No. Time Source Destination Protocol Info 1 0.000000 141.3.161.43 129.13.64.5 DNS Standard query A www.heise.de Frame 1 (74 bytes on wire, 74 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 129.13.64.5 (129.13.64.5) User Datagram Protocol, Src Port: 46816 (46816), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Info 2 0.006939 129.13.64.5 141.3.161.43 DNS Standard query response A 193.99.144.85 Frame 2 (296 bytes on wire, 296 bytes captured) Linux cooked capture Internet Protocol, Src: 129.13.64.5 (129.13.64.5), Dst: 141.3.161.43 (141.3.161.43) User Datagram Protocol, Src Port: domain (53), Dst Port: 46816 (46816) Domain Name System (response) No. Time Source Destination Protocol Info 3 0.007223 141.3.161.43 193.99.144.85 TCP 55318 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626600 TSER=0 WS=6 Frame 3 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55318 (55318), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 4 0.013141 193.99.144.85 141.3.161.43 TCP http > 55318 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776119612 TSER=626600 Frame 4 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55318 (55318), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 5 0.013187 141.3.161.43 193.99.144.85 TCP 55318 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626601 TSER=776119612 Frame 5 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55318 (55318), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 6 0.013475 141.3.161.43 193.99.144.85 HTTP GET /newsticker/Firefox-sendet-wie-Chrome-Daten-an-Google--/meldung/115857 HTTP/1.1 Frame 6 (828 bytes on wire, 828 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55318 (55318), Dst Port: http (80), Seq: 1, Ack: 1, Len: 760 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 7 0.119980 193.99.144.85 141.3.161.43 TCP http > 55318 [ACK] Seq=1 Ack=761 Win=4876 Len=0 TSV=776119720 TSER=626601 Frame 7 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55318 (55318), Seq: 1, Ack: 761, Len: 0 No. Time Source Destination Protocol Info 8 0.249041 141.3.161.43 129.13.64.5 DNS Standard query PTR 43.161.3.141.in-addr.arpa Frame 8 (87 bytes on wire, 87 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 129.13.64.5 (129.13.64.5) User Datagram Protocol, Src Port: 52963 (52963), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Info 9 0.249136 141.3.161.43 129.13.64.5 DNS Standard query PTR 5.64.13.129.in-addr.arpa Frame 9 (86 bytes on wire, 86 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 129.13.64.5 (129.13.64.5) User Datagram Protocol, Src Port: 52963 (52963), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Info 10 0.252732 129.13.64.5 141.3.161.43 DNS Standard query response PTR vpn-cl-161-43.rz.uni-karlsruhe.de Frame 10 (256 bytes on wire, 256 bytes captured) Linux cooked capture Internet Protocol, Src: 129.13.64.5 (129.13.64.5), Dst: 141.3.161.43 (141.3.161.43) User Datagram Protocol, Src Port: domain (53), Dst Port: 52963 (52963) Domain Name System (response) No. Time Source Destination Protocol Info 11 0.253119 129.13.64.5 141.3.161.43 DNS Standard query response PTR netserv.rz.uni-karlsruhe.de Frame 11 (378 bytes on wire, 378 bytes captured) Linux cooked capture Internet Protocol, Src: 129.13.64.5 (129.13.64.5), Dst: 141.3.161.43 (141.3.161.43) User Datagram Protocol, Src Port: domain (53), Dst Port: 52963 (52963) Domain Name System (response) No. Time Source Destination Protocol Info 12 0.507880 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #13] Frame 12 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 16 5e 1c 38 79 36 56 7f 73 80 10 13 0c .P..^.8y6V.s.... 0010 ad 46 00 00 01 01 08 0a 2e 42 a7 2a 00 09 8f a9 .F.......B.*.... 0020 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d HTTP/1.1 200 OK. 0030 0a 44 61 74 65 3a 20 46 72 69 2c 20 31 32 20 53 .Date: Fri, 12 S 0040 65 70 20 32 30 30 38 20 31 31 3a 33 36 3a 30 31 ep 2008 11:36:01 0050 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 GMT..Server: Ap 0060 61 63 68 65 2f 31 2e 33 2e 33 34 0d 0a 56 61 72 ache/1.3.34..Var 0070 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 y: Accept-Encodi 0080 6e 67 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 ng..Connection: 0090 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 close..Content-T 00a0 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 ype: text/html; 00b0 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 charset=UTF-8..C 00c0 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 3a ontent-Encoding: 00d0 20 67 7a 69 70 0d 0a 43 6f 6e 74 65 6e 74 2d 4c gzip..Content-L 00e0 65 6e 67 74 68 3a 20 31 30 33 35 37 0d 0a 0d 0a ength: 10357.... 00f0 1f 8b 08 00 00 00 00 00 00 03 ec 3b db 76 1b 37 ...........;.v.7 0100 92 cf e2 39 fe 07 b8 e7 8c 25 4d 44 36 6f d6 5d ...9.....%MD6o.] 0110 b4 65 4b 8e 35 b6 6c 1f 49 89 33 3b 3b 87 07 cd .eK.5.l.I.3;;... 0120 06 49 98 7d 0b 80 16 65 65 f2 2d f3 92 6f c8 d3 .I.}...ee.-..o.. 0130 bc f9 c7 b6 0a 40 df c8 a6 24 3b b3 fb b4 4a 2c .....@...$;...J, 0140 36 d1 40 55 a1 ee 55 80 1a 0d fc 39 7c 7c f2 fe 6.@U..U....9||.. 0150 e5 d5 df 3e 9c 92 a9 0a 03 f2 e1 87 17 6f cf 5e ...>.........o.^ 0160 12 a7 e9 ba 1f 7b 2f 5d f7 e4 ea 84 fc f4 fa ea .....{/]........ 0170 fc 2d e9 b4 da e4 52 09 3e 52 ae 7b fa ce 21 ce .-....R.>R.{..!. 0180 54 a9 64 df 75 e7 f3 79 6b de 6b c5 62 e2 5e 5d T.d.u..yk.k.b.^] 0190 b8 37 08 a5 83 cb ec 63 53 ea 35 2d 5f f9 ce a0 .7.....cS.5-_... 01a0 71 a8 91 dc 84 41 24 8f 6a 00 74 f6 f6 f6 cc 3a q....A$.j.t....: 01b0 07 27 ed 07 34 9a 1c 39 3e 73 48 fe 34 00 92 a7 .'..4..9>sH.4... 01c0 8c fa f0 d9 20 f0 73 18 f0 68 46 04 0b 00 5e 1c .... .s..hF...^. 01d0 c2 4c f5 39 61 47 8e 62 37 ca 35 80 14 57 01 33 .L.9aG.b7.5..W.3 01e0 6f f7 a7 8c 4b 46 e2 08 16 c1 d4 a9 60 e3 23 c7 o...KF......`.#. 01f0 75 88 0b 94 15 70 68 aa a6 b1 c8 17 be 89 23 45 u....ph.......#E 0200 67 2a 9b 1e 52 1e a8 78 7f 66 46 ff dc 6f 6b 98 g*..R..x.fF..ok. 0210 2d 9f 3d 93 a9 f7 89 8d d4 91 1e f8 73 b7 9d a1 -.=.........s... 0220 a9 42 1f c5 c9 67 c1 27 53 95 23 78 ad 89 fa 2f .B...g.'S.#x.../ 0230 c6 95 1c 4d 05 1f 2b 16 91 1f 99 08 e8 24 27 d1 ...M..+......$'. 0240 62 73 79 98 08 26 65 1a b6 a4 d9 5c 15 b6 64 54 bsy..&e....\..dT 0250 8c a6 39 e0 cb 74 34 2d b6 29 f1 9b d9 6c 65 b7 ..9..t4-.)...le. 0260 81 62 22 a2 2a 67 1d 4d 92 80 8f a8 e2 71 e4 52 .b".*g.M.....q.R 0270 15 87 df dd 94 b8 78 3c 53 29 0b 02 46 de b1 b9 ......x.L...} 04f0 c2 81 f7 37 66 ae cf af 09 f7 c1 a3 5b 77 e9 18 ...7f.......[w.. 0500 0e e9 f1 51 40 25 64 4a 4c 80 eb 18 de 32 1e 30 ...Q@%dJL....2.0 0510 a7 c4 ef 34 c8 26 64 6b 87 d4 03 66 45 e0 78 32 ...4.&dk...fE.x2 0520 28 01 cf e6 8c 39 40 81 3d d0 22 ef c9 52 a3 4a (....9@.=."..R.J 0530 08 2f 83 8c 3d f0 58 d3 ./..=.X. No. Time Source Destination Protocol Info 13 0.508144 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 13 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55318 (55318), Seq: 1, Ack: 761, Len: 1360 No. Time Source Destination Protocol Info 14 0.508182 141.3.161.43 193.99.144.85 TCP 55318 > http [ACK] Seq=761 Ack=1361 Win=8256 Len=0 TSV=626725 TSER=776120106 Frame 14 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55318 (55318), Dst Port: http (80), Seq: 761, Ack: 1361, Len: 0 No. Time Source Destination Protocol Info 15 0.508441 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 15 (156 bytes on wire, 156 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55318 (55318), Seq: 1361, Ack: 761, Len: 88 No. Time Source Destination Protocol Info 16 0.508453 141.3.161.43 193.99.144.85 TCP 55318 > http [ACK] Seq=761 Ack=1449 Win=8256 Len=0 TSV=626725 TSER=776120106 Frame 16 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55318 (55318), Dst Port: http (80), Seq: 761, Ack: 1449, Len: 0 No. Time Source Destination Protocol Info 17 0.519214 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #18] Frame 17 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 16 5e 1c 3e 21 36 56 7f 73 80 10 13 0c .P..^.>!6V.s.... 0010 b1 5b 00 00 01 01 08 0a 2e 42 a7 31 00 09 90 25 .[.......B.1...% 0020 ae 3e 2f 22 ba b4 e3 35 b8 60 49 2d ae 6c c9 5d .>/"...5.`I-.l.] 0030 e8 22 a6 6e d9 22 ae 77 38 58 83 08 26 d7 22 d2 .".n.".w8X..&.". 0040 f3 ef c2 12 27 2c 5a 32 11 18 ab c1 81 36 fb 1e ....',Z2.....6.. 0050 5e 91 cb 38 15 23 f6 c7 c5 06 39 3e 0d 96 b6 68 ^..8.#....9>...h 0060 46 6b f0 c3 8b da 3d 5e e8 05 77 6d 72 1c ab 78 Fk....=^..wmr..x 0070 11 cd 2b 18 ab 41 82 53 6b b1 e0 fc bb 70 40 39 ..+..A.Sk....p@9 0080 15 cb 45 24 c7 38 58 83 05 26 d7 22 d1 f3 ef 71 ..E$.8X..&."...q 0090 3c ea ba e4 7b 54 68 3c 40 4b 5d d7 99 d9 b5 76 <...{Th<@K]....v 00a0 42 cd ab 1f 17 85 d5 d0 f9 17 f8 de 65 2f 7c 3b B...........e/|; 00b0 87 58 f4 6d 6e f8 1e 4f 2c e3 b1 9a 53 51 92 f8 .X.mn..O,...SQ.. 00c0 a5 1d 69 42 c4 03 84 08 ac 8e 5d 72 7e 9d b1 2b ..iB......]r~..+ 00d0 5b e1 5a 8e 9d c4 f3 28 88 a9 5f 65 da 22 db 3e [.Z....(.._e.".> 00e0 c5 de 92 6c 70 ac 06 d7 27 74 0f 97 0a 8b aa 08 ...lp...'t...... 00f0 12 31 e6 c5 6a 41 b7 16 60 43 d5 c3 e5 35 13 10 .1..jA..`C...5.. 0100 f3 60 03 05 96 0f 95 f1 1a 4c c9 f5 c4 19 54 67 .`.......L....Tg 0110 dd 19 19 40 d6 62 56 0a 3c 67 57 cd 73 1c a9 0b ...@.bV..@hG?..'6 0250 53 47 ae 33 38 e5 e0 49 27 d6 88 c8 3f ef 86 e8 SG.38..I'...?... 0260 c7 9a c1 a9 2a 03 04 4d 4a 65 01 23 27 cc 10 6a ....*..MJe.#'..j 0270 79 09 9f c5 4e 32 fe ae 1d 8e 63 11 6a f6 21 4b y...N2....c.j.!K 0280 c7 2c f0 41 6e 23 2c fa 4a 3d 3d 28 a5 a6 31 4c .,.An#,.J==(..1L 0290 99 60 0f 80 8e 46 2c 51 cd ac b2 76 4c 69 8d cd .`...F,Q...vLi.. 02a0 d7 fe c0 ca 8a 47 49 5a e6 bc 63 eb b0 9f 1d 8d .....GIZ..c..... 02b0 09 3e ae 69 90 32 2c d8 ac 61 e0 ac 31 d7 d8 15 .>.i.2,..a..1... 02c0 f5 74 f9 72 e4 74 da 79 41 57 01 29 53 2f e4 39 .t.r.t.yAW.)S/.9 02d0 50 d3 95 1c 66 83 16 b2 6d 4e 5a f0 0b 73 ea 80 P...f...mNZ..s.. 02e0 4e b9 ef 63 fa 65 80 8a 30 87 94 75 3d b1 0b e0 N..c.e..0..u=... 02f0 c2 1e e1 37 f2 6c d0 a8 1a aa 29 3b 33 be 02 63 ...7.l....);3..c 0300 c1 db 67 5a 39 d1 5d 44 a7 ac df e8 42 a4 12 71 ..gZ9.]D....B..q 0310 34 a9 2b 99 2e 15 15 4a 62 3e 50 6d 80 0e 5e 43 4.+....Jb>Pm..^C 0320 6d 6d fc 45 b6 b8 1a b5 96 40 96 5a 74 9a 17 7c mm.E.....@.Zt..| 0330 54 60 79 97 bf 23 f6 9d 33 28 c6 be 15 4d 0e 7e T`y..#..3(...M.~ 0340 a7 79 45 27 ac 89 10 9d 41 e9 cb b7 02 a6 da 5b .yE'....A......[ 0350 56 c9 cf 1c ec a0 f4 e5 ab e0 83 28 cb 89 f8 5b V..........(...[ 0360 06 d6 06 63 29 c4 f1 e2 79 35 c4 4c c1 4c 77 61 ...c)...y5.L.Lwa 0370 81 ee a6 29 fa f5 73 d6 51 b7 78 b0 15 fc 8a 31 ...)..s.Q.x....1 0380 ec fc e8 fe 1a 36 fe b1 61 d7 d4 80 f6 49 fb c0 .....6..a....I.. 0390 19 c0 9c a5 bc 64 15 3e 9b 2a 98 16 b7 51 96 16 .....d.>.*...Q.. 03a0 16 56 55 6e d9 da 6c 50 3c 3f 18 81 de 44 c0 94 .VUn..lPf`..*.,.... 03c0 f6 b5 49 78 82 51 7f 04 7c f5 b4 a3 be 2f e2 2c ..Ix.Q..|..../., 03d0 36 07 d0 b7 43 12 90 53 2a e9 cf 29 84 af 27 e6 6...C..S*..)..'. 03e0 e1 c0 a6 08 1a e3 da dd 1a 5a 6d 52 12 a3 a3 c4 .........ZmR.... 03f0 28 6c a6 a9 08 e4 21 e8 56 e0 b2 4a 8b 8d b7 95 (l....!.V..J.... 0400 78 2b 8a 8c 33 ff c3 78 7b 3b 0f 41 4d de 40 35 x+..3..x{;.AM.@5 0410 87 3d bb 79 0c ae 93 f4 76 9c c1 9b 8f f0 f1 75 .=.y....v......u 0420 c4 3c b8 75 d9 d0 c1 c9 78 d4 86 76 98 59 1c d7 .<.u....x..v.Y.. 0430 8d 6d d4 0c ad 3e 6b 0b 2f 86 d8 96 93 d9 6b 84 .m...>k./.....k. 0440 61 a6 65 93 b1 6f 26 39 83 1d 5c b1 30 09 00 a9 a.e..o&9..\.0... 0450 6e 9a d9 f7 8d 52 26 65 c0 45 5a da 46 fd 93 3c n....R&e.EZ.F..< 0460 4f 83 c1 a1 4f 15 ba 01 d3 ba 46 46 12 dd 33 3d O...O.....FF..3= 0470 74 93 e5 e2 4d 2f 30 69 54 49 9f ef 48 96 42 a8 t...M/0iTI..H.B. 0480 1d ef 49 92 7a a5 1c a9 d7 ce 72 a4 72 b8 59 20 ..I.z.....r.r.Y 0490 18 43 4d 25 c8 d4 8a 2c d0 12 33 9d a5 ac 81 55 .CM%...,..3....U 04a0 a7 41 0b c7 44 03 73 b0 54 4d d3 fe 49 4a d8 ee .A..D.s.TM..IJ.. 04b0 05 b2 07 56 65 ce c3 f4 71 92 de 4d 2d 89 9a b6 ...Ve...q..M-... 04c0 27 a2 a2 5a d6 97 24 83 43 4f 64 0b 46 01 c4 e6 '..Z..$.COd.F... 04d0 fc ac 09 69 40 e9 bf 3e 3d bb 3c bd 3a fd e9 4a ...i@..>=.<.:..J 04e0 0b 3e 1b b6 dd d1 a8 d4 1c d5 af a6 9d 0c 5a 00 .>............Z. 04f0 c9 be 33 f8 8a e3 89 69 67 09 7c b5 f9 6a 7e ee ..3....ig.|..j~. 0500 ce 44 07 ba 77 eb ba b0 e0 f0 f1 df 5f 9e 1c 5f .D..w......._.._ 0510 1d ff dd 05 51 c3 60 63 9c 46 3a 15 d3 9d a1 8f ....Q.`c.F:..... 0520 00 37 9e 6f 6c 92 5f 00 e9 5c 7f 69 e1 f8 c6 7a .7.ol._..\.i...z 0530 1d c3 69 ea f3 d8 b0 7d ..i....} No. Time Source Destination Protocol Info 18 0.519320 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 18 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55318 (55318), Seq: 1449, Ack: 761, Len: 1360 No. Time Source Destination Protocol Info 19 0.519358 141.3.161.43 193.99.144.85 TCP 55318 > http [ACK] Seq=761 Ack=2809 Win=10944 Len=0 TSV=626728 TSER=776120113 Frame 19 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55318 (55318), Dst Port: http (80), Seq: 761, Ack: 2809, Len: 0 No. Time Source Destination Protocol Info 20 0.520186 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #21] Frame 20 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 16 5e 1c 43 71 36 56 7f 73 80 10 13 0c .P..^.Cq6V.s.... 0010 4d 9c 00 00 01 01 08 0a 2e 42 a7 31 00 09 90 25 M........B.1...% 0020 2d f5 02 06 2b e2 c0 ce 9c c6 6a c6 3e cb ad 20 -...+.....j.>.. 0030 36 27 a7 30 b6 be 79 d0 f8 b5 e1 c7 a3 14 9b d8 6'.0..y......... 0040 ad b9 80 ac 66 63 bd 6c 3c 18 0e 64 c2 e8 0c e3 ....fc.l<..d.... 0050 48 ae 46 05 8f f6 cb db af 37 aa 6b bb bd 92 4d H.F......7.k...M 0060 d9 c3 4a 92 bd ca ed 6a bb 5f d8 55 a7 97 e7 88 ..J....j._.U.... 0070 67 97 67 c3 b3 ef df bd bf 38 d5 a6 b6 4e be 23 g.g......8...N.# 0080 eb a8 a1 e6 01 8d 0e 77 62 05 f5 8f 7f 60 1e 68 .......wb....`.h 0090 b3 69 d0 cb 52 66 bd 6a 63 8d 3b 0d a4 2c af ff .i..Rf.jc.;..,.. 00a0 ab 2d a2 29 e7 65 66 b1 83 ea 71 42 54 51 e8 45 .-.).ef...qBTQ.E 00b0 bf 67 c9 1f ce 05 4d 92 bc 26 35 ce 14 ab b3 e3 .g....M..&5..... 00c0 68 02 6a a2 8f 28 21 b2 90 2b aa 24 85 e8 b2 45 h.j..(!..+.$...E 00d0 7c 58 8e bf 48 5d b7 c3 93 1c db 1c fa 32 02 73 |X..H].......2.s 00e0 67 a9 b8 cd d8 d4 de 83 ff 76 47 da 20 5b 90 51 g........vG. [.Q 00f0 d9 c3 98 ec 74 05 d5 07 34 34 fa 1c 66 f1 ee 45 ....t...44..f..E 0100 0a c4 4b 1a 2a 32 fe f2 6f 41 2e 81 16 26 80 35 ..K.*2..oA...&.5 0110 0a 76 a5 49 3a 8b 30 9b d7 ca 0a 3e 09 9b 31 33 .v.I:.0....>..13 0120 67 f0 e2 f2 0c b8 63 20 69 3e 01 8b 43 e2 d0 20 g.....c i>..C.. 0130 98 b0 90 81 93 06 27 c0 3c 81 67 5b 0e 40 91 d6 ......'.<.g[.@.. 0140 25 34 ed 21 98 cc 5c 06 f5 26 4c 68 b7 31 a5 6a %4.!..\..&Lh.1.j 0150 8b cc be fc 1e 61 69 4e 8e a3 e9 97 df 80 35 42 .....aiN......5B 0160 5f 1d 38 3b dd ca 4f c8 80 5c 00 88 6e 06 88 83 _.8;..O..\..n... 0170 4f 0b 31 22 c8 45 32 16 2c 05 0d 20 1f c1 2b 21 O.1".E2.,.. ..+! 0180 f1 8b cc 93 69 48 9b ec 1a 99 a7 85 d6 32 49 e7 ....iH.......2I. 0190 02 8f 2e d3 73 4a 98 ee 4d 22 17 70 3f 21 29 f2 ....sJ..M".p?!). 01a0 37 d0 1c 01 1a 35 65 1e 90 ac 18 0f 54 4e 1d cc 7....5e.....TN.. 01b0 96 38 5d 10 f0 27 f0 20 b1 5f 87 1a 68 f6 4f 98 .8]..'. ._..h.O. 01c0 c7 a2 31 70 09 b2 4b 0e 8b e7 2c c0 54 e2 12 0b ..1p..K...,.T... 01d0 19 8d 87 5c a6 62 0c ab 69 3a 16 e9 58 b5 74 2c ...\.b..i:..X.t, 01e0 85 30 36 f8 08 83 7a 87 3e ec ec 4d 1c 8d f9 24 .06...z.>..M...$ 01f0 15 5a 28 fa ac f0 70 e6 f9 03 ea 41 d9 bb 3f d2 .Z(...p....A..?. 0200 2f 0f 5d 1c c9 64 78 ec a3 a6 e8 ce 29 81 1a 98 /.]..dx.....)... 0210 a6 c0 3e cc 01 80 04 64 43 48 60 4e 04 7a 47 1c ..>....dCH`N.zG. 0220 49 c7 10 60 c7 1c 2f 64 c0 5b a9 be fc fe e5 5f I..`../d.[....._ 0230 fa 0c 52 63 1e c7 20 e0 08 f9 0f 45 b9 12 74 a2 ..Rc.. ....E..t. 0240 9b 5b fb 98 58 54 13 20 48 9d 7d 9b 89 64 09 bc .[..XT. H.}..d.. 0250 36 bd fd ee d3 76 72 73 30 0e 62 0a 59 7c 14 47 6....vrs0.b.Y|.G 0260 0c 12 f9 52 68 c4 75 60 f5 c6 ce dd b6 db 71 74 ...Rh.u`......qt 0270 b5 9e d9 3b 39 22 cb 73 da 8e 2e e8 c1 e2 b5 61 ...;9".s.......a 0280 c1 14 2b 8e 66 85 51 66 96 a6 c2 cc 02 52 cc 98 ..+.f.Qf.....R.. 0290 f1 04 7a 6c e7 a9 19 72 0d 5a 9b da 79 c2 1d 2c ..zl...r.Z..y.., 02a0 6d 2f 05 4d 15 b6 93 e5 68 01 95 05 a0 59 0f 1c m/.M....h....Y.. 02b0 2b b3 9e 21 cf be fc 36 41 c6 1a ee 6b 2b 97 99 +..!...6A...k+.. 02c0 e0 af c1 f2 f0 9a 4d 44 3c c6 33 95 09 50 d3 55 ......MD<.3..P.U 02d0 eb 6e 1e 2d f9 c3 20 4d 58 2b c1 ab 28 d9 b5 17 .n.-.. MX+..(... 02e0 26 26 e2 49 8c c9 c5 13 79 1b f0 c9 01 28 bb 75 &&.I....y....(.u 02f0 93 2b de 59 5f d9 d9 2e f9 ca ed 22 cd 32 99 d1 .+.Y_......".2.. 0300 12 6b a4 3e 84 01 17 01 54 fe ac ef 00 ed e7 e6 .k.>....T....... 0310 b1 51 e6 d0 a6 05 41 8a cf 5c d9 a3 c8 26 67 56 .Q....A..\...&gV 0320 77 c6 71 a4 9a 63 1a f2 e0 f3 7e 18 83 2b 4e e8 w.q..c....~..+N. 0330 08 35 c7 33 d6 df 42 b5 d5 cf 3c 9a b4 40 c1 21 .5.3..B...<..@.! 0340 ea fa 19 58 d4 56 90 8e 7a 18 44 25 52 96 ad d4 ...X.V..z.D%R... 0350 3e 29 f8 f2 1b 58 a2 96 e5 05 9b 70 bc 4f c7 04 >)...X.....p.O.. 0360 9a 34 1a 96 3e 8f 2f 84 d5 22 c7 de 94 07 63 86 .4..>./.."....c. 0370 07 f9 74 0c cb 98 dc 2a 08 40 2b 7a 10 11 e0 22 ..t....*.@+z..." 0380 64 4e c5 6d 0a 1a a2 6e d1 ad 3d 68 71 99 17 19 dN.m...n..=hq... 0390 0c 8f f9 2c 55 2c d3 38 ab 5a 48 f8 27 66 f7 01 ...,U,.8.ZH.'f.. 03a0 2e 61 0a aa 46 8c fb 7a cb f1 3e 53 22 be fc 7b .a..F..z..>S"..{ 03b0 0c 8b 62 0f 36 62 fc 4f 1a ea 19 84 c8 18 3d 09 ..b.6b.O......=. 03c0 ba 6b e2 7d f9 1d 3b d5 cc b3 1d 19 d4 d8 00 54 .k.}..;........T 03d0 f6 1d ba 94 73 98 6e d8 25 89 71 ac ad 1f 5b e8 ....s.n.%.q...[. 03e0 58 7e 13 33 86 60 31 c8 81 06 82 37 01 d7 8d 66 X~.3.`1....7...f 03f0 93 69 4b 84 71 b1 4a 31 f0 02 b9 b9 f2 04 00 1d .iK.q.J1........ 0400 bb 3e 39 3c 8f 6f 79 10 d0 e6 ab 18 02 86 36 ff .>9<.oy.......6. 0410 26 6c 08 f2 73 a1 9a 1c d6 46 cd bf 52 f8 80 78 &l..s....F..R..x 0420 20 a9 ba 85 fc 12 53 8e 3c d9 d8 db d9 dd d9 cb .....S.<....... 0430 4d c7 c2 22 05 2c 92 c1 22 1a 16 29 c3 72 06 af M..".,.."..).r.. 0440 69 9a a8 31 07 e6 dc 72 db 80 af 0d 46 48 75 68 i..1...r....FHuh 0450 60 eb eb 97 4b 71 68 19 b1 86 35 61 d3 2f bf 0b `...Kqh...5a./.. 0460 d5 ca 6e 41 8c a8 7f 4d 74 d6 55 9f 66 eb 7c 24 ..nA...Mt.U.f.|$ 0470 2f 09 70 72 29 cf d1 ab de 1f 5f 92 e3 13 d8 29 /.pr)....._....) 0480 f7 fd 80 75 1c bd 0a 41 9b ba cb 83 6c 15 9b 60 ...u...A....l..` 0490 cf 13 28 ff 9f 3c 4f 62 c9 35 17 10 a7 4d 8f 6a ..(.. http [ACK] Seq=761 Ack=4169 Win=13696 Len=0 TSV=626728 TSER=776120113 Frame 22 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55318 (55318), Dst Port: http (80), Seq: 761, Ack: 4169, Len: 0 No. Time Source Destination Protocol Info 23 0.529598 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #24] Frame 23 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 16 5e 1c 48 c1 36 56 7f 73 80 10 13 0c .P..^.H.6V.s.... 0010 0c 16 00 00 01 01 08 0a 2e 42 a7 31 00 09 90 25 .........B.1...% 0020 c8 46 a7 d7 05 03 e2 4a 98 cd 4e 18 58 8f 67 c2 .F.....J..N.X.g. 0030 3a d0 5e ba 53 56 21 c7 0a 16 6f 55 d5 6d 30 b7 :.^.SV!...oU.m0. 0040 9a 53 49 26 dc 53 64 a6 03 c5 0f 90 f3 e2 41 c8 .SI&.Sd.......A. 0050 2d 06 01 7b 3d cb 9e ad 3c ac 25 b5 58 52 51 df -..{=...<.%.XRQ. 0060 8b 95 8a 43 9d 19 96 bd d7 0b 33 4c 5e 9e 1b f6 ...C......3L^... 0070 7a f1 cd 50 c4 d2 78 b3 b2 18 c1 31 a3 fb 8e 02 z..P..x....1.... 0080 ea b1 20 eb 97 1d 9b 41 2b cd 47 0d fc 4f 53 86 .. ....A+.G..OS. 0090 e0 c1 09 fc f0 01 e2 e5 84 6b af f7 a8 41 ee 69 .........k...A.i 00a0 5a 98 b5 8f a0 1c 1e 95 73 d0 47 0d 80 36 4c 45 Z.......s.G..6LE 00b0 40 8e d6 eb 62 d7 05 a3 c1 39 de 19 75 a1 30 76 @...b....9..u.0v 00c0 d7 0f cc 7c 94 2f 38 5d c8 4f d7 6f fa 9d ad 9b ...|./8].O.o.... 00d0 7e 17 fe f5 e0 5f 3f 9b 01 89 96 f8 8c ef 9f 65 ~...._?........e 00e0 23 52 1f 00 4f 18 0e 56 50 f4 79 d4 19 46 c0 17 #R..O..VP.y..F.. 00f0 9c e9 ba e0 0b 48 3c 26 35 54 5e 5b 67 74 44 3a .....H<&5T^[gtD: 0100 6d 0b 54 e0 b7 f5 76 bb d3 ed f5 9f 6e ef ec ee m.T...v.....n... 0110 b5 d7 0f 88 79 a1 a9 2b 8f 97 56 80 30 f4 df 2e ....y..+..V.0... 0120 80 02 6c 9c 53 35 6d 09 c8 10 e2 70 63 73 b3 bc ..l.S5m....pcs.. 0130 da 3c b5 64 ea 49 3b b7 bb 45 3a 9d 4d 80 94 f7 .<.d.I;..E:.M... 0140 79 70 0e 04 8c f3 e3 b7 1b c0 90 4d f2 cb a3 e5 yp.........M.... 0150 c6 49 66 30 d8 97 c8 b8 fd 1d 59 1f 05 60 3b c3 .If0......Y..`;. 0160 e8 a6 a5 39 6b df e5 5c c2 16 46 27 1b 45 7a 60 ...9k..\..F'.Ez` 0170 e0 79 f6 3d e3 3f 8c 3d c6 31 f3 5c f0 1d c6 f1 .y.=.?.=.1.\.... 0180 58 4e 4c 98 3a c2 5b 0b d8 08 a9 21 2c cf d1 17 XNL.:.[....!,... 0190 28 03 82 94 60 34 fc 5f 24 ce 8b 05 64 20 47 6d (...`4._$...d Gm 01a0 93 ef bf 44 56 3c 76 b4 c1 6b 52 7f 7d 64 fa 36 ...DV&..X/.-<.=. 01d0 20 23 74 80 7d 3f de 58 b7 89 8d db 5b df 24 8f #t.}?.X....[.$. 01e0 8f 48 b3 b3 59 ab 72 08 a7 3c 3c 40 f8 9b 35 9c .H..Y.r..<<@..5. 01f0 95 a3 f5 ef d6 b5 39 06 f6 8e f2 d1 5f 81 d4 4b ......9....._..K 0200 4d 6a a7 d5 21 97 17 2f 57 b3 3d fc f4 c7 f8 5e Mj..!../W.=....^ 0210 e5 f5 e0 f0 bf b3 be 97 e6 6d ce 58 3b 78 af e3 .........m.X;x.. 0220 20 86 af 64 71 97 eb 4b 96 70 7c 92 5b 41 2d ab ..dq..K.p|.[A-. 0230 c8 93 27 1a 4d 3c d6 ef 2e ce 5e be de 7c 7c b4 ..'.M<....^..||. 0240 8e 1d 1f 48 4f 99 bf 0e bc 24 24 7b a5 61 01 0a ...HO....$${.a.. 0250 06 b5 47 36 5e b2 b5 95 6a 52 f5 91 e8 4f f4 94 ..G6^...jR...O.. 0260 47 c5 41 82 e9 e8 1b af 3d d4 fe c7 83 c2 01 bb G.A.....=....... 0270 61 b9 93 05 bf 66 96 3d d0 af da ed a3 3f ac e5 a....f.=.....?.. 0280 72 09 70 f7 1b 01 77 ef 03 dc fb 46 c0 bd fb 00 r.p...w....F.... 0290 f7 bf 11 70 7f 35 60 1d 72 f5 53 ee 85 6c fc 89 ...p.5`.r.S..l.. 02a0 a9 5c 15 7f 72 0b 09 8c 81 ac fa 2b 1c 9b 43 41 .\..r......+..CA 02b0 4a c2 b1 27 12 31 e5 ee ec f4 bb 3b db fd ee 53 J..'.1.....;...S 02c0 d7 44 65 f7 3d 95 f6 42 bb 5b 8a cd 6e c8 e7 1c .De.=..B.[..n... 02d0 9f a7 c9 50 50 c8 e8 23 dd 91 73 7b bb db fd 5e ...PP..#..s{...^ 02e0 bb d7 db ee f4 3a db fd ed 5e af df db 85 7f 7b .....:...^.....{ 02f0 f0 fd 29 3c b5 9f 0d 2f ce 87 a7 e7 1f ae fe 36 ..)<.../.......6 0300 2c fa 14 a5 36 85 6d 6c 98 c4 64 ad 94 f6 67 39 ,...6.ml..d...g9 0310 87 7d 28 0e c9 f2 5b 20 8b c7 69 e6 0f 48 74 b2 .}(...[ ..i..Ht. 0320 61 d7 ae 35 b2 53 b2 2c 09 8a 83 a7 ed 9a 7b e3 a..5.S.,......{. 0330 8a 51 99 f7 7c a1 04 49 50 2c e5 2b 93 23 e0 ae .Q..|..IP,.+.#.. 0340 c2 23 fb 72 03 a7 34 de de cd 9a 3d 76 a4 bd 5b .#.r..4....=v..[ 0350 ea 6e db 31 08 c8 bb 8b a7 e4 c6 d6 f6 c9 6e 72 .n.1..........nr 0360 73 40 ec 18 04 26 33 90 b7 70 74 ae 07 24 79 83 s@...&3..pt..$y. 0370 15 54 9d 70 2c eb 95 f2 d8 9c 09 8f 95 17 61 89 .T.p,.........a. 0380 d2 7d da 32 99 30 de e5 fc 9e 79 a9 50 52 d1 89 .}.2.0....y.PR.. 0390 ce 25 33 d8 95 d6 10 bf 65 bb c0 a8 b3 a9 20 6f .%3.....e..... o 03a0 b0 d5 0b b9 28 f6 73 e1 3b 23 6f 0c 56 ae be fc ....(.s.;#o.V... 03b0 a6 20 1b 84 e1 09 1b 0b 3a c1 26 a8 4d c9 30 ff . ......:.&.M.0. 03c0 7c 54 f9 1b af 9a 3b 60 5f 2d 93 92 48 54 e2 fa |T....;`_-..HT.. 03d0 46 49 4d 63 b8 2c 16 78 27 fa 2e 15 8a cf 58 e0 FIMc.,.x'.....X. 03e0 76 77 e1 ff ed bd b6 f9 3d 6c 1b b1 d4 0b a1 97 vw......=l...... 03f0 dc 94 f4 b1 94 65 3f 08 71 5d 9a 68 68 b1 27 1f .....e?.q].hh.'. 0400 38 08 23 25 c5 c8 6f b0 37 df e2 89 eb 1d 48 a1 8.#%..o.7.....H. 0410 b2 9f 48 77 17 ab 9f 1d 94 0c a8 02 ca fc 38 92 ..Hw..........8. 0420 a3 69 90 15 07 ba b7 df e9 b4 f6 5a 0b 55 42 ad .i.........Z.UB. 0430 70 7f 08 51 6a 6c 9f 98 96 35 b6 eb 01 e2 09 58 p..Qjl...5.....X 0440 b7 ba c5 1c 5f 3c cb 0a 26 5b 4e 3c 50 9a 9d 76 ...._<..&[Ny.......5.. 0520 80 e7 6a 73 48 d0 74 ac 26 f1 14 aa f3 57 0c b2 ..jsH.t.&....W.. 0530 58 a8 b8 41 1b b8 be ae X..A.... No. Time Source Destination Protocol Info 24 0.529703 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 24 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55318 (55318), Seq: 4169, Ack: 761, Len: 1360 No. Time Source Destination Protocol Info 25 0.529742 141.3.161.43 193.99.144.85 TCP 55318 > http [ACK] Seq=761 Ack=5529 Win=16384 Len=0 TSV=626730 TSER=776120113 Frame 25 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55318 (55318), Dst Port: http (80), Seq: 761, Ack: 5529, Len: 0 No. Time Source Destination Protocol Info 26 0.530622 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #27] Frame 26 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 16 5e 1c 4e 11 36 56 7f 73 80 10 13 0c .P..^.N.6V.s.... 0010 76 da 00 00 01 01 08 0a 2e 42 a7 3c 00 09 90 28 v........B.<...( 0020 ea fb 50 74 e6 3a d0 65 61 a6 02 3a 6d 9a 76 8b ..Pt.:.ea..:m.v. 0030 23 5d 09 d9 6c 81 f9 2b 29 5d 1a 32 92 9d 76 2d #]..l..+)].2..v- 0040 9e 5e 2d c4 29 24 36 01 26 37 90 95 65 87 ac e6 .^-.)$6.&7..e... 0050 f2 12 4d 65 76 ca 88 17 f5 06 af a8 bc 85 15 ba ..Mev........... 0060 48 c0 33 18 0b be 67 c0 27 7f 14 3a 2c a9 8c 99 H.3...g.'..:,... 0070 a3 41 70 f5 39 34 83 d0 44 ea ff 80 de 60 21 49 .Ap.94..D....`!I 0080 fd 6a 9f fa 02 69 2d b5 a9 1f 9e 98 3e 37 4b 75 .j...i-.....>7Ku 0090 7f e9 1b 3c 95 ae fa b2 bf 3e c1 0b bd f9 df b9 ...<.....>...... 00a0 9f 67 a8 cc 8d ad 4a e7 2c cf 3a ed 75 e8 a2 0b .g....J.,.:.u... 00b0 58 fa a3 64 c7 7a dd 8a 61 e7 4c 2d e9 4d d6 12 X..d.z..a.L-.M.. 00c0 2d cf 4b 23 7d 89 c0 43 5e ee db 09 b6 81 5a d7 -.K#}..C^.....Z. 00d0 3f fc 40 23 2a e3 88 ff 4f 79 47 b6 dc 36 72 7c ?.@#*...OyG..6r| 00e0 ce 56 e5 1f a6 98 aa 5d ef 46 23 02 04 4f 2b e6 .V.....].F#..O+. 00f0 16 75 d8 d2 ca d4 ca 96 7c 54 5e 54 20 09 8a 08 .u......|T^T ... 0100 41 82 c1 21 5a 4a e5 6f fc 0d 79 da 37 ff 58 ba A..!ZJ.o..y.7.X. 0110 7b 70 0c 06 e0 25 9a 8e 55 b1 ab 6c 09 98 e9 c6 {p...%..U..l.... 0120 f4 f4 f4 74 cf f4 d1 e7 34 91 01 3f 37 27 96 67 ...t....4..?7'.g 0130 72 90 14 bc 6b f7 3d 17 ef 4d bc eb 91 ed 0d 7c r...k.=..M.....| 0140 dc 18 28 f2 9b df b9 1e e7 99 03 d3 6a 23 8d 2a ..(.........j#.* 0150 89 41 32 01 92 09 90 24 7c 16 82 44 c7 8c 52 fb .A2....$|..D..R. 0160 d1 5d 13 5f 6e 12 52 09 79 d7 25 74 11 65 8e ba .]._n.R.y.%t.e.. 0170 67 57 fc 0c 45 2e 9a de 62 d7 e4 b0 6b f2 4e e8 gW..E...b...k.N. 0180 cf 3c b7 47 a7 dc 1c ac ec 61 68 dd 02 b9 15 82 .<.G.....ah..... 0190 d4 9a 09 41 8a 20 d1 fe 2b 43 c2 e3 f8 e1 97 3f ...A. ..+C.....? 01a0 6e 69 e2 36 ed b1 83 e1 93 be 80 fc cc 3b e8 f3 ni.6.........;.. 01b0 11 02 c2 9e 47 87 fc 1c f6 47 8a 02 23 26 79 73 ....G....G..#&ys 01c0 f1 91 5f 58 21 9e d3 b9 59 12 d4 b5 94 27 12 68 .._X!...Y....'.h 01d0 4c 85 86 d7 7c 04 8d 26 19 a0 fd f8 17 a3 75 c0 L...|..&......u. 01e0 62 90 a5 f6 06 5d 7f 4a ba ed 80 20 2f 43 c4 cd b....].J... /C.. 01f0 e3 b8 48 ae 35 79 ea 22 03 36 8f 0f f6 0b fd 08 ..H.5y.".6...... 0200 ff 73 0b 75 08 50 51 e1 fd 94 4b 7e 33 2a 93 a4 .s.u.PQ...K~3*.. 0210 57 8b 02 7c 12 a9 c9 b4 e6 73 c9 05 67 8f a5 08 W..|.....s..g... 0220 c8 50 42 47 81 18 81 ec 98 03 72 f9 eb 00 da 05 .PBG......r..... 0230 05 23 5f 0c e1 2f c8 e7 b6 c5 85 f3 0f 27 7f 41 .#_../.......'.A 0240 6e 4e 79 e4 1c a4 50 29 e5 a3 f5 c3 fd 37 f1 4e nNy...P).....7.N 0250 fc fa b2 c3 9c c1 d6 69 4f 6d 6e f6 7c d7 c3 f5 .......iOmn.|... 0260 1a f0 58 4b 1c c1 ae c9 fd 01 9f a8 c3 ac a7 12 ..XK............ 0270 23 ee cf d2 fe 4c ee cf fc 01 5d f2 4c 40 56 ac #....L....].L@V. 0280 d3 76 b2 83 41 5e b8 81 d5 73 dd b1 0f 16 93 83 .v..A^...s...... 0290 77 e0 7c 60 89 ab f5 00 44 84 cf cf 41 5f 75 c1 w.|`....D...A_u. 02a0 b0 07 60 b7 16 7a 41 58 c3 80 16 86 32 ec 6a 7a ..`..zAX....2.jz 02b0 bf a8 42 84 4d 5c 5c b0 a3 0f 9a cf 54 88 5f 3e ..B.M\\.....T._> 02c0 a3 5f 05 06 31 3d b6 e7 0e c8 72 76 78 24 76 4e ._..1=....rvx$vN 02d0 54 f4 f9 cc 33 f1 a2 2d 10 1c 60 3b 20 b3 49 bd T...3..-..`; .I. 02e0 22 d9 79 ca 2b f5 2a 7f 47 de 43 20 e3 e8 62 4c ".y.+.*.G.C ..bL 02f0 a5 8e 91 06 53 1e 1e 3d 67 09 64 f4 c8 f8 1c 43 ....S..=g.d....C 0300 66 12 64 12 86 a7 fb 12 e4 2f 7f 10 e4 52 7b 5b f.d....../...R{[ 0310 08 3b a0 16 1e 31 5a 53 c0 dc 33 71 9d f2 31 c8 .;...1ZS..3q..1. 