\xda\xee\xa1\xebY\x8e\nJ\xd0M]*\n:\t\xd3n\x9d-p\xe36\x8f\xdf;\xc6\x03\xe7\xbbkxT1y\xd8\x15\xb3b\x9f\xfe1\n\x7f\xf1m\xe7\xf3\xf9_\x9b\xdc\xdc\xe6\xe8\xc1\xf5\x8e\xcap\x9eqY\x91\xa1\xee\x1e\x05\xcdu\xd3\n\x14yQ\x08m\xdd\x00\xc8l\xb5\x95y\xaf\xd1\x80\xed,]W\xcb\xaen!\xf1\xbf\xbe\x16\xaa\xbb!\xcabB\xa5\xed\xe8\x8eCSt7\xa5e\xff\x17\x91dW\xb4\xbd\xf6\xe2N(\xc6\xba\xd2i\xb8\xdc\xf3OX\x91L\xbd\x93\x07\xa3\xbf\x89=Ni\x89l &\x08\xcd\xe1\xb5\x01R[\xfc$\xc1i\xaa\x16\n\x89\x8eZ\xc3\xd4\r\xb7\xf4\xa8\x91A#\x90l\xf1%\xb9\xd8n\xbc\xbb\xd5f.\xe2K\x9f\x80C\x91\xa9\x14\x96h4\xf3~a\x8f\x10:\xe4!O\x8f\x14\x94\xc8"u\xe7\xcb\xb7\x83JX\xc2d\x87\x8a\x1f\x83Xc\x8ff\xd5j\xa0\x0c\xcf4\xb7c\x95\xf7\xad<\xe4T\xc0\xc2@LW\xccT\xa5\xe2\xcc\xe8m\xb3\xae\x8b)\x9b\x01\x91\x9e\xc7f\x90\x9a\xb8OflQAysF\xca\xe6\x02\xea\x1c\xdbn\xcd\x02"\x9a\x93\x95\x91\x8c\xc0\xfca\x94\xf4X\x8c\x8d\xf3\xb6\xdf\xde\xaa|\xcc)>\xc8\xae\x9c\x97*\x12)\x1f\xf8\xf2{\xb6\xcd5\xd0\xb4\xfe\x90\xc6i[n#\x13' + + +2024-12-12 23:54:26.709852 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16833 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862162351 + ack = 2922049193 + dataofs = 5 + reserved = 0 + flags = A + window = 515 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'j\xd09\xc9\xbbA\xb4\x8d\x9dDl\x11\xb0#\xc4\xaa\x19\xfc`\xd5\xe46e\x9c\xaf\xfe\xba-\x95\xd0O\xe5\x06\x99\xe5\xd8\x03\xb3\xf7m\xea\xbd\xca\xa5\xce\xa5\xf6\x83\xc8\xcf`1\xc1\x06t\xe9\xba\x1faw\x9a\xd2G6\x93\xd3\\\x86Y!)\xe9\xb7{axp\xec9\x81y`9\x0f\xde\xb2\xf8`R\xa2\xb8\x16D\xd5w\xec`\xd3\x13\x8eSS\x9cf|\xc1\x83\xc9?~xl\xef$\xf8\xe8O\x168\x8f|\x899\xdcM\xd9DB:\x1cjM\x12\xc1,h\r\xc7\x92@\xb4\x94r\x87\xd0\xa6\x8al\x94G\x9b\xcf]\x96d\xe5\xc8\xf5Z\x03\x80:\x13\xa4\x9d\xf7HZ\xc2X\xa0\xda}C\xdc\x81\x8b\x13\x9db\x04\xec\xff\xe0\xe1\xe8\x84=X\xf6\x1b\xabY\xc9iD\xace\xce\xdd_\xf7\x8eQ\x16Wk\xde\xc1DG\xbdW\xf4\x12R\xf9\x04&LL0A\x8d\x81O\x84b\xea,\\(\x1a@@\xb1q%\xb3\x81\xaa}mI\xe9\xa3_rXn;\x02pt\'\xfc}\x11z\x98 uQ\x92\xf6R \xeb\xbc\x08\xd7\xe3\x82\xbc\xf9u\'^\x84\x9c \xeaS b\xdf\xd3\x8e\xf2\xba\xa90\x8e#\xe1\xfb\xba\x10h\n\x9b-{6R\xdf\xc7j\xa8\x95[\xf3\x80\x851\x12\xb5\t=\xb2:\xd5\xa46\'>n_\xc7\xab\x12p\xdd\xcbo(V\x97\xf7A*p\xad\x98\x03\xe2t\xfc-\xc8\xa8\x83\xd8m\xf4O+\xfc*Hf{\xb2\x17\x06\xb2M\x10\xfc\x05\xde\x1bI\x05\x9a\x97\xd5\xc6>\xa3\xa0\x99\x1fh\x13\xa8\x9e\x18\xcb)\xf9P:jHe\xa1\x84\xa1\x00\xf2\x9a\x91\xa3\xb8\xb5\xac\xeaq\xbc#\x95X\x86\x19\xaf\xcb\xc5\'\xa8\x04x\x02\xd586\xd6\xd6WT\xe9U\xa0\xf66\xb8\xc9\x98\xe4\xce\xceGk\xd1r\xea]\xb9\x0e\xd3\xdd\xf26\xd0wZb\xfe \x8c\xc6\xd5\xedSe\x08O\xb8\xadL"_:\xb8\xcc\x17\xc6\xdc\x9a+\xd0^\x87\xbe\xae%\xc5\xfb\xba>\xd1\xe0\xbd\xe8S-h\x12/a\x06\xc4E.%\xb8\x93\xf0\xfe\x17`i\x1f\xf9\xa7\x80\xf7\xd8N\xc1Yt\x88\xbf#[0T^#\xf9Y\xb9\xad\xaef\xb6\x91\xcf\x0c\xff\x04\x8er\t\x12+\x00\x15\xf1)\x8a<\xc1\x959\xb1\x121\xa0l\xb3Ni\xb8\xbfR\xa9j\xf3!\x91\xa4\xe3\x1e\xadJ\x08\xb96\xaa\xc0\xd9\xab*\xb0\xff\xda\xd2[\xf4=C\xad\x8b\x06\x97\xd0\x0f\xf4\xbe\x02]\xc8s\x88\xae\x11Ip\x8b\x0ba\xfbK*\xe2\x00\xac\x06c\xde\xa4\xeeR)\x91\xe4\x01\xec\x97=\xadn\xcd@\xd5C>\xd7\xc0o\xb05L4{\xdc\xeb\x0e9I}\xfah\xc6o4Vo\xea\xf2@a\xa94\x9c\xa5=\x0erP\xb2\xeb\x07\x06\x92(~\xfc\xcd\xa3\x89\xca\x9c~\xa2\xcdZ\xa1\xa3!\xa9\x13\xe1_\xca\x00\xf4Y\x02[\x91H\x96\xd1\xeb\xb7\xbd\xfe\xed"\xf6\xb2p\x8d\x96\n\xc8R\xb8\xfcf\xf9\x05\x17B\xbdgf\x1a\t\xdb0B\xb2\x05\xd6\xa7T\x14\xf5\xe2\xf3f\x1e\xa0\xc1\xc9\xee\xa4VW\x05\\u\x9a"\xb2\x8d\x0b]\xfar\xc1\xf5\xc7\xac@?\xd0\xe2Q\xe7\xbaE\xdat\x1a6\r\xea\x93\xe0*}\xb6\xd2;\x0b\x99t\xf0\x07\xc1M\xf1hR\xc9\xcb\xc0\x10T\xad\xb5\\&@6\xeeX\xf3\xb0]\xda-\x13V\x83\xac/nK\xab\xc5\x90|\xdc\x9fa<\xa3\xa5\x1d#\xd9H5-\x19m \xa0I\x12\xbfG\xd7~Y|B\xe1\x1b!\xf3\r\xb8PN\x8b\xcc\xfe~\x1e%\xa3\xefM,*\xb0\x96\x81\xcc\x16\xbc\xac\n\xc4\x12/\xd6\x18\x99Q\xc0\x96\xc0\xe8\xd0\xba)]\xb2\xd6\xc1[#H\x94o\x12\xcb@|\x03bV\xb3@\xbe\n\xbd\xd9\xad\xb8\xc3\xf2*\xb4\x92\xfc\xe5\xc3H\x95\x8e\x81r\x07\xec\x13\n\x9a\x9d\x03\xbapj"\xccg\xca\xde\xbf6\xf1,Q\xd9\x0b\xbe\xc7)\xb9dl\xbf}\xf0\xab\xe6\\9\x9a,7l\xad\xbe\xf2\xbc\xc6\x03\x7f9\xb0\xe5\x8a\xcf\xd5\xa1\xff\xe8uu_X\xa2!\x18\xe5\xc5\xe0\x97MH\x06\xee0\xa88oc\xc1,\xfe;\xf6\xb9\xe3\x0eLU}[\xabS"\xbd\xbf>\xe4\xd6\xef\x94\xf6\xfa\x0f\x0e\xdc\x1c\x08\x12t\xda;\x7f3\xe1o{\xf8\x11\x1d\x8cnB\x8f\x13wOh\xe1t\x9e\x10\x81\x0f\xa3\x1b\x9d}\xadd\xe2\x1e\xfd\xa5\x0e\xbdD\xf2\xf9\xed\xf2)x-\x9e\xd5\xf2\xef\'I\x83\x1f\xc5{:a\xbe\xf4\xf4O.\xea\x16\xbd\x93\xb7\xda \x11Q\xc5\xbd\n\\q\xf7g9="\x92\xe9\x14\xce\x9e\x05\x8aj$\xa0\x7fW\x87\xbd\xb3\x05:\x08\xe2\x8b\x18\x8c!\xba\x8c2\xfd\x8b\xb6{w\xa0f\xe3y\xc0\x18;\x0f\x9c\xdf\xf7\x92\xbd\xf8\xaf\x96\\\x1b5\x88i\x1aL7\x8e\xa6`O%F\xa5\x13B\x0c\x9d\xa2\x89\x19:\xba\x16\xe9^"Y\xb1\xd0<\x1daWM\xf5-\xa6\x9bOe>C\'\xc9\x9fN\xc3\xe0\xee\x8f\x14U\xdb\xe0J;M\x94\xd4\xd2\xa6J\xd3\xe7wt\x9e_+\x0b\x99\xe3L\x02\xcf\xe9\x8f\xfc\xbb\xd7\xe41\x99hx\xd0l 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16834 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862163791 + ack = 2922049193 + dataofs = 5 + reserved = 0 + flags = A + window = 515 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b':\x1fc\xb5\xe3\x9dO\xb4r\xb8\x1ar\x9eL\xde\xbei\xb4\x0e\nDi\xcb\x85\x90\x9aacL\x84\x86\x12w{\xb3[\x1c\xe9\xd4bM\xcf\x18\xdc\xdbA\x1c\x8e\x13w\x98\'\xaa)\x99AF\xc4\xa0\xb6\xc7\xeduY\xf2X\xf7\xf0LFM\xe3V\xe8C\xedn\xb5q\xff\x1fo\xa2?\xe1\x9fi\xae\xc7\xe1\xee\x070t\x841\x90\x18o\xedL|\xbc\xc1\x9eS\x00\x84\xda\xca\x96{\xe9\xd7R\xfa\x9e\rE\x06\x18\x18\xa3yp\x84bIDW\xd7z\xa8\x1b\xd3\x84c\x1cN#\xb03\xdb\xe4Up\xd2\xd3\x0cG\xbfX\xc4\xf8\xda\xb9\xf3\xc1\xef\xd9\xfa)\xfbgH\xea\xf47\xc8\x8e\xe2\xdf\xe5\x18V\xf4\xa6\xe1}&\xe4j\xed\x80\x90\xd5\x90\x8el3{5\x16\xed\xb1\xaa\xb9bMf\xf1\x05\xce\x83%I\xeb]\xf9\xe6\xa8\xda\xebr6\xcc\x85\x9e\xbcsj\xb9\xa3\xd3)\xab^\'S\x13\xe4\x9e\x85?\xdcZ\xdb\x85\xd1\xa0nex\xdf\xc9\xb4\xdan\xfb\xdf\x12\x07:\xd4n\xf1\x18g7sr;\x8c\xb5\xf4\xa3_\xd6\xb0\xe4\x15\xa0\xdd\xeeu\xa2v\xd7&\xef]e\x7f\xe5j1\x0fVS\x05\xa8P\x1d\x85[n4\xa3\xc3^\x9f\x97\xd4\x0c\xbaz@Ny\x12\xcd\x1e?\x89\xa5\x01E\x05\xcf\x8b\x96tH\xa4Y\x96W\x9a1\xdb{l\x98N\xae\x8d]\x0b\xd7\xa0}\xb7\xd9\xa2\xd9\xbe\xc2\x08DDw\xd9\x86~\xc0x)\x93s\xddp\xa4~\x84u7\x9d\x8f\xa67\xb3$\xe8\xf3\xb5,\xc9\xc3\n\xf2;y8C&q.S\xa8V\x019\t\xadG\xcar@ct\x94\xf5\x1d\xdd2\x98\xeb\xbc\xd1\xd1\xc3]oc\x9e\xa12\x80\xf83\x18\xda\xc9;X\xc9\xccl\xb7\x84R! \xcb\x8b\x02\xa7\x00I\xa68\t|Q\t ;\x19\x81\xa2-\x03\xb5/A\x0fp\x0cU9\x93\x95\xa7b\xa3\xd2\x16\x1a\xa6\x1el\xb2\xb36o\x9c\xb1\xbc9\xd9\xb2\xae\xf8<\xebc\x18\x8dZ\'=\xacm\x8ba\xea\x9a\x04-l\x0f{c\xc1\xf1\x96K\xaf\xa52\xf1%!\xea\x8bA\x80\x91<\xca\xac\x83\xb1w\t_\xaa\xe2\x83\x8b\x83\xbd\x0f\xff\xed\xc8\xe0u\xe3\x91Hz\xe4*\xc12.\x06\x9d\x1c\xb1\x9a\x00\x13\xb7,\xbf\x99\xb1lr\xa1:\xad\xd2\xb2\xf7\xe8\x83>]\x12\x94\xf6+\xa7\xec\xa5\xf4\'\xf2\xf1\x93\xee\xef\xa5\x04\x8c\x83\x00|\x05\x85\xfe\x1c\xf0<\xa1\x19\x0c\x12`\x82\xf3g\x8f{"\xd2\x04\xbef6D\xf7\x82+\x8d\x13r\x16\x1en\xd6\xa4\x9c.\tB\'\xe18d\xa9+\x1f\x08\x9b=Q\xa2d8\n)C\xffU|\xdd\xb2\x9e\xf0R\xb1aO\x94\xad\xe2\x9a\x8d\xec\x8c\x195\x85l\x07\x0f\xf6#S\x03\x08W\xa8\xc0\r\xc1\x00\x85\x11,3\'\xf7\x13\x1f}\xcd\xa8E\xc6\x8f`\xf1\xb1\x1c.