17:20:43.897961 0:2:b3:d3:d4:8a ff:ff:ff:ff:ff:ff 0806 60: arp who-has 10.13.0.2 tell 10.13.0.1 17:20:43.897999 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0806 42: arp reply 10.13.0.2 is-at 0:2:b3:cd:cd:c8 17:20:43.898127 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 74: 10.13.0.1.32768 > 10.3.0.254.53: [udp sum ok] 57980+ A? www.google.com. (32) (DF) (ttl 64, id 32743, len 60) 17:20:43.904902 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 190: 10.3.0.254.53 > 10.13.0.1.32768: [udp sum ok] 57980 q: A? www.google.com. 3/4/0 www.google.com. CNAME www.l.google.com., www.l.google.com. A 64.233.187.99, www.l.google.com. A 64.233.187.104 ns: l.google.com. NS a.l.google.com., l.google.com. NS b.l.google.com., l.google.com. NS c.l.google.com., l.google.com. NS d.l.google.com. (148) (DF) (ttl 62, id 0, len 176) 17:20:43.911992 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 74: 10.13.0.1.56436 > 64.233.187.99.80: S [tcp sum ok] 357952684:357952684(0) win 5840 (DF) (ttl 64, id 37700, len 60) 17:20:43.914579 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 62: 64.233.187.99.80 > 10.13.0.1.56436: S [tcp sum ok] 2043451397:2043451397(0) ack 357952685 win 1380 (ttl 59, id 14024, len 48) 17:20:43.914718 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56436 > 64.233.187.99.80: . [tcp sum ok] 357952685:357952685(0) ack 2043451398 win 5840 (DF) (ttl 64, id 37701, len 40) 17:20:43.915594 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 586: 10.13.0.1.56436 > 64.233.187.99.80: P [tcp sum ok] 357952685:357953217(532) ack 2043451398 win 5840 (DF) (ttl 64, id 37702, len 572) 17:20:43.922197 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 54: 64.233.187.99.80 > 10.13.0.1.56436: . [tcp sum ok] 2043451398:2043451398(0) ack 357953217 win 5840 (ttl 59, id 14025, len 40) 17:20:44.025409 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 744: 64.233.187.99.80 > 10.13.0.1.56436: . [tcp sum ok] 2043451398:2043452088(690) ack 357953217 win 5840 (ttl 59, id 14026, len 730) 17:20:44.025412 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 412: 64.233.187.99.80 > 10.13.0.1.56436: P [tcp sum ok] 2043452088:2043452446(358) ack 357953217 win 5840 (ttl 59, id 14027, len 398) 17:20:44.025700 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56436 > 64.233.187.99.80: . [tcp sum ok] 357953217:357953217(0) ack 2043452088 win 6900 (DF) (ttl 64, id 37703, len 40) 17:20:44.025701 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56436 > 64.233.187.99.80: . [tcp sum ok] 357953217:357953217(0) ack 2043452446 win 8280 (DF) (ttl 64, id 37704, len 40) 17:20:44.029799 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 282: 64.233.187.99.80 > 10.13.0.1.56436: P [tcp sum ok] 2043452446:2043452674(228) ack 357953217 win 5840 (ttl 59, id 14028, len 268) 17:20:44.030647 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56436 > 64.233.187.99.80: . [tcp sum ok] 357953217:357953217(0) ack 2043452674 win 8280 (DF) (ttl 64, id 37705, len 40) 17:20:48.902540 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0806 42: arp who-has 10.13.0.1 tell 10.13.0.2 17:20:48.902681 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0806 60: arp reply 10.13.0.1 is-at 0:2:b3:d3:d4:8a 17:21:10.347706 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56436 > 64.233.187.99.80: F [tcp sum ok] 357953217:357953217(0) ack 2043452674 win 8280 (DF) (ttl 64, id 37706, len 40) 17:21:10.357017 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 54: 64.233.187.99.80 > 10.13.0.1.56436: F [tcp sum ok] 2043452674:2043452674(0) ack 357953218 win 5840 (ttl 59, id 14035, len 40) 17:21:10.357166 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56436 > 64.233.187.99.80: . [tcp sum ok] 357953218:357953218(0) ack 2043452675 win 8280 (DF) (ttl 64, id 37707, len 40) 17:21:21.503740 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 73: 10.13.0.1.32768 > 10.3.0.254.53: [udp sum ok] 53250+ A? www.gnome.org. (31) (DF) (ttl 64, id 36505, len 59) 17:21:21.505391 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 244: 10.3.0.254.53 > 10.13.0.1.32768: [udp sum ok] 53250 q: A? www.gnome.org. 1/4/2 www.gnome.org. A 12.107.209.247 ns: gnome.org. NS orgo.progsoc.uts.edu.au., gnome.org. NS widow.golder.org., gnome.org. NS ns-master.gnome.org., gnome.org. NS ns.axu.tm. ar: orgo.progsoc.uts.edu.au. A 138.25.6.2, orgo.progsoc.uts.edu.au. AAAA 3ffe:8001:c:6::2 (202) (DF) (ttl 62, id 0, len 230) 17:21:21.529373 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 74: 10.13.0.1.56444 > 12.107.209.247.80: S [tcp sum ok] 394184647:394184647(0) win 5840 (DF) (ttl 64, id 18780, len 60) 17:21:21.533047 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 62: 12.107.209.247.80 > 10.13.0.1.56444: S [tcp sum ok] 2076728591:2076728591(0) ack 394184648 win 1380 (ttl 59, id 14036, len 48) 17:21:21.533187 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56444 > 12.107.209.247.80: . [tcp sum ok] 394184648:394184648(0) ack 2076728592 win 5840 (DF) (ttl 64, id 18781, len 40) 17:21:21.534189 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 501: 10.13.0.1.56444 > 12.107.209.247.80: P [tcp sum ok] 394184648:394185095(447) ack 2076728592 win 5840 (DF) (ttl 64, id 18782, len 487) 17:21:21.537289 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 54: 12.107.209.247.80 > 10.13.0.1.56444: . [tcp sum ok] 2076728592:2076728592(0) ack 394185095 win 2760 (ttl 59, id 14037, len 40) 17:21:21.573589 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 326: 12.107.209.247.80 > 10.13.0.1.56444: P [tcp sum ok] 2076728592:2076728864(272) ack 394185095 win 2760 (ttl 59, id 14038, len 312) 17:21:21.574238 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 744: 12.107.209.247.80 > 10.13.0.1.56444: . [tcp sum ok] 2076728864:2076729554(690) ack 394185095 win 2760 (ttl 59, id 14039, len 730) Large number of packets discarded here. No S or F or R. (R: RST). 17:21:21.718175 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 382: 12.107.209.247.80 > 10.13.0.1.56444: P [tcp sum ok] 2076736957:2076737285(328) ack 394185456 win 2760 (ttl 59, id 14051, len 368) 17:21:21.718341 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56444 > 12.107.209.247.80: . [tcp sum ok] 394185456:394185456(0) ack 2076736957 win 22080 (DF) (ttl 64, id 18795, len 40) 17:21:21.718343 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56444 > 12.107.209.247.80: . [tcp sum ok] 394185456:394185456(0) ack 2076737285 win 22080 (DF) (ttl 64, id 18796, len 40) 17:21:21.724469 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 74: 10.13.0.1.56445 > 12.107.209.247.80: S [tcp sum ok] 387280778:387280778(0) win 5840 (DF) (ttl 64, id 57637, len 60) 17:21:21.727366 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 62: 12.107.209.247.80 > 10.13.0.1.56445: S [tcp sum ok] 2077689229:2077689229(0) ack 387280779 win 1380 (ttl 59, id 14052, len 48) 17:21:21.727496 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56445 > 12.107.209.247.80: . [tcp sum ok] 387280779:387280779(0) ack 2077689230 win 5840 (DF) (ttl 64, id 57638, len 40) 17:21:21.728277 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 417: 10.13.0.1.56445 > 12.107.209.247.80: P [tcp sum ok] 387280779:387281142(363) ack 2077689230 win 5840 (DF) (ttl 64, id 57639, len 403) 17:21:21.730985 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 54: 