0320 2c b2 51 41 1e 1c 9e 77 50 ae 5a e4 95 91 21 4a ,.QA...wP.Z...!J 0330 2d f5 c8 48 fa 7f f9 0c fd 99 d4 9f a5 fd c1 04 -..H............ 0340 5e ab dd 0e 06 78 e9 b9 77 36 68 c5 1c 0c 4f 7e ^....x..w6h...O~ 0350 6a 3b 43 df 07 51 6c 0f 87 3e ca 3b 7c 41 e2 08 j;C..Ql..>.;|A.. 0360 63 b3 7b e6 28 b7 38 34 29 58 57 00 02 6b c5 67 c.{.(.84)XW..k.g 0370 19 40 28 ca f0 45 06 d0 af 18 b8 bb 59 8f 1d 8c .@(..E......Y... 0380 fe d4 74 7a 0e ba 02 79 bc 03 0b d3 9c 3e 70 d0 ..tz...y.....>p. 0390 a0 ce 0e bb 7c 2e 32 25 f1 b9 78 ab 68 93 e9 04 ....|.2%..x.h... 03a0 e7 21 a0 e3 11 40 60 f3 2f 9f 11 02 13 10 d0 d9 .!...@`./....... 03b0 66 bd 96 bb e0 62 3b 30 bd 9e c0 3d b0 7c 7e 12 f....b;0...=.|~. 03c0 7a ee cc 04 33 84 f6 ff 4b a4 72 60 4e 02 9f cf z...3...K.r`N... 03d0 5d 0c da e6 a0 32 7a fc ad 85 9b ad 85 4c 30 41 ]....2z......L0A 03e0 8f 5a 4f 70 bd 42 89 54 8d 94 90 90 0b 15 21 f9 .ZOp.B.T......!. 03f0 f2 59 20 61 29 12 26 90 08 2f de 18 09 cb 20 a1 .Y a).&../.... . 0400 23 a1 af 05 6c 17 ca 27 d8 17 35 4d 38 66 4d f9 #...l..'..5M8fM. 0410 b9 ed f4 ee 65 2a 05 f0 cb 94 a3 21 77 4b bf e2 ....e*.....!wK.. 0420 41 47 1f fd 25 c7 18 aa ae 52 50 97 13 7e b1 9a AG..%....RP..~.. 0430 26 7c b4 a6 cf 19 c1 95 c7 12 90 4b 99 0c 97 49 &|.........K...I 0440 70 c9 ad 64 8b fe bb 10 2e 4e 88 a7 55 b7 d6 2d p..d.....N..U..- 0450 92 c9 0b c1 5c 70 e8 6b f2 2b 4a 12 24 d4 89 51 ....\p.k.+J.$..Q 0460 27 f6 e3 3f 43 37 38 38 f7 be fc 91 76 15 cf 40 '..?C788....v..@ 0470 7e c8 0d 4b d9 36 a5 1d 8c e6 04 93 eb f0 43 2b ~..K.6........C+ 0480 30 c1 c0 9c 72 11 c6 e0 f3 06 a7 24 07 0e e8 b0 0...r......$.... 0490 dc 9e f0 63 eb c1 9a f4 f2 03 4c b5 27 82 c3 10 ...c......L.'... 04a0 0e f9 8c 47 70 58 83 25 70 98 3d 61 31 9c 52 7b ...GpX.%p.=a1.R{ 04b0 b3 f6 3b 18 f8 9b d0 e5 77 e6 00 58 17 cf eb fb ..;.....w..X.... 04c0 ee 04 b8 c7 cf 8b 82 4a 32 42 e8 c0 a8 c3 1e cb .......J2B...... 04d0 f4 00 a1 bf f0 d5 4e c4 5e a2 e6 0c 1d 0b d4 be ......N.^....... 04e0 6b 74 6e 26 09 78 61 05 73 d7 1b f3 2e 58 f3 81 ktn&.xa.s....X.. 04f0 2b 76 3f f9 8c 59 19 9a 21 49 b9 44 3d 21 98 8c +v?..Y..!I.D=!.. 0500 60 92 8c 8a 60 b2 08 26 6d 6b 52 b6 17 14 6a 8f `...`..&mkR...j. 0510 ed bb 03 e2 1c 9a 28 a4 3e 80 a4 07 5b 15 19 e7 ......(.>...[... 0520 16 2c 1e c7 c1 e3 83 9e 19 12 91 30 a1 05 65 f1 .,.........0..e. 0530 00 13 51 1c 4a 81 52 10 ..Q.J.R. No. Time Source Destination Protocol Info 27 0.538667 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 27 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55318 (55318), Seq: 5529, Ack: 761, Len: 1360 No. Time Source Destination Protocol Info 28 0.538714 141.3.161.43 193.99.144.85 TCP 55318 > http [ACK] Seq=761 Ack=6889 Win=19136 Len=0 TSV=626733 TSER=776120124 Frame 28 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55318 (55318), Dst Port: http (80), Seq: 761, Ack: 6889, Len: 0 No. Time Source Destination Protocol Info 29 0.539498 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #30] Frame 29 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 16 5e 1c 53 61 36 56 7f 73 80 10 13 0c .P..^.Sa6V.s.... 0010 47 89 00 00 01 01 08 0a 2e 42 a7 3d 00 09 90 28 G........B.=...( 0020 ed 9d 80 dd 01 b5 df 9e 75 f9 38 04 15 12 ad 8f ........u.8..... 0030 4b d3 0b a6 e4 91 6f 52 6a 89 e4 30 8b 78 b5 7b K.....oRj..0.x.{ 0040 7f 85 fe d1 fc ca 31 b1 2b d9 eb d7 f6 7b 17 f5 ......1.+....{.. 0050 31 85 bc a9 4c 01 f8 6c fc e5 0f 82 cf 14 f8 e9 1...L..l........ 0060 f1 14 c2 df 63 11 82 3d 16 61 20 3b 1b 31 80 40 ....c..=.a ;.1.@ 0070 29 b5 bf 16 a4 1d 10 b1 cf c1 2e 11 d9 7a 78 70 )............zxp 0080 c7 2f 3d 6b 66 da 03 3c ef 41 3d 15 d3 75 70 f4 ./=kf..<.A=..up. 0090 e4 e3 af c2 60 64 f6 68 0b a6 37 60 7d 29 94 d3 ....`d.h..7`}).. 00a0 53 c6 ec d3 81 0e 18 15 49 1a a0 e7 2c 82 1c 07 S.......I...,... 00b0 a5 fc 9d 0e 26 10 34 8b 41 c7 af 00 34 25 08 7a ....&.4.A...4%.z 00c0 7c f7 1d d0 a9 33 31 1f c8 8d 1c 33 97 04 78 eb |....31....3..x. 00d0 33 b7 3d 3a 1f 44 4e bb 23 0f f6 5b 7f 08 9b 3e 3.=:.DN.#..[...> 00e0 d2 e8 72 04 96 a7 aa 95 18 a9 d5 2b a0 b1 08 1a ..r........+.... 00f0 4b a1 89 eb 9a 0c 34 16 41 2b b5 1f d3 6b 07 a4 K.....4.A+...k.. 0100 f8 60 f9 81 83 17 25 fc ce e7 bd 39 30 c4 b1 6d .`....%....90..m 0110 a1 35 85 e9 0b 47 b0 9d 53 10 01 b2 92 ef 5b e4 .5...G..S.....[. 0120 46 61 3b 79 2b d7 48 e5 7f 02 90 ae 39 11 e2 73 Fa;y+.H.....9..s 0130 86 17 d1 29 c8 28 2e 41 05 89 81 37 8f ec ba 25 ...).(.A...7...% 0140 5d be c1 31 bd 50 8d ba f8 c5 8e 38 a2 1b a7 e7 ]..1.P.....8.... 0150 f4 63 c7 9c cd 00 12 ec 1a d7 6e d8 1f c1 e6 3f .c........n....? 0160 73 cc 7b 95 c6 ba a2 20 e5 a1 11 eb a4 d0 98 0c s.{.... ........ 0170 2d 56 93 36 eb b5 8b c5 d7 3d 8e ef 2a 30 9d 26 -V.6.....=..*0.& 0180 b0 96 3b b4 f9 2b cf 1c da e3 b1 49 c6 40 fe 7a ..;..+.....I.@.z 0190 c2 48 75 27 e8 1f df 2e 60 7f 96 ef 2f ee 22 d6 .Hu'....`.../.". 01a0 6b b7 8b 73 35 b3 3f ba b5 48 9f a2 01 5e c3 1a k..s5.?..H...^.. 01b0 86 8d 37 f2 e7 8b ad c7 58 3b 56 c6 99 aa f9 29 ..7.....X;V....) 01c0 98 e7 62 00 2a 1c 61 d3 45 70 4a ed cd da af 1c ..b.*.a.EpJ..... 01d0 f7 f7 f5 cf 42 d7 92 9c 03 57 e6 16 52 79 29 b2 ....B....W..Ry). 01e0 0e 70 4a 72 96 4b 84 20 62 e2 7f bf 78 7d 76 71 .pJr.K. b...x}vq 01f0 c2 ba 9d b7 e7 d7 69 a0 49 d2 28 ca 15 f2 c1 f2 ......i.I.(..... 0200 7a 24 77 e2 f0 88 82 8b c7 ac 47 c2 73 a6 31 dd z$w.......G.s.1. 0210 9a 1c 30 fa c0 e7 ac e7 06 a3 83 24 6d 55 d1 cd ..0........$mU.. 0220 e4 02 8f 06 4c 97 12 df ac 87 8e b8 0a c6 74 2f ....L.........t/ 0230 bd c5 c9 d4 94 ab 54 3f ec 95 ed de e4 c6 27 de ......T?......'. 0240 28 97 da 57 f4 03 a8 f7 81 3d 11 77 55 be 39 35 (..W.....=.wU.95 0250 9d 7b df 12 31 bb 87 dd d8 65 01 9d 08 00 d9 ba .{..1....e...... 0260 48 e9 07 4a 8c 87 38 e1 87 c0 9d 4f 45 7e 90 f6 H..J..8....OE~.. 0270 6f e2 37 16 27 01 29 00 9f 75 bc 28 42 90 e4 cb o.7.'.)..u.(B... 0280 9c 90 ce 65 07 96 2f 65 60 bb 99 5b bd 3e 2c 5a ...e../e`..[.>,Z 0290 c0 26 65 51 63 74 f0 8e 31 6e f8 ce 2f c2 5d 26 .&eQct..1n../.]& 02a0 c2 fe 10 93 59 ba ef 96 72 75 ad 70 6a 1a 55 73 ....Y...ru.pj.Us 02b0 0c b0 5f c5 fc d4 f8 f7 80 51 c8 1f 3a 7b e0 f3 .._......Q..:{.. 02c0 66 8d 38 c3 75 5c e0 8c bf d4 e9 4f d4 64 6e 89 f.8.u\.....O.dn. 02d0 2c 39 53 14 d8 ce 01 05 16 f5 d0 ed 17 e3 31 84 ,9S...........1. 02e0 ba 8e be 96 e2 aa ba 80 99 f2 6c 78 10 27 14 29 ..........lx.'.) 02f0 a2 ac 45 69 ae 45 e2 bd 6c 08 5b 2c 96 ac 6e d4 ..Ei.E..l.[,..n. 0300 82 71 f6 12 44 4e 4f a4 7f c7 fb a9 3d 76 32 08 .q..DNO.....=v2. 0310 31 31 1b 5e 7a ee 31 74 25 24 85 d7 fe 18 e5 5d 11.^z.1t%$.....] 0320 e1 47 c7 7e 71 c4 7f 84 37 f5 e6 d8 1a 4d e2 4b .G.~q...7....M.K 0330 2a e7 16 c1 73 c9 38 e6 52 c4 2d e3 aa 8f fd 2a *...s.8.R.-....* 0340 91 38 2c f2 1e 21 42 c5 8e 43 05 84 c2 24 9e 96 .8,..!B..C...$.. 0350 4f 61 fb ee 32 72 0d 66 e1 74 1c 50 73 18 c9 a5 Oa..2r.f.t.Ps... 0360 eb 05 a6 c3 92 94 f9 e8 83 71 8b 3b d2 82 6c 73 .........q.;..ls 0370 a2 37 76 96 48 b3 36 c8 84 04 d5 ed 49 50 18 89 .7v.H.6.....IP.. 0380 17 71 51 7a be 09 db 2d 65 97 f7 3f d8 63 1b 3e .qQz...-e..?.c.> 0390 4e 7e 74 e8 b8 b7 7b ec ec fa 9c fd 06 26 3b d0 N~t...{......&;. 03a0 68 2f d2 e3 1e 60 1a bd 70 82 bf ba f1 bb 82 a2 h/...`..p....... 03b0 01 13 09 d6 1c c0 17 51 bd 90 88 b9 8e 52 56 89 .......Q.....RV. 03c0 af fa c9 71 c6 bf a6 92 cd 26 4b 6e 8a 94 97 c8 ...q.....&Kn.... 03d0 9d e4 a7 28 10 34 8b fd 5a b2 29 41 0b bc 5c 8a ...(.4..Z.)A..\. 03e0 1b c8 3e 49 45 02 55 cd 34 5a 98 3c 14 80 08 68 ..>IE.U.4Z.<...h 03f0 94 50 4f c9 98 27 f2 e9 ad 03 5b a4 e2 43 18 92 .PO..'....[..C.. 0400 17 0e 50 61 51 4a bd 21 26 20 00 89 09 0c 5d 8b ..PaQJ.!& ....]. 0410 22 41 7d 3c 21 0b a2 f7 22 19 22 01 12 41 9c 49 "A}. 0470 ca c7 72 7a f6 f2 6c 79 eb 06 b5 3e 7e 7f bc bc ..rz..ly...>~... 0480 59 33 22 5d e8 e3 c9 b9 d4 16 ac 24 9a 2e 75 8e Y3"].......$..u. 0490 97 a7 33 54 f2 18 26 2e 59 71 6a c2 c7 ad 96 35 ..3T..&.Yqj....5 04a0 fc c1 36 5a 27 c9 31 93 85 3b 14 66 02 c1 1d 29 ..6Z'.1..;.f...) 04b0 bb 78 c0 b0 9a 31 1d 7d 3b dd 19 d7 35 56 b8 b4 .x...1.};...5V.. 04c0 aa 89 72 e7 3a c5 4b 19 c3 d2 f4 c4 af 2d 93 ac ..r.:.K......-.. 04d0 35 11 1f c9 93 0d c6 f0 eb 04 b3 6b a6 2c 6f 66 5..........k.,of 04e0 41 fd 78 1b 1c 3c 1e b6 fb 02 d8 42 b6 bd be 32 A.x..<.....B...2 04f0 fc be 19 bc 80 5d 4f af df d4 74 58 8f 97 47 67 .....]O...tX..Gg 0500 d9 11 48 a2 95 7e 95 4d f9 29 a5 3e db 97 83 7f ..H..~.M.).>.... 0510 37 c5 6f 1a d5 ba a1 1b fb 99 c4 87 97 ee dc f2 7.o............. 0520 8e 50 a9 63 6f 4d 58 c7 b0 28 8e 59 b5 d9 d0 f6 .P.coMX..(.Y.... 0530 18 83 af ec 1e b2 57 c7 ......W. No. Time Source Destination Protocol Info 30 0.539751 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 30 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55318 (55318), Seq: 6889, Ack: 761, Len: 1360 No. Time Source Destination Protocol Info 31 0.539775 141.3.161.43 193.99.144.85 TCP 55318 > http [ACK] Seq=761 Ack=8249 Win=21824 Len=0 TSV=626733 TSER=776120125 Frame 31 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55318 (55318), Dst Port: http (80), Seq: 761, Ack: 8249, Len: 0 No. Time Source Destination Protocol Info 32 0.540449 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #33] Frame 32 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 16 5e 1c 58 b1 36 56 7f 73 80 10 13 0c .P..^.X.6V.s.... 0010 3a b2 00 00 01 01 08 0a 2e 42 a7 47 00 09 90 2a :........B.G...* 0020 e6 e8 cf c2 19 08 30 3c e1 76 40 56 83 21 e4 b0 ......0<.v@V.!.. 0030 46 a3 b6 19 93 54 b6 64 12 cd 30 aa ad 2c 93 88 F....T.d..0..,.. 0040 0f 3a 72 3d 98 71 76 1c ba ec a4 59 d5 34 e2 09 .:r=.qv....Y.4.. 0050 63 5f d3 5e 9d 3e ec 31 c3 30 ba a7 0f ec e5 d5 c_.^.>.1.0...... 0060 e1 1e ab 03 db 80 60 f5 ac 01 3b 12 e9 a5 7a ee ......`...;...z. 0070 27 f8 e5 d9 e1 c7 a6 56 6b 68 d4 3d c7 2e c5 58 '......Vkh.=...X 0080 9e 36 af c0 56 2a b9 bc ef 80 65 46 03 ab 01 e6 .6..V*....eF.... 0090 ca 55 e7 ba 03 73 51 13 b7 aa 9b 31 8c b1 1d c3 .U...sQ....1.... 00a0 54 ea 5a b3 a9 30 cc 95 39 f1 f1 94 f8 6a 66 4f T.Z..0..9....jfO 00b0 2f 5d 7b 1a b0 97 3a ec 2a c0 2a 87 cc 40 a1 42 /]{...:.*.*..@.B 00c0 df 7b 76 c6 9e 9d 1e eb 9a f1 ee b7 1c 33 ac 0d .{v..........3.. 00d0 e1 69 f3 47 cd 90 dc ca 76 c0 1e d3 1e 12 b3 67 .i.G....v......g 00e0 fb 14 50 25 b8 83 5d bf bc de 8c 43 aa 5b 8a 94 ..P%..]....C.[.. 00f0 ba de 6c d6 b2 1c d2 b9 7a 77 c5 4e 2c 0b f6 11 ..l.....zw.N,... 0100 9a d6 d3 3d f8 af 52 ed 82 f4 d0 eb 30 c9 7b c9 ...=..R.....0.{. 0110 0d f9 c7 4b 76 2a 2a 18 f5 47 30 07 0f ec 59 4b ...Kv**..G0...YK 0120 fb bd a3 9d 1e 36 0d 43 d7 3b 46 f3 44 af e8 6f .....6.C.;F.D..o 0130 72 0c 94 43 f0 b4 19 e5 3b d7 4c 6a 5b 72 08 ba r..C....;.Lj[r.. 0140 db d5 b3 1c f2 ca b4 a7 73 f4 bc 97 75 87 9a c6 ........s...u... 0150 5e b9 0e 3a c0 80 80 98 39 c0 15 a9 92 62 2c 53 ^..:....9....b,S 0160 52 5a b5 5a 2b c7 23 6b a1 78 da 7c b3 53 65 c5 RZ.Z+.#k.x.|.Se. 0170 9c 0c cc 49 65 26 ae 31 22 7d a5 d3 ad fc 75 33 ...Ie&.1"}....u3 0180 de a9 6f 2d 5d 6a 35 55 ba c0 f7 74 82 91 03 73 ..o-]j5U...t...s 0190 fa b1 c2 ea 35 4d 63 87 78 b9 cd 4e 06 94 4a 8a ....5Mc.x..N..J. 01a0 38 a5 b2 6f 08 d5 05 7e 06 2e 1a 1f c6 ca 4a 25 8..o...~......J% 01b0 55 5f 5e 1b 3c ab c1 74 8e 11 da 87 a3 57 a7 87 U_^.<..t.....W.. 01c0 bf 7f cc 0b 9d 15 78 9f 36 2f 7d e7 32 a8 b1 ad ......x.6/}.2... 01d0 0c aa 36 5b 75 55 8f 99 cd 46 36 96 0a 55 6c 23 ..6[uU...F6..Ul# 01e0 b1 57 ad b2 8d 80 6b 42 67 0c 53 1d 60 39 a7 00 .W....kBg.S.`9.. 01f0 f3 61 3d ab e8 ba 61 70 ad 0a c6 75 b9 a2 bd 2d .a=...ap...u...- 0200 50 7c 0a 51 3e 6d ce f9 ce 4d a6 e6 b6 26 13 fc P|.Q>m...M...&.. 0210 d1 97 98 4c 6f 42 73 c0 de c0 16 04 1c 51 45 c1 ...LoBs......QE. 0220 d3 34 72 36 13 f0 d0 72 b3 a9 de 22 08 cb cd a6 .4r6...r...".... 0230 14 d3 ee 19 a6 8a 61 53 99 a3 bf af 6d 3c d5 d1 ......aS....m<.. 0240 7a f2 a6 3e 86 f1 ef 80 77 82 3b a7 3f 28 b5 5f z..>....w.;.?(._ 0250 1f 1d 6f c6 2e ad 2d d9 a5 a2 b5 2a d5 62 83 e9 ..o...-....*.b.. 0260 f5 09 af 6a 9d 3a 46 e9 14 db 43 49 83 a7 2d 10 ...j.:F...CI..-. 0270 9e 82 5d ac 6b 5b ce b3 5e ad d7 9b d9 79 46 ef ..].k[..^....yF. 0280 21 cc 1e 7d 6c df da 78 23 76 84 d1 c6 1e 28 09 !..}l..x#v....(. 0290 a1 c5 58 bd 8a d6 6d 62 1a 7f 38 86 07 5a a7 73 ..X...mb..8..Z.s 02a0 7e 95 5b f3 1b 80 51 f8 e4 6f 65 17 4b 9f cd a2 ~.[...Q..oe.K... 02b0 6b f1 75 4e 84 ed 29 33 aa a0 2c 55 9a 78 93 34 k.uN..)3..,U.x.4 02c0 08 c7 01 66 36 df e0 7a 66 63 e8 49 f2 81 8d 32 ...f6..zfc.I...2 02d0 76 d4 34 73 9a 56 6f cb 5c 33 63 61 44 3f 1b d3 v.4s.Vo.\3caD?.. 02e0 fd da 1a 06 15 91 bc 4f 37 1a 9f b0 02 16 05 69 .......O7......i 02f0 2b 33 bc 24 5d 91 c8 f0 b6 79 ae 22 d0 1d 8c 56 +3.$]....y."...V 0300 a3 d6 a8 97 e9 1b e4 54 45 d1 97 94 03 af 8f 95 .......TE....... 0310 af 1b 37 f4 e1 78 17 b8 32 45 d1 92 5b c6 d5 43 ..7..x..2E..[..C 0320 39 12 c9 70 2c 7f bd 8f 29 b1 38 9b 41 7c f3 fa 9..p,...).8.A|.. 0330 6d b2 3c ed 86 72 9b 24 77 ca 72 e0 fa 0c 18 95 m.<..r.$w.r..... 0340 80 8b f3 90 a9 8c 28 f8 50 e4 86 d5 0c 29 8b e4 ......(.P....).. 0350 d2 8c 5c 22 1f 97 e8 75 63 0e 6e 80 21 b1 2c f1 ..\"...uc.n.!.,. 0360 0b 56 9a 85 3d 5e 6b 34 74 30 8d 5a 30 e2 0a 28 .V..=^k4t0.Z0..( 0370 9d 7a 09 73 75 fd 82 8b 6c e2 b2 ce 80 01 12 f6 .z.su...l....... 0380 4b 59 ee ef 3b 2e f5 d6 5a b5 56 bd a5 1b 5a 13 KY..;...Z.V...Z. 0390 fb a4 ef 45 2e f3 17 4c af d4 32 cf a3 7c e6 f1 ...E...L..2..|.. 03a0 8b 7c 42 b0 e5 e3 f8 f3 0f 32 e7 60 26 3c 73 50 .|B......2.`& http [ACK] Seq=761 Ack=9609 Win=24576 Len=0 TSV=626735 TSER=776120135 Frame 34 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55318 (55318), Dst Port: http (80), Seq: 761, Ack: 9609, Len: 0 No. Time Source Destination Protocol Info 35 0.549475 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (text/html) Frame 35 (1025 bytes on wire, 1025 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55318 (55318), Seq: 9609, Ack: 761, Len: 957 [Reassembled TCP Segments (10565 bytes): #13(1360), #15(88), #18(1360), #21(1360), #24(1360), #27(1360), #30(1360), #33(1360), #35(957)] Hypertext Transfer Protocol Line-based text data: text/html No. Time Source Destination Protocol Info 36 0.549489 141.3.161.43 193.99.144.85 TCP 55318 > http [ACK] Seq=761 Ack=10566 Win=27264 Len=0 TSV=626735 TSER=776120135 Frame 36 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55318 (55318), Dst Port: http (80), Seq: 761, Ack: 10566, Len: 0 No. Time Source Destination Protocol Info 37 0.549831 193.99.144.85 141.3.161.43 TCP http > 55318 [FIN, ACK] Seq=10566 Ack=761 Win=4876 Len=0 TSV=776120135 TSER=626730 Frame 37 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55318 (55318), Seq: 10566, Ack: 761, Len: 0 No. Time Source Destination Protocol Info 38 0.550052 141.3.161.43 193.99.144.85 TCP 55318 > http [FIN, ACK] Seq=761 Ack=10567 Win=27264 Len=0 TSV=626735 TSER=776120135 Frame 38 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55318 (55318), Dst Port: http (80), Seq: 761, Ack: 10567, Len: 0 No. Time Source Destination Protocol Info 39 0.558653 193.99.144.85 141.3.161.43 TCP http > 55318 [ACK] Seq=10567 Ack=762 Win=4876 Len=0 TSV=776120155 TSER=626735 Frame 39 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55318 (55318), Seq: 10567, Ack: 762, Len: 0 No. Time Source Destination Protocol Info 40 0.570109 141.3.161.43 193.99.144.85 TCP 55319 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626740 TSER=0 WS=6 Frame 40 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55319 (55319), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 41 0.575797 141.3.161.43 193.99.144.85 TCP 55320 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626742 TSER=0 WS=6 Frame 41 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55320 (55320), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 42 0.576137 193.99.144.85 141.3.161.43 TCP http > 55319 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120175 TSER=626740 Frame 42 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55319 (55319), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 43 0.576174 141.3.161.43 193.99.144.85 TCP 55319 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626742 TSER=776120175 Frame 43 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55319 (55319), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 44 0.576634 141.3.161.43 193.99.144.85 HTTP GET /stil/standard2008.css HTTP/1.1 Frame 44 (882 bytes on wire, 882 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55319 (55319), Dst Port: http (80), Seq: 1, Ack: 1, Len: 814 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 45 0.581304 193.99.144.85 141.3.161.43 TCP http > 55320 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120180 TSER=626742 Frame 45 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55320 (55320), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 46 0.581348 141.3.161.43 193.99.144.85 TCP 55320 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626743 TSER=776120180 Frame 46 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55320 (55320), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 47 0.581725 141.3.161.43 193.99.144.85 HTTP GET /stil/navi_top2008.css HTTP/1.1 Frame 47 (881 bytes on wire, 881 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55320 (55320), Dst Port: http (80), Seq: 1, Ack: 1, Len: 813 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 48 0.583121 141.3.161.43 193.99.144.85 TCP 55321 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626744 TSER=0 WS=6 Frame 48 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55321 (55321), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 49 0.588110 141.3.161.43 193.99.144.85 TCP 55322 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626745 TSER=0 WS=6 Frame 49 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55322 (55322), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 50 0.588655 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 304 Not Modified Frame 50 (229 bytes on wire, 229 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55319 (55319), Seq: 1, Ack: 815, Len: 161 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 51 0.588691 141.3.161.43 193.99.144.85 TCP 55319 > http [ACK] Seq=815 Ack=162 Win=6592 Len=0 TSV=626745 TSER=776120188 Frame 51 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55319 (55319), Dst Port: http (80), Seq: 815, Ack: 162, Len: 0 No. Time Source Destination Protocol Info 52 0.589039 141.3.161.43 193.99.144.85 TCP 55319 > http [FIN, ACK] Seq=815 Ack=162 Win=6592 Len=0 TSV=626745 TSER=776120188 Frame 52 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55319 (55319), Dst Port: http (80), Seq: 815, Ack: 162, Len: 0 No. Time Source Destination Protocol Info 53 0.589466 193.99.144.85 141.3.161.43 TCP http > 55321 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120188 TSER=626744 Frame 53 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55321 (55321), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 54 0.589493 141.3.161.43 193.99.144.85 TCP 55321 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626745 TSER=776120188 Frame 54 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55321 (55321), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 55 0.589840 193.99.144.85 141.3.161.43 TCP http > 55319 [FIN, ACK] Seq=162 Ack=815 Win=4930 Len=0 TSV=776120188 TSER=626742 Frame 55 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55319 (55319), Seq: 162, Ack: 815, Len: 0 No. Time Source Destination Protocol Info 56 0.589857 141.3.161.43 193.99.144.85 TCP 55319 > http [ACK] Seq=816 Ack=163 Win=6592 Len=0 TSV=626745 TSER=776120188 Frame 56 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55319 (55319), Dst Port: http (80), Seq: 816, Ack: 163, Len: 0 No. Time Source Destination Protocol Info 57 0.590086 141.3.161.43 193.99.144.85 HTTP GET /stil/ho/standard2008.css HTTP/1.1 Frame 57 (886 bytes on wire, 886 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55321 (55321), Dst Port: http (80), Seq: 1, Ack: 1, Len: 818 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 58 0.593964 193.99.144.85 141.3.161.43 TCP http > 55322 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120194 TSER=626745 Frame 58 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55322 (55322), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 59 0.594006 141.3.161.43 193.99.144.85 TCP 55322 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626746 TSER=776120194 Frame 59 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55322 (55322), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 60 0.594286 141.3.161.43 193.99.144.85 HTTP GET /stil/ho/glossar.css HTTP/1.1 Frame 60 (878 bytes on wire, 878 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55322 (55322), Dst Port: http (80), Seq: 1, Ack: 1, Len: 810 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 61 0.595273 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (text/css) Frame 61 (750 bytes on wire, 750 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55320 (55320), Seq: 1, Ack: 814, Len: 682 Hypertext Transfer Protocol Line-based text data: text/css No. Time Source Destination Protocol Info 62 0.595300 141.3.161.43 193.99.144.85 TCP 55320 > http [ACK] Seq=814 Ack=683 Win=6912 Len=0 TSV=626747 TSER=776120194 Frame 62 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55320 (55320), Dst Port: http (80), Seq: 814, Ack: 683, Len: 0 No. Time Source Destination Protocol Info 63 0.595766 141.3.161.43 193.99.144.85 TCP 55320 > http [FIN, ACK] Seq=814 Ack=683 Win=6912 Len=0 TSV=626747 TSER=776120194 Frame 63 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55320 (55320), Dst Port: http (80), Seq: 814, Ack: 683, Len: 0 No. Time Source Destination Protocol Info 64 0.598029 141.3.161.43 193.99.144.85 TCP 55323 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626747 TSER=0 WS=6 Frame 64 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55323 (55323), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 65 0.599253 193.99.144.85 141.3.161.43 TCP http > 55319 [FIN, ACK] Seq=162 Ack=816 Win=4930 Len=0 TSV=776120194 TSER=626745 Frame 65 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55319 (55319), Seq: 162, Ack: 816, Len: 0 No. Time Source Destination Protocol Info 66 0.599367 193.99.144.85 141.3.161.43 TCP http > 55320 [FIN, ACK] Seq=683 Ack=814 Win=4929 Len=0 TSV=776120195 TSER=626743 Frame 66 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55320 (55320), Seq: 683, Ack: 814, Len: 0 No. Time Source Destination Protocol Info 67 0.599385 141.3.161.43 193.99.144.85 TCP 55320 > http [ACK] Seq=815 Ack=684 Win=6912 Len=0 TSV=626748 TSER=776120195 Frame 67 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55320 (55320), Dst Port: http (80), Seq: 815, Ack: 684, Len: 0 No. Time Source Destination Protocol Info 68 0.605080 193.99.144.85 141.3.161.43 TCP http > 55323 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120204 TSER=626747 Frame 68 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55323 (55323), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 69 0.605126 141.3.161.43 193.99.144.85 TCP 55323 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626749 TSER=776120204 Frame 69 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55323 (55323), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 70 0.605468 141.3.161.43 193.99.144.85 HTTP GET /stil/drucken.css HTTP/1.1 Frame 70 (876 bytes on wire, 876 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55323 (55323), Dst Port: http (80), Seq: 1, Ack: 1, Len: 808 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 71 0.606139 193.99.144.85 141.3.161.43 TCP http > 55320 [FIN, ACK] Seq=683 Ack=815 Win=4929 Len=0 TSV=776120204 TSER=626747 Frame 71 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55320 (55320), Seq: 683, Ack: 815, Len: 0 No. Time Source Destination Protocol Info 72 0.610328 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (text/css) Frame 72 (400 bytes on wire, 400 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55322 (55322), Seq: 1, Ack: 811, Len: 332 Hypertext Transfer Protocol Line-based text data: text/css No. Time Source Destination Protocol Info 73 0.610372 141.3.161.43 193.99.144.85 TCP 55322 > http [ACK] Seq=811 Ack=333 Win=6592 Len=0 TSV=626750 TSER=776120209 Frame 73 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55322 (55322), Dst Port: http (80), Seq: 811, Ack: 333, Len: 0 No. Time Source Destination Protocol Info 74 0.610822 141.3.161.43 193.99.144.85 TCP 55322 > http [FIN, ACK] Seq=811 Ack=333 Win=6592 Len=0 TSV=626751 TSER=776120209 Frame 74 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55322 (55322), Dst Port: http (80), Seq: 811, Ack: 333, Len: 0 No. Time Source Destination Protocol Info 75 0.611572 193.99.144.85 141.3.161.43 TCP http > 55322 [FIN, ACK] Seq=333 Ack=811 Win=4926 Len=0 TSV=776120211 TSER=626746 Frame 75 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55322 (55322), Seq: 333, Ack: 811, Len: 0 No. Time Source Destination Protocol Info 76 0.611592 141.3.161.43 193.99.144.85 TCP 55322 > http [ACK] Seq=812 Ack=334 Win=6592 Len=0 TSV=626751 TSER=776120211 Frame 76 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55322 (55322), Dst Port: http (80), Seq: 812, Ack: 334, Len: 0 No. Time Source Destination Protocol Info 77 0.615896 141.3.161.43 193.99.144.85 TCP 55324 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626752 TSER=0 WS=6 Frame 77 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55324 (55324), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 78 0.634986 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #79] Frame 78 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 19 01 2c de 20 37 1f f6 8e 80 10 13 46 .P...,. 7......F 0010 a6 97 00 00 01 01 08 0a 2e 42 a7 94 00 09 90 39 .........B.....9 0020 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d HTTP/1.1 200 OK. 0030 0a 44 61 74 65 3a 20 46 72 69 2c 20 31 32 20 53 .Date: Fri, 12 S 0040 65 70 20 32 30 30 38 20 31 31 3a 33 36 3a 30 31 ep 2008 11:36:01 0050 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 GMT..Server: Ap 0060 61 63 68 65 2f 31 2e 33 2e 33 34 0d 0a 56 61 72 ache/1.3.34..Var 0070 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 y: Accept-Encodi 0080 6e 67 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 ng..Last-Modifie 0090 64 3a 20 54 68 75 2c 20 31 31 20 53 65 70 20 32 d: Thu, 11 Sep 2 00a0 30 30 38 20 31 34 3a 34 32 3a 30 31 20 47 4d 54 008 14:42:01 GMT 00b0 0d 0a 45 54 61 67 3a 20 22 35 35 38 36 65 30 2d ..ETag: "5586e0- 00c0 35 36 65 31 2d 34 38 63 39 32 65 33 39 22 0d 0a 56e1-48c92e39".. 00d0 41 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 Accept-Ranges: b 00e0 79 74 65 73 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e ytes..Connection 00f0 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 : close..Content 0100 2d 54 79 70 65 3a 20 74 65 78 74 2f 63 73 73 0d -Type: text/css. 0110 0a 43 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e .Content-Encodin 0120 67 3a 20 67 7a 69 70 0d 0a 43 6f 6e 74 65 6e 74 g: gzip..Content 0130 2d 4c 65 6e 67 74 68 3a 20 34 32 31 33 0d 0a 0d -Length: 4213... 0140 0a 1f 8b 08 00 00 00 00 00 00 03 bd 1c d9 6e e4 ..............n. 0150 b8 f1 d9 f3 15 ca 18 03 24 13 b7 46 ad 3e ec f6 ........$..F.>.. 0160 20 0f 8b cd 4b 80 cd 22 c0 4e 12 20 41 d0 a0 24 ...K..".N. A..$ 0170 76 4b 6b b5 a4 e8 b0 c7 5e cc 9f e5 2d 3f 16 9e vKk.....^...-?.. 0180 12 8f a2 0e cf 6c ba 77 d6 b6 48 56 15 8b c5 ba .....l.w..HV.... 0190 58 d4 87 f7 de 6a f4 e3 7d 97 e7 67 7c c1 59 81 X....j..}..g|.Y. 01a0 bd 1f d1 63 76 46 6d 56 16 b8 f0 1e 71 dd c4 69 ...cvFmV....q..i 01b0 86 23 f2 7b 56 78 4d 8b 8a 04 d5 49 18 04 77 7e .#.