@\x86\xee\xbej\tNa\r\xb9D\xf4\xa4\xf6\xc2\xe5\x96*\xe6\xb9\x87X\x9b\n\xc9\xb2F\xbb\xf4\xfc\xf6\xd1\xd5U{\xee\x10\\\x8di>\x19\xb5\x1f\xda\xc8\x9dW\xbb\xc9\x9a?>\x98\xda\xc6J\xb1-\t\xf6\xa7ey\xd5\x8d\xc9\x1b\x0cO\xe38\x10H\x06[\xe3\x94\xf5\xa5\x175]\xb7\xae:Gsu\x03Xl\xc6\xd3\x14\xf9O\xd0@\x97d\rL\x13\x96\xa8!V\xb9\x90\xdb\xf7\xefF"s\xe7(\xf9\x91B9\xcb\xf4]\xe8?\xd5\x0b\xdf\x83^\x88J\x83\xb5&I\\\xb7\x83@#h\x00\x8b\n\xf9\xc4kG\xca\x89\xd3\xc2!|r\x06\x16KUc\xc0\xda\xf4\xa0\xd0\xe8\x9d\xcf^\x86\xa8hJ\xff\xa1\x84\x90\xa6\xa3\x03y\xa0\x9a\x02\xadIz\xc8Z\x84\xe2\x9e\xe4\xd3\xabD\t\x84|0\xbd\xb1\x98\x81R\x13\xf25\xba\x8f,\x15\x0bC\xd7\xba\xb8\xc2\x05N\x9b\x89\xc4\nUY\xca\xc8\xc9~\x9f\xf0!ui\x96\xda\x02\xd6\x03\rM\xe7\xf0\x9f\x95\x7f\xc4\x10?6\x97s\x93Y\xd8\xe9D\x15\xc6\x04@\xb0t\xefpO\xd9\xa0\n\xac\x92\xfez\x90\xc7\x0f+\x89\x93\xbe/\'AJU\\\xb2\x89\xc2\xd1\x06\x13\xde\xa8`\x04\xfa: \xdf}\x163\x9b\x0f!\xd5>\xa3\xb3\xb5}\xe6k\t\x03aew\xc7\x81\xca\x0f\x0e\x9a\ruj\xd0 \x94\xbe\x8b\xc4\xcf\xcd\xa5m\xea\x08\x9e\xe5\x0ew\xfe\xb4\x1e\xccy\x12x\xe9#\xd9\xac\xec*\x99\xb2O5BV,7\x0f\xa3\xa6>\x12W\x94\xafs\x8c\xac\x99\xc6\x0b\xca\x81\x1e\xa7\xbepd\xe2\xbb\xc2u\x98\x0cg\xfd\xb8\xb8\'ZD\xf3\x07\xfe\xaa\x8e\xd9\x80\x0e\xedT\xd3\xc5\x8b\xe1\xd4\xf9\xdet\xb0\x8d\x1d\xac\x18\x88\xc4\xfb\\/\x8a6pl\xff\xb8D\x08\x08 8\r\xbe\xe7>\x05\xb0\x8b\xde\xa0-I^\x81#dd\xf0\xdb>\xd4\xec$\xc5\x0e\x11@\xa6\xf8j6!\x0eQ\xe9%\xd8_\xf0\'Vyw+7\xc0\xcce\x7f^\xa5\xda\x87\xa9\xe7\xee\x82\x95\xf0T0:\x9d\x0cq\xfe\xf0\x97\xd8\x1b\x1f{\xce\x86\xed\xf8\x84\x1c7C\xe8\x18~`\x17:a\x811\xc2\xdbS\x15\xf3 \xfa\xe1E\xa7\x13\xb7\x85\xa5\x96F\x99\xa9\xa7\x9cl\x12,\xa5\x9f\xdc\xf1\x0c\xb9\xf3S\x0c>\x04D\x03\x8bl\xed\xd6*\xdd\xd3\x83\xd4\x05\x05TL\x0c1\xff0Tt\\_\x9b\xf0\xae\xd3\xdb,\xadT;\xb6m\x86\xb4q\xc6\xe4\xf7\x06\xd1\x8e\x07|\t\x14\xf4m\x85\xa5\x0fd_\xe5e\xef0buV\x95\xff\x99N\x07\x94$\xc1\x8d#\xf2\x8a\xe3\xbd\x08h\x97[\x84R\xdc]\xd1\x8d\xd8\ro\xbc8y\xb7\xcf\xb5\xe1\x85\x8b\xe3\x1dt[\x00\xe8\x00\xfd]\x19\xab\x94r~\x82*v\x1bV\x04\xdff\xf3\xa7"\xe9\t\xe3\xd8\xd2\x07\x9e\x05\xd8\xf9\xe3S\'\xd0\xdc\xff\x91H>\xec4\x15_Zq\xeb\xf4(\xd0[\xb4\xd6\xb3<\xbbx[K\x99\xc7p\xd8\xe7\xb1\xd4\xf9kO\xf8\x8d\xca\xf4A\x02' + + +2024-12-12 23:54:26.722028 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16835 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862165231 + ack = 2922049193 + dataofs = 5 + reserved = 0 + flags = A + window = 515 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'A\xe3\xef,L\xbf\xac+\x864>\x01\x9e\'\x7f\x89\xcb|)\xa6/\x08\x9c\x04\xdb\xc4_\xae5\xad\xe7\xd3\x1b\x9a"\x07U\x9c\x9b\x9291\x8fn\xda\xd2W\xa6\xe9\x8e\x05\xa8xz\x99\xe4\x83g*\xd5\xd95\xc4\x93\xed\xa4\xd2@<\x98)(~R+\xadM;\xe1\xa6\xee$\x822"\xdcW\xa4\xdd\xcd\xb4E;z\xee\xdc^\x02Y\x1cP\xfe\xa1\xdf\xc6\x98\xa5B\x81\xea\xd6\xf4\xfc/v$\xbb\xc8\xf3\xc8\xbcl\x00\x1d\xf2w\xd3,@Q\xdf\x8aw\x9d5tu\n2bk\xbe\x99\xfe\xae\tU^\x02nS\xd0\x08OfOU\xdf\xd7<\r\x02\xbb+\xee\xcd,\xc7\xb7~\x84m\x18\xe1\x80\xb4\xcb\x85\xdd\xbd\xb9\xa2\x01\x971\xce\xf7\xf7\x05\x12\x06\xfd\xc1\xecA\xa1\xb9+\x93\x1e\xc1\xf4\x1e=\x96\xeb\xa1\xf7T\xa0\xbc(\x03\xe6b\xec\x02\xb4\xed\xb5\xa3\xc3_g\xe5\x08i\xd7!0C\x9c\xb4\xd1\xaf\xe5\x18ok\x91W\x7f\x90\xe4Q\xad\xdba\xc5\x87\x95\xa6.\x88\xdc\xd1\xe2n\xf9\x1bI\xf4\xa0 \xd7\xe0\xadVP7\xf9\x12\xd9)\xd9\xab\xe6&\xb5\xdbN(u\xaa\xd5\x8e1\xe8\xa9u#\xef\xda\xcdU\xf8\xecw\xbf\xb4|JC\x9b\xb2\x04l32\x0f\x93`I\xabK3I[\xcc-\x07S\x08\xe8a5\x87\x10h\x01S\xbe4\xbb\x90_*\x0f}\xf4ng\x92\x12\x9c}\x1f\x0e\x93l\xb2\x02\xee)\xa7\xb21\xcf\x1d\x1a\xaa6u\x1e\xdbx\x12O\xd3\x87\x16\xcb\x92j\xd0^+W\x93\x8f\x07\xcd\xedG\x80}\xd7\xea1|\x85D\xb4mJ\xbf\xa9\x0b2\xb1\x0c\x9c\xe1\x97\xbf\xbc:\x1f\x16\x99!|K\x9fk\x91D_\x8e\x8fLV-\x00\x80g\x08\x81\x9f9[OxG\xee\xca\x1a\xb9\x13\x067\xa1\xc7\x11\xcb\xa9\x98\xe4\xdf&\x98~\xf7{+\x93\xad\xa8\xd4\x03\xe3\xca\xd6\xfe/\xa8x!\x06T*\x088\xe5A\xf4\xe5\xde\xf3<\x9e\xba\x81b\xb2z\xf8\xcc\x9f\x8b7\xbc>\x85\xf9\xb0q\xbc .\xa5\x83\xc0\x19\x9c\xe7%\xc2R\x80\xa3\xb3%\xb4L\xc7n\x0bA\x1b\xad\x0f#\x1d\xc5kE\r\xbf\xee>O\x0e\xcb\xee\xd4\x84\x05\x9f\xf5\x0e#\x8c\xca\x81Zk\xd6!,\x10\xafn\x92\xa4=\xe3\xf5\xbc+\xb9\xd3iY\x02\xb5r\xd5\xd3\x9f8\xed\xcbG<\xbf\x86\x1f\xc5em\x07\x1d\x94\x01\x18W\x00d\xa9+=3\xdf\xe7\x8f\x00i\xa7=\xd0 \xc41\xe5\xb6\xc24\xb5\xd0\xf0*\xbe\x86\x12\x95\xaa\xd1\xdd\xa6\xc6\x96\xf3\x02\x1b\x0b\xed$_]\x97\xec\x1c\xf2\xdc\xda\x81I@T\x8cU-s\x1ac\x13\x1bp#\xbcB:\xbe\x17\x10p\x8d\xb3\xeb\xeb\x0c<\x96Z\xe8\xacz\x15{E^\x1a\xcc\xea\xb9\xd7<\xcc\xef\xac+\xfa\xf7ez\x11j(\xe4\n\xb1\xfa\x11\x02WdA\xdeP\xd8\x1e\x0cU\\\x04#2\x8c\xcb\x89\xb8\xdb\x12!\x8f{\xaaO\xd9\xa6ic\xe9\x86\x11\xe9\xd4\'\xceg\x9a\xf6\xe2t\x9e\x1f\xb4"\x8es\x17G\xdd*\xccI\x94\x98\x0f\xe7y\x86\xac\x0f\xa9hk\xad^\\\xed\xdc\xbf\x0e\xc9]-=C\x19\xfb.\xf0JY\xf0&`7;)\xb0\xf8\x8d\x86\xd9\xe4I\xac\xa7N\xda`6\xc8\xee\xb7\x05T\x0b\x9f\rrY\x9bl~\xba\xd8\x04\x8a\\\xa9\x90-\xf0\x87\x05\x8f\x06%\xe5\xc1\xaa\x99\xe59\xda>\xd5\xee\x89\x8b\xb1\x04\x12\xe12\xc7\x9b\xb7\xff\xc3\xe5M4_j\xa9\xe3I\xfb8\x85\x0b;\xec]\x1a\x96\xcf\x91\xd12\x0e\xda\xca\x98m!7=\xdak\x80\xf6\xc2\xb8\xef\xe4\xbc\xd5\xffI\xba\xaa\x16\x138\xe9F\x12a\x88\x0fI\x85Ln=\xb5\xba\xf9\xdd}\x00\x1c\xa4\xae\xd7p\xdd\x17>\xa0H \xbe*\x0cN\x87\x9b\x800\x17\xbaP\xedW\xbc\xcai\x9bfId\'\x8d\xa0^\x9e\x96\xa2\xd0,\xb7\xbf\xce\xc9\xc9\\\x13\x00\x1d:\x89\x19\xf2\x06\x1eNH\x87M\x8e\x00\n\xc2\xf6\xdd\xd4;y\xf3\xdcG\xd8\x91\x8e\xc7\x11Ok\xd9\xe8\xf42\x8fWd\xfb\xe1\xe6\xed\xf4\x0bQ~k\x02\xa6EQ\xc9\xce\xb8]\xcceZ\xd9\x90\'"\x91%\x98*\xc7?\xd8\xf6\x10\x9d\x9c\x8f\x8a+\x16\xb7\xbde\xc6!\xb2G*yx]T\xbfL\xfaaJ#\x9d\x19,u\x91\x829\x9d\xc6\xff+\xdd\xa4sA\x04\xc5s\xfd\x15\x81\xbc\x93R\x95&d;k|\xd5\xeaA)\xba\xd0\xfb7\xc6R\xa2\xe9\xed\xae\x9c\x9c\xe6\x95\xa6\xf1\xa8\x81H\x1d\x99\xbf\xc6V\xf5:\x8c\x06\xb2\xaeJ\xc2\xa8D\xea"d\x89\x16k\xefA\xaa\xb5\x9a\xd6\xddS5q\xff\xf8\xa1c]\x88\x1c%\xe9EPC]q\xa0\xab\x9f\x06;\xf9e\xc3Eu\x90\xef\xacq1B6\x11\xa8\xd2]\xe1\xc3\xc6\xb1A\x93.\x91#\x14\xa8m\x91\x07\xb8\x9desd\xaf\xd4e2/\xb9\xf7\x9d\'\x84\xd8\xc2*\xb2kzz4\x8d%\x8aH)&\xe3\xb2\x07\x1e~q\x82\xc2Y^\x0c\xe7\xc3>.>:\xf8\xa8\xde\x99\x87\xf8\xe1\xff\xf0\xff\xaaZc\xf7\xda\xe8f\xedjes\x8a\xd9|\xd3\xb3\x98\xe1\x81\x01_p\x1f[\xb7s\xf4[\xbb\xdeF\x08\x8d\xd4\xac\xcd\x10\x83\xbc7>B\xc3e\xe0\xb2\xd50d,\xdf\xc3m?\x07\x1c0\n\xc4\x05_\x03i\xecf\xea\xd4\xb0\xe2!\\=[m\xcf\xd9\xdf\xb9\xc3\x0cz\x03w\xc3\xe7\xeeC|\xa6H.\xe1\xa3K\xe9\xca\xd6\xf7\xe5y\xda\\,\xb9\xbf\x87\n\x12R\xc0\xe3C\xa7`\xd4M)\x8a/a\x18\xf4\x83\x11\x1d\xfb\x8a\xa5Q\x8c?\xbd\xc6\xe9%\xafj\xe3V\xe4\x8bq\x1c\x99\x12\xa3\x0b~\xa5<\xe4\x8e>t\x1f\x90\xa7u\xf5\xc2\xe7\xe7\x92Ip\x0f\x94\xef\xc4V=u\xe6\xcc\x8cd\xd4\x94\xde\xcc\xb4&\x9d\x9d\xfb\xea~\xffn\x1aZ\xd8Ya\x1e@S\x89iY\xcc\x15' + + +2024-12-12 23:54:26.728208 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16836 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862166671 + ack = 2922049193 + dataofs = 5 + reserved = 0 + flags = A + window = 515 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\xfeq4\x08\xab:\x16Ni_a\x8d\x13k3a\x1b%/`\x94\x8e\xa4\x13\xf0\xc9i\xd5\x02R\x8bhJJo\xa27\xd8\x91\xbdC2y=\x87\xc5s\x1d\xa44\x87|\xdc\x92\x91\xd9\xaa\xc8\x1c.