12.107.209.247.80 > 10.13.0.1.56445: . [tcp sum ok] 2077689230:2077689230(0) ack 387281142 win 2760 (ttl 59, id 14053, len 40) 17:21:21.753172 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 309: 12.107.209.247.80 > 10.13.0.1.56445: P [tcp sum ok] 2077689230:2077689485(255) ack 387281142 win 2760 (ttl 59, id 14054, len 295) 17:21:21.753574 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 744: 12.107.209.247.80 > 10.13.0.1.56445: . [tcp sum ok] 2077689485:2077690175(690) ack 387281142 win 2760 (ttl 59, id 14055, len 730) Large number of packets discarded here. No S or F or R. 17:21:22.132084 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56445 > 12.107.209.247.80: . [tcp sum ok] 387282357:387282357(0) ack 2077700990 win 30360 (DF) (ttl 64, id 57652, len 40) 17:21:40.423803 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 74: 10.13.0.1.32768 > 10.3.0.254.53: [udp sum ok] 53251+ A? www.google.com. (32) (DF) (ttl 64, id 38397, len 60) 17:21:40.428075 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 190: 10.3.0.254.53 > 10.13.0.1.32768: [udp sum ok] 53251 q: A? www.google.com. 3/4/0 www.google.com. CNAME www.l.google.com., www.l.google.com. A 64.233.187.99, www.l.google.com. A 64.233.187.104 ns: l.google.com. NS c.l.google.com., l.google.com. NS d.l.google.com., l.google.com. NS a.l.google.com., l.google.com. NS b.l.google.com. (148) (DF) (ttl 62, id 0, len 176) 17:21:40.449957 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 74: 10.13.0.1.56450 > 64.233.187.99.80: S [tcp sum ok] 410192306:410192306(0) win 5840 (DF) (ttl 64, id 40882, len 60) 17:21:40.452862 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 62: 64.233.187.99.80 > 10.13.0.1.56450: S [tcp sum ok] 2099633689:2099633689(0) ack 410192307 win 1380 (ttl 59, id 14090, len 48) 17:21:40.453011 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56450 > 64.233.187.99.80: . [tcp sum ok] 410192307:410192307(0) ack 2099633690 win 5840 (DF) (ttl 64, id 40883, len 40) 17:21:40.467766 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 583: 10.13.0.1.56450 > 64.233.187.99.80: P [tcp sum ok] 410192307:410192836(529) ack 2099633690 win 5840 (DF) (ttl 64, id 40884, len 569) 17:21:40.474466 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 54: 64.233.187.99.80 > 10.13.0.1.56450: . [tcp sum ok] 2099633690:2099633690(0) ack 410192836 win 5840 (ttl 59, id 14091, len 40) Large number of packets discarded here. No S or F or R. 17:21:53.229141 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 221: 64.233.187.99.80 > 10.13.0.1.56450: P [tcp sum ok] 2099645327:2099645494(167) ack 410193941 win 5840 (ttl 59, id 14112, len 207) 17:21:53.229978 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56450 > 64.233.187.99.80: . [tcp sum ok] 410193941:410193941(0) ack 2099645494 win 28980 (DF) (ttl 64, id 40905, len 40) 17:21:53.282684 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 74: 10.13.0.1.56454 > 64.233.187.99.80: S [tcp sum ok] 423987422:423987422(0) win 5840 (DF) (ttl 64, id 5082, len 60) 17:21:53.285524 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 62: 64.233.187.99.80 > 10.13.0.1.56454: S [tcp sum ok] 2112054283:2112054283(0) ack 423987423 win 1380 (ttl 59, id 14113, len 48) 17:21:53.285684 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56454 > 64.233.187.99.80: . [tcp sum ok] 423987423:423987423(0) ack 2112054284 win 5840 (DF) (ttl 64, id 5083, len 40) 17:21:53.286547 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 592: 10.13.0.1.56454 > 64.233.187.99.80: P [tcp sum ok] 423987423:423987961(538) ack 2112054284 win 5840 (DF) (ttl 64, id 5084, len 578) 17:21:53.293266 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 