{VxM....I..w~ 01c0 dc 34 53 60 df 7f 78 93 b6 97 dc fb e5 8d 47 3e .4S`..x.......G> 01d0 11 8a 1f ce 75 d9 15 c9 bd d7 d6 a8 68 2a 54 e3 ....u.......h*T. 01e0 a2 fd f8 e6 cb 9b a8 4c 9e 81 5e d7 c9 29 49 12 .......L..^..)I. 01f0 4c 7b 5c c7 65 d1 22 42 60 2d fa 3d 65 49 9b de L{\.e."B`-.=eI.. 0200 7b fb 00 5f 3e b2 07 97 ac 58 89 87 77 db a0 fa {.._>....X..w... 0210 2c 9e a2 fa 9c 15 f7 5e e0 a1 ae 2d 29 a4 f7 1e ,......^...-)... 0220 a3 e9 3a 42 05 81 f6 42 e6 e9 f9 cd c3 73 13 d7 ..:B...B.....s.. 0230 a8 ea a1 57 28 49 b2 e2 bc ca f1 a9 bd f7 76 14 ...W(I........v. 0240 9a 4a c3 91 fe 46 68 97 34 97 75 82 eb 55 5b 56 .J...Fh.4.u..U[V 0250 f7 de ba fa ec 35 65 9e 25 de 75 cc 3e 1f d5 2e .....5e.%.u.>... 0260 1c de 78 9f 3a 3b a7 ee 4e f6 34 09 61 ea 5c 72 ..x.:;..N.4.a.\r 0270 8c 08 94 a8 24 eb 74 a3 b7 a4 38 6b 48 23 59 54 ....$.t...8kH#YT 0280 49 f8 14 30 de 8b 13 1d 58 98 14 78 37 4e 1a 24 I..0....X..x7N.$ 0290 26 b6 0e 72 6e bb 71 ba c5 18 c6 cf 0d ef ea 17 &..rn.q......... 02a0 44 2e 51 e2 65 97 f3 3f 19 c5 7f 78 bb 7e fb 2f D.Q.e..?...x.~./ 02b0 b9 5a 65 93 51 89 bd f7 50 44 58 d6 b5 f8 e3 00 .Ze.Q...PDX..... 02c0 a0 17 05 3e 8d d5 e1 70 90 4f 5e 56 59 91 e0 cf ...>...p.O^VY... 02d0 72 6e 14 c5 31 2a db b6 bc c8 99 67 4d bb 6a da rn..1*.....gM.j. 02e0 e7 1c df 7b 05 a1 d2 90 a9 8f 80 ac ac a5 3c 12 ...{..........<. 02f0 ee f0 75 f4 43 fa 48 c2 27 34 79 6c 32 c7 92 ec ..u.C.H.'4yl2... 0300 aa 63 5a 0a 54 27 22 51 ab 27 31 e6 36 08 54 51 .cZ.T'"Q.'1.6.TQ 0310 b5 09 13 8b b6 0e 82 77 b4 e3 87 c9 1d 8e fa 1d .......w........ 0320 3e 67 d7 7e 78 ff e6 4f 4d 4b a6 1c a7 de 4b e7 >g.~x..OMK....K. 0330 55 f5 7f ff 73 c2 c5 1b bf a9 ca a2 29 e5 26 39 U...s.......).&9 0340 e5 25 22 c4 d2 79 ab 8c 11 fb c0 d8 82 2b 4e 7f .%"..y.......+N. 0350 cf 35 5d 20 36 c3 2a 11 12 57 3d ef f8 fc 98 22 .5] 6.*..W=...." 0360 59 df 78 69 d8 af 8b da 69 bd 63 4c f0 a3 98 08 Y.xi....i.cL.... 0370 e3 4d 2f 2a bc 6b 4c e4 aa be 27 7b ab 4d f5 d5 .M/*.kL...'{.M.. 0380 5b 05 fe 0e 5f 98 5a f0 d8 af 5c cc f0 53 43 d7 [..._.Z...\..SC. 0390 a8 c5 a8 21 da 80 c3 d4 64 58 ea 92 61 a5 a5 00 ...!....dX..a... 03a0 f4 33 e4 d0 34 cc 5f 0c b2 4a b2 6b 08 ff 9e ee .3..4._..J.k.... 03b0 bd 34 23 2a ae 30 b5 d5 5a d2 c3 07 11 5d 59 18 .4#*.0..Z....]Y. 03c0 aa 49 aa 09 49 45 92 35 55 8e 9e 09 c2 bc 8c 1f .I..IE.5U....... 03d0 0c 78 54 06 25 e7 5b fc b9 5d a1 3c 3b 93 06 06 .xT.%.[..].<;... 03e0 44 45 14 c9 c5 ed c1 71 b9 27 3d 84 ce e3 7b d6 DE.....q.'=...{. 03f0 62 09 23 99 6f 24 bf 41 39 11 b3 5f a0 d5 97 f3 b.#.o$.A9.._.... 0400 42 09 7f 72 33 fc 7a cc 5a d2 f9 a1 55 1f fd 5c B..r3.z.Z...U..\ 0410 46 8d 85 8a 22 62 ff ee 4c bd 7c a3 6e b2 17 b2 F..."b..L.|.n... 0420 9b 5a 7c 7c c1 59 8e 21 61 20 54 9c f3 b2 69 50 .Z||.Y.!a T...iP 0430 7d 24 f2 f4 70 4f ff 77 63 3c 7b cc 88 66 c1 bd }$..pO.wc<{..f.. 0440 2c 95 79 49 86 5f 07 ec a3 70 33 c1 71 59 23 ae ,.yI._...p3.qY#. 0450 82 88 e5 c2 35 15 50 ae e1 6a a2 d6 e2 ba bb 44 ....5.P..j.....D 0460 1e b2 a0 6c 36 87 03 eb 95 97 e7 f2 18 e1 1a 67 ...l6..........g 0470 64 c3 41 16 68 bd 96 fb 43 3e 67 9b 6c 2f 18 a0 d.A.h...C>g.l/.. 0480 8d 67 7f 8d 6f 51 53 77 49 0d 08 c0 41 10 24 a8 .g..oQSwI...A.$. 0490 6b 56 1c 9b 2e 4e b1 de 5f 08 d8 28 6a 36 3b 2a kV...N.._..(j6;* 04a0 42 83 96 64 f0 5c 73 60 aa b2 c9 5e 30 15 ec db B..d.\s`...^0... 04b0 9d a9 70 43 3f ec 9f b9 70 b2 ed 20 b7 99 ba 28 ..pC?...p.. ...( 04c0 1b f6 a1 84 9c ca fa 72 4d 67 74 c2 79 b2 90 14 .......rMgt.y... 04d0 6d 91 d6 fe ad 4d e2 ce 26 91 7d 43 37 41 03 31 m....M..&.}C7A.1 04e0 59 51 75 ad 4f 25 ef 94 91 bf 6f ac 26 62 96 eb YQu.O%....o.&b.. 04f0 38 25 eb 11 5d b2 56 35 30 9c d4 03 b7 1a 2a ab 8%..].V50.....*. 0500 dd fb 5e eb 35 a1 83 54 e7 ad ab f3 df be fd 90 ..^.5..T........ 0510 91 bd d9 7c 48 cb 0f 97 2c 29 5b ff 9c 9d de fe ...|H...,)[..... 0520 8e 80 5e d5 b8 c2 a8 a5 16 7a d0 41 2a a6 91 cd ..^......z.A*... 0530 52 f4 1e ea 8d b6 bf 20 R...... No. Time Source Destination Protocol Info 79 0.635092 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 79 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55321 (55321), Seq: 1, Ack: 819, Len: 1360 No. Time Source Destination Protocol Info 80 0.635150 141.3.161.43 193.99.144.85 TCP 55321 > http [ACK] Seq=819 Ack=1361 Win=8256 Len=0 TSV=626757 TSER=776120212 Frame 80 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55321 (55321), Dst Port: http (80), Seq: 819, Ack: 1361, Len: 0 No. Time Source Destination Protocol Info 81 0.635565 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 81 (156 bytes on wire, 156 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55321 (55321), Seq: 1361, Ack: 819, Len: 88 No. Time Source Destination Protocol Info 82 0.635580 141.3.161.43 193.99.144.85 TCP 55321 > http [ACK] Seq=819 Ack=1449 Win=8256 Len=0 TSV=626757 TSER=776120212 Frame 82 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55321 (55321), Dst Port: http (80), Seq: 819, Ack: 1449, Len: 0 No. Time Source Destination Protocol Info 83 0.635780 193.99.144.85 141.3.161.43 TCP http > 55322 [FIN, ACK] Seq=333 Ack=812 Win=4926 Len=0 TSV=776120215 TSER=626751 Frame 83 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55322 (55322), Seq: 333, Ack: 812, Len: 0 No. Time Source Destination Protocol Info 84 0.636223 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (text/css) Frame 84 (627 bytes on wire, 627 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55323 (55323), Seq: 1, Ack: 809, Len: 559 Hypertext Transfer Protocol Line-based text data: text/css No. Time Source Destination Protocol Info 85 0.636243 141.3.161.43 193.99.144.85 TCP 55323 > http [ACK] Seq=809 Ack=560 Win=6656 Len=0 TSV=626757 TSER=776120220 Frame 85 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55323 (55323), Dst Port: http (80), Seq: 809, Ack: 560, Len: 0 No. Time Source Destination Protocol Info 86 0.637093 141.3.161.43 193.99.144.85 TCP 55323 > http [FIN, ACK] Seq=809 Ack=560 Win=6656 Len=0 TSV=626757 TSER=776120220 Frame 86 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55323 (55323), Dst Port: http (80), Seq: 809, Ack: 560, Len: 0 No. Time Source Destination Protocol Info 87 0.643547 193.99.144.85 141.3.161.43 TCP http > 55323 [FIN, ACK] Seq=560 Ack=809 Win=4924 Len=0 TSV=776120221 TSER=626749 Frame 87 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55323 (55323), Seq: 560, Ack: 809, Len: 0 No. Time Source Destination Protocol Info 88 0.643595 141.3.161.43 193.99.144.85 TCP 55323 > http [ACK] Seq=810 Ack=561 Win=6656 Len=0 TSV=626759 TSER=776120221 Frame 88 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55323 (55323), Dst Port: http (80), Seq: 810, Ack: 561, Len: 0 No. Time Source Destination Protocol Info 89 0.643990 193.99.144.85 141.3.161.43 TCP http > 55324 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120233 TSER=626752 Frame 89 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55324 (55324), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 90 0.644020 141.3.161.43 193.99.144.85 TCP 55324 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626759 TSER=776120233 Frame 90 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55324 (55324), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 91 0.644810 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #92] Frame 91 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 19 01 2c e3 c8 37 1f f6 8e 80 10 13 46 .P...,..7......F 0010 50 35 00 00 01 01 08 0a 2e 42 a7 af 00 09 90 45 P5.......B.....E 0020 ac 5f 46 b4 99 e6 9a 16 44 2d a2 dc 9c 95 5f 37 ._F.....D-...._7 0030 e8 df 5d 09 b9 67 16 24 8e 60 ed 4b 57 80 85 11 ..]..g.$.`.KW... 0040 ab 16 45 bd 99 b6 65 46 99 17 71 85 62 61 37 f4 ..E...eF..q.ba7. 0050 09 93 19 e5 a8 6a c8 20 f9 1b e8 7f 42 68 5b a2 .....j. ....Bh[. 0060 43 f5 07 d2 0c 73 d8 1a 17 f7 ec a3 ad be 0e 6e C....s.........n 0070 d5 66 6d 3f 97 61 f3 af 24 cb 0f e1 21 38 00 ce .fm?.a..$...!8.. 0080 58 4c bc 2b 5c 03 3c 8f ca 3c d1 57 ed c4 3e 16 XL.+\.<..<.W..>. 0090 62 a2 f0 55 dc 0e 20 00 49 83 a2 d4 e0 a5 2c 26 b..U.. .I.....,& 00a0 5b 0c 0d b3 8f 05 0d 5f aa d4 cd 95 61 d0 74 34 [......_....a.t4 00b0 d3 b4 75 f7 d0 76 f5 8c 50 e6 9a 58 c0 56 32 64 ..u..v..P..X.V2d 00c0 66 d2 40 92 b4 de d1 af ad 02 81 0d 3b 4f fd 33 f.@.........;O.3 00d0 5a 8e db e0 a5 db 07 c2 00 ec 83 77 44 92 85 19 Z..........wD... 00e0 78 66 fb 8a 53 cc 7f 30 37 b4 31 c9 7f 67 51 bf xf..S..07.1..gQ. 00f0 0b b6 92 7a 38 b4 d0 ec 22 17 9f 49 42 19 6e b7 ...z8..."..IB.n. 0100 a1 32 49 ad 71 9c b6 06 ad 5b 80 56 a2 3e 25 ad .2I.q....[.V.>%. 0110 96 e1 b1 89 77 60 a9 cc b0 e0 a3 37 4b 74 d8 70 ....w`.....7Kt.p 0120 ec fd 54 a1 9c fc 98 2d 3f 3a 72 12 0b e5 bb e0 ..T....-?:r..... 0130 66 ac 11 15 4d 9c 16 e4 f9 48 2f 12 de 8e b7 92 f...M....H/..... 0140 dd d6 34 e3 5d d0 83 f0 84 46 fa 54 c4 4b 6f 08 ..4.]....F.T.Ko. 0150 63 cf b9 12 60 48 c6 85 ef bc ed 3b db 25 7f e7 c...`H.....;.%.. 0160 e4 fc 92 c9 3b 84 c1 5a f6 de eb cc 8a 3e 74 72 ....;..Z.....>tr 0170 83 d7 bd 50 a2 9c df d1 59 ac 87 89 28 73 e3 ff ...P....Y...(s.. 0180 c9 06 29 81 fb f1 e9 7d bb 85 f1 7c 9e 49 78 c5 ..)....}...|.Ix. 0190 02 f5 7a c9 5c 1d 65 a2 46 40 bb 00 47 ba d1 03 ..z.\.e.F@..G... 01a0 74 9e 2b eb 5d a6 a9 b9 43 de b6 34 4a ba 83 c6 t.+.]...C..4J... 01b0 89 1d 07 49 d3 7a 33 18 3e dd 4d 30 9d f4 9b c8 ...I.z3.>.M0.... 01c0 51 99 91 0b c0 05 c0 77 e0 29 23 d3 ef a3 09 d0 Q......w.)#..... 01d0 2c 46 b9 b4 e3 24 d4 49 f2 71 19 16 73 9e 88 95 ,F...$.I.q..s... 01e0 7b 4f 56 7b 28 d2 b1 03 91 af c4 9f 6e fd 32 fa {OV{(.......n.2. 01f0 19 3f 4c 68 28 ce f9 be b3 11 01 0a 86 dd 4e 8b .?Lh(.........N. 0200 8d be 1f 20 f9 51 d3 dc 42 f8 0f 3b 53 f8 ad 2d ... .Q..B..;S..- 0210 4d 0d 8b f4 35 77 52 7e 65 e6 74 86 e2 7c ef fd M...5wR~e.t..|.. 0220 7e 66 5f 63 5f 1e 26 c5 da 92 46 cd 31 de 7d ed ~f_c_.&...F.1.}. 0230 0a 1a 1c 4d 43 ff 82 9b 06 1f 9b 0a c7 19 ca e1 ...MC........... 0240 95 da 3a 45 3b 84 bc f4 c5 eb da eb 95 af 82 52 ..:E;..........R 0250 41 91 c0 e1 15 60 cc 30 4f ba 74 e3 f6 45 8e 1f A....`.0O.t..E.. 0260 d7 37 aa 9d 53 46 c0 89 cf 8d 11 a4 f2 e5 98 4b .7..SF.........K 0270 48 b5 90 0c c9 3f e2 0f 99 d9 69 ba 18 d4 b1 71 H....?....i....q 0280 21 1e b7 57 bc f5 48 73 25 78 a2 0f 13 46 5d 16 !..W..Hs%x...F]. 0290 cd 1c 94 b5 27 d6 eb 60 64 57 a9 c8 47 d3 cb f0 ....'..`dW..G... 02a0 70 8a f8 2e 00 c4 33 20 3e b8 a2 d4 bd 79 04 a4 p.....3 >....y.. 02b0 db 25 0c 48 b7 96 c3 3a 85 46 1b 9f 64 8f fa 04 .%.H...:.F..d... 02c0 cc 99 cb 33 b5 69 c2 bb 7c ce ea 92 85 59 32 bf ...3.i..|....Y2. 02d0 49 a0 5a ef 3e f3 a4 db 34 3d 7b aa 9e 3b 2e a0 I.Z.>...4={..;.. 02e0 c3 c1 9f 71 d7 46 9b 79 99 43 d4 59 e7 3d ca e3 ...q.F.y.C.Y.=.. 02f0 25 14 56 6e c7 cb 25 d1 cb 54 21 28 7e e1 42 b5 %.Vn..%..T!(~.B. 0300 0c 02 81 7d c6 cd 98 b7 04 9b 14 7b e3 87 63 1b ...}.......{..c. 0310 5f 53 ee 96 9d 43 8b f6 61 b8 b0 ff 66 59 7f 20 _S...C..a...fY. 0320 9f 19 c7 fc b8 68 9c d5 10 a6 51 29 8d 3c e4 3c .....h....Q).<.< 0330 9f ea 93 e5 0b a4 d2 65 2a e9 33 77 6a 73 62 46 .......e*.3wjsbF 0340 7e 77 89 ea 6e 38 d5 1a 3d a9 17 72 c1 b6 55 48 ~w..n8..=..r..UH 0350 58 36 a6 d1 4a 16 28 ae d8 89 a1 2b a9 ea ca a2 X6..J.(....+.... 0360 6f e8 77 49 de 86 23 63 b8 c6 f3 f6 c6 c1 f5 1c o.wI..#c........ 0370 da 2b 9f 0e 77 89 98 d1 55 cb b5 6b d9 5a f3 dc .+..w...U..k.Z.. 0380 88 67 29 f5 70 98 a5 92 a9 07 38 04 7a 4b 13 26 .g).p.....8.zK.& 0390 df a7 f4 f8 37 5f fd 80 9e cb ae 7d 6d fe a4 f2 ....7_.....}m... 03a0 1f 10 11 e1 e2 48 8f db 1d 53 a7 06 4f f4 e2 4f .....H...S..O..O 03b0 1c fd 24 2c 96 ac 0c 5d 7c 3c 95 35 45 c7 0a 29 ..$,...]|<.5E..) 03c0 70 d6 d6 08 9f b1 9d 43 a2 aa 4c 8a 21 e1 cc 77 p......C..L.!..w 03d0 5d 53 a0 f4 82 0b ef 09 17 05 2f 87 28 48 f0 dc ]S......../.(H.. 03e0 7a 28 6f bc 1f d8 2e 44 5d 73 26 b0 68 85 d4 53 z(o....D]s&.h..S 03f0 56 27 23 9e 55 3f e9 a6 3c b5 4f a8 c6 16 f6 fd V'#.U?..<.O..... 0400 ff 03 fb 37 60 b9 ec 14 95 9f 47 1c bb 6f 3e 05 ...7`.....G..o>. 0410 15 ad d3 21 56 fa 98 ae 80 f0 27 ac f8 dd f0 37 ...!V.....'....7 0420 ac f6 af 9a 48 cc 37 4c ce f7 8b b1 e2 f4 cb 52 ....H.7L.......R 0430 0a dc 3a e8 7d 7b 6b eb 3a 23 e8 63 e2 0d 3d 3e ..:.}{k.:#.c..=> 0440 9f 3a fc 89 03 fa 85 f0 6c 41 36 51 1f c3 38 e4 .:......lA6Q..8. 0450 30 06 d2 35 d0 9f 40 02 a4 f7 f0 db 3a ca cb 33 0..5..@.....:..3 0460 ed 69 b7 59 62 65 fa 5f 13 f4 98 9a 60 a4 19 9e .i.Ybe._....`... 0470 b2 99 dd b1 50 28 e4 0f 47 e6 c2 ee f4 26 d1 40 ....P(..G....&.@ 0480 eb f2 99 2c 39 b3 dc a7 91 4e fd 19 a7 d9 07 c0 ...,9....N...... 0490 3f 99 0d 63 92 48 4d c8 50 28 34 29 25 70 39 17 ?..c.HM.P(4)%p9. 04a0 37 b5 bd 2d 32 b2 93 30 2f 4d c8 4a 64 6c 92 60 7..-2..0/M.Jdl.` 04b0 ad 29 19 6b 1d e4 de d2 ef 38 be 91 ea 02 78 cc .).k.....8....x. 04c0 02 16 ae 07 25 0e 65 b5 75 f8 0e 15 35 b8 d4 86 ....%.e.u...5... 04d0 6e 72 fa da 0e af 5a 94 c6 4d 6e 5c 16 bd b9 45 nr....Z..Mn\...E 04e0 1d 56 f2 0e 35 ed d8 76 cc f0 38 64 c8 da 78 57 .V..5..v..8d..xW 04f0 fa 34 fc f5 3c 5f e5 13 f7 3b ff a2 a5 ba f1 82 .4..<_...;...... 0500 63 c2 c5 d9 f9 70 63 ad 95 e2 47 7c 79 e3 8f 9c c....pc...G|y... 0510 bd cc ca 36 43 40 48 98 00 93 26 1a 76 d6 73 43 ...6C@H...&.v.sC 0520 de 0f 07 1a 91 98 39 0f 18 66 99 3b c1 d2 26 70 ......9..f.;..&p 0530 27 59 90 cd c3 07 2b 19 'Y....+. No. Time Source Destination Protocol Info 92 0.644906 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 92 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55321 (55321), Seq: 1449, Ack: 819, Len: 1360 No. Time Source Destination Protocol Info 93 0.644933 141.3.161.43 193.99.144.85 TCP 55321 > http [ACK] Seq=819 Ack=2809 Win=10944 Len=0 TSV=626759 TSER=776120239 Frame 93 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55321 (55321), Dst Port: http (80), Seq: 819, Ack: 2809, Len: 0 No. Time Source Destination Protocol Info 94 0.645719 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #96] Frame 94 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 19 01 2c e9 18 37 1f f6 8e 80 10 13 46 .P...,..7......F 0010 b9 db 00 00 01 01 08 0a 2e 42 a7 af 00 09 90 45 .........B.....E 0020 48 02 a5 ac 66 5f 20 b7 66 8e c3 a0 95 16 4d ae H...f_ .f.....M. 0030 69 72 e9 6a 28 84 5a b5 cf 55 5f 0d 75 a5 15 7b ir.j(.Z..U_.u..{ 0040 86 34 38 bb b2 52 35 57 46 9d a0 4b a6 60 e4 34 .48..R5WF..K.`.4 0050 e5 04 8f a0 56 d4 ac de 5c 04 9a ab b1 2b a0 9e ....V...\....+.. 0060 c8 98 44 e8 eb 4f d5 2a 74 79 56 f0 2a d4 7a 22 ..D..O.*tyV.*.z" 0070 7e f9 0c 90 df af 90 c6 e4 2b a9 8a 44 85 d7 32 ~........+..D..2 0080 a8 7e d1 d1 a2 f2 2b dd af 60 c5 04 12 b0 48 9d .~....+..`....H. 0090 5d 01 85 c3 e6 72 4f ab e8 1f a9 15 98 ab 8f b5 ]....rO......... 00a0 60 e5 48 f1 f7 7f b0 5a d3 fe af 4b 16 d7 34 b5 `.H....Z...K..4. 00b0 a0 3c a1 c9 8d 94 50 99 53 4a 89 58 91 08 b0 bb .<....P.SJ.X.... 00c0 18 17 37 b4 c0 f8 4e 4d 37 30 64 80 b6 d6 72 66 ..7...NM70d...rf 00d0 dc a4 f9 ac ce 98 84 73 7d f6 46 3c 2f 50 9c d6 .......s}.F..nL.R.-.+..g 0190 f8 48 43 ef 5f c6 d2 90 ea 71 37 58 c7 61 c3 dc .HC._....q7X.a.. 01a0 83 30 f7 4a e9 af 28 a2 9b 82 89 8a 3a 6b 1a f5 .0.J..(.....:k.. 01b0 20 4d 2f 59 07 a6 a6 0e 11 ae 44 94 e5 89 28 50 M/Y......D...(P 01c0 9b 13 20 f1 8a 69 99 7d 54 0f 76 26 50 08 b7 66 .. ..i.}T.v&P..f 01d0 ba 60 a2 bf e9 22 50 4c cd c3 d8 47 5a db 70 bc .`..."PL...GZ.p. 01e0 a7 e8 16 31 cc e9 71 42 fa 53 b9 4d 24 d3 df c7 ...1..qB.S.M$... 01f0 10 d2 5b 50 47 99 03 82 c3 3a 98 3c 57 a8 3e e3 ..[PG....:.. 0200 28 09 e4 83 2b bd 3e 29 32 d2 1a 40 dc 32 83 1e (...+.>)2..@.2.. 0210 3d 73 60 1d 5a 0f fe f9 bc 8c bd 40 6d 5d 38 10 =s`.Z......@m]8. 0220 b7 e8 f4 02 46 d3 fc b8 cc 96 db 1c 41 2d 09 6a ....F.......A-.j 0230 bb 8b d1 70 c1 79 d2 15 e7 e3 53 8d 2a 7a db 74 ...p.y....S.*z.t 0240 bc ea 79 2e 7d 33 e8 98 38 14 e5 3d a7 2f 0e f1 ..y.}3..8..=./.. 0250 65 5a ed 8c 62 06 91 a0 0b c0 18 0a cc 84 f4 f6 eZ..b........... 0260 ce bc 88 76 4d 6f ae 64 8f c7 07 94 63 6a fe 34 ...vMo.d....cj.4 0270 16 bd a6 04 1c 02 99 cc 11 49 f0 a6 52 a0 dc 54 .........I..R..T 0280 02 c0 56 ba b4 4b ab f2 f6 fb b2 ab 33 d2 85 78 ..V..K......3..x 0290 bf 6f f9 15 39 22 a4 08 bc f3 1c c7 49 22 8a a7 .o..9"......I".. 02a0 5b 74 1e d9 3c b2 03 52 bb e8 f5 d9 7d 17 e3 a0 [t..<..R....}... 02b0 d0 51 d1 cf 3b 0f 09 1f 77 89 10 60 b0 e5 70 30 .Q..;...w..`..p0 02c0 9d 27 b5 03 55 e7 b8 6e 88 49 8b 1f f0 f1 b1 a4 .'..U..n.I...... 02d0 d7 cb 51 67 56 89 6a 07 7f 80 4a 82 1c 63 77 8b ..QgV.j...J..cw. 02e0 a2 57 2d cf 98 31 47 7f e8 a2 71 99 e7 ac 91 eb .W-..1G...q..... 02f0 74 55 a7 da 55 d2 61 5f 95 af 2e d0 e4 9c c6 2b tU..U.a_.......+ 0300 3d 5a 63 46 42 9e 46 e6 e4 ee a1 cd 0a ec e6 3a =ZcFB.F........: 0310 d8 96 87 9a b3 03 cd 4f 65 b5 12 49 c1 45 31 a7 .......Oe..I.E1. 0320 45 68 67 96 d3 69 15 2b 50 15 8b c3 a7 b5 6f 99 Ehg..i.+P.....o. 0330 8d fb 0c c3 1d 2d cb 68 4f 58 43 f8 c6 5d e0 85 .....-.hOXC..].. 0340 e6 55 52 a1 bd ef 80 5d 67 13 33 92 3a 9f e5 d0 .UR....]g.3.:... 0350 ac 67 14 6e 4d c3 48 d7 36 57 d6 56 76 4f 2d 4e .g.nM.H.6W.VvO-N 0360 9d ef 44 39 50 ba 4b 12 21 55 b9 04 f2 ab ab 95 ..D9P.K.!U...... 0370 8d ec e5 af e6 7c 4a c5 2c 8b 71 2d 32 0d 0b 39 .....|J.,.q-2..9 0380 e2 d8 7d cd b2 87 ba 17 e0 7e 4f c6 7c 80 e9 02 ..}......~O.|... 0390 5e 40 25 54 23 12 00 06 ab 23 a4 98 b1 c8 08 25 ^@%T#....#.....% 03a0 ee f8 e3 6b 45 b1 57 73 70 86 31 58 36 25 25 f1 ...kE.Wsp.1X6%%. 03b0 30 39 27 57 dd 9e 4c 8e eb c1 ec b4 fa ff 89 98 09'W..L......... 03c0 8f 0b aa e6 a8 fd 46 74 75 84 39 b6 b4 f7 45 4c ......Ftu.9...EL 03d0 35 a6 79 a2 47 b5 88 69 1d 04 13 77 35 7f 95 d7 5.y.G..i...w5... 03e0 c2 cc bc d9 06 de d7 18 ca e5 05 27 94 a2 78 9d ...........'..x. 03f0 37 23 87 be 01 c0 ac 2f 03 6f 61 c1 b2 84 f8 d6 7#...../.oa..... 0400 6d 26 5d 76 d6 b0 62 7b d3 ba 49 be f1 ca 77 85 m&]v..b{..I...w. 0410 24 77 69 f8 b4 74 fd 99 26 94 3c 59 3b 37 2d 63 $wi..t..&.- 0450 f7 33 4a 6b 48 b1 0d d7 87 4d f8 bd 26 32 f2 7b .3JkH....M..&2.{ 0460 bd a6 26 0b f9 89 4c 24 a7 4b 60 fb 05 93 e7 ae ..&...L$.K`..... 0470 0e e8 9b 01 fa 5f 69 35 4e fb 6a 14 a0 35 f1 e4 ....._i5N.j..5.. 0480 29 15 97 fe ac 25 21 72 ac 14 a5 5b f4 6c 07 7a )....%!r...[.l.z 0490 be eb da b2 be f1 fe f1 94 11 6f 1f 17 df 98 b2 ..........o..... 04a0 31 12 9c 19 ef af 8d a7 00 54 46 bc 33 17 e1 f2 1........TF.3... 04b0 c8 c7 c2 ed f3 77 96 a5 b8 c9 1c b5 0c 7b cd 8b .....w.......{.. 04c0 1e 07 a0 b9 f6 c0 05 7b 38 79 5d 91 98 8f 9f 92 .......{8y]..... 04d0 40 9b 45 2e 9e ab 68 4c b9 f7 df 1f e9 72 99 08 @.E...hL.....r.. 04e0 7b 2b 31 03 75 a4 9c 68 f2 02 b4 1d f9 b7 e6 3f {+1.u..h.......? 04f0 8d 2c 0a 6f 20 d8 74 dc d0 35 74 fa 72 8b ab 99 .,.o .t..5t.r... 0500 24 4c 08 90 a6 b9 02 33 95 33 8f e2 b9 94 68 92 $L.....3.3....h. 0510 e5 9a d7 04 ad 33 f0 f8 b9 38 b6 b8 d2 c2 1e a6 .....3...8...... 0520 56 af b4 84 d3 df 70 9d a0 02 dd 78 0d 2a 9a 15 V.....p....x.*.. 0530 f1 b5 b2 93 c2 7f ce e6 ........ No. Time Source Destination Protocol Info 95 0.646047 141.3.161.43 193.99.144.85 HTTP GET /support/lib/external.js HTTP/1.1 Frame 95 (868 bytes on wire, 868 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55324 (55324), Dst Port: http (80), Seq: 1, Ack: 1, Len: 800 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 96 0.650506 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 96 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55321 (55321), Seq: 2809, Ack: 819, Len: 1360 No. Time Source Destination Protocol Info 97 0.650547 141.3.161.43 193.99.144.85 TCP 55321 > http [ACK] Seq=819 Ack=4169 Win=13696 Len=0 TSV=626761 TSER=776120239 Frame 97 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55321 (55321), Dst Port: http (80), Seq: 819, Ack: 4169, Len: 0 No. Time Source Destination Protocol Info 98 0.651040 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (text/css) Frame 98 (402 bytes on wire, 402 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55321 (55321), Seq: 4169, Ack: 819, Len: 334 [Reassembled TCP Segments (4502 bytes): #79(1360), #81(88), #92(1360), #96(1360), #98(334)] Hypertext Transfer Protocol Line-based text data: text/css No. Time Source Destination Protocol Info 99 0.651055 141.3.161.43 193.99.144.85 TCP 55321 > http [ACK] Seq=819 Ack=4503 Win=16384 Len=0 TSV=626761 TSER=776120239 Frame 99 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55321 (55321), Dst Port: http (80), Seq: 819, Ack: 4503, Len: 0 No. Time Source Destination Protocol Info 100 0.651254 193.99.144.85 141.3.161.43 TCP http > 55321 [FIN, ACK] Seq=4503 Ack=819 Win=4934 Len=0 TSV=776120239 TSER=626757 Frame 100 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55321 (55321), Seq: 4503, Ack: 819, Len: 0 No. Time Source Destination Protocol Info 101 0.651491 193.99.144.85 141.3.161.43 TCP http > 55323 [FIN, ACK] Seq=560 Ack=810 Win=4924 Len=0 TSV=776120242 TSER=626757 Frame 101 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55323 (55323), Seq: 560, Ack: 810, Len: 0 No. Time Source Destination Protocol Info 102 0.651827 141.3.161.43 193.99.144.85 TCP 55321 > http [FIN, ACK] Seq=819 Ack=4504 Win=16384 Len=0 TSV=626761 TSER=776120239 Frame 102 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55321 (55321), Dst Port: http (80), Seq: 819, Ack: 4504, Len: 0 No. Time Source Destination Protocol Info 103 0.656868 193.99.144.85 141.3.161.43 TCP http > 55321 [ACK] Seq=4504 Ack=820 Win=4934 Len=0 TSV=776120256 TSER=626761 Frame 103 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55321 (55321), Seq: 4504, Ack: 820, Len: 0 No. Time Source Destination Protocol Info 104 0.659551 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (application/x-javascript) Frame 104 (923 bytes on wire, 923 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55324 (55324), Seq: 1, Ack: 801, Len: 855 Hypertext Transfer Protocol Line-based text data: application/x-javascript No. Time Source Destination Protocol Info 105 0.659590 141.3.161.43 193.99.144.85 TCP 55324 > http [ACK] Seq=801 Ack=856 Win=7232 Len=0 TSV=626763 TSER=776120257 Frame 105 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55324 (55324), Dst Port: http (80), Seq: 801, Ack: 856, Len: 0 No. Time Source Destination Protocol Info 106 0.660178 141.3.161.43 193.99.144.85 TCP 55324 > http [FIN, ACK] Seq=801 Ack=856 Win=7232 Len=0 TSV=626763 TSER=776120257 Frame 106 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55324 (55324), Dst Port: http (80), Seq: 801, Ack: 856, Len: 0 No. Time Source Destination Protocol Info 107 0.668754 193.99.144.85 141.3.161.43 TCP http > 55324 [FIN, ACK] Seq=856 Ack=801 Win=4916 Len=0 TSV=776120258 TSER=626759 Frame 107 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55324 (55324), Seq: 856, Ack: 801, Len: 0 No. Time Source Destination Protocol Info 108 0.668812 141.3.161.43 193.99.144.85 TCP 55324 > http [ACK] Seq=802 Ack=857 Win=7232 Len=0 TSV=626765 TSER=776120258 Frame 108 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55324 (55324), Dst Port: http (80), Seq: 802, Ack: 857, Len: 0 No. Time Source Destination Protocol Info 109 0.669235 193.99.144.85 141.3.161.43 TCP http > 55324 [FIN, ACK] Seq=856 Ack=802 Win=4916 Len=0 TSV=776120265 TSER=626763 Frame 109 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55324 (55324), Seq: 856, Ack: 802, Len: 0 No. Time Source Destination Protocol Info 110 0.902581 141.3.161.43 193.99.144.85 TCP 55325 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626824 TSER=0 WS=6 Frame 110 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55325 (55325), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 111 0.908080 193.99.144.85 141.3.161.43 TCP http > 55325 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120507 TSER=626824 Frame 111 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55325 (55325), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 112 0.908127 141.3.161.43 193.99.144.85 TCP 55325 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626825 TSER=776120507 Frame 112 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55325 (55325), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 113 0.908422 141.3.161.43 193.99.144.85 HTTP GET /icons/ho/heise_online_logo.gif HTTP/1.1 Frame 113 (905 bytes on wire, 905 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55325 (55325), Dst Port: http (80), Seq: 1, Ack: 1, Len: 837 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 114 0.913250 141.3.161.43 193.99.144.85 TCP 55326 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626826 TSER=0 WS=6 Frame 114 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55326 (55326), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 115 0.923341 193.99.144.85 141.3.161.43 TCP http > 55326 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120523 TSER=626826 Frame 115 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55326 (55326), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 116 0.923389 141.3.161.43 193.99.144.85 TCP 55326 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626829 TSER=776120523 Frame 116 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55326 (55326), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 117 0.923705 141.3.161.43 193.99.144.85 HTTP GET /support/lib/login_ho.js HTTP/1.1 Frame 117 (868 bytes on wire, 868 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55326 (55326), Dst Port: http (80), Seq: 1, Ack: 1, Len: 800 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 118 0.924981 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #120] Frame 118 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 1d 51 37 72 a9 37 a9 2e 93 80 10 13 59 .P..Q7r.7......Y 0010 ee e2 00 00 01 01 08 0a 2e 42 a8 cb 00 09 90 89 .........B...... 0020 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d HTTP/1.1 200 OK. 0030 0a 44 61 74 65 3a 20 46 72 69 2c 20 31 32 20 53 .Date: Fri, 12 S 0040 65 70 20 32 30 30 38 20 31 31 3a 33 36 3a 30 32 ep 2008 11:36:02 0050 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 GMT..Server: Ap 0060 61 63 68 65 2f 31 2e 33 2e 33 34 0d 0a 4c 61 73 ache/1.3.34..Las 0070 74 2d 4d 6f 64 69 66 69 65 64 3a 20 46 72 69 2c t-Modified: Fri, 0080 20 31 38 20 4a 75 6c 20 32 30 30 38 20 30 39 3a 18 Jul 2008 09: 0090 32 35 3a 32 31 20 47 4d 54 0d 0a 45 54 61 67 3a 25:21 GMT..ETag: 00a0 20 22 33 31 39 39 36 2d 64 35 38 2d 34 38 38 30 "31996-d58-4880 00b0 36 31 38 31 22 0d 0a 41 63 63 65 70 74 2d 52 61 6181"..Accept-Ra 00c0 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f 6e nges: bytes..Con 00d0 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 34 31 tent-Length: 341 00e0 36 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6..Connection: c 00f0 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 lose..Content-Ty 0100 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a 0d pe: image/gif... 0110 0a 47 49 46 38 39 61 c8 00 33 00 f7 00 00 f9 f9 .GIF89a..3...... 0120 f9 fe fe fe fd fd fd f5 f5 f5 fc fc fc e5 e5 e5 ................ 0130 a7 a6 a6 e3 e3 e3 b5 b5 b5 df df df fa fa fa f2 ................ 0140 f2 f2 fb fb fb f7 f7 f7 eb eb eb e9 e9 e9 ec ec ................ 0150 ec f6 f6 f6 c9 c8 c8 f8 f8 f8 b0 af af c7 c6 c6 ................ 0160 f4 f4 f4 de de de ee ee ee f3 f3 f3 d9 d9 d9 f0 ................ 0170 f0 f0 e0 e0 e0 d7 d7 d7 ea ea ea ef ef ef e1 e1 ................ 0180 e1 d8 d8 d8 b1 b0 b0 e7 e7 e7 e4 e4 e4 9d 9c 9c ................ 0190 ed ed ed f1 f1 f1 e8 e8 e8 e6 e6 e6 9f 9e 9e e5 ................ 01a0 e4 e4 be be be a5 a4 a4 db db db ca ca ca 9c 9b ................ 01b0 9b 9e 9d 9d d4 d4 d4 d5 d5 d5 e2 e2 e2 c8 c8 c8 ................ 01c0 c2 c2 c2 dc dc dc d0 d0 d0 ac ab ab ad ac ac da ................ 01d0 da da b7 b7 b7 d3 d3 d3 ba b9 b9 ab aa aa c3 c3 ................ 01e0 c3 b2 b1 b1 b3 b3 b3 b6 b5 b5 9f 9f 9f d6 d6 d6 ................ 01f0 cb ca ca ce ce ce a3 a2 a2 b8 b8 b8 a0 9f 9f f0 ................ 0200 ef ef aa a9 a9 ab ab ab cd cd cd a6 a5 a5 a4 a3 ................ 