\xcb\xb1\x14\xc2z\xaa\x16\t<\xe6\x99-\xbfv\xa8\x15_\xc6\xfa\xc6T\xc8E\xfbGb\x85\x18\xc63\x96\xc2+\x99\x99\x0fW\x89\xa5\x9a"5\nR$\x9f\xf8\xbd,\xb3\xe5\x06\xef\xbb\xce\xc0+\xf4\xe2\x0esr\xa4\xd0\x0fp\x1e~\xd8\xe6\x0e\x13\x1bB0\x82eL\x10\x83\xc3\xec\x07\xd1\xea^\xf6\x18\xa2\xaf\x80\x13\xd3kN\n\x98\xfdG#:R\xb5\xd3G\x86\x97\x952\xc7\\\xca3\x11_\x08\xcc\xa6s\xf6\xdbmEXi\x80S \x10\xd1/\x89\xf5E\xa1\xbbp\xb0\xc3fV\xfe\xeb\xfc\xf9\xe2\xf3\xf7,\xcdVa\xd7\xcc\xc0Z]\x03\x8a.-\x16[0k9R\x91\xccX\xe8\xf1\x81\xd7Y\xc4\xe2\xf44`\xa8\xb9P\xc2Qx\xd3\xaf\xad\xf75\xe3\x01\x819R\xca\x84\x83tV\xc6\x02\xe1r=7\x89\x9b5[\x10\xee4\xf3\x82\x1a\xdd\xf9>\xc1\xffw52O\xca\xe9^7`\xbaI\x03\xdd\x7f@g2\x8f\xbb\x17\xb4M\x0b\xfcf\r]\x8d\xecL\xb9\xf7-\xc4U\x0cua\n\x16\x94\xd3m\xeeA\xbcm\xf1K@\x88.=R\xcfO.w\x9d\x89\xc0\xdc\xf1\xb2$\x1d\xbf\xc8\x01S\xf2\x8d|R\xd1Z,\xac\xff\x96\xf4\xb3\xe6\xfc\xc6\xf5*\r\xa3\x81>\xb8#\xabM3\xe8\xfb\x90\xc7\x12\xd9\xafjA\xd8%k\xf2\x15\x9cj\xc6\x8eC.K\xdbZD\x9d\x97\xd8\xadf\xaf\x06\xfe\x02\xda\x04:\xd7z\xdd\xfb\xc2v\xab\xf1\x90\xa8\xc8x\x04\x02mwP\xd7}\xc5\xc9~f\x1b\\\xc1\x9e;\x0c\x1c\xa32\x95xV\xfdCc\xa9\xd6i\xce\xa8\xc6\x14Y\x9bu])\x08\xf5}\x8cr4B\xc1\xf0G\xad\x13\x18\x82+I\x84A\x1b\x89\x1c\x0b\t\x98b%\x11\x8dI\xca\xf0\x9d\x9b\x1eu\xf5\x86Z\xcd\x8ec4\xde\xc7\xf1l\xb4\xc6\xa1\x82\xe8\xa3\xb6\xfe\'\xaa\xa0\x16\x1do4\x84\xceac\xcc\xa4\xb7f\x1e\x0f\x01{+%\x13\xde\x95\xa5\x1c~\x12\x1f\xe6\x02M\x13\x0c\x12\x04\xc5\x1fLBy7\xf1\x88\xd5\x90\xc0\xf7\xc9\x1f5\x0b\xe9\xae\xbb\x9d\xf3\xe7\xc0\xfc\xaa\x8f\x0c\x84\x1f\xf6\xdaZ\xa3\xd8`d\x8b\xca\xa7\xcf}\x00\xbf\x7f\xecsY\xf8\xb1\x80W\x93,<\xc4qF\xb5<\x0f\xe6V\xb3\xc2S38\x05\xacx\xff\xce\xe9\x08\xd5\x03E\x82g\xb1\x85-\xcc\x15\xa7\x0b\x8f4Ow\xb6\x06$K\x06K\x97\x93j\xebW\x0f\xd5J\xe4\x90\xe9\xdbSJ=\x1a;f\xe5\xd7\xa73\xcb\xb8&_\x88\xd7bo\xb1\xa4\xb6\xa3\xeb\xbf\xa5d\x882\xe0\x9c\x9e\xb3w\x02>%:\xdd\xb0\x8c\xa0\x1c^\xeb\x00\xb5\xd3\'G\x88\xa0\xba;\xac\xeb\xd2\x85\xe9\x11\xa4\xb8M\xcdO\xfaB\xbdCt\x89J\xe7\xa9\x7f\xb6\xad\x8f6\xbe\xf7\x1a\x87\xcd \x8f\xb53&N\x15+W\x0c\xa6\xe6\xaf\x86\xf8\'\x8d~\xb1h\xe1m\xe9\x9cm\xef\xd4\xdd\x7f\xcf)\xc6u\xd6\xff\xf3[\xe1\x84\x14MMh\xf0\xf6j\x036\x0b1yM\xa1\x05+\x14[\xf0\xc9\xdb<\x1dq\x1d%\x1da\xfa\xba\n\xbbMsKq\xa1HB(&\xb5u\xbc\x97!\x8f^\xf1=\xe8cNn\x1a\xe2lE\xc3\x9eR\x10\xe3F;\x9c\x81\xeb\xb4\xeb\xa4t\x8a)\x886\x8fdK\x8f8\x80\xa4\xcct\xdff\x87\x83\xaf\x022\xa5s\xa7\xb2\x82\x8d\xc9\x83\xac\xd9\xd54\x143\xf57q\xf4\xa0H\xe6\x89&1\x91\xbf\x95\xb7\xb3xu\xf0\x02L\xae\x17\xb2\xc8\xb6\x99{\xeb\x8a[\x8dAo\xee\x1e{\xe1\xb4\n\xb0u=\xda\xadV2\x1e\xc8\xc8\x9d\x93\xe6\xe1z\x8b\xe4z\xa0\x8a\xe0\x85\xf4\xfe\x11G\x82\\\x0e8\xc9\x03\x9f\xd7\x9a\xac\xb3\xd6\xda(\x8c\xb3\x07;\x92\x1aALd\x13\xd9\x19\x1b\xe5\x9c\xdd\xe1\xa6\x86\x9f(\xf4\x83%\xbf\xb6D\x11\xdd\x892g\xac\xb3\xac2Z\xd4F\xe9\xfc\x12\xf3!\x91X!\x18~GYCE\xad\x1f{`\x08\xf1.\x1ei\xbd3\x08\xa0\x17\xdco\x17CSa7Z\xdcn)\xbe\x91\x8e[\x0f\xba4\x83\xc1W\x8c\xdf\xc0\xb2\x83E(2\xd3\x99\x08\xf1\xc8U\x07T\xdb\x9dp\xb5\xe2B_\xea\xd1\xda\x9f\xbd\xab\x16\x96\xd93\x99\x8a\xcc\xfe\xa1\xe9\xd8G%\xd8\x97\xd6\xe1*lb\xdf\xd2f\xb4\x9a\xed\t\x17I<\xd4\xed;\x1f\xf0\x8d\xdf\xe6\xc9\xd3N\xca?r\xbdO\xdb\x9bE6[\xd8S\xad\xfc;\xd96\xf2\xb4\xda$h\x10S\x1e\x03&\xc5Eny\x04\xe6\x7f\x0f\x81{VdH^\xe4C\xec\x99\x14\x994\xb6f5\xf7\xd3!\xc6C\xdf\xfac3\xf3u\xbc\xe9\xb2\xd6\xb6c$\xa9\xc3\xcf\xf5\x1etqc\x14s\xb9QpA\xfb$\xff\x9f\xda\xfb\x89\x11\x95>\x8f\x00\xae\xd5\xb9LM\x17x\xb4\xca\x92\xceecG[\xd0\x96\x07\xb3\x91G}\xd5\xdf`E\x86\xfbb\xd0\x08\xfd\x88(n\x92\xe8DbJ{\xf9\xa0=G\xda3>W\x91Z\xb8\xa9sG}w\x1c\xc3\x1d\xba|\xf4TS\xcb|4>\xf4\xc7\x15\xc7Z\xff6\x14\x9e\xcbhC\x19!0O\xce\x04\x18[\xb5\xc2:\x855b\x8a\';\xb0>m\x14\xddq\xbb8c\xa0W\x1d\xa2\xdf\x19\xf7\xc0\xbd\x13\x1caa(\xc3\xce\x9f\xd2\xc7\xff%\xec\xc6Vu\xd8\xb5\xb8\xd9\x0bP8\xd1\xb3\xf1\xc5T\x90\xf0\xfc\xc6\x8c\xe0\xc5\xbc\x81\x056\xaad\x9cWv\x95\xd7vJ\x0cmJ\xf1\x8e\xce\x1fD\xe9oG\xfb\xa5\x9er?|\x17+\xb0\xa5\x0f\x92}\x8f\xd3\xcb\xd0\xf4\x85\x0ce\xbb\xe0W=\xecT\x06\x17\xcf\xcb\xfd\x8a\xbc?Z\x00n\xad\xff\t\xde\xec' + + +2024-12-12 23:54:26.733485 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16837 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862168111 + ack = 2922049193 + dataofs = 5 + reserved = 0 + flags = A + window = 515 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'N\x0c\xf6\xd3\xdamZ\n\x9dvCE\x81_\xbb\'0\x14\x8d\xd0\xff\x96\xdez\xf24\xf4\x04"\x1c\x98\xaa\xcc\xf3\x0e\xe3\x11vu\xdc\xe9\x8c\xee\x0f\xbb4\xad\xdf\xd86^\xc4a\xd0\xe0(\xd9\xf4\xd8\xb3\xf5\xb3}\x05\xe5IT{\x93\x07_\xad\xe1&\xb0\xd0\x87\x92\x8a-u\xbe\xa3\x86\xfax\x0f\x9a\x05\x01\xccE\xaf\xcc\x11\xbeIs\xcb\xeb>\xb5%\x89\x07\xe2\xe7s\x81\xce\x03,0\xff\xe2SNag\xa4A\xb8\xaa\xe8\xf4\x82:M\x0c\x9f1\xc7\xa9$g\xe8U{\xb4\x8cCT\xed\xd6U\x9e \xc7\xacAS\xad\xff\xbd\xfa\xcc0\x0c~\x18\x8f\xd8\xa7\xe6\xc8\xabL_S\xd1*\x9f\xee\x08\xbem\x82\xc66l\xee\xdd 1G\x1a\xc0\x0f\xf0\xb1\r\xb8}\x9c\x07\x81\xc3q\xe7\x16\xa7\xa1\xbc\xfd\xea\xb3\xa4\xef\xe3\xff\x1aw\xc2\xa5\x17\x96\xcf\xe9\xab\xd7\x1d\x81]M~\xbb\xeeM\xf8\xf9Z\xef\xc8Kx<\xc0\x9051\x86\x7fe\x0bQ\x95\x85q\x8e\xb3\xb9\xb1\x1f\xa0K\'H\x92p8O\xe2\x84\xe1c\xdb\xa2\xa7\xe5\xe1\xe7\xddicb\xab\xf6\xb1\xf0C\xc2\rF\xb2\x1c\xb5\xfb\xf1\x0e\xa9\x1d\xc9\x93\xbc\xf6\xde\xe5\x8b\x99\xb2\xa2\x8a3\xba\x8e\xdd\x16a\x19\x92\xc2\xbf\xff\x99\xef\x8a\x85"s\xbd\x8b\xa2`\x1e\xf2k\x8cf@DD\xf0\xcd\xb4\xf6\xc2qL\x85\xb4g\x19\xaa\x01\xf3\x9eo\xd6\xe5\x98\x15\xfdq@x0:\x93U>\x93\xa0\xd1B\xbcT\x995\xe6pH\xe9Y\xc3\x06&\xbe\x91\xf0%\x9b\xf3\xbb%\x93\x85\xfb\\@\x16\xc5\x85gl\x81\xec \xafi\xb8a#\xffQ\xbb\x90\xcb\xca\xfaz\x03\xa7\xea\xf1\x95X\xb2\xf0#\xf2?\xf9]\xb9\xb3\xc4;R)\x9c\x06\x85\x81\x83CPG\x9b\x03e\xf9\xe1\xf9Y\xc0\\H\xc9\xf3!\xbc\x16\x97\xca\x98\xa0\x0b\xadsB\xd2\x0e\xe0e}\xe5tL\x99\x03X\x1b\x0f\x06\xa2G8\xc3\x07\x8c\xc8\xd1\xe1\xc0J\xec\xf7\xb3j!\x96\x06\x8d\xff+%\x93\x81\x1e\xa9N\x85\xaa\xeb\xe0l=\xf6\xf7\xf4n\xf9\xb5M\x95\x9e\x940\x1a\x1cz\x1bwi\x060\xa1\xf1%\xda\xe1:|r\xbe\xaa\xe2\x901\xc5.~z0\xc7\xa1\xf1\xd0Dn\xa5\xdf\x03\x19\xdbU\x01j\xc1%+\x06gK\x08t\x1a\xf5\xfd\x0e\x81\xce@\xd4J\xc9\xb8*2\xbd&\x1b*\r\'\xf62`4\xe8\xdf\xaa\x98t5\xfc\xa6\xa65\xd8\x1ff2q\x10\x94\xecIJ\x8bU\x97jmuM\xc5,H\xd18B\xe5\xd9z\n\xd7\x96o\x1c\x8f\xeb\xd6[\\ut\xf7\xfa\xca;\x88\xf6\xe9\x18\xe9\xd6v \xe2\xaf\xaf\xd4\x17\xaa{\xe5\xdf\n\x19\x04J\x07\xa1\xd3i\xd2u\x8d\xc3\t\x9d\xd8)I\xde|\xffw\xbd:\x83\x15\xcaVi\xec\x90\xa0\x8aGI+\x12\x9e#[z\x15\xb8\x17\xa7h.m:\xe2\xc43X\xdb\xa8*ar\x1c\x07\x08\x91ep\x99H\xaf\xc2\x9a\xd5]\xc7\n"\xda\x07\xb5eG\xac\xc7\xaf\x9a\xe5\xc8\x01\xb2F\xfby\xe2:\x9d\x9b\xb5\x16\x10\xb6I!Xjy\x0c\x07/4\xe8\xa5\x10\xf8N\xaa\x02n\x1b\xdd\xf0We\x86\xb2A9y\xc98t\x1b\x04\xc2\x18\nP:\x91+\xbd<\xa5Jm\xa5\x1d\xe0[\xc3@w\x14OIph\xb8\x00\xe6\xc3\x9c\x1fH\xe5?\x9b\xe2\x18\x1e\xb43[\xe2\x132w?\xdf\x8e\xb5\xa2]a\xf3\xf7J\xfb \x83\xfa\x97o`\x1b\xaa9\xe8A^>q\x82\x01\xb9>\x8d<\x8a\x10\xaf\xa2;8c\n\xba\'\xbf\xa6\xfa\xe3\x9c7\x9e\x9e\xd4~\x97\x0f.~b\x1fy\xae6\xb1\xb6\x93x\xe5\x8f|!\xf3\xc8\xf6_\x86b\xa0\xe3\x1fU\xda\x04\xce\x06i\xc6\x9e\x88\x83\xa9\x1bl\x8cV\\\xc6\x99\x9e!\xb4\xf3 \xe1\x19M\xfefB\n\xf9\x1c=\xbc\xb3\x15~:8\xcf\xbau\xa7\xf56\x16R\x9e\x1f\xdc\x1d; \x10\xeb\xed\xa7\x02\xf1\xc5U\xe3\xea\xb01I\x81g\xb2\x9b\xc8\xc1\xdcd\xc4Q\xc2%\xcf\xf0\xc6\xd88\xbev4~\xdeG#Pal/\x9a+\xbc\xe7#s\xf7\xca!