54: 64.233.187.99.80 > 10.13.0.1.56454: . [tcp sum ok] 2112054284:2112054284(0) ack 423987961 win 5840 (ttl 59, id 14114, len 40) 17:21:53.306520 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 1434: 64.233.187.99.80 > 10.13.0.1.56450: . [tcp sum ok] 2099645494:2099646874(1380) ack 410193941 win 5840 (ttl 59, id 14115, len 1420) 17:21:53.306709 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 1269: 64.233.187.99.80 > 10.13.0.1.56450: FP [tcp sum ok] 2099646874:2099648089(1215) ack 410193941 win 5840 (ttl 59, id 14116, len 1255) 17:21:53.307044 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56450 > 64.233.187.99.80: . [tcp sum ok] 410193941:410193941(0) ack 2099646874 win 33120 (DF) (ttl 64, id 40906, len 40) 17:21:53.340505 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56450 > 64.233.187.99.80: . [tcp sum ok] 410193941:410193941(0) ack 2099648090 win 33120 (DF) (ttl 64, id 40907, len 40) 17:21:53.344652 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 744: 64.233.187.99.80 > 10.13.0.1.56454: . [tcp sum ok] 2112054284:2112054974(690) ack 423987961 win 5840 (ttl 59, id 14117, len 730) 17:21:53.344655 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 412: 64.233.187.99.80 > 10.13.0.1.56454: P [tcp sum ok] 2112054974:2112055332(358) ack 423987961 win 5840 (ttl 59, id 14118, len 398) Here some packets discarded. No S or F or R. All to or from 10.13.0.1.56454 17:21:53.355389 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56454 > 64.233.187.99.80: . [tcp sum ok] 423987961:423987961(0) ack 2112058548 win 15180 (DF) (ttl 64, id 5092, len 40) 17:21:53.362454 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 68: 64.233.187.99.80 > 10.13.0.1.56454: P [tcp sum ok] 2112058548:2112058562(14) ack 423987961 win 5840 (ttl 59, id 14125, len 54) 17:21:53.362598 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56454 > 64.233.187.99.80: . [tcp sum ok] 423987961:423987961(0) ack 2112058562 win 15180 (DF) (ttl 64, id 5093, len 40) 17:21:53.364849 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 713: 64.233.187.99.80 > 10.13.0.1.56454: P [tcp sum ok] 2112058562:2112059221(659) ack 423987961 win 5840 (ttl 59, id 14126, len 699) 17:21:53.364986 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 74: 10.13.0.1.56455 > 64.233.187.99.80: S [tcp sum ok] 431403542:431403542(0) win 5840 (DF) (ttl 64, id 10522, len 60) 17:21:53.366356 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56454 > 64.233.187.99.80: . [tcp sum ok] 423987961:423987961(0) ack 2112059221 win 16560 (DF) (ttl 64, id 5094, len 40) 17:21:53.367341 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 589: 10.13.0.1.56454 > 64.233.187.99.80: P [tcp sum ok] 423987961:423988496(535) ack 2112059221 win 16560 (DF) (ttl 64, id 5095, len 575) 17:21:53.368071 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 62: 64.233.187.99.80 > 10.13.0.1.56455: S [tcp sum ok] 2106879529:2106879529(0) ack 431403543 win 1380 (ttl 59, id 14127, len 48) 17:21:53.368233 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56455 > 64.233.187.99.80: . [tcp sum ok] 431403543:431403543(0) ack 2106879530 win 5840 (DF) (ttl 64, id 10523, len 40) 17:21:53.369086 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 587: 10.13.0.1.56455 > 64.233.187.99.80: P [tcp sum ok] 431403543:431404076(533) ack 2106879530 win 5840 (DF) (ttl 64, id 10524, len 573) 17:21:53.375691 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 54: 64.233.187.99.80 > 10.13.0.1.56455: . [tcp sum ok] 2106879530:2106879530(0) ack 431404076 win 5840 (ttl 59, id 14128, len 40) 17:21:53.381516 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56450 > 64.233.187.99.80: F [tcp sum ok] 410193941:410193941(0) ack 2099648090 win 33120 (DF) (ttl 64, id 40908, len 40) 17:21:53.383059 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 54: 64.233.187.99.80 > 10.13.0.1.56454: . [tcp sum ok] 2112059221:2112059221(0) ack 423988496 win 5840 (ttl 59, id 14129, len 40) 17:21:53.383933 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 54: 64.233.187.99.80 > 10.13.0.1.56450: . [tcp sum ok] 2099648090:2099648090(0) ack 410193942 win 5840 (ttl 250, id 14130, len 40) 17:21:53.425036 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 659: 64.233.187.99.80 > 10.13.0.1.56454: P [tcp sum ok] 2112059221:2112059826(605) ack 423988496 win 5840 (ttl 59, id 14131, len 645) 17:21:53.427018 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 586: 10.13.0.1.56454 > 64.233.187.99.80: P [tcp sum ok] 423988496:423989028(532) ack 2112059826 win 16560 (DF) (ttl 64, id 5096, len 572) Many packets discarded here. No S or F or R. 17:21:53.520442 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56454 > 64.233.187.99.80: . [tcp sum ok] 423989028:423989028(0) ack 2112060428 win 16560 (DF) (ttl 64, id 5097, len 40) 17:21:53.530614 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 77: 10.13.0.1.32768 > 10.3.0.254.53: [udp sum ok] 53252+ A? weather.yahoo.com. (35) (DF) (ttl 64, id 39709, len 63) 17:21:53.539030 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 331: 10.3.0.254.53 > 10.13.0.1.32768: [udp sum ok] 53252 q: A? weather.yahoo.com. 2/10/0 weather.yahoo.com. CNAME weather.yahoo2.akadns.net., weather.yahoo2.akadns.net. A 216.109.126.70 ns: akadns.net. NS usw7.akadns.net., akadns.net. NS asia5.akadns.net., akadns.net. NS asia9.akadns.net., akadns.net. NS eur10.akadns.net., akadns.net. NS za.akadns.org., akadns.net. NS zh.akadns.org., akadns.net. NS eur3.akadns.net., akadns.net. NS use4.akadns.net., akadns.net. NS use9.akadns.net., akadns.net. NS usw6.akadns.net. (289) (DF) (ttl 62, id 0, len 317) 17:21:53.540116 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 74: 10.13.0.1.56456 > 216.109.126.70.80: S [tcp sum ok] 426008686:426008686(0) win 5840 (DF) (ttl 64, id 64371, len 60) 17:21:53.540416 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56455 > 64.233.187.99.80: . [tcp sum ok] 431404608:431404608(0) ack 2106882537 win 12576 (DF) (ttl 64, id 10530, len 40) 17:21:53.543324 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 62: 216.109.126.70.80 > 10.13.0.1.56456: S [tcp sum ok] 2107501087:2107501087(0) ack 426008687 win 1380 (ttl 59, id 14141, len 48) 17:21:53.543494 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56456 > 216.109.126.70.80: . [tcp sum ok] 426008687:426008687(0) ack 2107501088 win 5840 (DF) (ttl 64, id 64372, len 40) 17:21:53.544377 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 602: 10.13.0.1.56456 > 216.109.126.70.80: P [tcp sum ok] 426008687:426009235(548) ack 2107501088 win 5840 (DF) (ttl 64, id 64373, len 588) 17:21:53.551832 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 54: 216.109.126.70.80 > 10.13.0.1.56456: . [tcp sum ok] 2107501088:2107501088(0) ack 426009235 win 5840 (ttl 59, id 14142, len 40) 17:21:53.684374 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 540: 216.109.126.70.80 > 10.13.0.1.56456: P [tcp sum ok] 2107501088:2107501574(486) ack 426009235 win 5840 (ttl 59, id 14143, len 526) 17:21:53.684377 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 744: 216.109.126.70.80 > 10.13.0.1.56456: . [tcp sum ok] 2107501574:2107502264(690) ack 426009235 win 5840 (ttl 59, id 14144, len 730) 17:21:53.684681 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56456 > 216.109.126.70.80: . [tcp sum ok] 426009235:426009235(0) ack 