0210 a3 bb ba ba b4 b4 b4 a6 a6 a6 c9 c9 c9 be bd bd ................ 0220 b7 b6 b6 c6 c6 c6 c1 c0 c0 af ae ae b6 b6 b6 a8 ................ 0230 a7 a7 c5 c5 c5 dd dd dd c1 c1 c1 cf cf cf ae ad ................ 0240 ad c7 c7 c7 cb cb cb bf be be b8 b7 b7 e2 e1 e1 ................ 0250 c4 c3 c3 b0 b0 b0 bb bb bb a9 a9 a9 bf bf bf a7 ................ 0260 a7 a7 c5 c4 c4 cc cc cc d2 d2 d2 cd cc cc ce cd ................ 0270 cd c2 c1 c1 d1 d0 d0 bc bc bc dc db db b5 b4 b4 ................ 0280 a9 a8 a8 bd bc bc b1 b1 b1 c8 c7 c7 d1 d1 d1 cf ................ 0290 ce ce b2 b2 b2 bd bd bd bc bb bb a1 a0 a0 ca c9 ................ 02a0 c9 d4 d3 d3 d2 d1 d1 cc cb cb 9e 9e 9e a1 a1 a1 ................ 02b0 d0 cf cf 9c 9c 9c c4 c4 c4 b9 b8 b8 c0 c0 c0 d8 ................ 02c0 d7 d7 e9 e8 e8 b9 b9 b9 ba ba ba a4 a4 a4 a0 a0 ................ 02d0 a0 eb ea ea a3 a3 a3 c6 c5 c5 b4 b3 b3 da d9 d9 ................ 02e0 b3 b2 b2 e0 df df d6 d5 d5 ae ae ae d3 d2 d2 c0 ................ 02f0 bf bf 99 98 98 ff ff ff 00 00 00 00 00 00 00 00 ................ 0300 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0310 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0320 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0330 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0340 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0350 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0360 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0380 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0390 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 03f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0400 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0410 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 ..............!. 0420 04 00 00 00 00 00 2c 00 00 00 00 c8 00 33 00 00 ......,......3.. 0430 08 ff 00 3b 09 1c 48 b0 a0 c1 83 08 13 2a 5c c8 ...;..H......*\. 0440 b0 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 33 6a .....#J.H.....3j 0450 dc c8 b1 a3 c7 8f 20 43 8a 1c 49 b2 a4 c9 93 28 ...... C..I....( 0460 53 aa 5c c9 b2 a5 cb 97 30 5d 3a 20 71 60 89 80 S.\.....0]: q`.. 0470 98 38 73 a2 74 20 47 84 0a 4e 40 83 42 19 e2 04 .8s.t G..N@.B... 0480 c3 4d 9d 48 93 5e 0c f1 23 a8 d3 a7 40 b3 5c 60 .M.H.^..#...@.\` 0490 10 40 a9 d5 ab 0a 57 b4 80 ca f5 29 98 07 04 b0 .@....W....).... 04a0 8a 15 cb 86 2b 91 29 52 10 20 c8 64 80 6b 8c 1e ....+.)R. .d.k.. 04b0 00 aa 8e 9d 8b 13 40 8e a7 44 78 b4 e9 70 83 03 ......@..Dx..p.. 04c0 89 02 05 68 5c e0 42 01 ea a0 06 72 e9 2a 5e 69 ...h\.B....r.*^i 04d0 f7 a9 90 1e 37 52 60 c8 10 61 02 80 09 0d 06 9c ....7R`..a...... 04e0 f0 a0 41 c7 d3 2f 88 17 8b 46 19 c4 29 0c 2e 21 ..A../...F..)..! 04f0 0a 2c 00 70 b4 60 00 06 11 4c 5c 71 5a 82 03 80 .,.p.`...L\qZ... 0500 d1 b8 47 1a 79 ca 65 87 83 06 ad 3b 39 d8 ca 64 ..G.y.e....;9..d 0510 43 d8 4e 04 06 00 72 0a e6 c3 71 83 2b 5e 48 90 C.N...r...q.+^H. 0520 60 34 77 c7 05 46 a8 48 00 41 20 71 cb 05 4f ad `4w..F.H.A q..O. 0530 84 ff 70 a0 c0 7b a7 26 ..p..{.& No. Time Source Destination Protocol Info 119 0.927181 141.3.161.43 193.99.144.85 TCP 55327 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626830 TSER=0 WS=6 Frame 119 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55327 (55327), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 120 0.928501 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 120 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55325 (55325), Seq: 1, Ack: 838, Len: 1360 No. Time Source Destination Protocol Info 121 0.928550 141.3.161.43 193.99.144.85 TCP 55325 > http [ACK] Seq=838 Ack=1361 Win=8256 Len=0 TSV=626830 TSER=776120523 Frame 121 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55325 (55325), Dst Port: http (80), Seq: 838, Ack: 1361, Len: 0 No. Time Source Destination Protocol Info 122 0.928947 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 122 (156 bytes on wire, 156 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55325 (55325), Seq: 1361, Ack: 838, Len: 88 No. Time Source Destination Protocol Info 123 0.928963 141.3.161.43 193.99.144.85 TCP 55325 > http [ACK] Seq=838 Ack=1449 Win=8256 Len=0 TSV=626830 TSER=776120523 Frame 123 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55325 (55325), Dst Port: http (80), Seq: 838, Ack: 1449, Len: 0 No. Time Source Destination Protocol Info 124 0.932437 193.99.144.85 141.3.161.43 TCP http > 55327 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120532 TSER=626830 Frame 124 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55327 (55327), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 125 0.932482 141.3.161.43 193.99.144.85 TCP 55327 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626831 TSER=776120532 Frame 125 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55327 (55327), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 126 0.932986 141.3.161.43 193.99.144.85 HTTP GET /icons/ho/background_navi_top.gif HTTP/1.1 Frame 126 (860 bytes on wire, 860 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55327 (55327), Dst Port: http (80), Seq: 1, Ack: 1, Len: 792 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 127 0.934951 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #129] Frame 127 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 1d 51 37 78 51 37 a9 2e 93 80 10 13 59 .P..Q7xQ7......Y 0010 51 7d 00 00 01 01 08 0a 2e 42 a8 d5 00 09 90 8e Q}.......B...... 0020 51 84 03 fe 15 e4 22 50 48 74 00 62 41 04 24 12 Q....."PHt.bA.$. 0030 d4 1e 36 1a 54 24 27 47 26 29 91 05 7c 70 32 85 ..6.T$'G&)..|p2. 0040 1e 3b 8a 16 25 27 53 c6 65 44 09 4a a0 91 25 4a .;..%'S.eD.J..%J 0050 3f 05 c5 c3 05 16 cc c7 65 50 51 24 90 a8 41 1a ?.......ePQ$..A. 0060 04 b5 49 75 05 bd 19 27 46 02 58 50 c0 0d 24 ac ..Iu...'F.XP..$. 0070 a7 67 50 7d 76 32 c1 03 17 24 10 a3 49 2b 3c d5 .gP}v2...$..I+<. 0080 c6 08 b7 15 04 80 53 44 cc ff 90 a7 41 03 30 39 ......SD....A.09 0090 2b 87 41 1d 59 44 15 22 e4 31 42 77 06 01 d0 81 +.A.YD.".1Bw.... 00a0 19 22 f8 01 87 05 c1 01 20 98 0b 8c 50 35 10 76 ."...... ...P5.v 00b0 56 88 10 87 0c f8 b9 3a 6c b1 70 50 ba 90 03 2f V......:l.pP.../ 00c0 44 3b 6d b5 03 01 b0 c2 01 07 08 10 40 08 c4 da D;m.........@... 00d0 c0 01 b0 02 ed 19 2a 09 09 d0 01 c2 04 37 ad 40 ......*......7.@ 00e0 93 4d dc 8a 30 c7 b1 27 76 72 01 20 22 0c e1 2b .M..0..'vr. "..+ 00f0 bb 09 d5 07 14 11 66 9e 38 22 50 42 dc b0 c0 7c ......f.8"PB...| 0100 9d 04 40 08 50 43 a4 d0 2a ae 40 d9 b0 c5 53 2c ..@.PC..*.@...S, 0110 00 47 50 08 85 06 15 83 21 08 76 92 2a 50 40 80 .GP.....!.v.*P@. 0120 5b a0 53 31 64 f0 1c c8 4f c5 f0 45 c9 07 39 80 [.S1d...O..E..9. 0130 a3 c8 2f 94 7c 32 27 97 34 e5 54 22 11 1c e5 2e ../.|2'.4.T".... 0140 95 9d 04 05 46 06 fe a1 c7 09 10 58 c4 0c 42 79 ....F......X..By 0150 03 39 a0 b4 53 1d f7 3b 90 15 4e 4d 71 43 06 07 .9..S..;..NMqC.. 0160 6d 15 d4 17 16 03 30 86 08 95 38 2b 50 61 7c 12 m.....0...8+Pa|. 0170 5d 29 90 5c 1d 21 9f 40 21 74 c5 09 0e a1 ed e9 ]).\.!.@!t...... 0180 83 07 3c 0a c2 55 0e 24 0c ff d9 49 dc 5d d1 0d ..<..U.$...I.].. 0190 b1 03 21 43 e5 47 b5 7b 16 c2 d5 18 88 83 4a 74 ..!C.G.{......Jt 01a0 50 76 14 30 a4 08 2f 72 55 82 93 02 11 de 55 14 Pv.0../rU.....U. 01b0 e0 1e 44 79 50 52 70 10 81 41 80 03 a5 83 06 1f ..DyPRp..A...... 01c0 08 70 17 50 65 5c 8c 76 a8 6b 07 a5 84 5a 4a 04 .p.Pe\.v.k...ZJ. 01d0 d5 02 de 9d 8c c9 c4 0b 45 d4 00 09 50 7f c4 38 ........E...P..8 01e0 f4 6d 5e 2b e1 85 0c 61 08 01 84 90 b9 07 85 04 .m^+...a........ 01f0 15 33 d4 00 05 f0 a7 16 34 35 13 36 38 c1 83 53 .3......45.68..S 0200 9a 20 b6 27 27 25 04 51 47 5b 2f b2 da c9 f0 45 . .''%.QG[/....E 0210 03 65 40 02 5a a2 0d d4 1a 75 dc ac c6 02 37 29 .e@.Z....u....7) 0220 7d c8 f1 32 ac ce c9 22 a1 75 ed 14 02 24 98 80 }..2...".u...$.. 0230 41 7c 06 94 17 08 a9 74 9c 10 83 89 04 e2 35 44 A|.....t......5D 0240 98 2f 76 9c 50 82 13 5c 70 80 0b 94 20 28 2e d0 ./v.P..\p... (.. 0250 d2 a2 94 70 84 04 40 60 03 33 08 ca 1b 12 85 be ...p..@`.3...... 0260 a0 9c 21 04 28 f8 80 03 50 b0 01 ff 2c 0a 06 4e ..!.(...P...,..N 0270 e8 82 03 40 18 94 1a b4 e9 63 0b ea 41 02 3c 00 ...@.....c..A.<. 0280 01 1b 04 45 07 10 60 c0 f7 ff 26 11 02 10 1c 40 ...E..`...&....@ 0290 71 40 11 83 8d 4a a8 3e f6 75 c2 7d 3a e8 41 17 q@...J.>.u.}:.A. 02a0 0e d0 34 a0 e4 c0 49 11 02 8a 17 76 c0 42 14 5c ..4...I....v.B.\ 02b0 90 4f 67 3a c8 53 fa 60 b1 82 ec 8c 13 4f 08 81 .Og:.S.`.....O.. 02c0 86 08 c8 89 1e 54 e7 55 40 d1 83 03 92 f4 26 1e .....T.U@.....&. 02d0 b8 c0 04 0d 68 40 12 82 42 85 0d 04 a0 50 42 70 ....h@..B....PBp 02e0 81 73 02 00 47 4e f0 00 49 4c e4 04 0c d4 30 47 .s..GN..IL....0G 02f0 06 28 c0 59 85 3a 83 06 30 40 95 42 f2 00 4c 05 .(.Y.:..0@.B..L. 0300 d9 1e 50 c6 70 81 13 30 20 39 31 08 0a 0d 1a b0 ..P.p..0 91..... 0310 27 1d 74 e0 01 95 79 13 1a 10 e9 b8 db 04 65 7d '.t...y.......e} 0320 ed 0b 8a 13 40 70 82 09 58 e0 95 a3 ac 02 99 64 ....@p..X......d 0330 15 17 02 50 e2 7d 05 10 a0 18 9d c2 85 5b 09 44 ...P.}.......[.D 0340 97 e9 e1 c0 00 ce 98 86 1d 9c a0 2a 59 6c e6 33 ...........*Yl.3 0350 dd 14 14 33 04 53 20 61 c8 95 09 96 20 b7 a0 0c ...3.S a.... ... 0360 81 55 e8 8b 02 cb 7c 30 47 81 14 52 6e 59 28 23 .U....|0G..RnY(# 0370 41 08 28 83 07 84 29 00 59 08 ca 11 16 40 03 d0 A.(...).Y....@.. 0380 29 b3 2a 20 60 92 93 12 09 ff cb 27 06 a5 08 26 ).* `......'...& 0390 b8 49 00 d2 a0 3e d1 7d 4e 6e 30 70 e2 41 98 e0 .I...>.}Nn0p.A.. 03a0 94 2b 60 f2 59 b0 fa 12 03 c8 e0 14 1b 80 60 74 .+`.Y.........`t 03b0 9d a0 28 27 2c 8a 51 08 3a 34 4c 35 c8 15 04 ca ..(',.Q.:4L5.... 03c0 d0 4d 29 51 09 7d 0b d0 1f 50 62 b0 87 b8 9c b1 .M)Q.}...Pb..... 03d0 2b 3f 60 1e 41 9c 12 02 3f 0e c4 0b 41 09 03 06 +?`.A...?...A... 03e0 48 6a 52 61 d6 93 62 16 e3 a7 13 dd a7 81 05 0c HjRa..b......... 03f0 04 6d b0 2c 29 50 5c c0 b5 83 b8 8f 13 2c 78 a8 .m.,)P\......,x. 0400 40 10 e1 94 28 5c 20 03 56 0a 0a 11 24 da 3c 4e @...(\ .V...$...@...... 0500 c0 50 45 e2 c0 04 01 16 30 d4 08 e2 84 a0 e4 a0 .PE.....0....... 0510 9c 7f 0b 4a 33 e9 99 5b c5 c6 f5 95 43 0d 8a 63 ...J3..[....C..c 0520 ab 0b 4b 9c 02 45 11 1e b0 40 84 07 10 01 d6 20 ..K..E...@..... 0530 04 03 4e 39 84 e8 06 e2 ..N9.... No. Time Source Destination Protocol Info 128 0.936821 141.3.161.43 193.99.144.85 TCP 55328 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626832 TSER=0 WS=6 Frame 128 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55328 (55328), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 129 0.939097 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 129 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55325 (55325), Seq: 1449, Ack: 838, Len: 1360 No. Time Source Destination Protocol Info 130 0.939135 141.3.161.43 193.99.144.85 TCP 55325 > http [ACK] Seq=838 Ack=2809 Win=10944 Len=0 TSV=626833 TSER=776120533 Frame 130 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55325 (55325), Dst Port: http (80), Seq: 838, Ack: 2809, Len: 0 No. Time Source Destination Protocol Info 131 0.939635 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (GIF89a) Frame 131 (917 bytes on wire, 917 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55325 (55325), Seq: 2809, Ack: 838, Len: 849 [Reassembled TCP Segments (3657 bytes): #120(1360), #122(88), #129(1360), #131(849)] Hypertext Transfer Protocol Compuserve GIF, Version: GIF89a No. Time Source Destination Protocol Info 132 0.939650 141.3.161.43 193.99.144.85 TCP 55325 > http [ACK] Seq=838 Ack=3658 Win=13696 Len=0 TSV=626833 TSER=776120533 Frame 132 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55325 (55325), Dst Port: http (80), Seq: 838, Ack: 3658, Len: 0 No. Time Source Destination Protocol Info 133 0.939993 193.99.144.85 141.3.161.43 TCP http > 55325 [FIN, ACK] Seq=3658 Ack=838 Win=4953 Len=0 TSV=776120533 TSER=626830 Frame 133 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55325 (55325), Seq: 3658, Ack: 838, Len: 0 No. Time Source Destination Protocol Info 134 0.940281 141.3.161.43 193.99.144.85 TCP 55325 > http [FIN, ACK] Seq=838 Ack=3659 Win=13696 Len=0 TSV=626833 TSER=776120533 Frame 134 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55325 (55325), Dst Port: http (80), Seq: 838, Ack: 3659, Len: 0 No. Time Source Destination Protocol Info 135 0.943990 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #136] Frame 135 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 1e 5f cd 08 1c 37 c0 05 9f 80 10 13 34 .P.._...7......4 0010 db e9 00 00 01 01 08 0a 2e 42 a8 de 00 09 90 8d .........B...... 0020 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d HTTP/1.1 200 OK. 0030 0a 44 61 74 65 3a 20 46 72 69 2c 20 31 32 20 53 .Date: Fri, 12 S 0040 65 70 20 32 30 30 38 20 31 31 3a 33 36 3a 30 32 ep 2008 11:36:02 0050 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 GMT..Server: Ap 0060 61 63 68 65 2f 31 2e 33 2e 33 34 0d 0a 56 61 72 ache/1.3.34..Var 0070 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 y: Accept-Encodi 0080 6e 67 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 ng..Last-Modifie 0090 64 3a 20 57 65 64 2c 20 31 39 20 4d 61 72 20 32 d: Wed, 19 Mar 2 00a0 30 30 38 20 31 36 3a 31 39 3a 31 38 20 47 4d 54 008 16:19:18 GMT 00b0 0d 0a 45 54 61 67 3a 20 22 31 66 39 33 33 32 2d ..ETag: "1f9332- 00c0 34 64 61 2d 34 37 65 31 33 64 30 36 22 0d 0a 41 4da-47e13d06"..A 00d0 63 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 ccept-Ranges: by 00e0 74 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e tes..Content-Len 00f0 67 74 68 3a 20 31 32 34 32 0d 0a 43 6f 6e 6e 65 gth: 1242..Conne 0100 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f ction: close..Co 0110 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c ntent-Type: appl 0120 69 63 61 74 69 6f 6e 2f 78 2d 6a 61 76 61 73 63 ication/x-javasc 0130 72 69 70 74 0d 0a 0d 0a 2f 2a 20 6c 6f 67 69 6e ript..../* login 0140 5f 68 6f 2e 6a 73 20 0a 20 2a 20 28 63 29 20 48 _ho.js . * (c) H 0150 65 69 73 65 20 5a 65 69 74 73 63 68 72 69 66 74 eise Zeitschrift 0160 65 6e 20 56 65 72 6c 61 67 20 47 6d 62 48 20 26 en Verlag GmbH & 0170 20 43 6f 2e 20 4b 47 0a 20 2a 20 24 52 65 76 69 Co. KG. * $Revi 0180 73 69 6f 6e 3a 20 34 34 34 32 20 24 0a 20 2a 2f sion: 4442 $. */ 0190 0a 0a 66 75 6e 63 74 69 6f 6e 20 5f 5f 68 65 69 ..function __hei 01a0 73 65 5f 6c 6f 67 69 6e 6f 75 74 20 28 29 20 7b se_loginout () { 01b0 0a 09 76 61 72 20 72 65 73 61 6c 65 5f 66 6c 61 ..var resale_fla 01c0 67 20 3d 20 28 20 6c 6f 63 61 74 69 6f 6e 2e 68 g = ( location.h 01d0 72 65 66 2e 6d 61 74 63 68 28 20 2f 72 65 73 61 ref.match( /resa 01e0 6c 65 7c 5c 2f 62 69 6e 5c 2f 6e 65 77 73 6c 65 le|\/bin\/newsle 01f0 74 74 65 72 5c 2f 5b 5e 5c 2f 5d 2b 5c 2f 68 65 tter\/[^\/]+\/he 0200 69 73 65 2d 72 65 73 61 6c 65 2f 20 29 20 21 3d ise-resale/ ) != 0210 20 6e 75 6c 6c 20 29 3b 0a 09 76 61 72 20 72 65 null );..var re 0220 73 61 6c 65 5f 73 6b 69 6e 20 3d 20 72 65 73 61 sale_skin = resa 0230 6c 65 5f 66 6c 61 67 20 3f 20 27 26 61 6d 70 3b le_flag ? '& 0240 73 6b 69 6e 3d 72 65 73 61 6c 65 27 20 3a 20 27 skin=resale' : ' 0250 27 3b 0a 0a 09 76 61 72 20 73 73 6c 70 72 65 66 ';...var sslpref 0260 69 78 20 3d 20 27 27 3b 0a 09 69 66 20 28 6c 6f ix = '';..if (lo 0270 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 20 cation.hostname 0280 3d 3d 20 22 77 77 77 2e 68 65 69 73 65 2e 64 65 == "www.heise.de 0290 22 29 20 7b 0a 09 09 73 73 6c 70 72 65 66 69 78 ") {...sslprefix 02a0 20 3d 20 27 68 74 74 70 73 3a 2f 2f 27 20 2b 20 = 'https://' + 02b0 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d location.hostnam 02c0 65 3b 0a 09 7d 0a 0a 09 76 61 72 20 73 73 6f 5f e;..}...var sso_ 02d0 62 61 73 65 20 3d 20 73 73 6c 70 72 65 66 69 78 base = sslprefix 02e0 20 2b 20 27 2f 75 73 65 72 64 62 2f 73 73 6f 3f + '/userdb/sso? 02f0 64 69 72 69 64 3d 31 27 3b 0a 09 76 61 72 20 72 dirid=1';..var r 0300 65 67 5f 62 61 73 65 20 3d 20 73 73 6c 70 72 65 eg_base = sslpre 0310 66 69 78 20 2b 20 27 2f 75 73 65 72 64 62 2f 72 fix + '/userdb/r 0320 65 67 69 73 74 65 72 3f 64 69 72 69 64 3d 31 27 egister?dirid=1' 0330 3b 0a 09 76 61 72 20 66 77 09 09 20 3d 20 27 26 ;..var fw.. = '& 0340 61 6d 70 3b 66 6f 72 77 61 72 64 3d 27 20 2b 20 amp;forward=' + 0350 65 73 63 61 70 65 28 6c 6f 63 61 74 69 6f 6e 2e escape(location. 0360 68 72 65 66 29 3b 0a 09 76 61 72 20 73 73 6f 5f href);..var sso_ 0370 69 6e 09 20 3d 20 73 73 6f 5f 62 61 73 65 20 2b in. = sso_base + 0380 20 27 26 61 6d 70 3b 72 6d 3d 73 68 6f 77 5f 6c '&rm=show_l 0390 6f 67 69 6e 27 20 2b 20 72 65 73 61 6c 65 5f 73 ogin' + resale_s 03a0 6b 69 6e 20 2b 20 66 77 3b 0a 09 76 61 72 20 73 kin + fw;..var s 03b0 73 6f 5f 6f 75 74 09 20 3d 20 73 73 6f 5f 62 61 so_out. = sso_ba 03c0 73 65 20 2b 20 27 26 61 6d 70 3b 72 6d 3d 64 6f se + '&rm=do 03d0 5f 6c 6f 67 6f 75 74 27 20 20 2b 20 66 77 3b 0a _logout' + fw;. 03e0 09 76 61 72 20 73 73 6f 5f 72 65 67 09 20 3d 20 .var sso_reg. = 03f0 72 65 73 61 6c 65 5f 66 6c 61 67 0a 20 20 20 20 resale_flag. 0400 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0410 3f 20 28 20 27 2f 72 65 73 61 6c 65 2f 72 65 67 ? ( '/resale/reg 0420 69 73 74 72 69 65 72 65 6e 2f 27 20 29 0a 20 20 istrieren/' ). 0430 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0440 20 20 3a 20 28 20 72 65 67 5f 62 61 73 65 20 2b : ( reg_base + 0450 20 27 26 61 6d 70 3b 72 6d 3d 73 68 6f 77 5f 72 '&rm=show_r 0460 65 67 69 73 74 72 61 74 69 6f 6e 27 20 2b 20 72 egistration' + r 0470 65 73 61 6c 65 5f 73 6b 69 6e 20 29 3b 0a 09 76 esale_skin );..v 0480 61 72 20 73 73 6f 5f 64 61 74 61 20 3d 20 72 65 ar sso_data = re 0490 73 61 6c 65 5f 66 6c 61 67 20 3f 20 27 2f 72 65 sale_flag ? '/re 04a0 73 61 6c 65 2f 70 72 6f 66 69 6c 2f 27 20 3a 20 sale/profil/' : 04b0 28 20 72 65 67 5f 62 61 73 65 20 2b 20 27 26 61 ( reg_base + '&a 04c0 6d 70 3b 72 6d 3d 73 68 6f 77 5f 75 73 65 72 64 mp;rm=show_userd 04d0 61 74 61 27 20 2b 20 66 77 20 29 3b 0a 09 72 65 ata' + fw );..re 04e0 74 75 72 6e 28 28 64 6f 63 75 6d 65 6e 74 2e 63 turn((document.c 04f0 6f 6f 6b 69 65 2e 69 6e 64 65 78 4f 66 28 22 73 ookie.indexOf("s 0500 73 6f 68 65 69 73 65 64 65 3d 22 29 20 3d 3d 20 soheisede=") == 0510 2d 31 29 0a 09 09 3f 20 27 3c 62 3e 53 69 65 20 -1)...? 'Sie 0520 73 69 6e 64 20 47 61 73 74 3c 2f 62 3e 3c 62 72 sind Gast
http [ACK] Seq=801 Ack=1361 Win=8256 Len=0 TSV=626835 TSER=776120542 Frame 137 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55326 (55326), Dst Port: http (80), Seq: 801, Ack: 1361, Len: 0 No. Time Source Destination Protocol Info 138 0.949134 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 138 (156 bytes on wire, 156 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55326 (55326), Seq: 1361, Ack: 801, Len: 88 No. Time Source Destination Protocol Info 139 0.949148 141.3.161.43 193.99.144.85 TCP 55326 > http [ACK] Seq=801 Ack=1449 Win=8256 Len=0 TSV=626835 TSER=776120542 Frame 139 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55326 (55326), Dst Port: http (80), Seq: 801, Ack: 1449, Len: 0 No. Time Source Destination Protocol Info 140 0.949576 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (application/x-javascript) Frame 140 (142 bytes on wire, 142 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55326 (55326), Seq: 1449, Ack: 801, Len: 74 [Reassembled TCP Segments (1522 bytes): #136(1360), #138(88), #140(74)] Hypertext Transfer Protocol Line-based text data: application/x-javascript No. Time Source Destination Protocol Info 141 0.949589 141.3.161.43 193.99.144.85 TCP 55326 > http [ACK] Seq=801 Ack=1523 Win=8256 Len=0 TSV=626835 TSER=776120542 Frame 141 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55326 (55326), Dst Port: http (80), Seq: 801, Ack: 1523, Len: 0 No. Time Source Destination Protocol Info 142 0.949936 193.99.144.85 141.3.161.43 TCP http > 55328 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120542 TSER=626832 Frame 142 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55328 (55328), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 143 0.949961 141.3.161.43 193.99.144.85 TCP 55328 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626835 TSER=776120542 Frame 143 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55328 (55328), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 144 0.950160 193.99.144.85 141.3.161.43 TCP http > 55326 [FIN, ACK] Seq=1523 Ack=801 Win=4916 Len=0 TSV=776120544 TSER=626829 Frame 144 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55326 (55326), Seq: 1523, Ack: 801, Len: 0 No. Time Source Destination Protocol Info 145 0.950250 193.99.144.85 141.3.161.43 TCP http > 55325 [ACK] Seq=3659 Ack=839 Win=4953 Len=0 TSV=776120545 TSER=626833 Frame 145 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55325 (55325), Seq: 3659, Ack: 839, Len: 0 No. Time Source Destination Protocol Info 146 0.950776 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (GIF89a) Frame 146 (827 bytes on wire, 827 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55327 (55327), Seq: 1, Ack: 793, Len: 759 Hypertext Transfer Protocol Compuserve GIF, Version: GIF89a No. Time Source Destination Protocol Info 147 0.950797 141.3.161.43 193.99.144.85 TCP 55327 > http [ACK] Seq=793 Ack=760 Win=7040 Len=0 TSV=626836 TSER=776120548 Frame 147 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55327 (55327), Dst Port: http (80), Seq: 793, Ack: 760, Len: 0 No. Time Source Destination Protocol Info 148 0.950996 193.99.144.85 141.3.161.43 TCP http > 55327 [FIN, ACK] Seq=760 Ack=793 Win=4908 Len=0 TSV=776120549 TSER=626831 Frame 148 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55327 (55327), Seq: 760, Ack: 793, Len: 0 No. Time Source Destination Protocol Info 149 0.951457 141.3.161.43 193.99.144.85 TCP 55326 > http [FIN, ACK] Seq=801 Ack=1524 Win=8256 Len=0 TSV=626836 TSER=776120544 Frame 149 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55326 (55326), Dst Port: http (80), Seq: 801, Ack: 1524, Len: 0 No. Time Source Destination Protocol Info 150 0.951530 141.3.161.43 193.99.144.85 HTTP GET /icons/ho/midot.gif HTTP/1.1 Frame 150 (844 bytes on wire, 844 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55328 (55328), Dst Port: http (80), Seq: 1, Ack: 1, Len: 776 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 151 0.951575 141.3.161.43 193.99.144.85 TCP 55327 > http [FIN, ACK] Seq=793 Ack=761 Win=7040 Len=0 TSV=626836 TSER=776120549 Frame 151 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55327 (55327), Dst Port: http (80), Seq: 793, Ack: 761, Len: 0 No. Time Source Destination Protocol Info 152 0.963038 193.99.144.85 141.3.161.43 TCP http > 55326 [ACK] Seq=1524 Ack=802 Win=4916 Len=0 TSV=776120562 TSER=626836 Frame 152 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55326 (55326), Seq: 1524, Ack: 802, Len: 0 No. Time Source Destination Protocol Info 153 0.963587 193.99.144.85 141.3.161.43 TCP http > 55327 [ACK] Seq=761 Ack=794 Win=4908 Len=0 TSV=776120563 TSER=626836 Frame 153 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55327 (55327), Seq: 761, Ack: 794, Len: 0 No. Time Source Destination Protocol Info 154 0.970895 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (GIF89a) Frame 154 (383 bytes on wire, 383 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55328 (55328), Seq: 1, Ack: 777, Len: 315 Hypertext Transfer Protocol Compuserve GIF, Version: GIF89a No. Time Source Destination Protocol Info 155 0.970945 141.3.161.43 193.99.144.85 TCP 55328 > http [ACK] Seq=777 Ack=316 Win=6592 Len=0 TSV=626841 TSER=776120569 Frame 155 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55328 (55328), Dst Port: http (80), Seq: 777, Ack: 316, Len: 0 No. Time Source Destination Protocol Info 156 0.971330 193.99.144.85 141.3.161.43 TCP http > 55328 [FIN, ACK] Seq=316 Ack=777 Win=4892 Len=0 TSV=776120570 TSER=626836 Frame 156 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55328 (55328), Seq: 316, Ack: 777, Len: 0 No. Time Source Destination Protocol Info 157 0.972147 141.3.161.43 193.99.144.85 TCP 55328 > http [FIN, ACK] Seq=777 Ack=317 Win=6592 Len=0 TSV=626841 TSER=776120570 Frame 157 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55328 (55328), Dst Port: http (80), Seq: 777, Ack: 317, Len: 0 No. Time Source Destination Protocol Info 158 0.984504 193.99.144.85 141.3.161.43 TCP http > 55328 [ACK] Seq=317 Ack=778 Win=4892 Len=0 TSV=776120583 TSER=626841 Frame 158 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55328 (55328), Seq: 317, Ack: 778, Len: 0 No. Time Source Destination Protocol Info 159 1.164228 141.3.161.43 193.99.144.85 TCP 55329 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626889 TSER=0 WS=6 Frame 159 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55329 (55329), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 160 1.169612 193.99.144.85 141.3.161.43 TCP http > 55329 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120769 TSER=626889 Frame 160 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55329 (55329), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 161 1.169670 141.3.161.43 193.99.144.85 TCP 55329 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626890 TSER=776120769 Frame 161 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55329 (55329), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 162 1.169998 141.3.161.43 193.99.144.85 HTTP GET /icons/ho/heise_min.gif HTTP/1.1 Frame 162 (897 bytes on wire, 897 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55329 (55329), Dst Port: http (80), Seq: 1, Ack: 1, Len: 829 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 163 1.182366 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (GIF89a) Frame 163 (1207 bytes on wire, 1207 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55329 (55329), Seq: 1, Ack: 830, Len: 1139 Hypertext Transfer Protocol Compuserve GIF, Version: GIF89a No. Time Source Destination Protocol Info 164 1.182435 141.3.161.43 193.99.144.85 TCP 55329 > http [ACK] Seq=830 Ack=1140 Win=8256 Len=0 TSV=626894 TSER=776120780 Frame 164 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55329 (55329), Dst Port: http (80), Seq: 830, Ack: 1140, Len: 0 No. Time Source Destination Protocol Info 165 1.182892 141.3.161.43 193.99.144.85 TCP 55329 > http [FIN, ACK] Seq=830 Ack=1140 Win=8256 Len=0 TSV=626894 TSER=776120780 Frame 165 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55329 (55329), Dst Port: http (80), Seq: 830, Ack: 1140, Len: 0 No. Time Source Destination Protocol Info 166 1.188997 193.99.144.85 141.3.161.43 TCP http > 55329 [FIN, ACK] Seq=1140 Ack=830 Win=4945 Len=0 TSV=776120781 TSER=626890 Frame 166 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55329 (55329), Seq: 1140, Ack: 830, Len: 0 No. Time Source Destination Protocol Info 167 1.189042 141.3.161.43 193.99.144.85 TCP 55329 > http [ACK] Seq=831 Ack=1141 Win=8256 Len=0 TSV=626895 TSER=776120781 Frame 167 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55329 (55329), Dst Port: http (80), Seq: 831, Ack: 1141, Len: 0 No. Time Source Destination Protocol Info 168 1.189277 193.99.144.85 141.3.161.43 TCP http > 55329 [FIN, ACK] Seq=1140 Ack=831 Win=4945 Len=0 TSV=776120788 TSER=626894 Frame 168 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55329 (55329), Seq: 1140, Ack: 831, Len: 0 No. Time Source Destination Protocol Info 169 1.191782 141.3.161.43 193.99.144.85 TCP 55330 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626896 TSER=0 WS=6 Frame 169 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55330 (55330), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 170 1.196504 193.99.144.85 141.3.161.43 TCP http > 55330 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120796 TSER=626896 Frame 170 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55330 (55330), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 171 1.196549 141.3.161.43 193.99.144.85 TCP 55330 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626897 TSER=776120796 Frame 171 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55330 (55330), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 172 1.196832 141.3.161.43 193.99.144.85 HTTP GET /icons/ho/vorlesen.gif HTTP/1.1 Frame 172 (895 bytes on wire, 895 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55330 (55330), Dst Port: http (80), Seq: 1, Ack: 1, Len: 827 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 173 1.208181 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (GIF89a) Frame 173 (477 bytes on wire, 477 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55330 (55330), Seq: 1, Ack: 828, Len: 409 Hypertext Transfer Protocol Compuserve GIF, Version: GIF89a No. Time Source Destination Protocol Info 174 1.208234 141.3.161.43 193.99.144.85 TCP 55330 > http [ACK] Seq=828 Ack=410 Win=6592 Len=0 TSV=626900 TSER=776120807 Frame 174 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55330 (55330), Dst Port: http (80), Seq: 828, Ack: 410, Len: 0 No. Time Source Destination Protocol Info 175 1.208744 141.3.161.43 193.99.144.85 TCP 55330 > http [FIN, ACK] Seq=828 Ack=410 Win=6592 Len=0 TSV=626900 TSER=776120807 Frame 175 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55330 (55330), Dst Port: http (80), Seq: 828, Ack: 410, Len: 0 No. Time Source Destination Protocol Info 176 1.209234 193.99.144.85 141.3.161.43 TCP http > 55330 [FIN, ACK] Seq=410 Ack=828 Win=4943 Len=0 TSV=776120808 TSER=626897 Frame 176 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55330 (55330), Seq: 410, Ack: 828, Len: 0 No. Time Source Destination Protocol Info 177 1.209253 141.3.161.43 193.99.144.85 TCP 55330 > http [ACK] Seq=829 Ack=411 Win=6592 Len=0 TSV=626900 TSER=776120808 Frame 177 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55330 (55330), Dst Port: http (80), Seq: 829, Ack: 411, Len: 0 No. Time Source Destination Protocol Info 178 1.213281 141.3.161.43 193.99.144.85 TCP 55331 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626901 TSER=0 WS=6 Frame 178 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 179 1.213604 193.99.144.85 141.3.161.43 TCP http > 55330 [FIN, ACK] Seq=410 Ack=829 Win=4943 Len=0 TSV=776120813 TSER=626900 Frame 179 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55330 (55330), Seq: 410, Ack: 829, Len: 0 No. Time Source Destination Protocol Info 180 1.218562 141.3.161.43 193.99.144.85 TCP 55332 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626903 TSER=0 WS=6 Frame 180 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55332 (55332), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 181 1.219158 193.99.144.85 141.3.161.43 TCP http > 55331 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120818 TSER=626901 Frame 181 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 182 1.219193 141.3.161.43 193.99.144.85 TCP 55331 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626903 TSER=776120818 Frame 182 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 183 1.219414 141.3.161.43 193.99.144.85 HTTP GET /bilder/115857/0/0 HTTP/1.1 Frame 183 (804 bytes on wire, 804 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 1, Ack: 1, Len: 736 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 184 1.224933 193.99.144.85 141.3.161.43 TCP http > 55332 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120824 TSER=626903 Frame 184 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55332 (55332), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 185 1.224975 141.3.161.43 193.99.144.85 TCP 55332 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626904 TSER=776120824 Frame 185 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55332 (55332), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 186 1.225252 141.3.161.43 193.99.144.85 HTTP GET /icons/lupe.png HTTP/1.1 Frame 186 (888 bytes on wire, 888 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55332 (55332), Dst Port: http (80), Seq: 1, Ack: 1, Len: 820 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 187 1.239879 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (PNG) Frame 187 (549 bytes on wire, 549 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55332 (55332), Seq: 1, Ack: 821, Len: 481 Hypertext Transfer Protocol Portable Network Graphics No. Time Source Destination Protocol Info 188 1.239921 141.3.161.43 193.99.144.85 TCP 55332 > http [ACK] Seq=821 Ack=482 Win=6592 Len=0 TSV=626908 TSER=776120839 Frame 188 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55332 (55332), Dst Port: http (80), Seq: 821, Ack: 482, Len: 0 No. Time Source Destination Protocol Info 189 1.240352 141.3.161.43 193.99.144.85 TCP 55332 > http [FIN, ACK] Seq=821 Ack=482 Win=6592 Len=0 TSV=626908 TSER=776120839 Frame 189 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55332 (55332), Dst Port: http (80), Seq: 821, Ack: 482, Len: 0 No. Time Source Destination Protocol Info 190 1.248836 193.99.144.85 141.3.161.43 TCP http > 55332 [FIN, ACK] Seq=482 Ack=821 Win=4936 Len=0 TSV=776120841 TSER=626904 Frame 190 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55332 (55332), Seq: 482, Ack: 821, Len: 0 No. Time Source Destination Protocol Info 191 1.248876 141.3.161.43 193.99.144.85 TCP 55332 > http [ACK] Seq=822 Ack=483 Win=6592 Len=0 TSV=626910 TSER=776120841 Frame 191 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55332 (55332), Dst Port: http (80), Seq: 822, Ack: 483, Len: 0 No. Time Source Destination Protocol Info 192 1.249109 193.99.144.85 141.3.161.43 TCP http > 55332 [FIN, ACK] Seq=482 Ack=822 Win=4936 Len=0 TSV=776120846 TSER=626908 Frame 192 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55332 (55332), Seq: 482, Ack: 822, Len: 0 No. Time Source Destination Protocol Info 193 1.254558 141.3.161.43 129.13.64.5 DNS Standard query A vpn-cl-161-43.rz.uni-karlsruhe.de Frame 193 (95 bytes on wire, 95 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 129.13.64.5 (129.13.64.5) User Datagram Protocol, Src Port: 52963 (52963), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Info 194 1.256163 129.13.64.5 141.3.161.43 DNS Standard query response A 141.3.161.43 Frame 194 (301 bytes on wire, 301 bytes captured) Linux cooked capture Internet Protocol, Src: 129.13.64.5 (129.13.64.5), Dst: 141.3.161.43 (141.3.161.43) User Datagram Protocol, Src Port: domain (53), Dst Port: 52963 (52963) Domain Name System (response) No. Time Source Destination Protocol Info 195 1.268690 141.3.161.43 193.99.144.85 TCP 55333 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626915 TSER=0 WS=6 Frame 195 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55333 (55333), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 196 1.273614 193.99.144.85 141.3.161.43 TCP http > 55333 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120873 TSER=626915 Frame 196 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55333 (55333), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 197 1.273657 141.3.161.43 193.99.144.85 TCP 55333 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626916 TSER=776120873 Frame 197 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55333 (55333), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 198 1.274071 141.3.161.43 193.99.144.85 HTTP GET /icons/ho/background_navigation.gif HTTP/1.1 Frame 198 (864 bytes on wire, 864 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55333 (55333), Dst Port: http (80), Seq: 1, Ack: 1, Len: 796 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 199 1.274611 141.3.161.43 129.13.64.5 DNS Standard query A netserv.rz.uni-karlsruhe.de Frame 199 (89 bytes on wire, 89 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 129.13.64.5 (129.13.64.5) User Datagram Protocol, Src Port: 52963 (52963), Dst Port: domain (53) Domain Name System (query) No. Time Source Destination Protocol Info 200 1.279687 129.13.64.5 141.3.161.43 DNS Standard query response A 129.13.64.5 Frame 200 (271 bytes on wire, 271 bytes captured) Linux cooked capture Internet Protocol, Src: 129.13.64.5 (129.13.64.5), Dst: 141.3.161.43 (141.3.161.43) User Datagram Protocol, Src Port: domain (53), Dst Port: 52963 (52963) Domain Name System (response) No. Time Source Destination Protocol Info 201 1.287293 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (GIF89a) Frame 201 (568 bytes on wire, 568 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55333 (55333), Seq: 1, Ack: 797, Len: 500 Hypertext Transfer Protocol Compuserve GIF, Version: GIF89a No. Time Source Destination Protocol Info 202 1.287347 141.3.161.43 193.99.144.85 TCP 55333 > http [ACK] Seq=797 Ack=501 Win=6592 Len=0 TSV=626920 TSER=776120886 Frame 202 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55333 (55333), Dst Port: http (80), Seq: 797, Ack: 501, Len: 0 No. Time Source Destination Protocol Info 203 1.287818 141.3.161.43 193.99.144.85 TCP 55333 > http [FIN, ACK] Seq=797 Ack=501 Win=6592 Len=0 TSV=626920 TSER=776120886 Frame 203 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55333 (55333), Dst Port: http (80), Seq: 797, Ack: 501, Len: 0 No. Time Source Destination Protocol Info 204 1.289121 193.99.144.85 141.3.161.43 TCP http > 55333 [FIN, ACK] Seq=501 Ack=797 Win=4912 Len=0 TSV=776120887 TSER=626916 Frame 204 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55333 (55333), Seq: 501, Ack: 797, Len: 0 No. Time Source Destination Protocol Info 205 1.289145 141.3.161.43 193.99.144.85 TCP 55333 > http [ACK] Seq=798 Ack=502 Win=6592 Len=0 TSV=626920 TSER=776120887 Frame 205 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55333 (55333), Dst Port: http (80), Seq: 798, Ack: 502, Len: 0 No. Time Source Destination Protocol Info 206 1.290379 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #207] Frame 206 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 a3 d7 37 7c b3 d2 80 10 12 f4 .P.#....7|...... 0010 65 3a 00 00 01 01 08 0a 2e 42 aa 39 00 09 90 d7 e:.......B.9.... 0020 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d HTTP/1.1 200 OK. 0030 0a 44 61 74 65 3a 20 46 72 69 2c 20 31 32 20 53 .Date: Fri, 12 S 0040 65 70 20 32 30 30 38 20 31 31 3a 33 36 3a 30 32 ep 2008 11:36:02 0050 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 GMT..Server: Ap 0060 61 63 68 65 2f 31 2e 33 2e 33 34 0d 0a 56 61 72 ache/1.3.34..Var 0070 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 y: Accept-Encodi 0080 6e 67 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 ng..Connection: 0090 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d close..Transfer- 00a0 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 Encoding: chunke 00b0 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a d..Content-Type: 00c0 20 69 6d 61 67 65 2f 6a 70 65 67 0d 0a 0d 0a 32 image/jpeg....2 00d0 30 30 30 0d 0a ff d8 ff e0 00 10 4a 46 49 46 00 000........JFIF. 00e0 01 01 01 00 48 00 48 00 00 ff e1 0c fe 45 78 69 ....H.H......Exi 00f0 66 00 00 4d 4d 00 2a 00 00 0c 96 ff d8 ff e0 00 f..MM.*......... 0100 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff .JFIF.....H.H... 0110 fe 00 0c 41 70 70 6c 65 4d 61 72 6b 0a ff db 00 ...AppleMark.... 0120 84 00 0b 08 08 0a 08 07 0b 0a 09 0a 0c 0c 0b 0d ................ 0130 10 1b 12 10 0f 0f 10 21 18 19 14 1b 27 22 29 28 .......!....'")( 0140 26 22 26 25 2b 30 3d 34 2b 2d 3a 2e 25 26 35 49 &"&%+0=4+-:.%&5I 0150 36 3a 3f 41 45 45 45 2a 33 4b 51 4b 43 50 3d 43 6:?AEEE*3KQKCP=C 0160 45 42 01 0c 0c 0c 10 0e 10 20 12 12 20 42 2c 26 EB....... .. B,& 0170 2c 42 42 42 42 42 42 42 42 42 42 42 42 42 42 42 ,BBBBBBBBBBBBBBB 0180 42 42 42 42 42 42 42 42 42 42 42 42 42 42 42 42 BBBBBBBBBBBBBBBB 0190 42 42 42 42 42 42 42 42 42 42 42 42 42 42 42 42 BBBBBBBBBBBBBBBB 01a0 42 42 42 ff c4 01 a2 00 00 01 05 01 01 01 01 01 BBB............. 01b0 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ................ 01c0 08 09 0a 0b 01 00 03 01 01 01 01 01 01 01 01 01 ................ 01d0 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a ................ 01e0 0b 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 ................ 01f0 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 .}........!1A..Q 0200 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 a."q.2....#B...R 0210 d1 f0 24 33 62 72 82 09 0a 16 17 18 19 1a 25 26 ..$3br........%& 0220 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 '()*456789:CDEFG 0230 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 HIJSTUVWXYZcdefg 0240 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 hijstuvwxyz..... 0250 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 ................ 0260 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 ................ 0270 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da ................ 0280 e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 ................ 0290 f7 f8 f9 fa 11 00 02 01 02 04 04 03 04 07 05 04 ................ 02a0 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 ....w.......!1.. 02b0 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 AQ.aq."2...B.... 02c0 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 .#3R..br...$4.%. 02d0 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 ....&'()*56789:C 02e0 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 DEFGHIJSTUVWXYZc 02f0 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 82 defghijstuvwxyz. 0300 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 ................ 0310 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 ................ 0320 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 ................ 0330 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 ................ 0340 f4 f5 f6 f7 f8 f9 fa ff c0 00 11 08 00 3c 00 c8 .............<.. 0350 03 01 22 00 02 11 01 03 11 01 ff da 00 0c 03 01 .."............. 0360 00 02 11 03 11 00 3f 00 f4 45 9d c4 ec 5a ea d4 ......?..E...Z.. 0370 c2 41 c0 1c 30 f4 e7 38 a9 20 b8 88 33 fd a2 78 .A..0..8. ..3..x 0380 19 4f dc 08 c4 63 af 5c b7 d3 f5 ac 25 6d 2c c8 .O...c.\....%m,. 0390 01 b7 b5 cf 5c f9 f2 83 9f a6 29 a6 4d 34 48 57 ....\.....).M4HW 03a0 c9 b5 23 a8 cc d2 e7 f3 ff 00 3f a5 5f b9 e6 47 ..#.......?._..G 03b0 bf e4 74 df 69 b2 ff 00 9e ab ff 00 7f 3f fa f4 ..t.i........?.. 03c0 7d a6 cb fe 7a af fd fc ff 00 eb d7 3e 6e ec 42 }...z.......>n.B 03d0 90 b0 da 0c 74 cc d2 11 8f cb 9a 7d bc d6 b7 3f ....t......}...? 03e0 ea ad ed 5c 80 0b e2 59 06 33 9c 76 f6 fd 29 da ...\...Y.3.v..). 03f0 9f 98 7b fe 46 ef da 6c bf e7 aa ff 00 df cf fe ..{.F..l........ 0400 bd 1f 69 b2 ff 00 9e ab ff 00 7f 3f fa f5 4c 43 ..i........?..LC 0410 a5 e0 66 03 9e f8 2d fe 34 be 4e 95 ff 00 3c 1b ..f...-.4.N...<. 0420 f3 6f f1 a3 f7 7e 61 ef f9 16 fe d3 65 ff 00 3d .o...~a.....e..= 0430 57 fe fe 7f f5 e8 fb 4d 97 fc f5 5f fb f9 ff 00 W......M..._.... 0440 d7 aa 9e 4e 95 ff 00 3c 1b f3 6f f1 a3 c9 d2 bf ...N...<..o..... 0450 e7 83 7e 6d fe 34 7e ef cc 3d ff 00 22 df da 6c ..~m.4~..=.."..l 0460 bf e7 aa ff 00 df cf fe bd 2a cf 68 e7 0a e1 8f .........*.h.... 0470 a0 7c ff 00 5a a7 e4 e9 5f f3 c1 bf 36 ff 00 1a .|..Z..._...6... 0480 af 76 34 cb 78 8c b1 c2 8a f9 0b 99 0b 81 8c fa .v4.x........... 0490 8a 4f 92 da 5c 17 3f 5b 1a f9 83 d1 bf ef a3 fe .O..\.?[........ 04a0 34 66 0f 46 ff 00 be 8f f8 d6 3e 9f aa db b4 be 4f.F......>..... 04b0 58 f2 76 9e 71 1c 8e c7 a7 b8 ab 37 f7 b6 8b 6f X.v.q......7...o 04c0 92 06 73 c1 91 99 40 fc 47 35 05 97 f3 07 a3 7f ..s...@.G5...... 04d0 df 47 fc 68 cc 1e 8d ff 00 7d 1f f1 ac eb 0d 56 .G.h.....}.....V 04e0 d6 74 2a db 72 bc 01 1b 33 70 3d 49 c7 b5 02 eb .t*.r...3p=I.... 04f0 4f 6b f7 de 3f 79 c6 cc 16 dc 70 33 cf 38 a0 0d Ok..?y....p3.8.. 0500 1c c1 e8 df f7 d1 ff 00 1a 33 07 a3 7f df 47 fc .........3....G. 0510 6a 2f b6 5a fa 3f eb fe 34 7d b2 d7 d1 ff 00 5f j/.Z.?..4}....._ 0520 f1 a0 09 73 07 a3 7f df 47 fc 68 cc 1e 8d ff 00 ...s....G.h..... 0530 7d 1f f1 a8 be d9 6b e8 }.....k. No. Time Source Destination Protocol Info 207 1.290659 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 207 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 1, Ack: 737, Len: 1360 No. Time Source Destination Protocol Info 208 1.290694 141.3.161.43 193.99.144.85 TCP 55331 > http [ACK] Seq=737 Ack=1361 Win=8256 Len=0 TSV=626921 TSER=776120889 Frame 208 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 1361, Len: 0 No. Time Source Destination Protocol Info 209 1.290928 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 209 (156 bytes on wire, 156 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 1361, Ack: 737, Len: 88 No. Time Source Destination Protocol Info 210 1.290943 141.3.161.43 193.99.144.85 TCP 55331 > http [ACK] Seq=737 Ack=1449 Win=8256 Len=0 TSV=626921 TSER=776120889 Frame 210 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 1449, Len: 0 No. Time Source Destination Protocol Info 211 1.292714 193.99.144.85 141.3.161.43 TCP http > 55333 [FIN, ACK] Seq=501 Ack=798 Win=4912 Len=0 TSV=776120892 TSER=626920 Frame 211 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55333 (55333), Seq: 501, Ack: 798, Len: 0 No. Time Source Destination Protocol Info 212 1.297003 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #214] Frame 212 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 a9 7f 37 7c b3 d2 80 10 12 f4 .P.#....7|...... 0010 e9 e1 00 00 01 01 08 0a 2e 42 aa 3f 00 09 90 e9 .........B.?.... 0020 b8 a8 e4 9e ca 55 db 22 33 0c e7 07 3d 7f 3a 66 .....U."3...=.:f 0030 ed 3f fe 79 b7 eb fe 34 00 d8 ed df 2a 7c ab a2 .?.y...4....*|.. 0040 31 d3 31 e3 fc 69 0d bc 86 42 3c bb af c1 a2 fe 1.1..i...B<..... 0050 55 55 22 7f 35 7f 75 0f 4e f6 32 7f 3e 94 d7 86 UU".5.u.N.2.>... 0060 43 2b 13 0c 3c 8e f6 32 1e fe bd ff 00 cf b5 50 C+..<..2.......P 0070 8b bf 65 93 73 1f 2e eb a0 19 fd d6 7a d0 b6 f2 ..e.s.......z... 0080 04 23 cb bb dd 9f ef 45 9f a5 53 28 f9 75 f2 a0 .#.....E..S(.u.. 0090 e4 03 8f b1 cb 93 d7 b7 f5 a7 88 24 61 20 f2 e3 ...........$a .. 00a0 19 c8 c8 b3 91 7b 7e b4 01 76 de 26 8a 43 be 19 .....{~..v.&.C.. 00b0 4a 11 8d d3 32 10 3f 2a b6 11 48 c8 85 08 fa 0a J...2.?*..H..... 00c0 c6 8a 15 12 fe fe 05 74 2a 57 62 59 38 fc 79 1d .......t*WbY8.y. 00d0 3a fe 75 b5 12 11 12 79 7f 2a 63 85 c6 31 f8 76 :.u....y.*c..1.v 00e0 a0 03 cb 5f f9 e0 9f 90 a3 cb 5f f9 e0 9f 90 a7 ..._......_..... 00f0 6d 93 fb c2 8d b2 7f 78 50 03 7c b5 ff 00 9e 09 m......xP.|..... 0100 f9 0a 86 ea 2c c3 85 88 82 48 e6 3d a0 f5 f7 e2 ....,....H.=.... 0110 ac 6d 93 fb c2 aa ea 09 23 5a 91 85 6f 99 78 31 .m......#Z..o.x1 0120 97 ef e8 39 a0 08 ed a0 65 97 2f 14 e4 7f d3 43 ...9....e./....C 0130 19 1d 3d aa 6b 98 77 45 84 85 81 cf fc b3 da 0f ..=.k.wE........ 0140 eb c5 51 d3 e2 90 5c 83 e5 c6 9e eb 6a f1 f6 3d ..Q...\.....j..= 0150 cd 5c d4 23 91 ad b1 84 7f 98 70 d1 99 07 e4 28 .\.#......p....( 0160 00 b6 b6 28 0b 32 c8 d9 fe 19 76 9c 7e 43 fc e6 ...(.2....v.~C.. 0170 86 8c 8b 9d c2 09 0a 8e c3 66 de 9e fc d3 ac 16 .........f...... 0180 41 68 bf 71 79 3c 2a 14 1d 4f 63 c8 aa 97 51 4b Ah.qy<*..Oc...QK 0190 f6 f0 c1 22 3e ac d6 ec 4e 31 cf cc 38 e9 9a 00 ...">...N1..8... 01a0 b5 e6 1d c4 7d 80 9f a6 cf f1 a0 c8 c3 fe 5c 1b ....}.........\. 01b0 a7 7d 9f 97 5a cd f2 8e e7 cc 11 92 48 c1 fb 1b .}..Z.......H... 01c0 9e c7 be 39 ff 00 eb d4 68 92 79 8b ba 18 30 63 ...9....h.y...0c 01d0 62 54 5a 4a 09 1c 71 cf 5e d4 01 ae 5d b1 ff 00 bTZJ..q.^...]... 01e0 20 f7 ff 00 c7 3f c6 80 c7 03 fd 04 8f ae ce 3f ....?.........? 01f0 5a c8 92 37 11 a0 29 0a f2 c4 8f b1 49 ed 92 07 Z..7..).....I... 0200 f5 a7 ac 73 1d 85 12 dc f1 f2 66 d2 40 07 3e be ...s......f.@.>. 0210 f4 01 a6 24 62 48 fe cf 6e 3f dc ff 00 1a 3c c6 ...$bH..n?....<. 0220 c6 7f b3 db ff 00 1c ff 00 1a c9 10 b6 f3 88 62 ...............b 0230 03 3c ff 00 a0 49 9f ae 7f 2f f3 d1 44 24 a6 d3 .<...I.../..D$.. 0240 1c 4c a0 8f 97 ec 52 64 71 dc 7e 7d a8 03 57 cd .L....Rdq.~}..W. 0250 39 03 ec 27 27 b1 29 fe 34 6f 6c 0f f8 97 9d dc 9..''.).4ol..... 0260 64 7c 9c 7e b5 99 e5 49 b4 8f 26 0f bc 70 7e c5 d|.~...I..&..p~. 0270 26 0f e1 f9 fe 94 d1 0d c6 d0 7c ab 7c 20 23 26 &.........|.| #& 0280 ca 4c 8e e3 03 d2 80 34 fc e9 33 ce 9a 40 27 19 .L.....4..3..@'. 0290 2c 9f e3 4e 67 70 7f e3 c3 8c e3 39 4f cf ad 66 ,..Ngp.....9O..f 02a0 49 01 db bd a0 84 a9 39 20 d9 49 91 81 cd 35 a2 I......9 .I...5. 02b0 98 29 d9 14 41 89 c6 ef b0 c8 7f 1f e7 fe 73 40 .)..A.........s@ 02c0 1a d1 b3 bb 95 7b 0f 2c 76 63 b4 83 f9 1a 9b cb .....{.,vc...... 02d0 5f f9 e0 9f 90 ac ed 3d 64 59 31 b1 10 91 90 16 _......=dY1..... 02e0 d9 e3 03 38 cf 27 e9 fa 56 9e d9 3f bc 28 03 25 ...8.'..V..?.(.% 02f0 25 87 e5 c9 e7 1f f3 f8 71 f9 66 91 a6 84 4c cb %.......q.f...L. 0300 91 c7 fd 3f 10 7f 2a 44 81 fc c0 db 25 e9 ff 00 ...?..*D....%... 0310 3e a9 fc e9 ad 6e e5 c9 09 36 3d ad 13 1d 7f cf >....n...6=..... 0320 f3 a0 09 4c b1 7c e7 27 03 fe 9f 0e 3f fa d4 a2 ...L.|.'....?... 0330 68 72 e0 76 cf 1f 6c 39 e9 fa 54 26 dd f7 37 c9 hr.v..l9..T&..7. 0340 27 dd ff 00 9f 24 27 bf 7f e9 fe 35 24 76 e4 92 '....$'....5$v.. 0350 1a 39 0a 93 d0 db 20 1d 28 02 58 ee 51 37 6c 0a .9.... .(.X.Q7l. 0360 7d 77 5c ee fe 7d 2a 64 9a 57 da 7c 85 c1 ee 25 }w\..}*d.W.|...% 0370 c8 fe 5e 95 40 41 27 0d b2 6d c7 3c fd 92 31 cf ..^.@A'..m.<..1. 0380 6c d5 cb 46 96 39 48 94 5c 48 af 80 03 c2 14 27 l..F.9H.\H.....' 0390 1e dd bf ad 02 2e 62 3f 53 46 23 f5 34 ec 8f f9 ......b?SF#.4... 03a0 e7 fa 51 91 ff 00 3c ff 00 4a 00 6e 23 f5 35 05 ..Q...<..J.n#.5. 03b0 e3 44 90 64 9f e2 03 99 4c 7d fd 7f a5 59 c8 ff .D.d....L}...Y.. 03c0 00 9e 7f a5 56 be 5f 32 d8 aa c6 d9 c8 e9 18 7e ....V._2.......~ 03d0 fe 86 80 2b da 49 13 4f 81 ff 00 a5 45 fb 7a 55 ...+.I.O....E.zU 03e0 8b b6 89 20 c9 3d c7 59 4c 7f ad 55 b1 85 a3 b8 ... .=.YL..U.... 03f0 cb 24 98 e3 ad b2 a0 e8 7b 8a b7 7a bb e0 c2 a3 .$......{..z.... 0400 83 b8 7d d8 c3 1f c8 f1 40 c5 b5 31 b4 0a 72 7a ..}.....@..1..rz 0410 9f e3 df df d6 aa dc b4 46 e1 90 31 cf 07 8b a2 ........F..1.... 0420 87 d7 a7 61 56 6c c6 cb 60 ad 1b 67 27 ac 61 0f ...aVl..`..g'.a. 0430 53 d8 54 17 11 b3 5e 6e 09 26 dc 1e 3c 85 61 d3 S.T...^n.&..<.a. 0440 d7 ad 31 09 f6 d4 40 15 44 44 2a f3 9b 81 91 f5 ..1...@.DD*..... 0450 ff 00 1a 53 7c bb 19 82 c4 71 eb 38 1f d3 da ab ...S|....q.8.... 0460 35 b1 66 3b a2 90 8f 7b 44 34 2c 0e 14 80 92 8f 5.f;...{D4,..... 0470 9c 1e 2d 10 7a fe 99 fc 69 0c 9d f5 14 54 62 44 ..-.z...i....TbD 0480 00 a8 3d 6e 06 07 d7 8a 70 bf 8c f5 11 0e df eb ..=n....p....... 0490 c7 07 f2 a8 52 12 b2 0f dd 4a 4e 06 73 6c 98 e9 ....R....JN.sl.. 04a0 eb 4d 11 48 ac 18 a4 cc 4f fd 3a a7 eb 8f f3 c5 .M.H....O.:..... 04b0 00 4e b7 db 90 38 48 70 48 04 fd a0 7b fb 7b 52 .N...8HpH...{.{R 04c0 8b f4 de 81 c4 2a ad d4 f9 e3 af 7c 71 ce 32 2a .....*.....|q.2* 04d0 01 6e 48 5f dd cc 48 04 64 5b 20 cf be 0f d4 fe .nH_..H.d[ ..... 04e0 14 82 dd d7 38 8e 41 93 b8 7f a2 a7 a7 4f d0 7e ....8.A......O.~ 04f0 42 80 2f 9b cb 10 a1 8d d4 41 48 24 1d e3 04 0e B./......AH$.... 0500 f4 e4 b8 b4 92 4f 2d 27 46 7c 67 68 60 4e 3d 71 .....O-'F|gh`N=q 0510 55 ed 51 1d 76 4f 6c ce 46 4e f9 21 55 1f 4a b4 U.Q.vOl.FN.!U.J. 0520 90 c3 1b 6e 4b 64 56 f5 08 01 a0 43 b1 1f a9 a3 ...nKdV....C.... 0530 11 fa 9a 76 47 fc f3 fd ...vG... No. Time Source Destination Protocol Info 213 1.297300 141.3.161.43 193.99.144.85 TCP 55334 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626922 TSER=0 WS=6 Frame 213 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55334 (55334), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 214 1.299150 193.99.144.85 141.3.161.43 HTTP Continuation or non-HTTP traffic Frame 214 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 1449, Ack: 737, Len: 1360 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 215 1.299189 141.3.161.43 193.99.144.85 TCP 55331 > http [ACK] Seq=737 Ack=2809 Win=10944 Len=0 TSV=626923 TSER=776120895 Frame 215 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 2809, Len: 0 No. Time Source Destination Protocol Info 216 1.299849 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #218] Frame 216 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 ae cf 37 7c b3 d2 80 10 12 f4 .P.#....7|...... 0010 5a 42 00 00 01 01 08 0a 2e 42 aa 3f 00 09 90 e9 ZB.......B.?.... 0020 3d bb e3 1d bf a7 6a d2 4b 46 f9 5b ed 77 38 c7 =.....j.KF.[.w8. 0030 dd dc 31 fc a8 36 6c 4e 7e d9 75 ff 00 7d 0f f0 ..1..6lN~.u..}.. 0040 a0 66 79 bc 93 0e 7c d8 3d bf d2 a4 c7 f2 a7 c7 .fy...|.=....... 0050 74 fb d8 99 6d 80 04 92 7c f9 0e 38 f5 23 15 6b t...m...|..8.#.k 0060 ec 8e 66 61 f6 bb 81 85 07 39 5c 9e 4f b5 3b ec ..fa.....9\.O.;. 0070 ee 65 75 fb 55 c6 36 82 3e 61 c1 c9 f6 ff 00 38 .eu.U.6.>a.....8 0080 a0 0c c6 bc 73 b4 f9 b6 a5 97 3c 19 e5 62 3b 70 ....s.....<..b;p 0090 71 ec 6b 66 de 05 5c 4b 0f f1 a8 f9 b7 13 91 f8 q.kf..\K........ 00a0 d2 41 01 84 10 67 9a 4c ff 00 7c 83 8f d2 a5 c1 .A...g.L..|..... 00b0 f5 3f 9d 02 1d 89 3d 45 18 93 d4 53 70 7d 4f e7 .?....=E...Sp}O. 00c0 46 0f a9 fc e8 01 d8 93 d4 55 5d 45 a4 8e d7 71 F........U]E...q 00d0 68 c6 19 79 72 40 eb ea 39 15 63 07 d4 fe 74 c9 h..yr@..9.c...t. 00e0 63 32 a6 d1 2c 91 9f ef 21 e6 80 33 ec 2e 24 96 c2..,...!..3..$. 00f0 e7 6f 99 01 ef 84 99 dc f4 3e a3 1f 8d 5c bf 79 .o.......>...\.y 0100 23 b6 dd b9 07 cc 3e f3 10 3f f1 de 68 8a d9 a2 #.....>..?..h... 0110 7d c6 e6 e2 4f 67 61 8f d0 54 92 c6 64 5d a2 59 }...Oga..T..d].Y 0120 13 9c e5 4f 34 0c 6d 93 c9 25 aa b6 e5 3c 9f ba ...O4.m..%...<.. 0130 c5 87 5f 53 cd 54 b8 96 45 be 29 be 21 c1 e0 b3 .._S.T..E.).!... 0140 83 f7 7d 07 15 72 14 29 1e d3 23 b6 09 e5 8f 3d ..}..r.)..#....= 0150 69 b2 40 5a 4d e2 79 97 fd 90 c3 1d 3e 94 08 cc i.@ZM.y.....>... 0160 37 72 09 18 09 6d f0 3a 0f 3a 4e 3a fb 52 0b c7 7r...m.:.:N:.R.. 0170 ea 24 b6 e5 4b e4 5c 48 7a 63 be 3a 72 6b 43 ec .$..K.\Hzc.:rkC. 0180 4c 79 fb 65 d0 fa 30 ff 00 0a 51 64 43 2b 7d aa Ly.e..0...QdC+}. 0190 e0 95 f5 65 e7 9c fa 7f 9c 50 33 3d af 24 11 a9 ...e.....P3=.$.. 01a0 f3 2d ba 95 c7 da 64 51 81 8f 6a 7a dd 48 ef 19 .-....dQ..jz.H.. 01b0 32 40 49 c9 18 9e 43 ce 71 c0 c7 e9 f8 77 ab a6 2@I...C.q....w.. 01c0 c8 96 cf da ae 33 82 3a af 00 fe 14 1b 22 40 02 .....3.:....."@. 01d0 ea e4 01 e8 c3 fc 28 03 35 6f 64 67 3b a4 b4 6d ......(.5odg;..m 01e0 8d 90 7e d1 27 1f 9a ff 00 9f c6 9d f6 d7 f2 c3 ..~.'........... 01f0 99 6d f9 f4 b8 93 6f af 5c 71 57 c5 93 0e b7 97 .m....o.\qW..... 0200 47 fe 06 3f c2 97 ec 64 39 22 ea e0 6e 39 3f 30 G..?...d9"..n9?0 0210 ff 00 0a 00 af 6b 7f 1c 5b fc eb 88 bc c6 6e 88 .....k..[.....n. 0220 cc dc 63 df f1 f6 ab 23 51 84 82 44 eb 81 8c f0 ..c....#Q..D.... 0230 7f c2 9a d6 ee 18 28 ba b8 f9 87 f7 87 1c fd 3d ......(........= 0240 e9 df 64 60 db be d7 73 f4 dc 31 fc a8 00 fe d1 ..d`...s..1..... 0250 83 8f df a9 c8 24 60 13 9c 7e 14 d8 f5 6b 59 71 .....$`..~...kYq 0260 b2 ea 36 cf 4c 7f fa aa ca a9 0a 06 e6 38 1d 49 ..6.L........8.I 0270 eb 4b 8f 73 40 88 e3 bb 49 65 f2 d2 55 2f 8c e3 .K.s@...Ie..U/.. 0280 da a6 c4 9e a2 9b 8f 73 f9 d1 83 ea 7f 3a 00 ff .......s.....:.. 0290 d9 00 01 87 69 00 04 00 00 00 01 00 00 0c a8 00 ....i........... 02a0 00 0c a8 00 06 01 00 00 04 00 00 00 01 00 00 00 ................ 02b0 c8 01 01 00 04 00 00 00 01 00 00 00 3c 01 03 00 ............<... 02c0 03 00 00 00 01 00 06 00 00 01 12 00 03 00 00 00 ................ 02d0 01 00 01 00 00 02 01 00 04 00 00 00 01 00 00 00 ................ 02e0 08 02 02 00 04 00 00 00 01 00 00 0c 8e 00 00 00 ................ 02f0 00 ff e2 0f c0 49 43 43 5f 50 52 4f 46 49 4c 45 .....ICC_PROFILE 0300 00 01 01 00 00 0f b0 61 70 70 6c 02 00 00 00 6d .......appl....m 0310 6e 74 72 52 47 42 20 58 59 5a 20 07 d6 00 03 00 ntrRGB XYZ ..... 0320 1d 00 0a 00 2c 00 06 61 63 73 70 41 50 50 4c 00 ....,..acspAPPL. 