\x96[G\xac\x87\xa1\xc6=\x84"\xa5\xe1Ur\xcc\xf4\xa7U/\x0b>\xd33\x0e\x85\x0f6ZlD\x80\xb4%y\xa2\xb7\xb6\x14\x0e@\xfd,5t\xec\x19\xb6\xe3\xb2\x90L#\xf3>\xbfK"&\xb7w\xc1\xc7\xa8\xbc;D\x99\xdcF 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16838 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862169551 + ack = 2922049193 + dataofs = 5 + reserved = 0 + flags = A + window = 515 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\xd4lF\xc1\xe3\x9c\xf8\xf7\xda}2N\xc6\x92\xd7M\xfc\x01z\x8cX\xe0/\x15\xf5?\xf4,\x07z\xe3\x9b\xccb\xe7\xc8rK\xe5\x1ch\x8f\xb9\x97B\xc2Ri\xdb\xd0\xfbk"_$6\xbc8\x82sX\xc0CC\x01>\xa8\x0bR~\xb2~\x13\xeb\x90\xacf\xad\xfd\x03\xf0\xb4N\xc3\x0b<.\xb6\x1d_G}\xa9$\x18\x157q\n\xe2\x84\xd7\x85@\xf03\x9a\xafOi\xc6=\xcd\xc0\xb9vU\x8d`\xae\xa3\xe1\xc3N=\r\x1f7n\xb8\xd0\x83\x82\xd5\x12\x03\x05\x03D_-\x19\xf1\xac\xf8\x1c\xd9\xed\xf5T\xcd\xbc\x10\x8f\xa6m\xaa\xc7]c\xe7}\xd0\xd0p\x82%j\x92N=\xd5\x93Z\xc2@\xcb\x1a\xa9*5\x84\x1aB!\x175"\xadN\xbe\xbb\xc4t\xb9\xa9\xcd1\x84\xb0AZ\xb2\xb7\xbf\x90\x970ixCMh\xf71:\x96\xcc \x14\'j\x99Id?^\x90q\x12n\xedrOE\x1f\x9c,\x9b\xb2\xba0+e\x16\xbd\xd2sJ\xd1`\x9b<\x07\xd5AtCp\xfb\xb4\x91\xcf\xa2NRW*IHK3(I\xf5\xe2\x04\xd2\xf8x[\xce)\xd0{\xde\'\xcf3\x93\xd6\x0e\xc7L4\x99\x87\x98\x1b\x01\xceZ\t\xb5\xc4\xf9\xe7\xf9\xf3\xc9o\x7fM\x91\x1d\x0ff?b\x93\xc3\x9d\xcc\xa6j\xef\x90\x1c=sj\x90\xb3\x06\xb3!\xf3\xf9\x0b\xa9\xce\xa1\x90\xec\x80\x13\x059s~\xb2\xfa\xf9\x83\x83I\x9b\x98+cSq\xb9.\xc7\x90\x13\xb5\x15\x1a\x0e\xd8Sy\x1cy<\xca\x95\xc9\xf5I\x1a\x02~\xc3\x00\x15\x00\xf6\xa8\x86\x19\x1fY\xac\xe7\xa4(\xe7\x93\x80\x1bA\x9a\x14\xe9\x84YG\xc4\x87\x85*\r\x7f&q+\xde=\x04\xf4\x83\x92\xde\x11u\x14I\xd9\x90)M\x01J\x9d\x05\xf4sr\xea\x0e\x13\xdc\xdcD\xc5\x9fB\xf3\xcd.\xd9\\}UE\xfa\xb3\x04H\xb0 \xd2\x87\x880\x84\x94Nq\xa1%^\x9b\x1b3\x9a\xed\x14UAI\x1e\x04/\xca\xd8yH2\x86\xb5\xc4th\xa3\x9a\xe0\xd6\xe8)\xd9\xe3\x1b\xd3)\x1d\xa9\xaa\x91\x0b\x9a\xbd\xb0\xc9\x08R\x1d/6\xb76M:?\xbd\\\xe7w$D\x81j\xcdJ\xde\xec\xfaU\xad\xf2t\x02\x15\xe9&3WJv\xda\xd1\xe34I\xac}\xac\xe2\x0c\xd4\xcfv\xd8i\x7f\x04\r\x8e\xc7\x83\xa5\x0e\xb3-\x141\xe9\xe1,\x1e\xf7\\\xfai\x90\xc9\xab7\xe7~\xee\xe3r\x89x!\xe6\xe7\xd4\xcdr\x93\\\xc8\xd1\xae\xdcU\x8f\x1f\xc9\x002\xa7\xc7\x89\xd0A\xaa\xf4\xc9\x97\x0c\xb1\xe0\xb7uk\x9dg\xfa-E m0\x9a\x07\x10zR\xb2L\xc7p\x8dF\xcd\x12\xb8\x0er\xf9\x86^\x02\xb3T\xa3h\xc2\x18\x01\xee2\x17\xcd\xe3\x00\x91\xca\xceMe\x84\xbf&\xe1>1f\xcc$\xde;rH\x14.\xdbh\xf1sz\x1bD\xc2\x89\x05n\xf1\xaa\xdd\xd9\xeb\xbc@\xed\xc7\xfaDs\xce\xaa=q\x14\xc97\xd2\x84\x83\xba}\x1fY\xcf\xf3:\xa5 \xc8\x9d\'vp\x11\x06\xb7\x1f\xb9\xb7?\x9e\xc8\x0cQ\xf6\x0e\x05\x07\x01\xfc\x83R\xf2\x16!\x14\x91\x0c\xab\xe3\xa9\xd9\xc0\xa8\x98\xa6\xad\x90\xbd\xbd=\xff\xd0\xe9\xa2M\x99\x9bS\xc4\x18\xd9\xfaB\xaa\x11I\xc7\x9bfqM\xdc\x9b\x91\xba\xa3\xa8\xf8\x14\xe74[\xb9\x08\xe3\x83\xa1`\x18@V\x1d\\\xc0\x01\x10\x12\xaf\x8d\xbf\x95\xad\x12\xc4\x13\xa6\xe8\x16\x07\xad\xc3;]\x926\x8e\x08\xea=\xbd0c\xd9\x97\xb8P\xc7E7\x1b\x19\xc4\xe2\xb9\x81\x8e(\x0c\xe3\x87\xf9e^\xe7\x1e\xb1\xdc\xfe)1L6\xae\x92\xbb\xc1\xf4\xc9\x95\xd3O\x15\x15P\x85f>F\xa6\xaa\x8b\x7f\xff\xe7\x0b\x0c\x8c\xf3]\x84\xa0\xed<,\x12\x17T\xec\x17wA\xb7\xae\xc0\xc9\xd9&\x95x\xe7Z"\xe1\x8a;\x10\xcf$\xfd\x9e\xd2\xf7\xbd(\xf7s"Rl\x81\xc3%Z^jx\xf2\xa57e\x9e\xd2\xc4\x08\x14\xd7\xcf\xf2q\x82\x15\xda\xc0\xe5\x19m\xe6\x08\xf7\x83\x98r\xf7;\xeak\xbc\xe1s\x7f\xf5\xe9gi|\xa3o\x8e!b%\xc8\xfen1`M"\x11\t,\r\xd9|\x86R&mw\x06\x9d\xe5F\x8e\x14Jf\xec/\x8c/\xf96)\xb0\xf1o\xf8\xbd\xcb\xdde\xc4/#\xaa\xfb\x0fA\xfb3\x84]\xb3\x17:\xc6\xd6\x80?\xe3\xd6\x82r\x7f@\xc2V\x8fW+\xc8K\xdb\x91G\x9c\xcc\x1f\xe2\xad\r^x\xbc\xe5\xc2%\x9b\xd4%\x92*\x1f[z\\\xf2\xea\x08#\xe6r\x0b&\x83\xdcq\x94\xe3\x19\xae\x8b\'i\xc5\xbd\xcaF\xa9)5\x8c\xa0\xc5b\xe9J\x00\xceM\x82\xff\x9fL\x82\x9a8\xdfX\xb5\xda&\xb0\xd7\x92\xdc\xf6\x89\xdeWb\xb8r_5\x97\xdc\x91\xf0p\xab+M\xdc|\xcf(P\x88\xc1V\x8fw+\xeb\x8d\xc1h\xef\x00\x8b\xa6\x93\x9d\xb0\x17bS\x19\xcc\x87T@Y\x9a\xe3B\xa5-\x96\xb2\xbb\x96\xd2f\x10\xc4\x86\x96-\r\x1a\x87Eun\xbea\x15m\x9c\xba\x9f`\xd4B\xd3\xa0\x90B0\xe2pk\x9d\x9eh\xb4*(\xef\xa9\xbe\xc9pe\xc9.9\xe2Q(\x0eS\x14\xd5\x19\xa1Z^\n;\x8c)\x9c\xb4\xf6\x03y\xf7\x90\x87\x17\x05\x8e\xe9,\xd4\n\xfc\x0e~\xba\x93\x1b\x8a\xaa\x92z\xf9\x8b\x87\x04\xae$V\x9f7`\xd0\x8e\x85\xe6\x1f\xf3`um(\xc8\xa4\x8b\xdd\x84jH\x8d2\x85\xdd\x8cY\x16\x92\xae@],\xcbD\x81\x94W~\xc2\x1f^\xa2\x12)\x90\xa8\x91\x05 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16839 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862170991 + ack = 2922049193 + dataofs = 5 + reserved = 0 + flags = A + window = 515 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\xfe\xc5\x99\xd8\x89\x19I\x16\xb3\x03\x80s\x8f0U\xd0\xea\xab \xa9\xeaY\xac\xe3V\xbb\x9c\x890\xa8\x95RH!\xaayfJ/?\xfd\xe7CWk\xbb\x16 \x94 \xeaR\xc4\xc7&\x88G\xb2\x08Sf\xb9\x92\xd1X\xa8r\x8aL\xff\xfbJ\xca\xd9\x88\x83\xbeBF\xaf\xd1\xff!\xcfn\x12t`\xec\xcd\x10a\xc9\x87\n\xcb\xc4\x8d{\x00\x94)\xedA\x85L\x0f9<$\xad\x8d\xfbg\xa1\xf1D\xce\x00\xfc\x002R|\xb9\xfa\x1c\xa7\x89\xae\x94\xa5D\xab\xb3\x13\xe4\xf0\xacP\xfd\x99\xa1\x83\xdea\x05\x97\x12:w\xbb+\xa31\xe8\x0c\xfa\x98Ba\xf4Kx=9\x18\x13\x89g@\xad\xa6\x18\x1ae\x96\xdc\xbdD(i\x8cuQ@`\x16v\xff\xd0n\xb9\x8b\xe4\xc4\x11\xf8\xce\t\xa1:\x0e\xa0d/\x0ek\x0f\x08s=#\xacJ\x87MwHI\xa5\x02J\x94\x13\x91\xe1\xa2\x1c\xaf\xe9\xeb\xf7\xab\xb56/\xcad\x82\x8e\xb9XfhSg^\xfb\xdf!\xc7\xbb!\x9f\x9c\xd1\x80\xe2k\xe5fM\x83q\xb12\xcc\xbetL\x95\x94{\x94:\xff*\xde%z9\xc8\xf0\xca\\{\xde\xe66\xc4\x03\xa9W~\xd0\xdb\xa6J)\x8dK\xe6\x91^\xe1\xc4\x92V\xa7Q}\xc5\xa3B\xa1\xb4M!E\xaeY\xff\x05Lm?\xae\xe3\xea\xeb \xf2?\x15\xae\xb8A\xd6\x9e\x90/dg\x9ew\xdd\xbbk!0\x8dmzt\xbf\xea\xd3\xf9\xa7G\xaf\x89\x18\xab\xd2l\xa4\xf3\x8f\x97\x1c\xdez\xedE\n\xa0f\x0c^\xe6\x01~u\xacqY\xbd\xb7\x94\xcb\x8c\x8f\x81\xc7e\xa1\x8c\x88\x9dRLC\x17\x03\x91\x861\xde\xfeX\x1a\xec\xaa\xc6\xaf1qUaoV>!xw\x07\x84\xdf\x10d\xfa\xa2\xd9\xed%\x0f+\xf4g\xf0\xfbS\xe6\x16\xfc1\x84\xa6\x9bz\x91\x1c\xb8\xb281\x03*\x0e\rW\x12\xe3\xeb\xa3uL|DR\xa2v\x9b@ \x0f\x9a\xd1\xb6\xbfY\xa9\xe85Q\\\x97\x06\xccI)\xd05\xd8\x1ewD)\xc2yJ\xa4\x9f.\xa6\x9b"\xfa\xfd\xee\x9029\x86G\xdb\x90\xdb\x14\xa4\x80\t\x9e\xfb\xc8i\n]8Q[\x9e\x9a[\xfdL\x91tq\x14\xd1\x00+nB\x89\x9a\x88\xab\xc39mt\xe3\x95\xee\xaf\xaa\xdf\xedBM\x96\x1d\x8f,Q\xb7.\x00\xad\x8c)\x85[\xc9\xb8\x9dE\x0ck\xcc\xb7\x00\xd1\x15^\x01\x08\xbcl\xae^\x173`\xac-\x18\ng\x8e\xc4\x82\x13 \x93l!\xcdk\x02UYV\xe0*i\xb6\x1f\x0b\xfc\x7fj\xfdgg\xbe\x17\xb6H\xf2\xde\xc8C\xfdy\xc4\xed\xe7\xd7y\x05\x84\xc0C\x92"5\xaa\x14\xf2[M.U"\xda\xe3\xd0\xd8\x05\xc7\xa6\x07Fq"\xb22W\xd88\x9a9+u\xf7g\xc9\xe5\xb5o\xc2\xed\x81pt\x06\x10' + + +2024-12-12 23:54:26.749574 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 1480 + id = 16840 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862172431 + ack = 2922049193 + dataofs = 5 + reserved = 0 + flags = A + window = 515 + chksum = 0x6c59 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x99\xe0\xcc\x88\xeb0.