2107501574 win 6432 (DF) (ttl 64, id 64374, len 40) 17:21:53.684683 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56456 > 216.109.126.70.80: . [tcp sum ok] 426009235:426009235(0) ack 2107502264 win 8280 (DF) (ttl 64, id 64375, len 40) 17:21:53.685956 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56456 > 216.109.126.70.80: F [tcp sum ok] 426009235:426009235(0) ack 2107502264 win 8280 (DF) (ttl 64, id 64376, len 40) 17:21:53.689036 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 744: 216.109.126.70.80 > 10.13.0.1.56456: P [tcp sum ok] 2107502264:2107502954(690) ack 426009235 win 5840 (ttl 59, id 14145, len 730) 17:21:53.689972 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56456 > 216.109.126.70.80: R [tcp sum ok] 426009235:426009235(0) win 0 (DF) (ttl 64, id 0, len 40) 17:21:53.690081 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 744: 216.109.126.70.80 > 10.13.0.1.56456: . [tcp sum ok] 2107502954:2107503644(690) ack 426009235 win 5840 (ttl 59, id 14146, len 730) 17:21:53.690369 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 744: 216.109.126.70.80 > 10.13.0.1.56456: P [tcp sum ok] 2107503644:2107504334(690) ack 426009236 win 2760 (ttl 59, id 14147, len 730) 17:21:53.690589 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56456 > 216.109.126.70.80: R [tcp sum ok] 426009235:426009235(0) win 0 (DF) (ttl 64, id 0, len 40) 17:21:53.690590 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56456 > 216.109.126.70.80: R [tcp sum ok] 426009236:426009236(0) win 0 (DF) (ttl 64, id 0, len 40) 17:21:53.691536 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 744: 216.109.126.70.80 > 10.13.0.1.56456: . [tcp sum ok] 2107504334:2107505024(690) ack 426009236 win 2760 (ttl 59, id 14148, len 730) 17:21:53.692429 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56456 > 216.109.126.70.80: R [tcp sum ok] 426009236:426009236(0) win 0 (DF) (ttl 64, id 0, len 40) 17:21:56.503287 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 74: 10.13.0.1.56457 > 216.109.126.70.80: S [tcp sum ok] 433085925:433085925(0) win 5840 (DF) (ttl 64, id 49571, len 60) 17:21:56.506729 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 62: 216.109.126.70.80 > 10.13.0.1.56457: S [tcp sum ok] 2117576190:2117576190(0) ack 433085926 win 1380 (ttl 59, id 14149, len 48) 17:21:56.506864 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56457 > 216.109.126.70.80: . [tcp sum ok] 433085926:433085926(0) ack 2117576191 win 5840 (DF) (ttl 64, id 49572, len 40) 17:21:56.507691 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 614: 10.13.0.1.56457 > 216.109.126.70.80: P [tcp sum ok] 433085926:433086486(560) ack 2117576191 win 5840 (DF) (ttl 64, id 49573, len 600) 17:21:56.514597 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 54: 216.109.126.70.80 > 10.13.0.1.56457: . [tcp sum ok] 2117576191:2117576191(0) ack 433086486 win 5840 (ttl 59, id 14150, len 40) Many packets discarded. No S or F or R. 17:21:56.614199 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56457 > 216.109.126.70.80: . [tcp sum ok] 433086486:433086486(0) ack 2117584858 win 23460 (DF) (ttl 64, id 49586, len 40) 17:21:56.619990 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 520: 10.3.0.254.53 > 10.13.0.1.32768: [udp sum ok] 53253 q: A? us.js1.yimg.com. 8/9/7 us.js1.yimg.com. CNAME a943.yimg.com.georedirector.akadns.net., a943.yimg.com.georedirector.akadns.net. CNAME a943.x.a.yimg.com., a943.x.a.yimg.com. A 207.40.194.15, a943.x.a.yimg.com. A 207.40.194.16, a943.x.a.yimg.com. A 207.40.194.22, a943.x.a.yimg.com. A 207.40.194.23, a943.x.a.yimg.com. A 207.40.194.8, a943.x.a.yimg.com. A 207.40.194.9 ns: x.a.yimg.com. NS n7x.a.yimg.com., x.a.yimg.com. NS