0330 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0340 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 ................ 0350 00 d3 2d 61 70 70 6c 58 59 b7 83 da 7c 9c 85 98 ..-applXY...|... 0360 21 99 74 0b 31 8b f0 00 00 00 00 00 00 00 00 00 !.t.1........... 0370 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0380 00 00 00 00 00 00 0e 72 58 59 5a 00 00 01 2c 00 .......rXYZ...,. 0390 00 00 14 67 58 59 5a 00 00 01 40 00 00 00 14 62 ...gXYZ...@....b 03a0 58 59 5a 00 00 01 54 00 00 00 14 77 74 70 74 00 XYZ...T....wtpt. 03b0 00 01 68 00 00 00 14 63 68 61 64 00 00 01 7c 00 ..h....chad...|. 03c0 00 00 2c 72 54 52 43 00 00 01 a8 00 00 00 0e 67 ..,rTRC........g 03d0 54 52 43 00 00 01 b8 00 00 00 0e 62 54 52 43 00 TRC........bTRC. 03e0 00 01 c8 00 00 00 0e 76 63 67 74 00 00 01 d8 00 .......vcgt..... 03f0 00 06 12 6e 64 69 6e 00 00 07 ec 00 00 06 3e 64 ...ndin.......>d 0400 65 73 63 00 00 0e 2c 00 00 00 5f 64 73 63 6d 00 esc...,..._dscm. 0410 00 0e 8c 00 00 00 cc 6d 6d 6f 64 00 00 0f 58 00 .......mmod...X. 0420 00 00 28 63 70 72 74 00 00 0f 80 00 00 00 2d 58 ..(cprt.......-X 0430 59 5a 20 00 00 00 00 00 00 71 12 00 00 3d 98 00 YZ ......q...=.. 0440 00 04 04 58 59 5a 20 00 00 00 00 00 00 5e f8 00 ...XYZ ......^.. 0450 00 ac bf 00 00 18 ac 58 59 5a 20 00 00 00 00 00 .......XYZ ..... 0460 00 26 cb 00 00 15 c4 00 00 b6 75 58 59 5a 20 00 .&........uXYZ . 0470 00 00 00 00 00 f3 52 00 01 00 00 00 01 16 cf 73 ......R........s 0480 66 33 32 00 00 00 00 00 01 0c 42 00 00 05 de ff f32.......B..... 0490 ff f3 26 00 00 07 92 00 00 fd 91 ff ff fb a2 ff ..&............. 04a0 ff fd a3 00 00 03 dc 00 00 c0 6c 63 75 72 76 00 ..........lcurv. 04b0 00 00 00 00 00 00 01 01 cd 00 00 63 75 72 76 00 ...........curv. 04c0 00 00 00 00 00 00 01 01 cd 00 00 63 75 72 76 00 ...........curv. 04d0 00 00 00 00 00 00 01 01 cd 00 00 76 63 67 74 00 ...........vcgt. 04e0 00 00 00 00 00 00 00 00 03 01 00 00 02 00 00 01 ................ 04f0 28 02 28 03 29 04 2f 05 32 06 4d 07 7a 08 ba 0a (.(.)./.2.M.z... 0500 0e 0b 6e 0c e0 0e 61 0f f2 11 88 13 2a 14 c9 16 ..n...a.....*... 0510 73 18 26 19 ce 1b 71 1d 12 1e a6 20 33 21 99 23 s.&...q.... 3!.# 0520 01 24 6b 25 d6 27 3e 28 a5 2a 0a 2b 41 2c 27 2e .$k%.'>(.*.+A,'. 0530 2e 2f 20 30 ba 32 41 33 ./ 0.2A3 No. Time Source Destination Protocol Info 217 1.307677 141.3.161.43 193.99.144.85 TCP 55335 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626925 TSER=0 WS=6 Frame 217 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55335 (55335), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 218 1.308705 193.99.144.85 141.3.161.43 HTTP Continuation or non-HTTP traffic Frame 218 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 2809, Ack: 737, Len: 1360 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 219 1.308745 141.3.161.43 193.99.144.85 TCP 55331 > http [ACK] Seq=737 Ack=4169 Win=13696 Len=0 TSV=626925 TSER=776120895 Frame 219 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 4169, Len: 0 No. Time Source Destination Protocol Info 220 1.309626 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #221] Frame 220 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 b4 1f 37 7c b3 d2 80 10 12 f4 .P.#....7|...... 0010 99 49 00 00 01 01 08 0a 2e 42 aa 3f 00 09 90 e9 .I.......B.?.... 0020 1d 59 53 5a 78 5b 95 5c af 5d c7 5e de 5f f9 61 .YSZx[.\.].^._.a 0030 15 62 31 63 4f 64 69 65 86 66 a1 67 ba 68 cf 69 .b1cOdie.f.g.h.i 0040 e2 6a f2 6b fd 6d 03 6e 04 6e ff 6f f6 70 e8 71 .j.k.m.n.n.o.p.q 0050 d6 72 c0 73 a8 74 98 75 9c 76 ab 77 b9 78 c5 79 .r.s.t.u.v.w.x.y 0060 ce 7a d4 7b d6 7c d5 7d d0 7e c7 7f bb 80 ad 81 .z.{.|.}.~...... 0070 9a 82 86 83 6b 84 4e 85 2f 86 10 86 f0 87 d0 88 ....k.N./....... 0080 ae 89 8c 8a 77 8b 78 8c 86 8d 91 8e 95 8f 99 90 ....w.x......... 0090 98 91 92 92 87 93 7d 94 6f 95 5f 96 4f 97 40 98 ......}.o._.O.@. 00a0 32 99 25 9a 1b 9b 14 9c 10 9d 10 9e 13 9f 1b a0 2.%............. 00b0 22 a1 24 a2 1b a3 08 a3 ef a4 d3 a5 b7 a6 a0 a7 ".$............. 00c0 8a a8 75 a9 62 aa 50 ab 3e ac 2d ad 1d ae 0b ae ..u.b.P.>.-..... 00d0 f9 af e6 b0 d2 b1 bd b2 a6 b3 89 b4 6c b5 4d b6 ............l.M. 00e0 2d b7 0b b7 ea b8 c8 b9 a3 ba 80 bb 5c bc 38 bd -...........\.8. 00f0 13 bd ec be c5 bf 9d c0 71 c1 44 c2 16 c2 e7 c3 ........q.D..... 0100 b5 c4 7f c5 48 c6 11 c6 d9 c7 9e c8 61 c9 21 c9 ....H.......a.!. 0110 dc ca 8a cb 37 cb e3 cc 92 cd 43 cd f7 ce ac cf ....7.....C..... 0120 65 d0 20 d0 dd d1 9d d2 5e d3 21 d3 e5 d4 aa d5 e. .....^.!..... 0130 6f d6 35 d6 fc d7 c1 d8 84 d9 47 da 0b da cf db o.5.......G..... 0140 91 dc 54 dd 19 dd df de a4 df 6b e0 33 e0 fc e1 ..T.......k.3... 0150 c7 e2 91 e3 5b e4 26 e4 f1 e5 ba e6 84 e7 4d e8 ....[.&.......M. 0160 16 e8 de e9 a4 ea 69 eb 2e eb f3 ec be ed 8f ee ......i......... 0170 64 ef 3b f0 12 f0 e9 f1 ba f2 8a f3 59 f4 26 f4 d.;.........Y.&. 0180 f3 f5 bf f6 8a f7 55 f8 21 f8 ec f9 ba fa 8b fb ......U.!....... 0190 5c fc 2f fd 03 fd d6 fe 99 ff 50 ff ff 00 00 01 \./.......P..... 01a0 45 02 86 03 a8 04 c1 05 dd 07 04 08 3d 09 83 0a E...........=... 01b0 d7 0c 3b 0d ae 0f 30 10 b4 12 3d 13 cc 15 64 16 ..;...0...=...d. 01c0 fd 18 8d 1a 1e 1b aa 1d 37 1e b7 20 33 21 99 23 ........7.. 3!.# 01d0 01 24 6b 25 d3 27 39 28 9f 29 fe 2b 39 2c 24 2d .$k%.'9(.).+9,$- 01e0 a2 2f 00 30 84 31 fa 33 48 34 b5 36 3d 37 10 38 ./.0.1.3H4.6=7.8 01f0 08 39 1f 3a 38 3b 4e 3c 5b 3d 79 3e a4 3f 3c 41 .9.:8;N<[=y>.?......... 0350 84 e1 5c e2 32 e3 07 e3 da e4 a9 e5 77 e6 44 e7 ..\.2.......w.D. 0360 10 e7 da e8 a1 e9 67 ea 2d ea f4 eb c6 ec a7 ed ......g.-....... 0370 91 ee 7f ef 6d f0 59 f1 41 f2 26 f3 07 f3 e3 f4 ....m.Y.A.&..... 0380 bd f5 94 f6 69 f7 3d f8 10 f8 e1 f9 b2 fa 85 fb ....i.=......... 0390 59 fc 2d fd 02 fd d5 fe 98 ff 50 ff ff 00 00 02 Y.-.......P..... 03a0 04 02 f7 04 05 05 05 06 0a 07 05 08 0f 0a 08 0b ................ 03b0 0e 0c 09 0d 0b 0e 11 0f 0e 11 11 12 10 13 12 14 ................ 03c0 12 16 15 17 15 19 17 1a 1b 1b 1d 1d 1a 1e 1f 1f ................ 03d0 21 21 1e 22 23 23 24 25 26 26 25 27 28 28 28 2a !!."##$%&&%'(((* 03e0 2a 2b 05 2c 2b 2e 2e 2f 2f 30 2f 31 54 32 31 33 *+.,+..//0/1T213 03f0 33 34 34 35 36 36 36 37 38 38 37 3a 3c 3a ba 3b 34456667887:<:.; 0400 3b 3c 3c 3d 3d 3e 3f 3f 3f 40 40 41 42 42 42 43 ;<<==>???@@ABBBC 0410 42 44 44 45 46 46 46 47 47 48 47 49 49 4a 4a 4b BDDEFFFGGHGIIJJK 0420 4b 4c 4c 4c cc 4d 4e 4e 4e 4f 4e 50 50 51 51 52 KLLL.MNNNONPPQQR 0430 53 53 54 54 54 55 55 56 57 57 57 58 58 59 59 5a SSTTTUUVWWWXXYYZ 0440 5a 5b 5b 5c 5d 5d 5d 5e 5e 5e de 5f 5f 60 61 61 Z[[\]]]^^^.__`aa 0450 61 62 62 63 63 63 e3 64 64 65 64 66 66 66 e6 67 abbccc.ddedfff.g 0460 67 68 69 69 69 6a 6a 6a ea 6b 6b 6c 6c 6d 6c 6e ghiiijjj.kkllmln 0470 6e 6e ee 6f 6f 70 70 71 71 71 f1 72 72 73 73 74 nn.ooppqqq.rrsst 0480 74 74 f4 75 75 76 76 77 77 77 f7 78 78 79 79 7a tt.uuvvwww.xxyyz 0490 7a 7b 7b 7b fb 7c 7c 7d 7d 7d fd 7e 7e 7f 7f 80 z{{{.||}}}.~~... 04a0 80 81 81 82 01 82 82 83 83 84 84 85 85 86 05 86 ................ 04b0 86 87 87 88 88 89 89 8a 09 8a 8a 8b 8b 8c 8c 8d ................ 04c0 8d 8e 0d 8e 8e 8f 8f 90 90 91 91 92 11 92 92 93 ................ 04d0 93 94 94 95 95 96 96 97 97 98 17 98 98 99 99 9a ................ 04e0 9a 9b 9b 9c 9c 9d 9d 9e 1d 9e 9e 9f 9f a0 a0 a1 ................ 04f0 a1 a2 a2 a3 22 a3 a3 a4 a4 a5 a5 a6 a6 a7 26 a7 ....".........&. 0500 a7 a8 a8 a9 a9 aa aa ab 2a ab ab ac ac ad ad ae ........*....... 0510 ae af af b0 b0 b1 b1 b2 31 b2 b2 b3 b3 b4 b4 b5 ........1....... 0520 b5 b6 b6 b7 b7 b8 b8 b9 b9 ba ba bb bb bc bc bd ................ 0530 bd be be bf bf c0 c0 c1 ........ No. Time Source Destination Protocol Info 221 1.309867 193.99.144.85 141.3.161.43 HTTP Continuation or non-HTTP traffic Frame 221 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 4169, Ack: 737, Len: 1360 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 222 1.309888 141.3.161.43 193.99.144.85 TCP 55331 > http [ACK] Seq=737 Ack=5529 Win=16384 Len=0 TSV=626925 TSER=776120895 Frame 222 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 5529, Len: 0 No. Time Source Destination Protocol Info 223 1.310096 193.99.144.85 141.3.161.43 TCP http > 55334 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120902 TSER=626922 Frame 223 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55334 (55334), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 224 1.310125 141.3.161.43 193.99.144.85 TCP 55334 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626925 TSER=776120902 Frame 224 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55334 (55334), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 225 1.310944 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #227] Frame 225 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 b9 6f 37 7c b3 d2 80 10 12 f4 .P.#...o7|...... 0010 74 dd 00 00 01 01 08 0a 2e 42 aa 48 00 09 90 eb t........B.H.... 0020 db dc dc dd dd df df e0 e0 e1 e2 e3 e3 e4 e4 e6 ................ 0030 e6 e7 e7 e9 e9 ea eb ec ec ee ed ef ef f1 f1 f3 ................ 0040 f3 f5 f5 f7 f7 fa fa fc fc fe fe ff ff 00 00 6e ...............n 0050 64 69 6e 00 00 00 00 00 00 06 36 00 00 9f be 00 din.......6..... 0060 00 58 09 00 00 4d b8 00 00 97 6c 00 00 26 fd 00 .X...M....l..&.. 0070 00 14 43 00 00 50 0d 00 00 54 39 00 02 54 7a 00 ..C..P...T9..Tz. 0080 02 45 1e 00 01 9e b8 00 03 01 00 00 02 00 00 00 .E.............. 0090 02 00 09 00 14 00 22 00 34 00 47 00 5c 00 71 00 ......".4.G.\.q. 00a0 88 00 9f 00 b7 00 d0 00 e9 01 03 01 1d 01 38 01 ..............8. 00b0 54 01 70 01 8d 01 ab 01 ca 01 e9 02 09 02 29 02 T.p...........). 00c0 4b 02 6e 02 92 02 b8 02 de 03 06 03 30 03 5b 03 K.n.........0.[. 00d0 8c 03 be 03 f1 04 25 04 5a 04 90 04 c8 05 01 05 ......%.Z....... 00e0 3b 05 77 05 bc 06 1d 06 48 06 74 06 d5 07 0d 07 ;.w.....H.t..... 00f0 48 07 88 07 d0 08 18 08 5e 08 9d 08 f0 09 55 09 H.......^.....U. 0100 ba 0a 17 0a 72 0a d0 0b 3e 0b d9 0c 50 0c af 0c ....r...>...P... 0110 e9 0d 23 0d 7e 0d db 0e 3b 0e 9b 0e f9 0f 57 0f ..#.~...;.....W. 0120 b6 10 15 10 74 10 d4 11 35 11 98 11 fd 12 64 12 ....t...5.....d. 0130 cd 13 38 13 a4 14 12 14 88 15 01 15 7c 15 fa 16 ..8.........|... 0140 7c 17 06 17 95 18 28 18 bd 19 55 19 ed 1a 85 1b |.....(...U..... 0150 1f 1b ba 1c 55 1c f5 1d 94 1e 35 1e d9 1f 81 20 ....U.....5.... 0160 2b 20 d9 21 8b 22 41 22 fd 23 bf 24 87 25 54 26 + .!."A".#.$.%T& 0170 28 27 02 27 e2 28 bf 29 8b 2a 50 2b 16 2b df 2c ('.'.(.).*P+.+., 0180 ac 2d 7d 2e 52 2f 2c 30 0b 30 f0 31 da 32 c8 33 .-}.R/,0.0.1.2.3 0190 bd 34 b5 35 b8 36 bf 37 ca 38 d8 39 e9 3a fe 3c .4.5.6.7.8.9.:.< 01a0 17 3d 22 3e 15 3f 00 3f f0 40 e7 41 e0 42 e0 43 .=">.?.?.@.A.B.C 01b0 e7 44 f5 46 04 47 19 48 33 49 4d 4a 69 4b 86 4c .D.F.G.H3IMJiK.L 01c0 a1 4d bc 4e d4 4f ea 50 fe 52 0e 53 1e 54 32 55 .M.N.O.P.R.S.T2U 01d0 51 56 81 57 be 59 03 5a 4b 5b 8d 5c cf 5e 12 5f QV.W.Y.ZK[.\.^._ 01e0 54 60 97 61 db 63 1f 64 67 65 b1 66 ff 68 4f 69 T`.a.c.dge.f.hOi 01f0 a4 6a fd 6c 61 6d c9 6f 35 70 a6 72 1b 73 91 75 .j.lam.o5p.r.s.u 0200 0f 76 8c 78 0c 79 90 7b 1a 7c a7 7e 39 7f d4 81 .v.x.y.{.|.~9... 0210 73 83 18 84 c6 86 7f 88 3d 89 ff 8b cb 8d a0 8f s.......=....... 0220 84 91 96 93 b3 95 c8 97 d6 99 e0 9b df 9d da 9f ................ 0230 cf a1 c1 a3 b1 a5 a3 a7 93 a9 85 ab 7c ad 7b af ............|.{. 0240 7d b1 7f b3 88 b5 90 b7 95 b9 9d bb a3 bd a9 bf }............... 0250 ab c1 b1 c3 ba c5 c3 c7 d2 c9 e4 cb fa ce 13 d0 ................ 0260 37 d2 5e d4 89 d6 a5 d8 b0 da b4 dc b7 de bf e0 7.^............. 0270 d6 e2 f4 e5 19 e7 43 e9 72 eb a5 ed da f0 12 f2 ......C.r....... 0280 41 f4 6e f6 99 f8 c2 fa ef fd 57 ff ff 00 00 00 A.n.......W..... 0290 02 00 06 00 0f 00 1a 00 29 00 3a 00 4d 00 61 00 ........).:.M.a. 02a0 76 00 8d 00 a4 00 bc 00 d5 00 ee 01 08 01 23 01 v.............#. 02b0 3f 01 5c 01 7a 01 98 01 b7 01 d7 01 f8 02 1b 02 ?.\.z........... 02c0 3e 02 63 02 89 02 b0 02 d8 03 02 03 2e 03 5b 03 >.c...........[. 02d0 8c 03 be 03 f1 04 25 04 5a 04 91 04 c9 05 02 05 ......%.Z....... 02e0 3d 05 7a 05 bf 06 1e 06 57 06 97 06 dc 07 18 07 =.z.....W....... 02f0 57 07 9b 07 e8 08 30 08 73 08 b4 09 33 09 9e 0a W.....0.s...3... 0300 00 0a 65 0a cd 0b 39 0b b0 0b e2 0c ad 0c e8 0d ..e...9......... 0310 24 0d ae 0e 11 0e 58 0e 9b 0f 31 0f 9a 0f ff 10 $.....X...1..... 0320 62 10 c0 10 ff 11 3e 11 a3 12 10 12 81 12 f3 13 b.....>......... 0330 6a 13 e5 14 61 14 e1 15 63 15 e8 16 74 17 01 17 j...a...c...t... 0340 93 18 27 18 be 19 57 19 f1 1a 8d 1b 2b 1b cb 1c ..'...W.....+... 0350 6b 1d 0e 1d b4 1e 5b 1f 07 1f b3 20 63 21 16 21 k.....[.... c!.! 0360 cd 22 87 23 44 24 04 24 c7 25 8e 26 5a 27 27 27 .".#D$.$.%.&Z''' 0370 f6 28 c6 29 8d 2a 50 2b 16 2b df 2c ac 2d 7d 2e .(.).*P+.+.,.-}. 0380 52 2f 2c 30 0b 30 f0 31 da 32 c8 33 bd 34 b5 35 R/,0.0.1.2.3.4.5 0390 b8 36 bf 37 ca 38 d8 39 e9 3a fe 3c 17 3d 22 3e .6.7.8.9.:.<.="> 03a0 15 3f 00 3f f0 40 e8 41 e1 42 e3 43 ed 44 fe 46 .?.?.@.A.B.C.D.F 03b0 14 47 31 48 54 49 7a 4a a4 4b d1 4d 00 4e 33 4f .G1HTIzJ.K.M.N3O 03c0 60 50 8e 51 b9 52 e3 54 0f 55 41 56 7c 57 bd 59 `P.Q.R.T.UAV|W.Y 03d0 03 5a 4b 5b 8d 5c cf 5e 12 5f 54 60 97 61 db 63 .ZK[.\.^._T`.a.c 03e0 1f 64 67 65 b1 66 ff 68 4f 69 a4 6a fd 6c 61 6d .dge.f.hOi.j.lam 03f0 c9 6f 35 70 a6 72 1b 73 91 75 0f 76 8c 78 0c 79 .o5p.r.s.u.v.x.y 0400 90 7b 1a 7c a7 7e 39 7f d4 81 73 83 18 84 c6 86 .{.|.~9...s..... 0410 7f 88 3d 89 ff 8b ca 8d 9b 8f 70 91 48 93 23 94 ..=.......p.H.#. 0420 fd 96 d6 98 ac 9a 84 9c 5f 9e 36 a0 11 a1 ed a3 ........_.6..... 0430 cc a5 b4 a7 9e a9 8b ab 7e ad 7c af 7b b1 78 b3 ........~.|.{.x. 0440 49 b5 16 b6 e5 b8 b6 ba 89 bc 61 be 41 c0 23 c2 I.........a.A.#. 0450 0b c3 fa c5 ee c7 f0 c9 f7 cc 05 ce 19 d0 3a d2 ..............:. 0460 5f d4 87 d6 90 d8 74 da 46 dc 16 dd ec df ca e1 _.....t.F....... 0470 b3 e3 a7 e5 a7 e7 b2 e9 c6 eb e1 ee 00 f0 29 f2 ..............). 0480 51 f4 77 f6 9d f8 c3 fa f0 fd 58 ff ff 00 00 00 Q.w.......X..... 0490 01 00 03 00 0b 00 16 00 25 00 37 00 4d 00 65 00 ........%.7.M.e. 04a0 73 00 81 00 9f 00 c1 00 e5 01 0b 01 35 01 4b 01 s...........5.K. 04b0 61 01 90 01 c1 01 f5 02 10 02 2b 02 64 02 81 02 a.........+.d... 04c0 9f 02 dc 03 1c 03 3d 03 5f 03 a3 03 ea 04 0f 04 ......=._....... 04d0 34 04 7f 04 cd 04 f5 05 1d 05 70 05 c4 06 1b 06 4.........p..... 04e0 47 06 74 06 df 07 2d 07 5c 07 8c 07 ee 08 52 08 G.t...-.\.....R. 04f0 a7 09 20 09 8a 09 f6 0a 64 0a d5 0b 47 0b bc 0b .. .....d...G... 0500 f6 0c 30 0d 26 0d a2 0e 21 0e a1 0f 24 0f a9 10 ..0.&...!...$... 0510 2f 10 b8 11 43 11 cf 12 5d 12 ee 13 80 14 15 14 /...C...]....... 0520 ab 15 43 15 dd 16 79 17 b6 18 58 18 fc 19 a1 1a ..C...y...X..... 0530 48 1a f1 1b 9c 1c 49 1c H.....I. No. Time Source Destination Protocol Info 226 1.311183 141.3.161.43 193.99.144.85 HTTP GET /icons/ho/background_mitte_40zu60.gif HTTP/1.1 Frame 226 (866 bytes on wire, 866 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55334 (55334), Dst Port: http (80), Seq: 1, Ack: 1, Len: 798 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 227 1.318752 193.99.144.85 141.3.161.43 HTTP Continuation or non-HTTP traffic Frame 227 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 5529, Ack: 737, Len: 1360 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 228 1.318787 141.3.161.43 193.99.144.85 TCP 55331 > http [ACK] Seq=737 Ack=6889 Win=19136 Len=0 TSV=626928 TSER=776120904 Frame 228 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 6889, Len: 0 No. Time Source Destination Protocol Info 229 1.319057 193.99.144.85 141.3.161.43 TCP http > 55335 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120913 TSER=626925 Frame 229 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55335 (55335), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 230 1.319084 141.3.161.43 193.99.144.85 TCP 55335 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626928 TSER=776120913 Frame 230 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55335 (55335), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 231 1.319872 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #233] Frame 231 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 be bf 37 7c b3 d2 80 10 12 f4 .P.#....7|...... 0010 31 70 00 00 01 01 08 0a 2e 42 aa 51 00 09 90 ed 1p.......B.Q.... 0020 71 39 49 3a 38 3b 28 3d 0e 3e 03 3e fb 40 ee 41 q9I:8;(=.>.>.@.A 0030 ea 42 e8 43 e8 45 ec 46 f1 48 ff 4a 09 4b 14 4c .B.C.E.F.H.J.K.L 0040 21 4e 40 4f 52 50 66 51 7b 53 ab 54 c5 55 e1 56 !N@ORPfQ{S.T.U.V 0050 ff 59 3f 5a 61 5b 85 5c ab 5e fb 60 25 61 52 62 .Y?Za[.\.^.`%aRb 0060 7f 64 e0 66 12 67 47 68 7c 69 b4 6a ed 6d 64 6e .d.f.gGh|i.j.mdn 0070 a2 6f e1 71 22 72 65 73 a9 76 36 77 7f 78 c9 7a .o.q"res.v6w.x.z 0080 15 7b 63 7e 03 7f 55 80 a9 81 ff 84 af 86 09 87 .{c~..U......... 0090 65 88 c2 8b 81 8c e3 8e 47 8f ac 91 12 92 7b 93 e.......G.....{. 00a0 e4 96 bc 98 2b 99 9b 9b 0c 9c 7f 9d f4 9f 6a a0 ....+.........j. 00b0 e1 a2 5a a3 d5 a5 51 a6 cf a8 4e a9 ce ab 51 ac ..Z...Q...N...Q. 00c0 d4 ae 5a af e0 b1 69 b2 f2 b4 7e b6 0b b7 99 b9 ..Z...i...~..... 00d0 29 ba ba bc 4d bd e1 bf 77 c1 0e c4 41 c5 dd c7 )...M...w...A... 00e0 7b c9 19 ca ba cc 5b cf a3 d1 4a d2 f1 d4 9b d6 {.....[...J..... 00f0 45 d7 f1 d9 9f db 4e dc ff dd d8 de b1 e0 64 e2 E.....N.......d. 0100 19 e2 f4 e3 d0 e5 88 e6 64 e7 41 e8 fc e9 da ea ........d.A..... 0110 b9 ec 76 ed 56 ee 36 ef 16 ef f7 f1 b9 f2 9a f3 ..v.V.6......... 0120 7c f4 5f f5 42 f6 25 f7 08 f7 ec f8 d0 f9 69 fa |._.B.%.......i. 0130 01 fa 9a fb 7f fc 65 fd 4b fe 31 ff ff 00 00 64 ......e.K.1....d 0140 65 73 63 00 00 00 00 00 00 00 05 69 4d 61 63 00 esc........iMac. 0150 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0180 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0190 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6d ...............m 01a0 6c 75 63 00 00 00 00 00 00 00 0f 00 00 00 0c 69 luc............i 01b0 74 49 54 00 00 00 08 00 00 00 c4 66 72 46 52 00 tIT........frFR. 01c0 00 00 08 00 00 00 c4 6e 62 4e 4f 00 00 00 08 00 .......nbNO..... 01d0 00 00 c4 65 73 45 53 00 00 00 08 00 00 00 c4 66 ...esES........f 01e0 69 46 49 00 00 00 08 00 00 00 c4 70 74 50 54 00 iFI........ptPT. 01f0 00 00 08 00 00 00 c4 7a 68 54 57 00 00 00 08 00 .......zhTW..... 0200 00 00 c4 6a 61 4a 50 00 00 00 08 00 00 00 c4 6e ...jaJP........n 0210 6c 4e 4c 00 00 00 08 00 00 00 c4 64 65 44 45 00 lNL........deDE. 0220 00 00 08 00 00 00 c4 6b 6f 4b 52 00 00 00 08 00 .......koKR..... 0230 00 00 c4 65 6e 55 53 00 00 00 08 00 00 00 c4 73 ...enUS........s 0240 76 53 45 00 00 00 08 00 00 00 c4 64 61 44 4b 00 vSE........daDK. 0250 00 00 08 00 00 00 c4 7a 68 43 4e 00 00 00 08 00 .......zhCN..... 0260 00 00 c4 00 69 00 4d 00 61 00 63 6d 6d 6f 64 00 ....i.M.a.cmmod. 0270 00 00 00 00 00 06 10 00 00 9c 58 00 00 00 00 bd ..........X..... 0280 f2 5e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 .^.............. 0290 00 00 00 74 65 78 74 00 00 00 00 43 6f 70 79 72 ...text....Copyr 02a0 69 67 68 74 20 41 70 70 6c 65 20 43 6f 6d 70 75 ight Apple Compu 02b0 74 65 72 2c 20 49 6e 63 2e 2c 20 32 30 30 35 00 ter, Inc., 2005. 02c0 00 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 ......C......... 02d0 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ................ 02e0 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ................ 02f0 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ................ 0300 01 01 01 01 01 01 01 01 ff db 00 43 01 01 01 01 ...........C.... 0310 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ................ 0320 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ................ 0330 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ................ 0340 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 ................ 0350 11 08 00 4b 00 fa 03 01 22 00 02 11 01 03 11 01 ...K...."....... 0360 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 ................ 0370 00 00 00 00 00 07 00 04 05 08 02 03 06 09 01 0a ................ 0380 ff c4 00 4c 10 00 02 02 02 01 01 04 05 08 05 09 ...L............ 0390 05 06 07 00 00 03 04 02 05 01 06 07 08 00 13 14 ................ 03a0 16 11 12 15 55 d3 17 21 56 57 61 93 94 d6 31 54 ....U..!VWa...1T 03b0 95 96 d2 09 18 41 51 53 91 a2 d5 f0 23 25 a1 a4 .....AQS....#%.. 03c0 b1 22 24 26 46 d1 e1 32 35 71 81 85 a6 f1 ff c4 ."$&F..25q...... 03d0 00 19 01 01 01 01 01 01 01 00 00 00 00 00 00 00 ................ 03e0 00 00 00 00 01 02 03 06 04 ff c4 00 45 11 00 01 ............E... 03f0 03 01 05 04 05 07 0a 03 08 03 00 00 00 00 01 02 ................ 0400 11 21 03 00 12 31 41 61 04 13 22 51 05 14 23 71 .!...1Aa.."Q..#q 0410 81 06 32 42 62 a1 d1 f0 16 24 33 43 44 52 54 91 ..2Bb....$3CDRT. 0420 92 b1 34 63 72 26 56 64 73 93 94 d2 f1 53 82 c1 ..4cr&Vds....S.. 0430 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fd 85 ............?... 0440 4b 61 e7 35 f6 a0 a5 9e 36 d2 6c f4 f6 6f 2e 40 Ka.5....6.l..o.@ 0450 5b e0 72 13 75 56 f5 1a f2 cc e3 14 b6 24 a3 3e [.r.uV.......$.> 0460 ad 66 2b 9b 2b 34 f1 39 b5 5e 1b 2a 90 a0 ce 04 .f+.+4.9.^.*.... 0470 2c b8 61 14 86 5e 72 d5 8e 46 ce d9 48 95 3d 14 ,.a..^r..F..H.=. 0480 0f a9 b3 66 b7 98 b6 13 ef 54 94 e7 ac a9 2d b2 ...f.....T....-. 0490 75 ed fb 1f 5b 37 18 6c 2e 3b 60 85 6b 4d ec 02 u...[7.l.;`.kM.. 04a0 8b 77 d8 56 d2 34 f2 a7 8b 35 ac 5d 2e dd 57 96 .w.V.4...5.]..W. 04b0 b2 d6 3a 81 cc 7d 39 fe 53 4e 1a a8 8d 8b 77 45 ..:..}9.SN....wE 04c0 aa 46 fe 3b 1a 97 2b 07 17 17 3e a5 5c 86 ee cd .F.;..+...>.\... 04d0 58 6b 22 ea a9 61 7a 9b 33 e2 b8 6c c5 8a 42 da Xk"..az.3..l..B. 04e0 db 78 78 3c 65 e0 ea fe 83 a8 5d 5d 8a d9 5c 7f .xx.>`! 0530 f7 5a a8 92 e1 d8 b1 30 .Z.....0 No. Time Source Destination Protocol Info 232 1.320046 141.3.161.43 193.99.144.85 HTTP GET /icons/ho/background_mitte_links.gif HTTP/1.1 Frame 232 (865 bytes on wire, 865 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55335 (55335), Dst Port: http (80), Seq: 1, Ack: 1, Len: 797 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 233 1.328749 193.99.144.85 141.3.161.43 HTTP Continuation or non-HTTP traffic Frame 233 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 6889, Ack: 737, Len: 1360 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 234 1.328801 141.3.161.43 193.99.144.85 TCP 55331 > http [ACK] Seq=737 Ack=8249 Win=21824 Len=0 TSV=626930 TSER=776120913 Frame 234 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 8249, Len: 0 No. Time Source Destination Protocol Info 235 1.329753 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #236] Frame 235 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 c4 0f 37 7c b3 d2 80 10 12 f4 .P.#....7|...... 0010 fa 5f 00 00 01 01 08 0a 2e 42 aa 52 00 09 90 ed ._.......B.R.... 0020 15 1c b4 81 a6 4d a7 f9 42 78 6b 68 5a 55 d5 f8 .....M..BxkhZU.. 0030 1a b5 17 db 75 03 7e 31 a5 82 d6 2d 85 28 df 5f ....u.~1...-.(._ 0040 15 8a 77 55 8c 8e a8 c6 9c 84 0c b1 29 12 dd 98 ..wU........)... 0050 f7 21 17 4f 70 ed cd 09 15 0d a7 5a 7a 20 08 f0 .!.Op......Zz .. 0060 02 ca 78 16 fb be 3b e2 04 7c e6 02 88 b2 8d 5b ..x...;..|.....[ 0070 38 99 c8 6c 81 6c 2b 8c f8 ac 3a f5 5a 39 0e 1c 8..l.l+...:.Z9.. 0080 b6 ad 03 7d 51 e4 bf 41 ad 20 ab cb 2e 8a a6 a3 ...}Q..A. ...... 0090 37 55 b3 6d e5 40 06 2e e9 d9 d4 9c 1c 0d 0a 32 7U.m.@.........2 00a0 30 30 30 0d 0a 89 2d e0 6d c5 5e 54 74 9a 0b 0f 000...-.m.^Tt... 00b0 24 fa 65 61 c0 bc 93 b3 5d bc 5a 38 ea a5 41 89 $.ea....].Z8..A. 00c0 cc 0c 22 de aa f9 6b 59 fa 7d b5 7e 1b 5d fc 9b .."...kY.}.~.].. 00d0 d9 79 6b 59 fa 7d b5 7e 1b 5d fc 9b db ca f2 1e .ykY.}.~.]...... 00e0 f0 32 a9 1b 1d 6a f1 f2 85 bb 32 a0 44 2e f2 1e .2...j....2.D... 00f0 ec 93 18 23 d5 76 17 49 fb 41 76 ab c2 7a 88 37 ...#.v.I.Av..z.7 0100 5d 53 6a 65 8b 6f 04 44 62 d6 58 29 09 c9 c4 98 ]Sje.o.Db.X).... 0110 5c 67 c5 fa 60 ea 95 b5 c0 d2 fc e6 09 81 90 8c \g..`........... 0120 e0 27 9a b7 b8 fa e1 34 22 41 cf d5 9a 18 9c 7d .'.....4"A.....} 0130 68 4a 32 c4 65 1c 4b 1f a2 58 8e 71 e8 ed af 92 hJ2.e.K..X.q.... 0140 dd 02 19 fc b5 e8 70 ec 7f 85 e9 2c 09 00 19 d9 ......p....,.... 0150 73 9f 18 c8 db 3f 2a ba 56 3f b2 1d 37 38 4e c9 s....?*.V?..78N. 0160 cd 20 fd 7e 45 40 1e 53 6b a9 e5 ad 67 e9 f6 d5 . .~E@.Sk...g... 0170 f8 6d 77 f2 6f 65 e5 ad 67 e9 f6 d5 f8 6d 77 f2 .mw.oe..g....mw. 0180 6f 6a 65 fc d6 7a ab fa f0 07 ef 66 f5 f3 7f c8 oje..z.....f.... 0190 ff 00 d3 d3 d9 7f 35 9e aa fe bc 01 fb d9 bd 7c ......5........| 01a0 df f2 3f f4 f4 f6 9f 25 fa 03 fb ed d0 f9 7d 9b ..?....%......}. 01b0 a4 7d 5f f0 da fe da d9 f2 ab a5 72 f2 43 a6 f2 .}_........r.C.. 01c0 cf 64 ce ef f3 fd 61 ed e4 6d 73 7c b5 ac fd 3e .d....a..ms|...> 01d0 da bf 0d ae fe 4d ec bc b5 ac fd 3e da bf 0d ae .....M.....>.... 01e0 fe 4d ed 4c bf 9a cf 55 7f 5e 00 fd ec de be 6f .M.L...U.^.....o 01f0 f9 1f fa 7a 7b 2f e6 b3 d5 5f d7 80 3f 7b 37 af ...z{/..._..?{7. 0200 9b fe 47 fe 9e 9e cf 92 fd 01 fd f6 e8 7c be cd ..G..........|.. 0210 d2 3e af f8 6d 7f 6d 6c f9 55 d2 b9 79 21 d3 79 .>..m.ml.U..y!.y 0220 67 b2 67 77 f9 fe b0 f6 f2 36 b9 be 5a d6 7e 9f g.gw.....6..Z.~. 0230 6d 5f 86 d7 7f 26 f6 5e 5a d6 7e 9f 6d 5f 86 d7 m_...&.^Z.~.m_.. 0240 7f 26 f6 a6 5f cd 67 aa bf af 00 7e f6 6f 5f 37 .&.._.g....~.o_7 0250 fc 8f fd 3d 3d 98 58 f4 a3 d5 bb 6a 4c 28 75 00 ...==.X....jL(u. 0260 2a b6 a6 55 a5 17 63 b1 6e 6e 48 62 13 41 2b 02 *..U..c.nnHb.A+. 0270 c0 19 47 21 96 5b 5a 05 57 bc 96 25 90 64 fd fc ..G!.[Z.W..%.d.. 0280 31 29 8a 38 cc 3e 4c 74 08 49 23 cb 5e 88 51 00 1).8.>Lt.I#.^.Q. 0290 90 06 cd d2 0e 4b 24 dd 0f b3 01 c5 84 90 ee 1f .....K$......... 02a0 36 27 ca 9e 95 52 80 3e 48 f4 d2 41 20 5e 27 65 6'...R.>H..A ^'e 02b0 87 bb 25 ab 3b 0b d2 ce 74 83 6b b9 e5 ad 67 e9 ..%.;...t.k...g. 02c0 f6 d5 f8 6d 77 f2 6f 65 e5 ad 67 e9 f6 d5 f8 6d ...mw.oe..g....m 02d0 77 f2 6f 6a 09 69 b5 6d 1a bd e5 ad 03 fd 60 f0 w.oj.i.m......`. 02e0 cd 1b ba 8e 71 51 7b ab 6d fa 86 cd 65 7a 95 96 ....qQ{.m...ez.. 02f0 bf 48 a4 76 38 95 ff 00 6a eb 36 57 02 91 0f ed .H.v8...j.6W.... 0300 75 1e 5e ba 52 c6 5c a5 c9 59 b5 03 19 15 ad bf u.^.R.\..Y...... 0310 e3 bb 3a 9e 4e ab 6e c7 45 d8 f4 bd cd 6a 76 11 ..:.N.n.E....jv. 0320 ad b7 b4 a2 db 76 39 21 0b 27 68 ea b6 10 42 19 .....v9!.'h...B. 0330 cd 21 61 1c 39 4f 75 57 6a 01 89 86 61 04 ec 16 .!a.9OuWj...a... 0340 ff 00 6d 3f 5b 39 cf 8c 5d 2b aa 5d d5 21 68 4a ..m?[9..]+.].!hJ 0350 8a 45 40 58 2c 02 40 50 06 67 16 32 01 e7 16 f6 .E@X,.@P.g.2.... 0360 48 a9 79 14 d6 a4 ad 0a 5a 41 28 52 4b a4 90 98 H.y.....ZA(RK... 0370 38 88 2a 22 0e 29 3a 3f 79 e5 ad 67 e9 f6 d5 f8 8.*".):?y..g.... 0380 6d 77 f2 6f 65 e5 ad 67 e9 f6 d5 f8 6d 77 f2 6f mw.oe..g....mw.o 0390 60 b7 36 21 b4 69 b4 aa dc 8f 91 b4 4e 2f 28 26 `.6!.i......N/(& 03a0 cb 02 73 69 b3 bd bc a2 b6 82 88 b9 e2 d3 b2 46 ..si...........F 03b0 34 ca d8 65 65 62 ca f6 f2 9d 35 8d 6d 8e 67 58 4..eeb....5.m.gX 03c0 30 65 a8 22 67 31 99 3e 2e d8 e8 39 1d 21 56 ea 0e."g1.>...9.!V. 03d0 9c 81 c6 dc 8f 7f 49 56 8c 76 87 75 3d c2 ea 20 ......IV.v.u=.. 03e0 cb f0 10 40 d3 e5 ac 05 7d 8c a9 05 60 d7 ac da ...@....}...`... 03f0 75 ac 3e c9 42 b1 c5 81 b2 d8 71 86 8b cc 25 c9 u.>.B.....q...%. 0400 00 a5 f5 50 38 cb c1 80 1e 5d bf 6b 52 a4 84 85 ...P8....].kR... 0410 32 98 f2 42 83 33 33 92 00 97 0c c4 89 b1 5b cb 2..B.33.......[. 0420 5a cf d3 ed ab f0 da ef e4 de cb cb 5a cf d3 ed Z...........Z... 0430 ab f0 da ef e4 de c2 de 59 d4 39 05 7a 9a 15 b5 ........Y.9.z... 0440 cd ef 55 e3 4b 8b bd 9e 9b 5f ac b8 b3 15 fe ee ..U.K...._...... 0450 ad 95 85 9b 62 98 e8 b3 4d 94 6a e0 33 5a 28 ab ....b...M.j.3Z(. 0460 cb af 65 3b 05 87 5c c4 c6 c4 fb f1 c6 4a 9b ab ..e;..\......J.. 0470 d3 f8 cb 94 2a 6b 58 06 e5 7d ac 6d f6 85 7c cc ....*kX..}.m..|. 0480 02 c5 03 5d ea cb aa 89 00 b4 05 5d 1a f1 af 71 ...].......]...q 0490 93 77 0c 0d a3 c5 c2 b9 23 12 0c c0 04 86 7c 34 .w......#.....