\x05a\xfd\t\xca\xd0\xbb\x12vI\xdf\xea\x8c\x105\xa8\x1d\xc7\x05\xbc\x84\xc0\xbb\xb4z\x17\xab\xec[\n\x90okj\x01GU\xc9\xcc=\xae\x80|\x8c\t\x9f1\xdaF\x17 \xd3\xd4\xdb\x03\x10U\xe6\xfd\xef\xc1\xb8+\rk\xba?7\x93\x88(;\x8d\xd8ej\xe7V2\x94\xaf\xc2\xe4F\x1d\x8bv\xe5F\xb9*c}\xbaP\xb9c\xe0\x93s\xa5\r\xec\xd8\xcaI\x02\xa5\x10SZ\x83\x85g\x10\x7f\xdc\xea\x02*\x0bZ\xe4Y\x01\x1e\xadm\xfb\xf3\xc7\xc17P`\x9f\xfe\xbf\x0c\x9e]\xc2\xd9\xd9\xc8\xe6e\x9b$\xaa|\xe7\x85\x9b^C\x04D\xad\xf3\x82F@b\xfcU\xacb\x99D\xf5\xec 6p\xc1\xf6\x17\x05\xf1\x99\xce\xd0<\xaa\xcd\xe5v\x9e\xac\x90rmO\x8dmW\xa1\x1dZ\xf5\x19\xc2\x90\x94\t\xa5\xb0m\xd8\x9a\xc4\xab\xe0\x14&LX\xe8\x05\xa3\xf8\x8c\x0c\x84\xda\xd3\x88\tu\xc6\x1fy\xc5\xa2\x12y\x14\x95\xac\xd7J^\xda\xad\xbf\x93]_\xf3\xcbNm5\xa1}W\xabZ\xb5\x91\x1a\x9c\xaa(\xd5[X\x13K)\x91\xf9\xfc\xd0l6\xc3\xc7\x85:g\xe5\xa1\x05\xc3N\xa8p\xc5\x8d?\x01r`\xe4\xef\\\xd4\xa4^z\x0b\xd06\x1f\x0e\x9e\xbb;\x08\xf5Y\xc5\x9b\xcd\xebJ\xf8?\x1d\x9a\xb8\xc0:\xd82\xc5.\x8a\xbe1,~\xf4;\x1b%\x83\xfa\xf5 \x17I\xb3E\x91\xd8Cf\x83\x02\xf3\xb6\xefs\xa9!,\xb4\xdc\x9b\rZ\xffE\xa6\x96=\x00 e9\xe6\xb8\x1b\xb9\x88\xf1\x86g\xa6\xa78Aq\xbe\xb7\x05\xdbp\xa8Gp\xd5\xd0\x18[\x05\x1c\xb6A\x84\xcc\xac<\xe0\xe2\x19\x8c;O@qC\xfd\x8c6\x15r"\x12C\xb3\\~\xeb/\xe3\x7f\xe5\x0b\xdc*\x966\xa6\x86V\x1f1H\x86(\xbfN\xa3\xbdG\x8a\x97G\xf7T\xe6\xb7\xd2\x06g+\xd2\x96o\xeb\xf7\x92{i;\xe4H\xd5\xa7G\x80r\t5!E\xa1\x0f\x02\x18\x07\'\x94Bo\x87\x1b\xaa\x16\xaa\xe5\xf7\x9d\xd8\x1c\xbeG\xf0w\xcb`\xaf\xba\xe4\xc2U\xb8\x1b\xfb\x0f\x17\xdb\x0e\x13\xb6\x91\xb7\x1d\xd6\xee\xe2J\x1bb\xb3(\xcd\xf1n\xffM\nO\x04\xa2\xe3\xfcEh\x15\xe9\x98\x9d?\x8f\\(\xc3\x9a\x0f\x94|tp\xcc\x86"2\x85\x97XA:\xed\xce\x93uN\x98=n\x0e\xac\xd1\xf7\xd4\x02`\x8d;+!+%\x97\x95\xd2\xc5\xb7\xeeS\x17`\x19\xd9\xe8\\\x19\xa9\xc6\x02^\xec@\x9e\x00\xa3\x9f\xffD\x9d\x84>\xa2\xe9\x11I\x99+\xb2\xe2\x8f\x97\xbc8-\x96\xb7$\xf6\xca3\xbb\x8f\xf2\x84\x91\x00h\xb9\xd7\x0b\x0e\xb0\xabWf\x92\xd0t\xa3\x80\x84\x1c\x84"\xed\x88_\xfc=$\xb6\xf0\xb0e\xe6!\xdd\xbabK.\xf1\xb8\xfaF|\xcb\x1d\xda\xa8\xfd\x10\xd8\t\x97\xe6_\x87\xd16\xb9\xb9--i\xa6+ye\xd6SBu\xb6):\x1d\xd5\'\x1d2\x92\x10\xed\xc7\x9f\x97\xe9\'\x7f\x8f\xf1\x06W\x88\\\x1e\xf5wj\x15\x9a\x98$\n\n\x16#\x1cJ:\x1c\xfc0\x9a\xfb\xaa\x04\xb9]\x89\xaa\x8c\xb3\xac\xda*\x15\x08fPe\xb5D\x8b\xdf\x9a\xa9\xb4\xce#z\xcad\xb44\x10&A\xd8\xe7_\x1c\xa41h"\xc8_K\xb6*\xc3\xffW\xda8\xfb\x1c/\xf7T$A\xd6Kc\x1b8E\x13\xa1`,{:\xd6VqX\xee\xef@\x15\xca\xd0\x86\xfbE\xce}\x19\xee\\K\x0f\x9f\x00%\x88\xf2\x86\x101\xde\xc2\xc2\xcc\xad\r6\x03\xa6\x8d\x07\x8c\x0b\x19\xb6\xd6\x18\xce$\xe9\x0c\x98\xb8\xf6\x9c\x9b\x81o\xc51\x06j3\x8c\xa2\x9d\x10\x94\x99\x92.y\xb5Z}\x1b(\xf30\x1a\xfd\xae<\xbah\xd1%\\\x9a\xcb\xb6\xec\xd3\r\xcb\xa3\xed2 \x1d\xcb\xae\xd2\xaf\r\x87\xca\xd3\xe8\x81\xc0 \x93[(\xc44\xa8\xfa\x91x\xf2N\x91{\xe4\x10zZ\xb9e\x15L\x02\xb9\x1b93[\x17\xf6\xa2\xbc\x81\xc0G\xeb\xad=\n\xd5\xea\xdc\xde\x8a#Q\x8c\x0c`;k\xf2[\xe7aq\xd8v\x02G_\x9d\xda\x17[\xca\xe5\xedDc\x17\xa5\x8b\xd9\x92\x94i\x1f\xbb+tsOZ7\xdfu\x8e9\x12\x0f\xba\x18\xaaY\xd7\x8f*X\xa1n\xf3\xa6\xa2\xba\xa2\x80\x17By\xbe\xa8\xd9\xa9!\x03\xe1"\x96G\x06\x92*\x12\xc5\x9d\x97\x05\xf7\x8fD\xa2\xdc\xa2\n#A\x84X\x85\xeb\x8c\xaf\xde^\xf7\xc9U\xb9\x06<\xaad\xef<\x85:\n\x9b\r\x01\xf5\x80\x95\xe1\x15\xa8#P]=\x97\x12\xb6@nu\xb4T[\xca\x12\xdd\x90\x92\xfc\n\x91\x1e\x89\xc0+\xae\x8e_qy\x98\xd3\x0f\x1a\xf0b\xa1\xdc|G\xf0w\xda\xc2>t\xf9;cf\xd9i6s@\x9f\xa2\x9aC\x9cH\xf1Rm\x89F \xa1\x87\xf6\xfdR}\x9e\xc7\xbc\xc3\xe2\xb4\x83\x05|\xbd\x1d\x8fc\ni\x82k]\x94"\xb3\xa4\x02\xa3\'\xec\x03\xfb\x16(\xdc\x9b\xfe2c\x1f\x10\xcd\xfc\xa0R\xd7\x9b\xba@\xc4\xc6\xb2\xb2\xa2@\x1fOMz\x1f\xb4\xe6\xad\x9dy/\x98\x91\xce\xfd5\x1a{\xb4\x90\x8e\xe3\xfe\xf8\x11_\xa7\'\xa0\x05\xb7\x82\x17\xdb{J\xbc.\xba\xaa\x8e\x10R\xb2\xcd\xeb\xb9\x85\xbdy\xdbed\xe8{\x13u' + + +2024-12-12 23:54:26.752890 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 606 + id = 16841 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862173871 + ack = 2922049193 + dataofs = 5 + reserved = 0 + flags = PA + window = 515 + chksum = 0x68ef + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\xbd\x1e]T$5]7\x06\x18G!\x10\xf6]K\x9fL\x97\x0fg\xfa\xe9\xfel\x9e\xf9\xfd,\\\xb2\xc2f\xa3\xa0{)\x8aR\xb0\xd8s\xce!\x8a\x08\x00\r+$\x9dg\x1eu4M\xe7?\x9e\x94F#\xb8h\xca\r\x1e\x00\x844\xe9\xf0\x01+\x8eJ\xb6\r\xdf\x1b=5E\xea\xedr\xdb@\xd0\x0c*\xe5\x0e\\\xc1\xe0\xfew\x82nz\xc6+\xc5\xe0\xc5? \xf9!Z\xbeY\x00\x1d\x84\x99\xf2\xe78\xd3\x15\x08\t&w\xbd2F\xc9\xe2F\x1e\x8b\xffu \xca\x8cB\x02\xaa\xaf\xfb@\xfdw\x1fu\x14\x85\xe5\x97k\x1a\x866\x11[\xf0\x1c}=\xedq\xe2%FUr\x8f>\xfe\xaf\xf7rw\xcc\x90\xb08P\xb9\xd1@\x88\xef\x90A\x9du\xa9\x96y\xb5\tGen7Ox\xd1\xd5\xd7o\x88\x89L\xf0\xc4\x9f\xe0wJ)\x95\xf9n\x82=\x1a1\x0ed\xbbG]\xcd\xf5\x9b\x8e\x1e$\x97d\xaf\xb9Ke\x95\xf4\x81\xbdQ\'\x12=\x83\x0e\x84O\x10\'\xd6-\xb3o\xed\x7f"\x840\xe1\x04\x8e\x98\xa7@\xd5\xa5gb\xe3!\x1a\xab\xb4V\xcd\xf1\xd1\xe3\xfe@\xe4\xd1\x9d\x88\xbc\xfa\xe1ef\xfc\xb0\n\x9b9\x0c}\xd4\x1d\x92Xg\x83 %\x10\xe6:\xc5cD\xa2\xda\xe3\x7f$z\xe8\x02#\x1fD4\x8b\x13i|=\x81\x13A9>\x9f\xc1\x0e9\x9f\x88\x0f\xca\xbc\xf0\xe2\xcd\xfb\x0c\xb5\xa1*\x0b\xe3!OV\x9dP\x9c\xd0\xabQ\x8d\xe0\xa3{\xd3xc\xfa\xc0D\xad\xea\xa9\x90G\xcb\x19\xcc\x8d\x90t\x9e\xfbn\xab\xcaF\x96\xb0a\xa2\xdd\x1b\xa4.]Z\xa4;\xafh\x1a:L\xb7p\xab\x14\xf3\xbd\xfesn\xfd\xed\x18N_\x94\xe7\xd2\x03\xc0\xf5\xb5\xba\x82\xceI|\x0fO_\xe4\x9c/\xea\xa9\x04\xf0ZJW\x16\x8d\xb2K(\xf6\x8e)\xbe\xf0=X\xc32!\xaa\x83\x91$*\xf7`\xca"\xa8{;^\xba?D\x947\x89\xfd\x05\xe1m\x11\xe2A\xaa ]\xba|&-k@\xfe\xd1p\xc4z\x8f1Hdt\xc8}\xc2\x95\xcch\xea\x19\xd5\xffV\x81\xa0\x00l|\x8b\xd3\x0f\xdaq6\x05\xe2\xf1\xc7\xb5\xefrr\xe9\xc2E\x1e\x1er\xb2SA\xce\xce\x18\xd3\xf5\xf2\xa9r\xefi\x1a\xb2\xcf\x01\xf5\x14\xea\xc9\xdd' + + +2024-12-12 23:54:26.756633 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 311 + id = 16842 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862174437 + ack = 2922049193 + dataofs = 5 + reserved = 0 + flags = PA + window = 515 + chksum = 0x67c8 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x01\n5\xf9\x8e\x7f\xba\xebn\xb3\rO;\xb7\x97R\xcb\xfeI\xfe\x99\r\xd9\xd7\xe7\xa7O`\xe1[<1\x89!\xd9P\xbf"\xaej\xf0\xc9|\xaa\xdd\xe7\r\x1e\xaf`\x1a\xa8(\xd6\xaaZf\xce\xc0\xe2\xfb)\xe9\xda(\x8cJ\x1a\xd7:\'\x0bI,\xee\x0c}!\xee\xd4\x83U\xb0\xe6*\xd3a\x10\xe71zdo\xc2;\x92\x88\xf1\xc2\xff\xb0\n2\x8f\xd3\t\xa6=\xb9Gu\xa2\x80N\x89\x91!