n8x.a.yimg.com., x.a.yimg.com. NS n0x.a.yimg.com., x.a.yimg.com. NS n1x.a.yimg.com., x.a.yimg.com. NS n2x.a.yimg.com., x.a.yimg.com. NS n3x.a.yimg.com., x.a.yimg.com. NS n4x.a.yimg.com., x.a.yimg.com. NS n5x.a.yimg.com., x.a.yimg.com. NS n6x.a.yimg.com. ar: n1x.a.yimg.com. A 63.146.109.46, n2x.a.yimg.com. A 63.146.109.52, n3x.a.yimg.com. A 63.146.109.54, n4x.a.yimg.com. A 63.146.109.39, n5x.a.yimg.com. A 63.146.109.39, n7x.a.yimg.com. A 63.146.109.39, n8x.a.yimg.com. A 63.146.109.39 (478) (DF) (ttl 62, id 0, len 506) 17:21:56.620456 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 74: 10.13.0.1.56458 > 207.40.194.15.80: S [tcp sum ok] 422061401:422061401(0) win 5840 (DF) (ttl 64, id 47371, len 60) 17:21:56.624105 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 744: 216.109.126.70.80 > 10.13.0.1.56457: . [tcp sum ok] 2117584858:2117585548(690) ack 433086486 win 5840 (ttl 59, id 14164, len 730) 17:21:56.624606 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 744: 216.109.126.70.80 > 10.13.0.1.56457: P [tcp sum ok] 2117585548:2117586238(690) ack 433086486 win 5840 (ttl 59, id 14165, len 730) 17:21:56.624609 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 744: 216.109.126.70.80 > 10.13.0.1.56457: . [tcp sum ok] 2117586238:2117586928(690) ack 433086486 win 5840 (ttl 59, id 14166, len 730) 17:21:56.624748 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 581: 216.109.126.70.80 > 10.13.0.1.56457: FP [tcp sum ok] 2117586928:2117587455(527) ack 433086486 win 5840 (ttl 59, id 14167, len 567) 17:21:56.624755 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 62: 207.40.194.15.80 > 10.13.0.1.56458: S [tcp sum ok] 2115626248:2115626248(0) ack 422061402 win 1380 (ttl 59, id 14168, len 48) 17:21:56.624839 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56457 > 216.109.126.70.80: . [tcp sum ok] 433086486:433086486(0) ack 2117585548 win 24840 (DF) (ttl 64, id 49587, len 40) 17:21:56.624861 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56457 > 216.109.126.70.80: . [tcp sum ok] 433086486:433086486(0) ack 2117586238 win 26220 (DF) (ttl 64, id 49588, len 40) 17:21:56.624957 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56457 > 216.109.126.70.80: . [tcp sum ok] 433086486:433086486(0) ack 2117586928 win 27600 (DF) (ttl 64, id 49589, len 40) 17:21:56.624984 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56458 > 207.40.194.15.80: . [tcp sum ok] 422061402:422061402(0) ack 2115626249 win 5840 (DF) (ttl 64, id 47372, len 40) 17:21:56.626896 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 431: 10.13.0.1.56458 > 207.40.194.15.80: P [tcp sum ok] 422061402:422061779(377) ack 2115626249 win 5840 (DF) (ttl 64, id 47373, len 417) 17:21:56.628577 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56457 > 216.109.126.70.80: F [tcp sum ok] 433086486:433086486(0) ack 2117587456 win 27600 (DF) (ttl 64, id 49590, len 40) 17:21:56.629863 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 54: 207.40.194.15.80 > 10.13.0.1.56458: . [tcp sum ok] 2115626249:2115626249(0) ack 422061779 win 2760 (ttl 59, id 14169, len 40) 17:21:56.630863 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 54: 216.109.126.70.80 > 10.13.0.1.56457: . [tcp sum ok] 2117587456:2117587456(0) ack 433086487 win 5840 (ttl 59, id 14170, len 40) 17:21:56.633307 0:2:b3:cd:cd:c8 0:2:b3:d3:d4:8a 0800 242: 207.40.194.15.80 > 10.13.0.1.56458: P [tcp sum ok] 2115626249:2115626437(188) ack 422061779 win 2760 (ttl 59, id 14171, len 228) 17:21:56.634116 0:2:b3:d3:d4:8a 0:2:b3:cd:cd:c8 0800 60: 10.13.0.1.56458 > 207.40.194.15.80: . [tcp sum ok] 422061779:422061779(0) ack 2115626437 win 6432 (DF) (ttl 64, id 47374, len 40)