|4 04a0 4a 4a 12 4b b9 4a 62 1d 42 4c 38 0c 4c b1 79 88 JJ.K.Jb.BL8.L.y. 04b0 3a 3b 78 9e 4a 96 6e 15 67 9e 12 32 8c f9 db a7 :;x.J.n.g..2.... 04c0 f2 d6 b3 f4 fb 6a fc 36 bb f9 37 b2 f2 d6 b3 f4 .....j.6..7..... 04d0 fb 6a fc 36 bb f9 37 b6 cf 22 ec 9f a9 d2 ff 00 .j.6..7.."...... 04e0 47 fe 6c d8 7f c8 ff 00 a7 fa 7f bf ed ec bc 8b G.l............. 04f0 b2 7e a7 4b fb d7 b0 7f 91 7f ed fd 5f 36 73 e9 .~.K........_6s. 0500 5d 3c d3 fa 86 9a eb ec 3c ac de 27 92 bf 4a b4 ]<......<..'..J. 0510 d3 5f 76 4f af cb 5a cf d3 ed ab f0 da ef e4 de ._vO..Z......... 0520 cb cb 5a cf d3 ed ab f0 da ef e4 de db 3c 8b b2 ..Z..........<.. 0530 7e a7 4b fb d7 b0 7f 91 ~.K..... No. Time Source Destination Protocol Info 236 1.329845 193.99.144.85 141.3.161.43 HTTP Continuation or non-HTTP traffic Frame 236 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 8249, Ack: 737, Len: 1360 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 237 1.329866 141.3.161.43 193.99.144.85 TCP 55331 > http [ACK] Seq=737 Ack=9609 Win=24576 Len=0 TSV=626930 TSER=776120914 Frame 237 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 9609, Len: 0 No. Time Source Destination Protocol Info 238 1.330423 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (GIF89a) Frame 238 (623 bytes on wire, 623 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55334 (55334), Seq: 1, Ack: 799, Len: 555 Hypertext Transfer Protocol Compuserve GIF, Version: GIF89a No. Time Source Destination Protocol Info 239 1.330451 141.3.161.43 193.99.144.85 TCP 55334 > http [ACK] Seq=799 Ack=556 Win=6656 Len=0 TSV=626931 TSER=776120922 Frame 239 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55334 (55334), Dst Port: http (80), Seq: 799, Ack: 556, Len: 0 No. Time Source Destination Protocol Info 240 1.331043 141.3.161.43 193.99.144.85 TCP 55334 > http [FIN, ACK] Seq=799 Ack=556 Win=6656 Len=0 TSV=626931 TSER=776120922 Frame 240 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55334 (55334), Dst Port: http (80), Seq: 799, Ack: 556, Len: 0 No. Time Source Destination Protocol Info 241 1.339150 193.99.144.85 141.3.161.43 TCP http > 55334 [FIN, ACK] Seq=556 Ack=799 Win=4914 Len=0 TSV=776120923 TSER=626926 Frame 241 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55334 (55334), Seq: 556, Ack: 799, Len: 0 No. Time Source Destination Protocol Info 242 1.339199 141.3.161.43 193.99.144.85 TCP 55334 > http [ACK] Seq=800 Ack=557 Win=6656 Len=0 TSV=626933 TSER=776120923 Frame 242 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55334 (55334), Dst Port: http (80), Seq: 800, Ack: 557, Len: 0 No. Time Source Destination Protocol Info 243 1.339882 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #244] Frame 243 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 c9 5f 37 7c b3 d2 80 10 12 f4 .P.#..._7|...... 0010 a6 2a 00 00 01 01 08 0a 2e 42 aa 5b 00 09 90 f0 .*.......B.[.... 0020 f6 d5 f8 6d 77 f2 6f 65 e5 ad 67 e9 f6 d5 f8 6d ...mw.oe..g....m 0030 77 f2 6f 6d 9e 45 d9 3f 53 a5 fd 3f 4a f6 0f ea w.om.E.?S..?J... 0040 f4 7a 3f f9 17 e8 ff 00 8f a7 e7 f4 fa 7b 2f 22 .z?..........{/" 0050 ec 9f a9 d2 fe f5 ec 1f e4 5e 8f d3 f3 ff 00 c3 .........^...... 0060 f4 7c dd 97 4f 34 fe a1 a6 ba fb 0f 2b 37 89 e4 .|..O4......+7.. 0070 af d2 ad 34 d7 dd 93 eb f2 d6 b3 f4 fb 6a fc 36 ...4.........j.6 0080 bb f9 37 b2 f2 d6 b3 f4 fb 6a fc 36 bb f9 37 b6 ..7......j.6..7. 0090 cf 22 ec 9f a9 d2 ff 00 47 fe 6b d8 3f a3 ff 00 ."......G.k.?... 00a0 c1 7f 7f a7 d3 e9 ec bc 8d b2 7e a5 4b fb d7 b0 ..........~.K... 00b0 7f 91 ff 00 57 cd ff 00 1f d3 f3 f6 5d 3c d3 fa ....W.......]<.. 00c0 86 9a eb ec 3c ac de 27 92 bf 4a b4 d3 5f 76 4f ....<..'..J.._vO 00d0 af cb 5a cf d3 ed ab f0 da ef e4 de cb cb 5a cf ..Z...........Z. 00e0 d3 ed ab f0 da ef e4 de db 3c 8d b2 7e a7 4b fb .........<..~.K. 00f0 d7 b0 7f 91 7f fc fe 8f 46 3b 2f 22 ec 9f a9 d2 ........F;/".... 0100 fe f5 ec 1f e4 5f fb 7d 99 c7 a3 d0 ba 79 a7 f5 ....._.}.....y.. 0110 0d 35 d7 d8 79 59 bc 4f 25 7e 95 69 a6 be ec 9c .5..yY.O%~.i.... 0120 21 ca 4d ef 74 69 b6 bf 1b 94 77 4d e1 1b 8c 54 !.M.ti....wM...T 0130 58 6c 40 7a 2a 9a f3 b8 a7 cd 20 2e e5 aa e9 1b Xl@z*..... ..... 0140 1b e0 a5 c4 d9 bd 33 66 47 58 11 4b ec c5 14 f6 ......3fGX.K.... 0150 8a c7 64 79 6c 36 0d cb a8 ac 26 c6 19 d6 a9 25 ..dyl6....&....% 0160 62 3b 1c 0d 79 00 db a4 2b d9 aa f5 af c9 e2 73 b;..y...+......s 0170 92 70 84 da 5d dc ae be b8 29 2d 21 10 43 7e ca .p..]....)-!.C~. 0180 c4 51 60 e9 57 8d f6 2e 9f 91 76 4f d4 e9 7f 7a .Q`.W.....vO...z 0190 f6 0f f2 2f 4f e8 f9 bf e3 fa 7e 7e cb c8 bb 27 .../O.....~~...' 01a0 ea 74 bf bd 7b 07 ff 00 4f 71 ff 00 af 47 a7 f4 .t..{...Oq...G.. 01b0 fa 7d 2b a4 8c 52 35 bc 1f 2e 64 8c f9 64 79 59 .}+..R5...d..dyY 01c0 bc 4f 25 49 04 9b aa 73 86 31 af 7f 23 83 d1 ea .O%I...s.1..#... 01d0 2d ef a9 56 ae c0 a6 c1 a3 d3 54 d0 4a 49 91 cb -..V......T.JI.. 01e0 a4 2d f6 eb 17 42 b9 6d af 80 e0 d3 a9 f9 02 86 .-...B.m........ 01f0 5a 7d 5a 54 29 6c 31 13 32 b2 92 72 ec 69 09 86 Z}ZT)l1.2..r.i.. 0200 a2 a3 e5 52 d4 50 1e ec f4 54 a7 be 50 0a 5e 1a ...R.P...T..P.^. 0210 a6 b4 b7 2a 86 78 ee 96 b5 22 61 9d 8a e2 f5 66 ...*.x..."a....f 0220 78 f7 61 72 46 1c 3d 53 9a 3e ac 71 e8 29 31 e8 x.arF.=S.>.q.)1. 0230 9e 7a 6b 9e 3c dd 1d ac 6d 4a a2 d3 54 58 9c 71 .zk.<...mJ..TX.q 0240 8a b6 78 d8 ee db ca 24 c1 21 2f 11 15 4f 45 90 ..x....$.!/..OE. 0250 33 91 c7 12 ce 17 3e 3b 93 67 d0 22 ff 00 b2 94 3.....>;.g.".... 0260 bd 03 90 70 e7 3b 80 01 04 f9 2a 85 c9 84 43 14 ...p.;....*...C. 0270 db 65 29 c1 86 a4 38 62 12 64 f0 52 88 0a c0 c7 .e)...8b.d.R.... 0280 ce 32 52 c5 60 05 78 ce 52 c0 44 31 e2 30 c5 ba .2R.`.x.R.D1.0.. 0290 ec d7 46 18 28 72 48 99 e7 3d e4 d9 7c 72 56 5e ..F.(rH..=..|rV^ 02a0 8a b4 d3 5f 76 21 e8 a8 ed 79 09 50 55 0a 3d 77 ..._v!...y.PU.=w 02b0 6b f5 f8 34 6c 31 84 ad f8 bb 90 8a e6 23 5c d3 k..4l1.......#\. 02c0 c1 28 63 25 5b ab 18 94 a3 92 86 4e e9 d9 2e 50 .(c%[......N...P 02d0 77 55 ae b7 e2 ab 63 eb 9c 0e 77 3b 0e 47 a9 82 wU....c...w;.G.. 02e0 82 27 5d d5 74 05 95 71 9e 22 c9 f1 5e fd 75 7d .'].t..q."..^.u} 02f0 15 e6 74 d5 cd b5 85 5e 64 db 55 f4 98 2b 70 4a ..t....^d.U..+pJ 0300 a8 a5 a8 56 05 ba 72 a6 26 b2 b3 0a ee 56 d8 1b ...V..r.&....V.. 0310 15 da 76 00 27 4a 21 f5 71 bf 21 1c c1 bc 66 be ..v.'J!.q.!...f. 0320 7d 32 5b db 94 5e 09 a7 45 04 0c f2 ba 71 a1 84 }2[..^..E....q.. 0330 2a e4 b7 b2 df 7e 46 24 ec a3 5e e9 d6 b6 54 e6 *....~F$..^...T. 0340 c3 2b 3b de 36 7b f4 d7 40 23 ea cf 91 6b 71 14 .+;.6{..@#...kq. 0350 58 72 53 a3 e9 d1 eb 2b dc 66 44 51 7c 58 5d c3 XrS....+.fDQ|X]. 0360 cb 18 50 15 24 8b 30 ab 41 4c 53 22 78 d8 de d7 ..P.$.0.ALS"x... 0370 dc cd e9 2d 5f 06 d3 fa 97 42 8e f0 8e b3 e9 67 ...-_....B.....g 0380 4d 67 16 0c 79 b3 87 8c 65 89 c7 95 3a b5 2e 87 Mg..y...e...:... 0390 a2 60 0f 48 65 74 1f 45 8e 38 30 e4 d8 8b 03 63 .`.Het.E.80....c 03a0 63 c8 b2 c7 a9 8e bb e8 a5 92 06 b8 98 8c 38 b3 c.............8. 03b0 91 73 60 4c b5 5d 16 e3 3a f1 78 89 77 d0 70 53 .s`L.]..:.x.w.pS 03c0 8d 80 87 e0 1e 20 12 2a d1 91 27 12 45 83 c7 b2 ..... .*..'.E... 03d0 de ff 00 47 49 4d 33 75 d3 a4 6b ab 4c 75 c4 58 ...GIM3u..k.Lu.X 03e0 74 9c 6b be bb 56 54 d4 62 20 ba 52 ba 58 3e 22 t.k..VT.b .R.X>" 03f0 72 09 86 ab 97 79 85 95 57 d8 20 27 78 fd 4a c4 r....y..W. 'x.J. 0400 b1 4c 8a d8 88 ec fb 0c a1 98 63 ab 7e 43 63 13 .L........c.~Cc. 0410 0d 74 b3 81 f4 c3 70 17 23 22 d7 e1 99 1d 3c f9 .t....p.#"....<. 0420 24 22 99 4b 89 7b 5a 48 cd 77 89 04 f0 a2 99 51 $".K.{ZH.w.....Q 0430 9f 11 e8 b0 68 3d 96 e5 da 8a 04 e8 7a c4 b8 c9 ....h=......z... 0440 8c 82 8b 00 fa 8f 4d 8e 3d 54 db 6b 80 56 28 8a ......M.=T.k.V(. 0450 ad 70 52 d8 2d 54 d3 c8 44 d9 2d 2b 96 6d 78 c4 .pR.-T..D.-+.mx. 0460 fc 3c eb 96 40 4b b7 97 08 d9 e8 12 91 d6 1c 70 .<..@K.........p 0470 93 d9 2c c3 ce 44 b4 31 82 0c ca 81 22 da de ae ..,..D.1...."... 0480 5e 8b 0b ec 5d 42 21 27 1b b0 ce f8 72 64 bc db ^...]B!'....rd.. 0490 88 d2 2f ad ea 35 e6 9d dd 3a c2 ac de 70 7b d5 ../..5...:...p{. 04a0 54 53 63 53 5e e4 2d 52 b5 61 f8 64 28 8a a4 02 TScS^.-R.a.d(... 04b0 a2 56 6b 34 9c 76 1a db 7b 1b 0b f9 39 ec fa b9 .Vk4.v..{...9... 04c0 5a 8d 16 ce aa 4a a6 43 11 34 4b e8 f2 5d ca 7a Z....J.C.4K..].z 04d0 fe 93 cf 65 ba b7 7d 1f 69 a8 a7 a3 93 ab f0 7a ...e..}.i......z 04e0 ff 00 0e 76 26 d8 d9 b4 a2 49 4e e4 78 58 c1 36 ...v&....IN.xX.6 04f0 72 7c 64 4d 46 2a 92 31 60 c2 1c db b5 bc 5c 03 r|dMF*.1`.....\. 0500 52 b6 b9 67 ab ed b6 a5 65 e1 b0 59 33 b7 59 74 R..g....e..Y3.Yt 0510 ef ec ba 6d 7e ba 85 4b bb 36 1c 9a 96 fa ea d0 ...m~..K.6...... 0520 72 98 55 ca 46 73 88 dc b1 b5 7a 43 a9 65 76 13 r.U.Fs....zC.ev. 0530 5d c6 86 c3 58 ec b7 ee ]...X... No. Time Source Destination Protocol Info 244 1.340124 193.99.144.85 141.3.161.43 HTTP Continuation or non-HTTP traffic Frame 244 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 9609, Ack: 737, Len: 1360 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 245 1.340154 141.3.161.43 193.99.144.85 TCP 55331 > http [ACK] Seq=737 Ack=10969 Win=27264 Len=0 TSV=626933 TSER=776120923 Frame 245 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 10969, Len: 0 No. Time Source Destination Protocol Info 246 1.340807 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) Frame 246 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 ce af 37 7c b3 d2 80 10 12 f4 .P.#....7|...... 0010 6f e9 00 00 01 01 08 0a 2e 42 aa 5c 00 09 90 f0 o........B.\.... 0020 01 20 5c 22 99 00 a7 84 06 01 21 d9 c9 2d 74 19 . \"......!..-t. 0030 20 61 7b 29 ab 50 a5 c5 12 48 04 93 78 43 5d 24 a{).P...H..xC]$ 0040 4e 61 e5 cf 27 69 63 f7 c8 a7 2f fa 7d 1f 29 a4 Na..'ic.../.}.). 0050 fd bd b4 7a 3f bf ba f4 76 5f 22 7c bf f5 9b 3f ...z?...v_"|...? 0060 db fb 47 c3 ed de 71 be f1 43 ca 82 b5 36 a9 6d ..G...q..C...6.m 0070 b0 46 14 e4 5e 2c 62 fb 5d d8 35 c2 30 bb 86 b0 .F..^,b.].5.0... 0080 5d 2b 1a f0 dc 81 32 bd 56 f4 ea dd 92 36 0b c2 ]+....2.V....6.. 0090 6b 34 11 44 e0 24 c2 51 12 64 cf 2e 58 fb da 7f k4.D.$.Q.d..X... 00a0 de 7f 8b db 07 66 a0 0b 2b 6c 40 23 23 4a a3 bc .....f..+l@##J.. 00b0 46 98 bf c1 b3 7f 50 b3 51 51 80 dc 40 c1 ba cd F.....P.QQ..@... 00c0 a7 11 6b 57 7f 91 3e 5f fa cd 9f ed fd a3 e1 f6 ..kW..>_........ 00d0 5f 22 7c bf f5 9b 3f db fb 47 c3 ed 62 3c b9 63 _"|...?..G..b<.c 00e0 ef 69 ff 00 79 fe 2f 65 e5 cb 1f 7b 4f fb cf f1 .i..y./e...{O... 00f0 7b 4e af b3 fe 32 9f fa 75 3e 33 fd f9 1b 41 5a {N...2..u>3...AZ 0100 a4 76 2a cb d2 19 dd ff 00 91 b5 77 f9 13 e5 ff .v*........w.... 0110 00 ac d9 fe df da 3e 1f 65 f2 27 cb ff 00 59 b3 ......>.e.'...Y. 0120 fd bf b4 7c 3e d6 23 cb 96 3e f6 9f f7 9f e2 f6 ...|>.#..>...... 0130 5e 5c b1 f7 b4 ff 00 bc ff 00 17 b3 ab ec ff 00 ^\.............. 0140 8c a7 fe 9d 4f 8c ff 00 7e 46 c1 5a a4 76 2a cb ....O...~F.Z.v*. 0150 d2 19 dd ff 00 91 b7 93 3b 73 3c 89 47 b6 6e f4 ........;s<.G.n. 0160 a7 eb aa bb 5b 35 15 b5 f8 58 d7 ad 38 cf 7b 7e ....[5...X..8.{~ 0170 cb 57 c2 6a 28 59 05 8b 48 89 15 ed a9 6b a6 ce .W.j(Y..H....k.. 0180 49 5f 75 84 e2 b5 b1 8c 82 43 b7 7c e0 66 16 07 I_u......C.|.f.. 0190 2e 0f d3 79 4b 7c a4 bd b0 47 a9 95 f9 3e 08 db ...yK|...G...>.. 01a0 55 ab 3b 44 6a b7 2d 25 5a c9 39 a8 6b 77 70 44 U.;Dj.-%Z.9.kwpD 01b0 29 b9 02 15 f0 d8 02 d4 3b 1a ae 77 e7 c0 51 bb ).......;..w..Q. 01c0 52 b7 27 62 48 c9 93 ee db f6 3b fa cd bb 7b ae R.'bH.....;...{. 01d0 1f 54 db f6 b1 0a eb bd 93 23 d6 7f 9b fd 86 ce .T.......#...... 01e0 3a bc 09 05 3d 50 29 b2 82 8d c0 bf af 25 32 4b :...=P)......%2K 01f0 14 ed 0d ea b3 37 6c 4c a6 4b 23 94 53 54 a7 be .....7lL.K#.ST.. 0200 08 c5 be c9 47 b0 36 7e 61 bf e5 09 02 e2 ac 51 ....G.6~a......Q 0210 b8 bb e3 d6 f8 de 48 61 8d 3b 59 b1 ca 29 54 12 ......Ha.;Y..)T. 0220 b6 9a 6e 26 ec 9d 96 c1 07 72 ac f2 0c dd e6 a7 ..n&.....r...... 0230 2c 9e 55 99 9e 6a 76 7d 9e e8 3d 68 09 1c 46 9a ,.U..jv}..=h..F. 0240 db 22 f0 e6 5e 38 9f 36 60 f6 d1 ab 50 b7 62 65 ."..^8.6`...P.be 0250 3f 79 22 09 4e 10 99 9c 9c eb 88 b5 7d e6 cd 3b ?y".N.......}..; 0260 94 b4 3a ca 17 5d ea 6d 4e 31 83 d6 0e ac 3b 0b ..:..].mN1....;. 0270 3a ad cb 72 46 d6 62 ad 3b 5e 04 a0 4f 2b 15 19 :..rF.b.;^..O+.. 0280 82 23 93 a3 37 8b 07 88 88 08 be 3d 7c cb 1e a8 .#..7......=|... 0290 d3 86 69 f9 07 66 dd 1e d7 2a ba bf a3 dd 89 e2 ..i..f...*...... 02a0 26 f1 b5 5a ed 07 78 d2 9f c9 ac 50 b7 b2 2d 83 &..Z..x....P..-. 02b0 56 e5 97 85 69 7b 22 2c 7b 34 6c 20 a0 b0 e0 d0 V...i{",{4l .... 02c0 65 72 39 62 d1 88 78 5d 9e 6d 15 bd 06 bd 54 c0 er9b..x].m....T. 02d0 39 6f 62 e3 79 33 7a a2 99 b3 d7 38 f5 ce 47 b1 9ob.y3z....8..G. 02e0 b1 89 31 29 7b 2a 15 43 a6 d8 72 84 59 cc 71 89 ..1){*.C..r.Y.q. 02f0 5a 4d 1e ed 78 7a f1 ef 06 49 8c a2 6d c1 f2 b7 ZM..xz...I..m... 0300 d9 2b b7 2c 9b 99 2c 39 32 55 3b 5a b5 d8 2d a6 .+.,..,92U;Z..-. 0310 82 df 1f 5a ea 98 2e 97 a8 db 79 6e c9 12 ab 59 ...Z......yn...Y 0320 9b 73 9e 56 79 da 41 6f 14 57 c6 2b f6 44 aa b3 .s.Vy.Ao.W.+.D.. 0330 96 25 59 27 19 27 67 a0 cb f9 da 59 d2 2f 6e d6 .%Y'.'g....Y./n. 0340 c1 dc b6 0e d0 21 c1 79 2e 01 22 1a d5 45 c1 b8 .....!.y.."..E.. 0350 3c 41 47 ce 4c 31 40 e4 f2 56 64 13 84 91 81 0f _.... 0460 fd a3 e1 f6 5f 22 7c bf f5 9b 3f db fb 47 c3 ed ...._"|...?..G.. 0470 5e ab b6 9d 86 35 84 97 f3 be e5 70 4b 0f d3 ab ^....5.....pK... 0480 9c db f4 c1 62 db ca 65 8d 73 5f 99 2a e5 10 68 ....b..e.s_.*..h 0490 65 c1 2c 49 97 32 df 88 24 8d dc 5e d8 05 53 af e.,I.2..$..^..S. 04a0 60 20 c9 5b 39 7c 6d b7 e5 96 d6 a7 f3 b6 d8 d9 ` .[9|m......... 04b0 32 75 da c5 84 69 2b fa 79 b5 0e d3 49 8b 00 f2 2u...i+.y...I... 04c0 5c f3 68 82 f3 46 6d 5d 6b 57 b3 a1 c3 2a 62 29 \.h..Fm]kW...*b) 04d0 bc 45 0d a0 b7 57 ed d7 0d b2 e5 0c d1 b3 51 25 .E...W........Q% 04e0 ba c8 0e a2 97 dd 2e 08 c4 b3 bb 47 28 77 20 49 ...........G(w I 04f0 b0 55 a8 c0 ee b1 40 5f 9e 1d 95 73 3f fd b2 2d .U....@_...s?..- 0500 01 8e 16 37 7c 89 f2 ff 00 d6 6c ff 00 6f ed 1f ...7|.....l..o.. 0510 0f b2 f9 13 e5 ff 00 ac d9 fe df da 3e 1f 60 34 ............>.`4 0520 b7 1b e5 6b 0f 9c f5 9d b4 86 46 dd 2b ab e0 d6 ...k......F.+... 0530 c9 d3 25 92 d6 f2 19 13 ..%..... No. Time Source Destination Protocol Info 247 1.349544 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #248] Frame 247 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 d3 ff 37 7c b3 d2 80 10 12 f4 .P.#....7|...... 0010 cc 5f 00 00 01 01 08 0a 2e 42 aa 66 00 09 90 f2 ._.......B.f.... 0020 5b 0c 61 42 50 ce 56 db 28 63 31 48 b5 d0 c4 20 [.aBP.V.(c1H... 0030 c5 25 85 7b d0 a5 2c 4a b5 9c 47 66 a4 02 4f 59 .%.{..,J..Gf..OY 0040 1c 4a 52 47 63 50 4a 42 4e 6c ef 78 40 72 3d 20 .JRGcPJBNl.x@r= 0050 1c 3d 35 2a 82 7b 1c 12 95 1e 31 2e c1 83 80 47 .=5*.{....1....G 0060 79 88 83 63 df c8 9f 2f fd 66 cf f6 fe d1 f0 fb y..c.../.f...... 0070 2f 91 3e 5f fa cd 9f ed fd a3 e1 f6 08 6e 5b 26 /.>_.........n[& 0080 c0 95 38 e5 0e ac 39 32 a2 53 b0 bb 0e 5d 43 a6 ..8...92.S...]C. 0090 eb 1b 2b a9 62 ba b4 96 d1 84 2b 31 a7 42 23 96 ..+.b.....+1.B#. 00a0 af 99 79 8a c7 25 a8 24 36 6d 40 35 f5 4b a2 fb ..y..%.$6m@5.K.. 00b0 6c 92 ce db 18 ed 1b 0c 73 57 0c 75 6f c8 79 c3 l.......sW.uo.y. 00c0 11 a5 8e 53 6f a6 5b 69 4d dc 33 b5 b9 59 80 c6 ...So.[iM.3..Y.. 00d0 c0 3a 7a c3 52 56 98 5f cb 3e 32 76 04 1a 8c a6 .:z.RV._.>2v.... 00e0 e5 e4 1b c0 e7 8c ac 1b 3d 22 cd b4 09 00 93 ba ........="...... 00f0 5e 04 a5 81 62 60 5e 77 c3 91 36 86 b5 40 5b 74 ^...b`^w..6..@[t 0100 49 76 3c 43 36 99 12 ee 5b 31 04 b3 1b 1c 7e 44 Iv..O...g..h 01d0 f8 7d 82 d4 f7 1b 10 6b ed ae e1 d5 5f 2c d8 d5 .}.....k...._,.. 01e0 52 4f 53 62 c0 2e 74 df 69 12 ac 16 31 50 84 c3 ROSb..t.i...1P.. 01f0 32 b9 a2 c5 8b 39 5c e6 bd ec 3a 0a 12 65 c0 d8 2....9\...:..e.. 0200 d8 3a 2a e0 e6 d3 c1 ad 3e 66 ce 7b 59 93 b9 35 .:*.....>f.{Y..5 0210 7f 5b bc b6 ba cb d9 ec d9 7a 4a f4 f1 16 ed 2a .[.......zJ....* 0220 04 20 18 a4 ad 5c 4c e8 b0 21 03 ad 81 29 78 58 . ...\L..!...)xX 0230 0a b9 eb c7 fd 46 b1 92 be f3 03 28 a9 d9 e8 b8 .....F.....(.... 0240 6d a9 24 2a ec 8a 4b 8b d7 48 c5 b3 53 38 c4 88 m.$*..K..H..S8.. 0250 70 45 b4 17 56 7b 3f 34 12 ae 2c 2e 80 4e 58 e3 pE..V{?4..,..NX. 0260 dd 0f 9d ac 7f c8 9f 2f fd 66 cf f6 fe d1 f0 fb ......./.f...... 0270 2f 91 3e 5f fa cd 9f ed fd a3 e1 f6 ae 3a f6 de /.>_.........:.. 0280 ce b3 be b3 5b 7d d5 f7 29 5b ac 46 89 9a da 3b ....[}..)[.F...; 0290 de 9f f6 14 ab 01 83 ac ee 41 4c 4b 99 eb 39 72 .........ALK..9r 02a0 c0 b8 cd d5 3c a8 a6 5e e6 c0 e3 a6 84 6c db bb ....<..^.....l.. 02b0 62 e9 36 cd 2d 48 f6 c3 63 4b 4b 6b 59 d5 af 27 b.6.-H..cKKkY..' 02c0 5e a6 ad 44 14 8d bc ba 78 dc 03 9b 9c ec 17 b2 ^..D....x....... 02d0 b3 a6 d9 df f5 a8 ab 6a 66 da 75 36 f1 d5 97 38 .......jf.u6...8 02e0 d4 5b 5a 22 7e bb 36 15 07 da aa ea ec a9 60 d9 .[Z"~.6.......`. 02f0 e9 12 07 59 04 9c 1a 92 e4 5d 0a 7c 5d a7 d8 72 ...Y.....].|]..r 0300 93 05 5a a5 bb 22 06 0f 78 06 76 8f 17 3f 98 d6 ..Z.."..x.v..?.. 0310 c7 8f 91 3e 60 fa cd 9f ed fd 9f e1 f6 c7 e4 5b ...>`..........[ 0320 97 be b3 a7 fb 7b 68 f8 5d 84 3c 72 8e e5 63 bb .....{h.].@. 0450 45 b8 ff 00 28 0b 19 8d 71 c9 2a ed 2b 52 d7 14 E...(...q.*.+R.. 0460 38 3d 73 a6 2c 3e d5 99 34 f5 e2 d5 9d ae 4d 8a 8=s.,>..4.....M. 0470 c0 d4 e6 e4 f0 a5 52 d6 c2 f3 d9 34 26 a0 1d d5 ......R....4&... 0480 07 dc ba a7 7a 41 db 14 78 bf 0a ad 09 67 39 63 ....zA..x....g9c 0490 98 cd c8 63 6f 9e 95 31 74 1d c8 70 03 f6 ad 0f ...co..1t..p.... 04a0 4f 10 e3 f6 1c ad d0 45 8d be 58 f5 65 cd 5d 5e O......E..X.e.]^ 04b0 97 39 15 74 e3 0c f4 94 ba c5 c8 a5 59 13 c9 a8 .9.t........Y... 04c0 1e 3c 1e ba e3 72 6e cb bf 75 36 a5 9f 0f e8 85 .<...rn..u6..... 04d0 49 69 a3 98 b4 53 68 ab b4 db ac 83 46 5c f3 e7 Ii...Sh.....F\.. 04e0 51 f7 80 3c 02 36 5b d5 3a 4f 8a f5 ae c4 94 fe Q..<.6[.:O...... 04f0 23 31 75 a2 f1 9d ee 6a de 61 a9 ac c0 1c 5a c1 #1u....j.a....Z. 0500 7a e0 01 b8 ad 30 4a 32 cd aa 91 71 a5 2e 63 88 z....0J2...q..c. 0510 f9 e3 f9 40 65 eb 02 b7 3e 0a 5a 2e b1 09 3d e9 ...@e...>.Z...=. 0520 ad 8c b2 6f 68 79 1e 18 ae 39 73 9f 11 64 0c da ...ohy...9s..d.. 0530 d4 e0 16 45 92 91 55 78 ...E..Ux No. Time Source Destination Protocol Info 248 1.349799 193.99.144.85 141.3.161.43 HTTP [TCP Previous segment lost] Continuation or non-HTTP traffic Frame 248 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 12329, Ack: 737, Len: 1360 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 249 1.349838 141.3.161.43 193.99.144.85 TCP [TCP Dup ACK 245#1] 55331 > http [ACK] Seq=737 Ack=10969 Win=27264 Len=0 TSV=626935 TSER=776120923 SLE=12329 SRE=13689 Frame 249 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 10969, Len: 0 No. Time Source Destination Protocol Info 250 1.350473 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (GIF89a) Frame 250 (1225 bytes on wire, 1225 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55335 (55335), Seq: 1, Ack: 798, Len: 1157 Hypertext Transfer Protocol Compuserve GIF, Version: GIF89a No. Time Source Destination Protocol Info 251 1.350501 141.3.161.43 193.99.144.85 TCP 55335 > http [ACK] Seq=798 Ack=1158 Win=8256 Len=0 TSV=626936 TSER=776120934 Frame 251 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55335 (55335), Dst Port: http (80), Seq: 798, Ack: 1158, Len: 0 No. Time Source Destination Protocol Info 252 1.351095 141.3.161.43 193.99.144.85 TCP 55335 > http [FIN, ACK] Seq=798 Ack=1158 Win=8256 Len=0 TSV=626936 TSER=776120934 Frame 252 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55335 (55335), Dst Port: http (80), Seq: 798, Ack: 1158, Len: 0 No. Time Source Destination Protocol Info 253 1.359560 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) Frame 253 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 d9 4f 37 7c b3 d2 80 10 12 f4 .P.#...O7|...... 0010 86 8d 00 00 01 01 08 0a 2e 42 aa 67 00 09 90 f2 .........B.g.... 0020 ed 4d 70 49 d9 0e 65 b0 62 1d c0 92 30 cc d8 aa .MpI..e.b...0... 0030 62 ea bb 04 bd ef fc c3 34 a2 03 0c ce 20 11 20 b.......4.... . 0040 60 1a d3 f5 70 dc 1b ac 5b 27 e5 5e ac 1a 26 5d `...p...['.^..&] 0050 b9 8f b4 1d e9 b2 54 8f 23 9c a7 6b 39 bb 3a 90 ......T.#..k9.:. 0060 e8 15 92 6c 00 67 39 25 0a ce 57 5d a4 61 e2 89 ...l.g9%..W].a.. 0070 4f 63 bc 41 b6 d9 e3 eb ad b6 0a bb ba 3d 86 e3 Oc.A.........=.. 0080 93 fa b3 d8 89 4d 77 94 c9 ad 3f d2 de cd 55 4d .....Mw...?...UM 0090 b5 ae 43 59 24 e8 cf 5f af e8 54 71 32 c1 44 81 ..CY$.._..Tq2.D. 00a0 66 bd e0 3e bb 2b 3f 50 7d 9e 41 b4 d6 cf ec e1 f..>.+?P}.A..... 00b0 b5 ad a8 c8 29 a0 c1 b6 9e bd d9 84 0b b3 66 67 ....).........fg 00c0 b5 d5 75 e0 db 17 19 ac bd c0 d7 9a 4b eb 6a 4b ..u.........K.jK 00d0 11 62 73 1a da c1 46 88 e4 3b 6b 2a 12 49 a1 46 .bs...F..;k*.I.F 00e0 b2 6d d3 f6 5a 5d 80 34 eb d7 0e eb bd 62 ee 6c .m..Z].4.....b.l 00f0 c6 b2 cd 72 54 ee fc 7a 83 b4 6c 32 cb 4a 58 a8 ...rT..z..l2.JX. 0100 c5 73 54 7a f5 2d 64 ed 97 49 31 21 5c 3a eb 48 .sTz.-d..I1!\:.H 0110 20 14 ec 5e 8d ca b9 b7 05 9b 35 ad e9 bd 4f e7 ..^......5...O. 0120 6a 84 a4 b1 d9 33 00 10 e0 62 5c 36 b3 2d 68 9a j....3...b\6.-h. 0130 60 20 bd 00 41 51 04 6f da 1e 98 38 bb 62 cf 17 ` ..AQ.o...8.b.. 0140 63 00 d6 b3 ba 2b 71 df 29 89 72 b2 1b a6 b1 11 c....+q.).r..... 0150 3a 44 09 59 bd 6a 16 da 95 ce 08 35 d5 6b bf 1d :D.Y.j.....5.k.. 0160 75 ac c6 43 a5 31 b6 38 0d e5 a4 65 66 c0 9a 57 u..C.1.8...ef..W 0170 05 f1 0a 32 21 76 7e 55 37 cf fe f3 cf cd fa 7f ...2!v~U7....... 0180 d8 cf e3 f6 ad 19 e6 b4 47 2b 08 1f 87 fa 8b 84 ........G+...... 0190 d2 5a 67 5b 22 e2 37 db 1d b4 83 de 45 a5 d0 22 .Zg[".7.....E.." 01a0 d6 25 c0 8c 09 8f d5 16 2c e3 5b 8b 18 10 65 aa .%......,.[...e. 01b0 cb d0 cc b3 13 26 9e ca 5b 88 2c da 15 7e db ae .....&..[.,..~.. 01c0 86 bd f8 20 2f 38 6b 85 d7 18 b4 c4 91 51 c9 bd ... /8k......Q.. 01d0 5a 8b cc e1 e9 a0 22 b5 3a f9 1d a5 95 94 dd 4d Z.....".:......M 01e0 bc 00 65 5a 20 68 f4 d6 57 9d d7 89 80 41 ea 4e ..eZ h..W....A.N 01f0 ee 12 d2 06 25 f0 c9 fb ad 02 3f 90 e0 10 3e 9f ....%.....?...>. 0200 06 28 61 96 17 4b 73 c5 b0 b7 67 e5 53 fb cf 3f .(a..Ks...g.S..? 0210 73 3f 8f d9 79 54 fe f3 cf dc cf e3 f6 c3 cb 0a s?..yT.......... 0220 7b d2 3f 76 3f 8f d9 79 61 4f 7a 47 ee c7 f1 fb {.?v?..yaOzG.... 0230 67 7e 7f 1a 7f d8 f7 69 f0 fd d6 04 08 ec 47 a3 g~.....i......G. 0240 f5 ff 00 e5 7b bd 85 bd 1b 67 e5 53 fb cf 3f 73 ....{....g.S..?s 0250 3f 8f d9 79 54 fe f3 cf dc cf e3 f6 c3 cb 0a 7b ?..yT..........{ 0260 d2 3f 76 3f 8f d9 79 61 4f 7a 47 ee c7 f1 fb 37 .?v?..yaOzG....7 0270 e7 f1 a7 fd 8f 76 9f 0f dd 60 40 8e c4 7a 3f 5f .....v...`@..z?_ 0280 fe 57 bb d8 5b d1 b5 1d db bc e6 96 db bc 22 b7 .W..[.........". 0290 27 f5 59 4c a0 ae 36 2c 02 a3 58 e9 b6 3b 75 0e '.YL..6,..X..;u. 02a0 23 14 d4 c4 3c ab b7 9f 47 da 32 ed 46 00 41 1a #...<...G.2.F.A. 02b0 8b b8 bd 58 86 ba 69 bc 47 31 5d 16 ea 2b 8e bc ...X..i.G1]..+.. 02c0 19 57 7d 73 47 7c cd ce e9 ca 7b 2b 10 b6 aa 18 .W}sG|....{+.... 02d0 de e5 3e 2e 8f 17 58 8e 05 d3 f5 a6 8a 2a 4a 21 ..>...X......*J! 02e0 50 ea d8 6a a8 8d b0 c3 ad 34 4a e2 99 0b e6 ee P..j.....4J..... 02f0 35 e3 b5 92 d2 4d 75 ab 8e e5 42 58 6e 3b f0 a1 5....Mu...BXn;.. 0300 b4 75 ed 5f 18 dd ec b2 1d 76 9b ad eb 76 ba 68 .u._.....v...v.h 0310 63 94 13 f5 2c 34 3b 82 d0 5e 30 c5 23 79 9e 65 c...,4;..^0.#y.e 0320 ad d6 1a ed c3 24 fd a3 78 2d 25 7c 69 f0 3a 1b .....$..x-%|i.:. 0330 01 c0 3a ec 0d 43 b0 cd 8d 83 9d de 96 6e 6a 7d ..:..C.......nj} 0340 46 b9 f6 a6 ae a2 f8 b1 96 97 ab 4f 25 d7 d1 af F..........O%... 0350 af a5 10 69 d9 9c a6 dd a8 49 5e 02 27 b9 b1 b4 ...i.....I^.'... 0360 21 10 22 15 07 58 89 15 94 10 3e 7a a0 c4 7d 91 !."..X....>z..}. 0370 d8 b0 96 21 d8 bc 0c 43 e4 d6 d9 a6 1d 3d 80 10 ...!...C.....=.. 0380 0f d3 33 f1 23 38 c1 89 cd cf 85 a6 f9 a2 a2 f2 ..3.#8.......... 0390 ae 82 a4 95 3b 87 26 50 94 b7 aa 09 83 f1 77 1c ....;.&P......w. 03a0 83 90 af 4e b6 71 3c c8 2d a2 ed 2e c8 bd 6d 6e ...N.q<.-.....mn 03b0 33 8c 10 f6 19 4a 04 c4 a1 00 c2 65 84 c8 b9 5a 3....J.....e...Z 03c0 70 8a 56 d7 68 ee 91 b1 e4 5d f7 6f 9d 5e da a2 p.V.h....].o.^.. 03d0 0b c7 91 38 cc 3c 71 7d ae 80 ba 46 9f 69 8a 58 ...8..JI=.y..wj. 0480 88 c2 dd 1f 30 d1 dc 57 6a 62 66 ab 66 e4 7a 87 ....0..Wjbf.f.z. 0490 23 6e ac 44 e7 18 69 aa 6e 9b 0e 3d 65 9d ff 00 #n.D..i.n..=e... 04a0 62 d5 1d 8d 75 e2 c4 a6 36 71 11 ba cc 93 84 d6 b...u...6q...... 04b0 36 54 90 dd 4a 79 c3 23 ae 88 cf 72 f2 55 51 5f 6T..Jy.#...r.UQ_ 04c0 e6 2e a1 ee 1d bc ad 62 c9 2b 95 3a 6f f0 5b 4a .......b.+.:o.[J 04d0 88 b3 54 1a fc 8c fa 9d 56 ad 19 57 97 0e d2 da ..T.....V..W.... 04e0 5a d7 b5 79 44 79 0d bb d5 41 06 e6 12 d3 8e 67 Z..yDy...A.....g 04f0 fe 6b d5 f1 e5 15 b0 a5 e7 2d 2a c4 af 12 0c 0b .k.......-*..... 0500 c2 e9 d4 b3 b6 c3 0c 2c fa c5 23 23 b7 0b d5 f8 .......,..##.... 0510 a4 54 26 23 8e 4d 80 66 51 6d 6a ff 00 0d de 37 .T&#.M.fQmj....7 0520 90 2e 70 47 17 56 3f ad 6e 56 d6 96 9b 47 58 1b ..pG.V?.nV...GX. 0530 82 ed 56 59 d5 a5 49 c8 ..VY..I. No. Time Source Destination Protocol Info 254 1.369661 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #255] Frame 254 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 de 9f 37 7c b3 d2 80 10 12 f4 .P.#....7|...... 0010 5f e5 00 00 01 01 08 0a 2e 42 aa 70 00 09 90 f5 _........B.p.... 0020 2e 33 24 58 29 30 4a b7 00 80 43 01 58 12 ec 89 .3$X)0J...C.X... 0030 f0 23 09 7c a2 d1 8f 6c 1b 85 85 76 4c bf 24 75 .#.|...l...vL.$u 0040 51 ad 30 20 d1 56 c4 a7 e9 12 d6 dd 91 d9 96 a2 Q.0 .V.......... 0050 b9 8b 0b 48 a5 59 c7 6e 01 ac b9 3b 23 24 79 30 ...H.Y.n...;#$y0 0060 36 f5 ca 1b 75 d9 99 45 35 aa 72 dc 99 d6 3f bc 6...u..E5.r...?. 0070 2b 71 76 76 b9 d7 a9 0b e2 51 d4 eb ed 9b 56 37 +qvv.....Q....V7 0080 49 e2 59 b5 d7 b7 5b 6e c1 6d 25 5d 5b a1 23 6b I.Y...[n.m%][.#k 0090 70 a3 8c e9 84 9a c3 4a 38 75 57 04 c5 55 6b 16 p......J8uW..Uk. 00a0 05 da 6a 93 ae 37 0f 97 ea fd 32 f1 3c 5f d4 0a ..j..7....2.<_.. 00b0 91 8d 85 95 7f 79 9e 24 b3 7e 19 c5 74 8d ea 3d .....y.$.~..t..= 00c0 0f 64 3d 63 32 57 d8 84 62 3d 73 43 84 e0 c6 1a .d=c2W..b=sC.... 00d0 10 25 81 b4 36 80 be 65 e5 ba e1 d4 2d 6c 3e 2d .%..6..e....-l>- 00e0 e7 f6 64 d2 01 b1 85 50 78 ad 88 dc 08 46 53 0e ..d....Px....FS. 00f0 45 76 d4 62 d8 10 4e c2 23 cf 74 5a d6 8e 17 82 Ev.b..N.#.tZ.... 0100 ce 3c 29 41 13 c8 70 95 15 38 a3 6d 56 4e db 1a .<)A..p..8.mVN.. 0110 b0 37 59 a0 31 91 38 b3 88 0d 68 29 c7 d0 4b 25 .7Y.1.8...h)..K% 0120 2e 6b 43 0d d8 51 ee d3 10 4e 27 0b 03 dd b1 d9 .kC..Q...N'..... 0130 65 4c 01 bd ce 1d 55 d5 1a 7b 15 35 08 9c 67 a5 eL....U..{.5..g. 0140 b1 ab 75 b0 94 a2 b1 62 de b6 96 b6 bf 8a 03 9c ..u....b........ 0150 23 6e 1d 71 c8 42 e5 7a f8 59 6b 42 66 56 cb dc #n.q.B.z.YkBfV.. 0160 8e a9 d4 de 5d ad 63 9b 63 a9 d8 62 bf 9f fa b3 ....].c.c..b.... 0170 3c b5 ca f6 0d 69 3f e6 9c 8c d9 72 db 2c 40 85 <....i?....r.,@. 0180 43 c2 3d c3 06 73 36 6a 77 8c 9d cd 79 38 ab 36 C.=..s6jw...y8.6 0190 2a cd 53 3d 7b 2b 27 34 67 6a 7b f9 5a ac f5 20 *.S={+'4gj{.Z.. 01a0 59 71 97 3d c0 66 32 c0 53 33 e2 e6 70 66 88 c1 Yq.=.f2.S3..pf.. 01b0 0e 2c fa a8 e6 d7 16 0a 0d 69 82 79 6d 8b 15 12 .,.......i.ym... 01c0 5c 00 98 9c 91 72 91 22 c6 70 4f 96 d3 64 a5 01 \....r.".pO..d.. 01d0 f8 a7 9f 91 34 1a b8 04 30 7e 2f 3c c0 60 d5 65 ....4...0~/<.`.e 01e0 52 09 b8 36 bd b1 54 80 6d 53 7d 26 6b 20 63 08 R..6..T.mS}&k c. 01f0 c7 24 dd ae 90 e1 65 4f 70 a2 17 78 d7 47 5d 58 .$....eOp..x.G]X 0200 20 93 3b 22 8c 1b 8d 25 dc 89 72 5f bb 9d bb 0a .;"...%..r_.... 0210 3d 5d 81 09 0f be 4b 85 02 97 cb 1d 3d 53 36 0d =]....K.....=S6. 0220 dc 33 bd 54 0d b6 e3 cb 7d 54 d8 27 2b 02 46 b9 .3.T....}T.'+.F. 0230 5a 2e 96 91 b6 ba a8 15 4c 0b 75 70 8d a0 f3 c7 Z.......L.up.... 0240 87 c5 8d 63 34 72 4c 95 c5 35 4a fb 15 98 e2 ad ...c4rL..5J..... 0250 16 b5 6d 71 bb 35 63 52 cb 08 0f 6e c4 55 59 be ..mq.5cR...n.UY. 0260 6d eb 0d 98 b2 a2 5e 16 06 e9 54 c0 72 17 2d de m.....^...T.r.-. 0270 39 59 87 6c ad 35 ee 20 41 25 d4 81 bb fc 5b 54 9Y.l.5. A%....[T 0280 bb 34 90 5e 92 08 5d 57 1a b1 1c a3 62 63 96 39 .4.^..]W....bc.9 0290 7e ac b0 a0 2a dc 5f cf e7 1d ea 46 74 9e b7 14 ~...