\xc1\xa2I\x95P\xcf"\x92\x85\x86\x13\xc7\xdf\xf2}\xbf\xab\\\x80\xc1\xb8\x85\xfa2m\x17\xf4M\x1a\xbe\xcd0~\x99\xdd\x9fr\xb7\xc4\x11\x94\xe6\xcb\x91\xd4\x8d\n\xdc[\xd6=\xf7<\x85\x97\x076\xd9\xa5S\x8b\xe5\xab\x04\xc6\xbaoQ\xc6\\\xcf\xca\x12y\xf1\xa9\x1a\xb5\xdc\xc2\x1dP\xae;\x90\xeb\x00\xb71\xe6\x16\x0bj\xcf\xafIh`\xb1\xa3\x8e\x15s\n\xb0z\x1d\x83\xc1\xf3\xe2\xa8G\xc6FS\xae\xd22\xbfL\x993\x0bla\xb9\x930\x94_\xc2\xee\xfcLV\x1eT\xedSJ@]\xa5I\xf5/\xc5\x12\x81z' + + +2024-12-12 23:54:26.760279 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40489 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x908 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922049193 + ack = 1862160911 + dataofs = 5 + reserved = 0 + flags = A + window = 16385 + chksum = 0x3add + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.763638 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40490 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x907 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922049193 + ack = 1862162351 + dataofs = 5 + reserved = 0 + flags = A + window = 16379 + chksum = 0x3543 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.766210 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40491 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x906 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922049193 + ack = 1862165231 + dataofs = 5 + reserved = 0 + flags = A + window = 16385 + chksum = 0x29fd + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.768739 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40492 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x905 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922049193 + ack = 1862168111 + dataofs = 5 + reserved = 0 + flags = A + window = 16385 + chksum = 0x1ebd + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.771830 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40493 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x904 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922049193 + ack = 1862172431 + dataofs = 5 + reserved = 0 + flags = A + window = 16385 + chksum = 0xddd + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:26.775111 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 40494 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x903 + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922049193 + ack = 1862174708 + dataofs = 5 + reserved = 0 + flags = A + window = 16385 + chksum = 0x4f8 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:27.042444 - Ether / IP / TCP 52.168.112.67:https > 192.168.1.11:28346 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 139 + id = 40495 + flags = DF + frag = 0 + ttl = 109 + proto = tcp + chksum = 0x89f + src = 52.168.112.67 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28346 + seq = 2922049193 + ack = 1862174708 + dataofs = 5 + reserved = 0 + flags = PA + window = 16385 + chksum = 0x560a + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x17\x03\x03\x00^\x08\xf7\x8a\r\xc4w\x82\x95\xd1\x11\xa8\x0f_}\x0c"\xd6\xc5z\xcd\x1a\xffc\xb8\xdb\xe3\xbdM\xe6\xbd\xa0\xafN\xc1\xd8\xc1\x97g\xa0v\xd4\xac\xea\x15? A-\x17i\x02\xaf\xc8\x98\x13\xa6\xd9\xc8\xed\x07\xdf\x8b\xc5m\x1b\xbf\xf0\xbe\x85\r\xd7\xfd`\xf2\xc0\x80\xba\xda\xf1#og5\x8a\xf1|s\x05\x19\\\xe3\xd5\x91E' + + +2024-12-12 23:54:27.091089 - Ether / IP / TCP 192.168.1.11:28346 > 52.168.112.67:https A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 16843 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 52.168.112.67 + \options \ +###[ TCP ]### + sport = 28346 + dport = https + seq = 1862174708 + ack = 2922049292 + dataofs = 5 + reserved = 0 + flags = A + window = 515 + chksum = 0x66b9 + urgptr = 0 + options = [] + + +2024-12-12 23:54:27.545152 - Ether / IP / TCP 192.168.1.11:28609 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49854 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28609 + dport = 64920 + seq = 2032585297 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:27.554793 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28609 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28609 + seq = 1861814919 + ack = 2032585298 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x884a + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:27.562070 - Ether / IP / TCP 192.168.1.11:28609 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49855 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28609 + dport = 64920 + seq = 2032585298 + ack = 1861814920 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:27.574714 - Ether / IP / TCP 192.168.1.11:28609 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 363 + id = 49856 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28609 + dport = 64920 + seq = 2032585298 + ack = 1861814920 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ba + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesSent"\r\nContent-Length: 309\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:27.582347 - Ether / IP / TCP 192.168.1.11:28609 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 349 + id = 49857 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28609 + dport = 64920 + seq = 2032585621 + ack = 1861814920 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84ac + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:27.586516 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28609 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 23544 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x5b7b + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28609 + seq = 1861814920 + ack = 2032585621 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0xfef5 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:27.595351 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28609 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 23545 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x5b7a + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28609 + seq = 1861814920 + ack = 2032585930 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0xfd9e + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:27.861873 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28609 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 579 + id = 23546 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x595e + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28609 + seq = 1861814920 + ack = 2032585930 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0xcdc3 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 351\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:35 GMT\r\n\r\n\r\n19291400\r\n' + + +2024-12-12 23:54:27.871328 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28609 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 23547 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x5b78 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28609 + seq = 1861815459 + ack = 2032585930 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0xfb82 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:27.878110 - Ether / IP / TCP 69.173.156.150:https > 192.168.1.11:28540 RA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 42681 + flags = + frag = 0 + ttl = 240 + proto = tcp + chksum = 0x801f + src = 69.173.156.150 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = https + dport = 28540 + seq = 269625290 + ack = 2614771291 + dataofs = 5 + reserved = 0 + flags = RA + window = 21170 + chksum = 0x35de + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:27.886583 - Ether / IP / TCP 192.168.1.11:28609 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49858 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28609 + dport = 64920 + seq = 2032585930 + ack = 1861815460 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:27.898093 - Ether / IP / TCP 192.168.1.11:28609 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49859 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28609 + dport = 64920 + seq = 2032585930 + ack = 1861815460 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:27.903366 - Ether / IP / TCP 192.168.1.11:28610 > 192.168.1.1:64920 S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49860 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28610 + dport = 64920 + seq = 3233904163 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:27.916773 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28609 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28609 + seq = 1861815460 + ack = 2032585931 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0xfb81 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:27.926233 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28610 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28610 + seq = 4198475945 + ack = 3233904164 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x6b73 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:27.932669 - Ether / IP / TCP 192.168.1.11:28610 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49861 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28610 + dport = 64920 + seq = 3233904164 + ack = 4198475946 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:27.939859 - Ether / IP / TCP 192.168.1.11:28610 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 367 + id = 49862 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28610 + dport = 64920 + seq = 3233904164 + ack = 4198475946 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84be + urgptr = 0 + options = [] +###[ Raw ]### + load = b'POST /d15f795f/ctl/CmnIfCfg HTTP/1.1\r\nCache-Control: no-cache\r\nConnection: Close\r\nPragma: no-cache\r\nContent-Type: text/xml; charset="utf-8"\r\nUser-Agent: Microsoft-Windows/10.0 UPnP/1.0\r\nSOAPAction: "urn:schemas-upnp-org:service:WANCommonInterfaceConfig:1#GetTotalBytesReceived"\r\nContent-Length: 313\r\nHost: 192.168.1.1:64920\r\n\r\n' + + +2024-12-12 23:54:27.945611 - Ether / IP / TCP 192.168.1.11:28610 > 192.168.1.1:64920 PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 353 + id = 49863 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28610 + dport = 64920 + seq = 3233904491 + ack = 4198475946 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x84b0 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\r\n\r\n' + + +2024-12-12 23:54:27.949710 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28610 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 64003 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xbd6f + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28610 + seq = 4198475946 + ack = 3233904491 + dataofs = 5 + reserved = 0 + flags = A + window = 490 + chksum = 0xe21a + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:27.954470 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28610 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 64004 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xbd6e + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28610 + seq = 4198475946 + ack = 3233904804 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0xe0bf + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:27.964832 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28610 PA / Raw +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 596 + id = 64005 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xbb41 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28610 + seq = 4198475946 + ack = 3233904804 + dataofs = 5 + reserved = 0 + flags = PA + window = 524 + chksum = 0x25cd + urgptr = 0 + options = [] +###[ Raw ]### + load = b'HTTP/1.1 200 OK\r\nContent-Type: text/xml; charset="utf-8"\r\nConnection: close\r\nContent-Length: 368\r\nServer: Linux/3.4.11 UPnP/1.0 MiniUPnPd/1.9\r\nExt:\r\nDate: Thu, 12 Dec 2024 22:54:35 GMT\r\n\r\n\r\n569865882\r\n' + + +2024-12-12 23:54:27.968790 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28610 FA / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 64006 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xbd6c + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28610 + seq = 4198476502 + ack = 3233904804 + dataofs = 5 + reserved = 0 + flags = FA + window = 524 + chksum = 0xde92 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:27.971887 - Ether / IP / TCP 192.168.1.11:28610 > 192.168.1.1:64920 A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49864 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28610 + dport = 64920 + seq = 3233904804 + ack = 4198476503 + dataofs = 5 + reserved = 0 + flags = A + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:27.977435 - Ether / IP / TCP 192.168.1.11:28610 > 192.168.1.1:64920 FA +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49865 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28610 + dport = 64920 + seq = 3233904804 + ack = 4198476503 + dataofs = 5 + reserved = 0 + flags = FA + window = 511 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:27.983422 - Ether / IP / TCP 192.168.1.1:64920 > 192.168.1.11:28610 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb773 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = 64920 + dport = 28610 + seq = 4198476503 + ack = 3233904805 + dataofs = 5 + reserved = 0 + flags = A + window = 524 + chksum = 0xde91 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:28.318556 - Ether / IP / TCP 192.168.1.11:28611 > 192.168.1.1:domain S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49866 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28611 + dport = domain + seq = 2486124021 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:28.323334 - Ether / IP / TCP 192.168.1.11:28612 > 192.168.1.1:domain S +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 49867 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28612 + dport = domain + seq = 1160598231 + ack = 0 + dataofs = 8 + reserved = 0 + flags = S + window = 64240 + chksum = 0x8383 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('WScale', 8), ('NOP', None), ('NOP', None), ('SAckOK', b'')] + + +2024-12-12 23:54:28.328647 - Ether / IP / TCP 192.168.1.1:domain > 192.168.1.11:28611 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = domain + dport = 28611 + seq = 578879806 + ack = 2486124022 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x4cc1 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:28.340998 - Ether / IP / TCP 192.168.1.1:domain > 192.168.1.11:28612 SA +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 52 + id = 0 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0xb767 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = domain + dport = 28612 + seq = 3736495573 + ack = 1160598232 + dataofs = 8 + reserved = 0 + flags = SA + window = 14600 + chksum = 0x6613 + urgptr = 0 + options = [('MSS', 1460), ('NOP', None), ('NOP', None), ('SAckOK', b''), ('NOP', None), ('WScale', 5)] + + +2024-12-12 23:54:28.347908 - Ether / IP / TCP 192.168.1.11:28611 > 192.168.1.1:domain A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49868 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28611 + dport = domain + seq = 2486124022 + ack = 578879807 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:28.352234 - Ether / IP / TCP 192.168.1.11:28612 > 192.168.1.1:domain A +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 49869 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28612 + dport = domain + seq = 1160598232 + ack = 3736495574 + dataofs = 5 + reserved = 0 + flags = A + window = 513 + chksum = 0x8377 + urgptr = 0 + options = [] + + +2024-12-12 23:54:28.356260 - Ether / IP / TCP 192.168.1.11:28612 > 192.168.1.1:domain PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 42 + id = 49870 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28612 + dport = domain + seq = 1160598232 + ack = 3736495574 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x8379 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x00\x1d' + + +2024-12-12 23:54:28.360165 - Ether / IP / TCP 192.168.1.11:28612 > 192.168.1.1:domain PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 69 + id = 49871 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28612 + dport = domain + seq = 1160598234 + ack = 3736495574 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x8394 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\xffG\x01\x00\x00\x01\x00\x00\x00\x00\x00\x00\x02b1\x03nel\x04goog\x00\x00A\x00\x01' + + +2024-12-12 23:54:28.364319 - Ether / IP / TCP 192.168.1.11:28611 > 192.168.1.1:domain PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 42 + id = 49872 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28611 + dport = domain + seq = 2486124022 + ack = 578879807 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x8379 + urgptr = 0 + options = [] +###[ Raw ]### + load = b'\x00\x1d' + + +2024-12-12 23:54:28.367643 - Ether / IP / TCP 192.168.1.11:28611 > 192.168.1.1:domain PA / Raw +###[ Ethernet ]### + dst = ec:f4:51:54:2f:0c + src = 6c:2f:80:f3:9a:99 + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 69 + id = 49873 + flags = DF + frag = 0 + ttl = 128 + proto = tcp + chksum = 0x0 + src = 192.168.1.11 + dst = 192.168.1.1 + \options \ +###[ TCP ]### + sport = 28611 + dport = domain + seq = 2486124024 + ack = 578879807 + dataofs = 5 + reserved = 0 + flags = PA + window = 513 + chksum = 0x8394 + urgptr = 0 + options = [] +###[ Raw ]### + load = b' 192.168.1.11:28612 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 12704 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x85d3 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = domain + dport = 28612 + seq = 3736495574 + ack = 1160598234 + dataofs = 5 + reserved = 0 + flags = A + window = 457 + chksum = 0xde20 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:28.374358 - Ether / IP / TCP 192.168.1.1:domain > 192.168.1.11:28612 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 12705 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x85d2 + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = domain + dport = 28612 + seq = 3736495574 + ack = 1160598263 + dataofs = 5 + reserved = 0 + flags = A + window = 457 + chksum = 0xde03 + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + +2024-12-12 23:54:28.377372 - Ether / IP / TCP 192.168.1.1:domain > 192.168.1.11:28611 A / Padding +###[ Ethernet ]### + dst = 6c:2f:80:f3:9a:99 + src = ec:f4:51:54:2f:0c + type = IPv4 +###[ IP ]### + version = 4 + ihl = 5 + tos = 0x0 + len = 40 + id = 21833 + flags = DF + frag = 0 + ttl = 64 + proto = tcp + chksum = 0x622a + src = 192.168.1.1 + dst = 192.168.1.11 + \options \ +###[ TCP ]### + sport = domain + dport = 28611 + seq = 578879807 + ack = 2486124024 + dataofs = 5 + reserved = 0 + flags = A + window = 457 + chksum = 0xc4ce + urgptr = 0 + options = [] +###[ Padding ]### + load = b'\x00\x00\x00\x00\x00\x00' + + diff --git a/pruebas.py b/pruebas.py index e7cbb8f..0903d7b 100644 --- a/pruebas.py +++ b/pruebas.py @@ -1,32 +1,77 @@ -import socket -import ipaddress -import nmap -import time -import threading +from scapy.all import sniff +from scapy.layers.inet import IP, TCP, UDP, ICMP +from scapy.packet import Raw +import os +import datetime -def get_network_range(): - # Obtener la IP local - hostname = socket.gethostname() - local_ip = socket.gethostbyname(hostname) - # Suponemos una máscara de red /24 - network = ipaddress.ip_network(f"{local_ip}/24", strict=False) - return str(network) +def save_packet_to_file(packet): + """Guarda el paquete en un archivo de registro para análisis posterior.""" + with open("packet_log.txt", "a") as log_file: + log_file.write(f"{datetime.datetime.now()} - {packet.summary()}\n") + log_file.write(f"{packet.show(dump=True)}\n\n") -def scan_network(ip_range): - # Crear un escáner Nmap - nm = nmap.PortScanner() - print(f"Escaneando la red {ip_range}...") - nm.scan(hosts=ip_range, arguments='-sn') - devices = [] - for host in nm.all_hosts(): - if nm[host].state() == "up": - mac = nm[host]['addresses'].get('mac', 'No MAC address found') - devices.append({'ip': nm[host]['addresses']['ipv4'], 'mac': mac}) - return devices +def packet_callback(packet): + """Procesa y muestra información del paquete capturado.""" + if IP in packet: + ip_layer = packet[IP] + print(f"\n[+] Capturado un paquete:") + print(f" Origen: {ip_layer.src}") + print(f" Destino: {ip_layer.dst}") + print(f" Protocolo: {ip_layer.proto}") + if TCP in packet: + tcp_layer = packet[TCP] + print(f" Puerto origen: {tcp_layer.sport}") + print(f" Puerto destino: {tcp_layer.dport}") + elif UDP in packet: + udp_layer = packet[UDP] + print(f" Puerto origen: {udp_layer.sport}") + print(f" Puerto destino: {udp_layer.dport}") + elif ICMP in packet: + print(" Tipo de ICMP detectado.") -network_range = get_network_range() -devices = scan_network(network_range) -# Mostrar resultados -for device in devices: - print(f"IP: {device['ip']}, MAC: {device['mac']}") \ No newline at end of file + if Raw in packet: + payload = packet[Raw].load.decode(errors="ignore") + print(f" Datos (Raw): {payload}") + if "youtube.com" in payload or "YouTube" in payload: + print(f"\n[!!!] Posible enlace de YouTube detectado:") + print(payload) + + print(f"[Paquete completo]: {packet.summary()}") + + # Guardar el paquete en un archivo + save_packet_to_file(packet) + +def start_sniffer(): + """Inicia la captura de paquetes.""" + print("Iniciando captura de paquetes. Presiona Ctrl+C para detener.") + print("Opciones disponibles:") + print("1. Capturar todo el tráfico IP") + print("2. Filtrar por TCP") + print("3. Filtrar por UDP") + print("4. Filtrar por ICMP") + print("5. Salir") + + choice = input("Selecciona una opción (1-5): ") + try: + if choice == "1": + sniff(prn=packet_callback, filter="ip", store=0) + elif choice == "2": + sniff(prn=packet_callback, filter="tcp", store=0) + elif choice == "3": + sniff(prn=packet_callback, filter="udp", store=0) + elif choice == "4": + sniff(prn=packet_callback, filter="icmp", store=0) + elif choice == "5": + print("Saliendo del programa.") + return + else: + print("Opción no válida. Intenta de nuevo.") + start_sniffer() + except KeyboardInterrupt: + print("\nCaptura detenida.") + +if __name__ == "__main__": + if os.path.exists("packet_log.txt"): + os.remove("packet_log.txt") + start_sniffer() \ No newline at end of file