*._....Ft... 02a0 ba 93 14 51 5c b5 63 32 d7 b5 f6 76 69 59 28 dc ...Q\.c2...viY(. 02b0 71 77 58 61 84 09 b7 16 04 4b 1f 0a 43 9b 5e d9 qwXa.....K..C.^. 02c0 43 50 c8 1c d2 ac ce d0 4f c3 5d 48 27 15 df a4 CP......O.]H'... 02d0 4a 0c 97 8a a2 75 db 1d cd 6d 3d 91 2c 55 f0 1b J....u...m=.,U.. 02e0 03 6c 66 be 9a 36 a7 4a ea 4c 2e 07 16 b2 a4 b8 .lf..6.J.L...... 02f0 48 09 b4 58 d7 62 c6 26 a1 e1 1d 75 6c 40 20 f5 H..X.b.&...ul@ . 0300 45 12 64 02 5c cc 11 09 7c 89 0f 65 c2 48 3b 80 E.d.\...|..e.H;. 0310 18 80 db e4 91 25 19 67 27 b8 80 03 60 2c 29 1d .....%.g'...`,). 0320 ed c4 43 26 47 cb 5d 55 de 8a 4c da cf c2 d6 74 ..C&G.]U..L....t 0330 d6 bb 6d d2 19 3b 05 ad 83 41 6c 8d 67 18 46 e9 ..m..;...Al.g.F. 0340 27 91 ac 2f b2 56 1d e8 fb fb 89 80 73 68 f6 05 '../.V......sh.. 0350 85 9a 96 7f 7c 6e d7 1c 58 2a 6e 63 ea b6 ce ba ....|n..X*nc.... 0360 56 28 27 2b 25 7a 53 ca f7 34 6d aa 5b 8c cd 7e V('+%zS..4m.[..~ 0370 ee bf 89 d3 71 90 58 e2 da 99 d2 b7 e5 27 eb 63 ....q.X......'.c 0380 5f aa a7 99 b1 05 76 16 87 78 79 ad e4 45 ac f6 _.....v..xy..E.. 0390 08 51 0b 8d b9 a9 50 96 e2 b2 a2 1b 0d 96 80 2a .Q....P........* 03a0 ed 7f 03 b2 80 f3 3b 62 b0 d5 d8 df 05 55 69 e5 ......;b.....Ui. 03b0 35 ac 99 2d 6c 4a 12 0a 4c 88 27 af 98 dd 99 bf 5..-lJ..L.'..... 03c0 cb 0a 7b d2 3f 76 3f 8f d8 aa d9 75 f5 30 0c 07 ..{.?v?....u.0.. 03d0 54 24 8f 34 f1 2a 1f 42 66 44 c4 c4 a7 9e cf 24 T$.4.*.BfD.....$ 03e0 a5 44 ef 80 04 5e 4e 18 b6 07 03 80 7e 56 a0 47 .D...^N.....~V.G 03f0 a8 e4 77 6f 26 0a ee a0 fa ac ad 79 80 5c 55 8e ..wo&......y.\U. 0400 cd ce 94 20 7d 71 19 d9 a0 dd aa 56 b8 48 fc 64 ... }q.....V.H.d 0410 bd 54 94 a3 26 a6 fa 75 9d ea 27 ba 23 17 69 55 .T..&..u..'.#.iU 0420 da b4 f9 36 2a 42 b3 3b 58 de ee b3 66 ab d8 79 ...6*B.;X...f..y 0430 27 ab 36 8d 73 43 15 7c 54 ba 64 a5 15 3e af 7a '.6.sC.|T.d..>.z 0440 c1 da 80 8f 97 35 1e 3a 79 c6 7c 54 67 38 8c 48 .....5.:y.|Tg8.H 0450 da 5c a1 4e a5 56 0d 6f b0 d7 b7 67 56 dd 8d e0 .\.N.V.o...gV... 0460 f2 c2 9e f4 8f dd 8f e3 f6 5e 58 57 de 91 fb b1 .........^XW.... 0470 fc 6e d0 56 97 eb cb 93 2d b1 92 1b 86 07 88 2d .n.V....-......- 0480 c9 c0 0c 66 da 00 06 6a 01 85 d6 06 ba 49 77 49 ...f...j.....IwI 0490 75 41 bd 04 02 f1 c2 e5 c9 16 a3 17 6e 6e f4 19 uA..........nn.. 04a0 7e bf e5 8f aa bb 86 30 7b 1a c4 1a 43 a5 7a 47 ~......0{...C.zG 04b0 0e 6b 7a 74 46 f4 20 a1 61 c5 35 95 b6 69 db 85 .kztF. .a.5..i.. 04c0 76 d9 0b 82 5d 7a b7 03 39 d7 ab 73 55 66 ac bd v...]z..9..sUf.. 04d0 10 3b 1b 9b b3 e4 9d 2a fc a9 d6 62 18 b7 0b e4 .;.....*...b.... 04e0 1d e5 57 4a c3 c2 74 82 42 e4 2a 45 b6 4e 1e 38 ..WJ..t.B.*E.N.8 04f0 5a cf bf 7a 37 55 b5 0a 20 80 f2 73 d7 d2 5c ed Z..z7U.. ..s..\. 0500 32 aa 02 59 62 f8 3e 82 f9 61 4f 7a 47 ee c7 f1 2..Yb.>..aOzG... 0510 fb 2f 2c 2b ef 48 fd d8 fe 37 61 ac f7 48 db 56 ./,+.H...7a..H.V 0520 e1 8b f5 33 24 36 20 30 20 c0 00 86 6c a6 d9 4a ...3$6 0 ...l..J 0530 71 06 8a 78 83 2b b6 06 q..x.+.. No. Time Source Destination Protocol Info 255 1.369958 193.99.144.85 141.3.161.43 HTTP [TCP Previous segment lost] Continuation or non-HTTP traffic Frame 255 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 15049, Ack: 737, Len: 1360 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 256 1.370003 141.3.161.43 193.99.144.85 TCP [TCP Dup ACK 245#2] 55331 > http [ACK] Seq=737 Ack=10969 Win=27264 Len=0 TSV=626940 TSER=776120923 SLE=15049 SRE=16409 SLE=12329 SRE=13689 Frame 256 (88 bytes on wire, 88 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 10969, Len: 0 No. Time Source Destination Protocol Info 257 1.370233 193.99.144.85 141.3.161.43 TCP http > 55335 [FIN, ACK] Seq=1158 Ack=798 Win=4913 Len=0 TSV=776120948 TSER=626928 Frame 257 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55335 (55335), Seq: 1158, Ack: 798, Len: 0 No. Time Source Destination Protocol Info 258 1.370252 141.3.161.43 193.99.144.85 TCP 55335 > http [ACK] Seq=799 Ack=1159 Win=8256 Len=0 TSV=626940 TSER=776120948 Frame 258 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55335 (55335), Dst Port: http (80), Seq: 799, Ack: 1159, Len: 0 No. Time Source Destination Protocol Info 259 1.371069 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #260] Frame 259 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 e3 ef 37 7c b3 d2 80 18 12 f4 .P.#....7|...... 0010 83 81 00 00 01 01 08 0a 2e 42 aa 7a 00 09 90 f7 .........B.z.... 0020 fb 1a f9 c2 01 38 21 76 dd d2 96 4d 2d 6f 41 ab .....8!v...M-oA. 0030 35 20 06 53 b5 f5 e7 21 0e 53 9f 81 3a fe b4 b3 5 .S...!.S..:... 0040 0c 66 52 f0 e5 6a 45 07 ad 9f 4e 7b 92 4a 44 17 .fR..jE...N{.JD. 0050 a7 d4 9e 73 28 e7 3d b3 f2 c2 9e f4 8f dd 8f e3 ...s(.=......... 0060 f6 f9 e5 95 3d e9 8f ba 87 c6 ec 15 88 00 0d b9 ....=........... 0070 5e 3b 11 3f 77 9b 99 61 9e 25 f1 63 6c a9 09 24 ^;.?w..a.%.cl..$ 0080 13 45 b0 81 5c 0c d0 72 89 7f 67 70 b7 9f eb 52 .E..\..r..gp...R 0090 c2 2a 53 42 29 f5 d5 1c c4 6e c8 90 a9 b8 d6 4b .*SB)....n.....K 00a0 5c 3c 85 97 a3 03 e4 d6 1b 08 ce 6a f5 c8 2c e6 \<.........j..,. 00b0 89 58 47 fe ff 00 56 0a c9 35 5c e2 ee e2 2e bb .XG...V..5\..... 00c0 dd e8 40 61 26 0d 0a 31 38 63 35 0d 0a 10 a1 d7 ..@a&..18c5..... 00d0 23 f0 5e b8 ec 49 1d 6e f2 9a b2 68 48 a5 49 6c #.^..I.n...hH.Il 00e0 37 3b 88 dc 8d cb 6b 63 e1 a1 2d 2a c8 db d8 81 7;....kc..-*.... 00f0 2a 76 2f 1f 15 70 6c 2b e5 0c 44 af c7 d5 d2 56 *v/..pl+..D....V 0100 97 d6 d4 fa e9 ff 00 67 07 25 38 6b 7c fb ac d7 .......g.%8k|... 0110 d1 aa 59 32 ec 45 e1 d7 37 38 51 18 d4 d2 24 62 ..Y2.E..78Q...$b 0120 0d 79 4c 55 44 2a d4 0e ac d6 15 95 cb 94 a4 2b .yLUD*.........+ 0130 dd e7 8f aa df 5d 11 87 53 eb 4e f8 6b a0 c4 e2 .....]..S.N.k... 0140 ba 3c db 49 4e 34 64 62 28 38 98 87 27 26 f8 bb .<.IN4db(8..'&.. 0150 2b 47 24 c0 55 70 0c 78 f1 2f aa 59 ed 4b f7 24 +G$.Up.x./.Y.K.$ 0160 3a 85 d7 18 d2 ea 2f 78 5e be d1 8b fd 00 86 6d :...../x^......m 0170 06 07 02 0b 12 31 b7 4a 69 4d d0 77 54 c9 64 fd .....1.JiM.wT.d. 0180 68 05 9d 18 07 1c a1 89 f1 ce 43 14 70 96 31 08 h.........C.p.1. 0190 a1 d7 66 71 30 d7 7a c2 35 fe ae 2c 1f 38 ae 81 ..fq0.z.5..,.8.. 01a0 88 3c 35 0d a2 45 59 9c c2 5d eb 92 8b 49 2d 2b .<5..EY..]...I-+ 01b0 63 f8 0c b2 1c 2c 40 21 aa ba bd 67 85 47 20 9f c....,@!...g.G . 01c0 af 0b 6c 96 21 5f 0c 59 82 97 55 f5 a6 6a 8e f3 ..l.!_.Y..U..j.. 01d0 09 5f 2c 7c eb 26 5a 2c 8f d6 99 ee 61 5f 18 d7 ._,|.&Z,....a_.. 01e0 5a e7 c3 c6 e5 07 22 15 bb 69 8f 1e 56 4a 19 87 Z....."..i..VJ.. 01f0 94 ba ee 26 64 1a e8 64 2e 75 09 ac e6 13 c8 eb ...&d..d.u...... 0200 e2 49 8e 06 8f 3d b3 dc 3e 18 e6 4c 91 e8 cd 61 .I...=..>..L...a 0210 12 f2 62 04 2d a1 25 47 ec ff 00 a9 e9 15 ae 42 ..b.-.%G.......B 0220 92 5e ca eb c2 e6 58 10 97 99 2d b9 73 56 d6 83 .^....X...-.sV.. 0230 9c 4e ab d6 92 1b 1a 63 e4 ed 72 06 8b 18 c6 4e .N.....c..r....N 0240 d5 b0 2a dc 22 d6 50 92 62 b3 0c 8b 0a e3 41 55 ..*.".P.b.....AU 0250 6f 35 f6 9f a3 1f 50 90 1d dc 99 10 25 84 02 3c o5....P.....%..< 0260 05 a9 40 ba a3 ba a6 ce ff 00 49 22 12 d0 1d 9c ..@.......I".... 0270 f7 c7 e5 69 3a 4d 5a 36 08 a6 a8 e5 d6 b5 44 9d ...i:MZ6......D. 0280 72 f0 38 b0 bc d8 68 e1 63 88 b8 8d c0 82 69 8c r.8...h.c.....i. 0290 b6 56 28 21 e2 32 d0 71 5b 9b 15 29 d2 a7 69 d4 .V(!.2.q[..)..i. 02a0 dc 23 8a 35 49 09 a4 c1 31 94 87 4a da ae a3 ae .#.5I...1..J.... 02b0 71 41 bb c4 ea 67 55 78 d6 aa 04 eb 60 62 9c 0d qA...gUx....`b.. 02c0 da 19 7b 1b 2b 4b 22 a2 23 a6 d6 06 72 e5 aa c9 ..{.+K".#...r... 02d0 32 64 4d 36 ab 75 57 93 b7 14 96 a7 c7 f5 81 f6 2dM6.uW......... 02e0 54 b3 aa 75 66 0c 46 d2 ee 67 26 e5 cc fa fd 95 T..uf.F..g&..... 02f0 88 a0 e2 77 51 13 08 4c 7c 89 6f 14 1b ba 1b b0 ...wQ..L|.o..... 0300 89 ce b3 da be 6a bd b3 38 4e ec 6e 53 65 45 f8 .....j..8N.nSeE. 0310 6c f1 c0 db a4 4c 55 7a 2f 5b b7 8d 67 61 1e 06 l....LUz/[..ga.. 0320 3e 41 ea 03 50 4f 09 a5 30 5a 22 f5 ae 63 65 ca >A..PO..0Z"..ce. 0330 1b 32 64 9d 3a 9e 22 1a ff 00 8b a4 f6 98 f6 2a .2d.:."........* 0340 ed 7f 6a a5 b3 ab b8 35 4e ea 7b bd 54 13 5f 69 ..j....5N.{.T._i 0350 84 d1 fb 38 99 09 23 03 88 26 71 63 2c cf 6c 04 ...8..#..&qc,.l. 0360 82 82 9d dd 39 55 49 2b 9f 35 24 1c a7 06 39 e4 ....9UI+.5$...9. 0370 e4 d8 ed ae ee 66 d6 89 55 50 0e 30 ea 42 ed 3b .....f..UP.0.B.; 0380 ad e6 55 57 db 26 de a6 bd 64 c6 ba b3 30 3a 8c ..UW.&...d...0:. 0390 ed 05 0a 9b 0b 8c b1 a8 ab 62 82 61 82 5a e2 06 .........b.a.Z.. 03a0 34 01 67 2b 7a ba 79 d2 04 cc c2 d3 f9 76 af de 4.g+z.y......v.. 03b0 b8 fb c5 ff 00 8b b7 9e c4 d2 08 ae 2b 89 5f a1 ............+._. 03c0 75 7e e8 8d 6a c1 ac 25 b2 f5 0f 5f 61 24 2b 92 u~..j..%..._a$+. 03d0 43 04 70 e4 ad 67 7e da c7 60 b1 ed 59 98 14 a2 C.p..g~..`..Y... 03e0 5d 49 16 c0 89 57 d9 55 8e 6a 2b 81 a3 74 38 eb ]I...W.U.j+..t8. 03f0 8a 34 9e 30 d3 a9 f4 6d 7b 64 bb 7a 8a 84 67 05 .4.0...m{d.z..g. 0400 4c b6 5d 92 3b 15 ba e9 99 93 35 04 cf 77 63 de L.].;.....5..wc. 0410 5a d9 0d 69 9c 90 03 16 cd bd 61 dc fa 82 33 87 Z..i......a...3. 0420 c0 c7 88 c3 5a a0 ba 0e d3 b4 26 24 f5 74 a8 82 ....Z.....&$.t.. 0430 e9 00 42 62 1f 19 ef b5 28 46 22 95 37 04 03 c7 ..Bb....(F".7... 0440 8c 83 79 de 4c 4b 38 cf 17 7e e7 cb b5 7e f5 c7 ..y.LK8..~...~.. 0450 de 2f fc 5d 97 97 6a fd eb 8f bc 5f f8 bb 63 ec ./.]..j...._..c. 0460 5a 1f 7c 43 f1 49 fd bf 67 d9 fe bd 38 ec bd 8b Z.|C.I..g...8... 0470 43 ef 88 7e 29 3f b7 ec fb 3f d7 a7 1d 9b f5 fe C..~)?...?...... 0480 33 68 cb ec a3 d5 d3 e2 34 7c 84 88 ec 69 e5 f5 3h......4|...i.. 0490 9f d1 ee 36 cb cb b5 7e f5 c7 de 2f fc 5d 97 97 ...6...~.../.].. 04a0 6a fd eb 8f bc 5f f8 bb 63 ec 5a 1f 7c 43 f1 49 j...._..c.Z.|C.I 04b0 fd bf 67 d9 fe bd 38 ec bd 8b 43 ef 88 7e 2d 3f ..g...8...C..~-? 04c0 fd 3e cf f5 e9 c7 67 58 5b 7f 19 b4 7f b5 4f ab .>....gX[.....O. 04d0 a7 c4 68 e0 91 1d 8d 3c be b3 fa 3d c6 d4 63 6f ..h....<...=..co 04e0 a1 18 b6 dd e8 31 5b ad 82 43 36 fb 13 0b cf 4c .....1[..C6....L 04f0 bd aa 63 4c 9c 4a 9a 82 8b da ac ec 2d 20 d8 6b ..cL.J......- .k 0500 9b 2e 66 a5 35 08 c0 f2 d5 8c 78 9b 20 55 2a bf ..f.5.....x. U*. 0510 a8 fc 0f 1c 15 40 89 28 ef a6 63 73 5a 19 95 bd .....@.(..csZ... 0520 56 63 1e 72 7a b9 9d 80 d8 9e 9d ac 13 26 a7 8a Vc.rz........&.. 0530 af 3a 15 ea a5 29 e7 16 .:...).. No. Time Source Destination Protocol Info 260 1.378583 193.99.144.85 141.3.161.43 HTTP Continuation or non-HTTP traffic Frame 260 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 16409, Ack: 737, Len: 1360 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 261 1.378627 141.3.161.43 193.99.144.85 TCP [TCP Dup ACK 245#3] 55331 > http [ACK] Seq=737 Ack=10969 Win=27264 Len=0 TSV=626943 TSER=776120923 SLE=15049 SRE=17769 SLE=12329 SRE=13689 Frame 261 (88 bytes on wire, 88 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 10969, Len: 0 No. Time Source Destination Protocol Info 262 1.379020 193.99.144.85 141.3.161.43 TCP http > 55335 [FIN, ACK] Seq=1158 Ack=799 Win=4913 Len=0 TSV=776120955 TSER=626936 Frame 262 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55335 (55335), Seq: 1158, Ack: 799, Len: 0 No. Time Source Destination Protocol Info 263 1.384606 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #264] Frame 263 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 ce af 37 7c b3 d2 80 10 12 f4 .P.#....7|...... 0010 6f 9f 00 00 01 01 08 0a 2e 42 aa 97 00 09 90 ff o........B...... 0020 01 20 5c 22 99 00 a7 84 06 01 21 d9 c9 2d 74 19 . \"......!..-t. 0030 20 61 7b 29 ab 50 a5 c5 12 48 04 93 78 43 5d 24 a{).P...H..xC]$ 0040 4e 61 e5 cf 27 69 63 f7 c8 a7 2f fa 7d 1f 29 a4 Na..'ic.../.}.). 0050 fd bd b4 7a 3f bf ba f4 76 5f 22 7c bf f5 9b 3f ...z?...v_"|...? 0060 db fb 47 c3 ed de 71 be f1 43 ca 82 b5 36 a9 6d ..G...q..C...6.m 0070 b0 46 14 e4 5e 2c 62 fb 5d d8 35 c2 30 bb 86 b0 .F..^,b.].5.0... 0080 5d 2b 1a f0 dc 81 32 bd 56 f4 ea dd 92 36 0b c2 ]+....2.V....6.. 0090 6b 34 11 44 e0 24 c2 51 12 64 cf 2e 58 fb da 7f k4.D.$.Q.d..X... 00a0 de 7f 8b db 07 66 a0 0b 2b 6c 40 23 23 4a a3 bc .....f..+l@##J.. 00b0 46 98 bf c1 b3 7f 50 b3 51 51 80 dc 40 c1 ba cd F.....P.QQ..@... 00c0 a7 11 6b 57 7f 91 3e 5f fa cd 9f ed fd a3 e1 f6 ..kW..>_........ 00d0 5f 22 7c bf f5 9b 3f db fb 47 c3 ed 62 3c b9 63 _"|...?..G..b<.c 00e0 ef 69 ff 00 79 fe 2f 65 e5 cb 1f 7b 4f fb cf f1 .i..y./e...{O... 00f0 7b 4e af b3 fe 32 9f fa 75 3e 33 fd f9 1b 41 5a {N...2..u>3...AZ 0100 a4 76 2a cb d2 19 dd ff 00 91 b5 77 f9 13 e5 ff .v*........w.... 0110 00 ac d9 fe df da 3e 1f 65 f2 27 cb ff 00 59 b3 ......>.e.'...Y. 0120 fd bf b4 7c 3e d6 23 cb 96 3e f6 9f f7 9f e2 f6 ...|>.#..>...... 0130 5e 5c b1 f7 b4 ff 00 bc ff 00 17 b3 ab ec ff 00 ^\.............. 0140 8c a7 fe 9d 4f 8c ff 00 7e 46 c1 5a a4 76 2a cb ....O...~F.Z.v*. 0150 d2 19 dd ff 00 91 b7 93 3b 73 3c 89 47 b6 6e f4 ........;s<.G.n. 0160 a7 eb aa bb 5b 35 15 b5 f8 58 d7 ad 38 cf 7b 7e ....[5...X..8.{~ 0170 cb 57 c2 6a 28 59 05 8b 48 89 15 ed a9 6b a6 ce .W.j(Y..H....k.. 0180 49 5f 75 84 e2 b5 b1 8c 82 43 b7 7c e0 66 16 07 I_u......C.|.f.. 0190 2e 0f d3 79 4b 7c a4 bd b0 47 a9 95 f9 3e 08 db ...yK|...G...>.. 01a0 55 ab 3b 44 6a b7 2d 25 5a c9 39 a8 6b 77 70 44 U.;Dj.-%Z.9.kwpD 01b0 29 b9 02 15 f0 d8 02 d4 3b 1a ae 77 e7 c0 51 bb ).......;..w..Q. 01c0 52 b7 27 62 48 c9 93 ee db f6 3b fa cd bb 7b ae R.'bH.....;...{. 01d0 1f 54 db f6 b1 0a eb bd 93 23 d6 7f 9b fd 86 ce .T.......#...... 01e0 3a bc 09 05 3d 50 29 b2 82 8d c0 bf af 25 32 4b :...=P)......%2K 01f0 14 ed 0d ea b3 37 6c 4c a6 4b 23 94 53 54 a7 be .....7lL.K#.ST.. 0200 08 c5 be c9 47 b0 36 7e 61 bf e5 09 02 e2 ac 51 ....G.6~a......Q 0210 b8 bb e3 d6 f8 de 48 61 8d 3b 59 b1 ca 29 54 12 ......Ha.;Y..)T. 0220 b6 9a 6e 26 ec 9d 96 c1 07 72 ac f2 0c dd e6 a7 ..n&.....r...... 0230 2c 9e 55 99 9e 6a 76 7d 9e e8 3d 68 09 1c 46 9a ,.U..jv}..=h..F. 0240 db 22 f0 e6 5e 38 9f 36 60 f6 d1 ab 50 b7 62 65 ."..^8.6`...P.be 0250 3f 79 22 09 4e 10 99 9c 9c eb 88 b5 7d e6 cd 3b ?y".N.......}..; 0260 94 b4 3a ca 17 5d ea 6d 4e 31 83 d6 0e ac 3b 0b ..:..].mN1....;. 0270 3a ad cb 72 46 d6 62 ad 3b 5e 04 a0 4f 2b 15 19 :..rF.b.;^..O+.. 0280 82 23 93 a3 37 8b 07 88 88 08 be 3d 7c cb 1e a8 .#..7......=|... 0290 d3 86 69 f9 07 66 dd 1e d7 2a ba bf a3 dd 89 e2 ..i..f...*...... 02a0 26 f1 b5 5a ed 07 78 d2 9f c9 ac 50 b7 b2 2d 83 &..Z..x....P..-. 02b0 56 e5 97 85 69 7b 22 2c 7b 34 6c 20 a0 b0 e0 d0 V...i{",{4l .... 02c0 65 72 39 62 d1 88 78 5d 9e 6d 15 bd 06 bd 54 c0 er9b..x].m....T. 02d0 39 6f 62 e3 79 33 7a a2 99 b3 d7 38 f5 ce 47 b1 9ob.y3z....8..G. 02e0 b1 89 31 29 7b 2a 15 43 a6 d8 72 84 59 cc 71 89 ..1){*.C..r.Y.q. 02f0 5a 4d 1e ed 78 7a f1 ef 06 49 8c a2 6d c1 f2 b7 ZM..xz...I..m... 0300 d9 2b b7 2c 9b 99 2c 39 32 55 3b 5a b5 d8 2d a6 .+.,..,92U;Z..-. 0310 82 df 1f 5a ea 98 2e 97 a8 db 79 6e c9 12 ab 59 ...Z......yn...Y 0320 9b 73 9e 56 79 da 41 6f 14 57 c6 2b f6 44 aa b3 .s.Vy.Ao.W.+.D.. 0330 96 25 59 27 19 27 67 a0 cb f9 da 59 d2 2f 6e d6 .%Y'.'g....Y./n. 0340 c1 dc b6 0e d0 21 c1 79 2e 01 22 1a d5 45 c1 b8 .....!.y.."..E.. 0350 3c 41 47 ce 4c 31 40 e4 f2 56 64 13 84 91 81 0f _.... 0460 fd a3 e1 f6 5f 22 7c bf f5 9b 3f db fb 47 c3 ed ...._"|...?..G.. 0470 5e ab b6 9d 86 35 84 97 f3 be e5 70 4b 0f d3 ab ^....5.....pK... 0480 9c db f4 c1 62 db ca 65 8d 73 5f 99 2a e5 10 68 ....b..e.s_.*..h 0490 65 c1 2c 49 97 32 df 88 24 8d dc 5e d8 05 53 af e.,I.2..$..^..S. 04a0 60 20 c9 5b 39 7c 6d b7 e5 96 d6 a7 f3 b6 d8 d9 ` .[9|m......... 04b0 32 75 da c5 84 69 2b fa 79 b5 0e d3 49 8b 00 f2 2u...i+.y...I... 04c0 5c f3 68 82 f3 46 6d 5d 6b 57 b3 a1 c3 2a 62 29 \.h..Fm]kW...*b) 04d0 bc 45 0d a0 b7 57 ed d7 0d b2 e5 0c d1 b3 51 25 .E...W........Q% 04e0 ba c8 0e a2 97 dd 2e 08 c4 b3 bb 47 28 77 20 49 ...........G(w I 04f0 b0 55 a8 c0 ee b1 40 5f 9e 1d 95 73 3f fd b2 2d .U....@_...s?..- 0500 01 8e 16 37 7c 89 f2 ff 00 d6 6c ff 00 6f ed 1f ...7|.....l..o.. 0510 0f b2 f9 13 e5 ff 00 ac d9 fe df da 3e 1f 60 34 ............>.`4 0520 b7 1b e5 6b 0f 9c f5 9d b4 86 46 dd 2b ab e0 d6 ...k......F.+... 0530 c9 d3 25 92 d6 f2 19 13 ..%..... No. Time Source Destination Protocol Info 264 1.384709 193.99.144.85 141.3.161.43 HTTP [TCP Fast Retransmission] Continuation or non-HTTP traffic Frame 264 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 10969, Ack: 737, Len: 1360 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 265 1.384759 141.3.161.43 193.99.144.85 TCP 55331 > http [ACK] Seq=737 Ack=13689 Win=30016 Len=0 TSV=626944 TSER=776120983 SLE=15049 SRE=17769 Frame 265 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 13689, Len: 0 No. Time Source Destination Protocol Info 266 1.388528 141.3.161.43 193.99.144.85 TCP 55336 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626945 TSER=0 WS=6 Frame 266 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55336 (55336), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 267 1.391483 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #268] Frame 267 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 d9 4f 37 7c b3 d2 80 10 12 f4 .P.#...O7|...... 0010 86 49 00 00 01 01 08 0a 2e 42 aa 9d 00 09 91 00 .I.......B...... 0020 ed 4d 70 49 d9 0e 65 b0 62 1d c0 92 30 cc d8 aa .MpI..e.b...0... 0030 62 ea bb 04 bd ef fc c3 34 a2 03 0c ce 20 11 20 b.......4.... . 0040 60 1a d3 f5 70 dc 1b ac 5b 27 e5 5e ac 1a 26 5d `...p...['.^..&] 0050 b9 8f b4 1d e9 b2 54 8f 23 9c a7 6b 39 bb 3a 90 ......T.#..k9.:. 0060 e8 15 92 6c 00 67 39 25 0a ce 57 5d a4 61 e2 89 ...l.g9%..W].a.. 0070 4f 63 bc 41 b6 d9 e3 eb ad b6 0a bb ba 3d 86 e3 Oc.A.........=.. 0080 93 fa b3 d8 89 4d 77 94 c9 ad 3f d2 de cd 55 4d .....Mw...?...UM 0090 b5 ae 43 59 24 e8 cf 5f af e8 54 71 32 c1 44 81 ..CY$.._..Tq2.D. 00a0 66 bd e0 3e bb 2b 3f 50 7d 9e 41 b4 d6 cf ec e1 f..>.+?P}.A..... 00b0 b5 ad a8 c8 29 a0 c1 b6 9e bd d9 84 0b b3 66 67 ....).........fg 00c0 b5 d5 75 e0 db 17 19 ac bd c0 d7 9a 4b eb 6a 4b ..u.........K.jK 00d0 11 62 73 1a da c1 46 88 e4 3b 6b 2a 12 49 a1 46 .bs...F..;k*.I.F 00e0 b2 6d d3 f6 5a 5d 80 34 eb d7 0e eb bd 62 ee 6c .m..Z].4.....b.l 00f0 c6 b2 cd 72 54 ee fc 7a 83 b4 6c 32 cb 4a 58 a8 ...rT..z..l2.JX. 0100 c5 73 54 7a f5 2d 64 ed 97 49 31 21 5c 3a eb 48 .sTz.-d..I1!\:.H 0110 20 14 ec 5e 8d ca b9 b7 05 9b 35 ad e9 bd 4f e7 ..^......5...O. 0120 6a 84 a4 b1 d9 33 00 10 e0 62 5c 36 b3 2d 68 9a j....3...b\6.-h. 0130 60 20 bd 00 41 51 04 6f da 1e 98 38 bb 62 cf 17 ` ..AQ.o...8.b.. 0140 63 00 d6 b3 ba 2b 71 df 29 89 72 b2 1b a6 b1 11 c....+q.).r..... 0150 3a 44 09 59 bd 6a 16 da 95 ce 08 35 d5 6b bf 1d :D.Y.j.....5.k.. 0160 75 ac c6 43 a5 31 b6 38 0d e5 a4 65 66 c0 9a 57 u..C.1.8...ef..W 0170 05 f1 0a 32 21 76 7e 55 37 cf fe f3 cf cd fa 7f ...2!v~U7....... 0180 d8 cf e3 f6 ad 19 e6 b4 47 2b 08 1f 87 fa 8b 84 ........G+...... 0190 d2 5a 67 5b 22 e2 37 db 1d b4 83 de 45 a5 d0 22 .Zg[".7.....E.." 01a0 d6 25 c0 8c 09 8f d5 16 2c e3 5b 8b 18 10 65 aa .%......,.[...e. 01b0 cb d0 cc b3 13 26 9e ca 5b 88 2c da 15 7e db ae .....&..[.,..~.. 01c0 86 bd f8 20 2f 38 6b 85 d7 18 b4 c4 91 51 c9 bd ... /8k......Q.. 01d0 5a 8b cc e1 e9 a0 22 b5 3a f9 1d a5 95 94 dd 4d Z.....".:......M 01e0 bc 00 65 5a 20 68 f4 d6 57 9d d7 89 80 41 ea 4e ..eZ h..W....A.N 01f0 ee 12 d2 06 25 f0 c9 fb ad 02 3f 90 e0 10 3e 9f ....%.....?...>. 0200 06 28 61 96 17 4b 73 c5 b0 b7 67 e5 53 fb cf 3f .(a..Ks...g.S..? 0210 73 3f 8f d9 79 54 fe f3 cf dc cf e3 f6 c3 cb 0a s?..yT.......... 0220 7b d2 3f 76 3f 8f d9 79 61 4f 7a 47 ee c7 f1 fb {.?v?..yaOzG.... 0230 67 7e 7f 1a 7f d8 f7 69 f0 fd d6 04 08 ec 47 a3 g~.....i......G. 0240 f5 ff 00 e5 7b bd 85 bd 1b 67 e5 53 fb cf 3f 73 ....{....g.S..?s 0250 3f 8f d9 79 54 fe f3 cf dc cf e3 f6 c3 cb 0a 7b ?..yT..........{ 0260 d2 3f 76 3f 8f d9 79 61 4f 7a 47 ee c7 f1 fb 37 .?v?..yaOzG....7 0270 e7 f1 a7 fd 8f 76 9f 0f dd 60 40 8e c4 7a 3f 5f .....v...`@..z?_ 0280 fe 57 bb d8 5b d1 b5 1d db bc e6 96 db bc 22 b7 .W..[.........". 0290 27 f5 59 4c a0 ae 36 2c 02 a3 58 e9 b6 3b 75 0e '.YL..6,..X..;u. 02a0 23 14 d4 c4 3c ab b7 9f 47 da 32 ed 46 00 41 1a #...<...G.2.F.A. 02b0 8b b8 bd 58 86 ba 69 bc 47 31 5d 16 ea 2b 8e bc ...X..i.G1]..+.. 02c0 19 57 7d 73 47 7c cd ce e9 ca 7b 2b 10 b6 aa 18 .W}sG|....{+.... 02d0 de e5 3e 2e 8f 17 58 8e 05 d3 f5 a6 8a 2a 4a 21 ..>...X......*J! 02e0 50 ea d8 6a a8 8d b0 c3 ad 34 4a e2 99 0b e6 ee P..j.....4J..... 02f0 35 e3 b5 92 d2 4d 75 ab 8e e5 42 58 6e 3b f0 a1 5....Mu...BXn;.. 0300 b4 75 ed 5f 18 dd ec b2 1d 76 9b ad eb 76 ba 68 .u._.....v...v.h 0310 63 94 13 f5 2c 34 3b 82 d0 5e 30 c5 23 79 9e 65 c...,4;..^0.#y.e 0320 ad d6 1a ed c3 24 fd a3 78 2d 25 7c 69 f0 3a 1b .....$..x-%|i.:. 0330 01 c0 3a ec 0d 43 b0 cd 8d 83 9d de 96 6e 6a 7d ..:..C.......nj} 0340 46 b9 f6 a6 ae a2 f8 b1 96 97 ab 4f 25 d7 d1 af F..........O%... 0350 af a5 10 69 d9 9c a6 dd a8 49 5e 02 27 b9 b1 b4 ...i.....I^.'... 0360 21 10 22 15 07 58 89 15 94 10 3e 7a a0 c4 7d 91 !."..X....>z..}. 0370 d8 b0 96 21 d8 bc 0c 43 e4 d6 d9 a6 1d 3d 80 10 ...!...C.....=.. 0380 0f d3 33 f1 23 38 c1 89 cd cf 85 a6 f9 a2 a2 f2 ..3.#8.......... 0390 ae 82 a4 95 3b 87 26 50 94 b7 aa 09 83 f1 77 1c ....;.&P......w. 03a0 83 90 af 4e b6 71 3c c8 2d a2 ed 2e c8 bd 6d 6e ...N.q<.-.....mn 03b0 33 8c 10 f6 19 4a 04 c4 a1 00 c2 65 84 c8 b9 5a 3....J.....e...Z 03c0 70 8a 56 d7 68 ee 91 b1 e4 5d f7 6f 9d 5e da a2 p.V.h....].o.^.. 03d0 0b c7 91 38 cc 3c 71 7d ae 80 ba 46 9f 69 8a 58 ...8..JI=.y..wj. 0480 88 c2 dd 1f 30 d1 dc 57 6a 62 66 ab 66 e4 7a 87 ....0..Wjbf.f.z. 0490 23 6e ac 44 e7 18 69 aa 6e 9b 0e 3d 65 9d ff 00 #n.D..i.n..=e... 04a0 62 d5 1d 8d 75 e2 c4 a6 36 71 11 ba cc 93 84 d6 b...u...6q...... 04b0 36 54 90 dd 4a 79 c3 23 ae 88 cf 72 f2 55 51 5f 6T..Jy.#...r.UQ_ 04c0 e6 2e a1 ee 1d bc ad 62 c9 2b 95 3a 6f f0 5b 4a .......b.+.:o.[J 04d0 88 b3 54 1a fc 8c fa 9d 56 ad 19 57 97 0e d2 da ..T.....V..W.... 04e0 5a d7 b5 79 44 79 0d bb d5 41 06 e6 12 d3 8e 67 Z..yDy...A.....g 04f0 fe 6b d5 f1 e5 15 b0 a5 e7 2d 2a c4 af 12 0c 0b .k.......-*..... 0500 c2 e9 d4 b3 b6 c3 0c 2c fa c5 23 23 b7 0b d5 f8 .......,..##.... 0510 a4 54 26 23 8e 4d 80 66 51 6d 6a ff 00 0d de 37 .T&#.M.fQmj....7 0520 90 2e 70 47 17 56 3f ad 6e 56 d6 96 9b 47 58 1b ..pG.V?.nV...GX. 0530 82 ed 56 59 d5 a5 49 c8 ..VY..I. No. Time Source Destination Protocol Info 268 1.391745 193.99.144.85 141.3.161.43 HTTP [TCP Retransmission] Continuation or non-HTTP traffic Frame 268 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 13689, Ack: 737, Len: 1360 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 269 1.391791 141.3.161.43 193.99.144.85 TCP 55331 > http [ACK] Seq=737 Ack=17769 Win=32704 Len=0 TSV=626946 TSER=776120989 Frame 269 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 17769, Len: 0 No. Time Source Destination Protocol Info 270 1.393965 193.99.144.85 141.3.161.43 TCP http > 55336 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776120993 TSER=626945 Frame 270 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55336 (55336), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 271 1.394005 141.3.161.43 193.99.144.85 TCP 55336 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626946 TSER=776120993 Frame 271 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55336 (55336), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 272 1.394271 141.3.161.43 193.99.144.85 HTTP GET /ct/creativ/08/bilder/creativ08.gif HTTP/1.1 Frame 272 (909 bytes on wire, 909 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55336 (55336), Dst Port: http (80), Seq: 1, Ack: 1, Len: 841 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 273 1.397019 141.3.161.43 193.99.144.85 TCP 55337 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626947 TSER=0 WS=6 Frame 273 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55337 (55337), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 274 1.398323 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #275] Frame 274 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 e9 3f 37 7c b3 d2 80 18 12 f4 .P.#...?7|...... 0010 89 0d 00 00 01 01 08 0a 2e 42 aa a4 00 09 91 02 .........B...... 0020 15 63 1a f5 98 91 38 59 bb ee 48 33 8e e4 c7 ce .c....8Y..H3.... 0030 06 d4 e9 ab 68 b6 08 94 1c c9 45 83 dc d5 94 71 ....h.....E....q 0040 e7 0d e6 ab 70 da 1e 8c 74 dd 60 52 69 06 d6 da ....p...t.`Ri... 0050 36 ef 03 59 02 0e 6b 38 89 ac c7 3f 33 87 61 66 6..Y..k8...?3.af 0060 09 84 2c 0a 65 88 ac b0 81 f3 8d a1 3c 41 8f 57 ..,.e........ 0110 a8 42 74 e3 c7 cf 30 62 ca 72 93 5e 1e 78 0c 30 .Bt...0b.r.^.x.0 0120 39 32 bb 6e 0d d6 29 ab eb 77 15 cd 2e 6b a5 ce 92.n..)..w...k.. 0130 36 c5 a5 04 79 b3 70 a7 db 1c 1c 33 a6 6a 38 cf 6...y.p....3.j8. 0140 92 2d 93 d8 f6 af 5f 4f cc f1 3c 9c 6c 5a 64 c3 .-...._O..<.lZd. 0150 dc f3 b7 44 61 02 d8 00 e2 15 97 c4 7a ce d2 38 ...Da.......z..8 0160 90 cb 1b 32 67 84 e4 00 8c bd 2c a7 2b 64 a5 23 ...2g.....,.+d.# 0170 76 f4 a9 f9 aa 71 bd cc 2a 8e bf 07 d1 33 69 de v....q..*....3i. 0180 63 d6 90 96 a4 29 0b e5 42 db 23 b7 50 92 5f 88 c....)..B.#.P._. 0190 2e ab e9 f6 f1 43 0b 3b 1c b3 13 35 77 46 16 ab .....C.;...5wF.. 01a0 61 99 62 0e 25 97 67 32 cc 80 28 95 39 43 08 e2 a.b.%.g2..(.9C.. 01b0 ba 4e 8c 4c e9 5a a1 41 fc f5 99 96 68 95 21 55 .N.L.Z.A....h.!U 01c0 c5 9d 35 4e f9 38 f8 fb 2e f0 7b 27 8c 7e be bb ..5N.8....{'.~.. 01d0 17 b2 1e 70 66 e3 9b 15 09 1a dc a6 35 25 8b 01 ...pf.......5%.. 01e0 01 32 58 4e 68 d4 e9 6d 35 00 80 4a f2 1e c9 91 .2XNh..m5..J.... 01f0 5c a6 c4 94 e2 dd e6 bb 4b db 55 8c 16 78 79 7c \.......K.U..xy| 0200 16 a6 d8 75 68 30 88 72 48 85 fa bc 5a e6 6e 81 ...uh0.rH...Z.n. 0210 8c fa a8 d8 64 78 50 b5 d4 da 1d 5b 1a 4e ae 1f ....dxP....[.N.. 0220 2e 75 75 67 dc d0 ab 09 83 3c b9 49 4b ca 8a 4e .uug.....<.IK..N 0230 36 36 25 ee 1e d9 31 bd 53 02 56 d1 cc e2 c3 45 66%...1.S.V....E 0240 c6 f1 5e 22 d1 9f d9 5e 86 73 89 50 32 4d 65 1b ..^"...^.s.P2Me. 0250 e7 7f b4 28 70 02 a1 b3 a4 66 5c 33 30 f0 27 27 ...(p....f\30.'' 0260 6c c9 48 0a 4f 64 82 1c b8 de 4c 6e e3 1c b9 40 l.H.Od....Ln...@ 0270 ef 9b 45 b9 47 8c 29 26 f2 ff 00 5e 9e 06 a9 67 ..E.G.)&...^...g 0280 b2 15 12 96 a7 2b 17 4e c8 9c 63 3e b8 7d 3e d7 .....+.N..c>.}>. 0290 b0 2a be 22 0a d6 77 cc 95 7e fe 20 89 87 91 a9 .*."..w..~. .... 02a0 06 32 e1 3a 4c ad 5b af 51 9c 5d 70 58 b2 2b 0d .2.:L.[.Q.]pX.+. 02b0 84 96 4c 1a da 8c 4e 98 75 50 d4 28 59 b4 bc be ..L...N.uP.(Y... 02c0 59 ca ca f9 af b1 35 2c dc 6b 34 da f3 a0 24 83 Y.....5,.k4...$. 02d0 0d ae e8 35 3a fc 66 74 e1 a5 cd 16 b3 d9 d6 c4 ...5:.ft........ 02e0 c5 17 5c bf f6 d3 9c 22 cd 7f 32 eb 71 d8 cb 2f ..\...."..2.q../ 02f0 02 c6 20 b2 b0 cf 2a 08 38 86 06 51 e6 ac d8 64 .. ...*.8..Q...d 0300 d8 56 d5 c7 0c d4 2a 8e 13 34 5d 59 e3 da cc 7b .V....*..4]Y...{ 0310 01 79 6a 5d 61 c2 2a 5c ee ae 11 0a ee 65 a4 0a .yj]a.*\.....e.. 0320 d5 11 25 a6 9e 32 5c b5 69 1d f2 b9 8b a8 4e 42 ..%..2\.i.....NB 0330 9a 7c 65 44 2b 1b 1c 54 68 4a ec 80 1d 6e b0 66 .|eD+..ThJ...n.f 0340 85 af 4f 42 aa c1 00 57 da 18 87 53 d0 12 53 48 ..OB...W...S..SH 0350 29 f0 fb c1 c8 77 2d 9e 45 24 3c 52 a6 18 06 6a )....w-.E$..:~X..Tc 03e0 cd 04 ab 8b 53 a9 73 85 2e 20 83 59 21 fd 63 ec ....S.s.. .Y!.c. 03f0 0c a5 cb a9 58 4e c8 03 2c bc 13 21 34 6a f0 a2 ....XN..,..!4j.. 0400 aa 0b 0a 05 cc c1 52 64 6d 36 b6 08 24 23 6a 9d ......Rdm6..$#j. 0410 6b 86 2e 41 8b 76 7c 0f 35 eb 07 7a 9a c5 2c a3 k..A.v|.5..z..,. 0420 4a 14 ac 5b 53 9a a4 ed 83 56 b5 55 69 de c1 04 J..[S....V.Ui... 0430 4d b0 ea a0 cb cf 47 26 53 61 3b e8 63 22 ad 40 M.....G&Sa;.c".@ 0440 a1 db ed 04 25 83 1a 00 02 c4 06 0c 01 60 90 04 ....%........`.. 0450 19 2d 93 36 82 41 13 49 02 41 2f 53 d2 01 22 26 .-.6.A.I.A/S.."& 0460 07 3e 5a bd b4 43 5c a7 7c 94 ae e5 3e b7 ab 9c .>Z..C\.|...>... 0470 3c 1e b0 b0 ee ae 73 15 ea 4e 5b 54 d6 7d eb 34 <.....s..N[T.}.4 0480 d9 bf ca 2e 9b 02 9b 44 42 a6 86 be c4 b8 a1 2b .......DB......+ 0490 d1 a7 a2 11 c7 5c a8 1f 67 56 ba 76 56 cc d9 87 .....\..gV.vV... 04a0 ac 34 18 2d 90 28 a0 2a dd c7 8e 26 b0 15 a5 40 .4.-.(.*...&...@ 04b0 e8 2d 61 46 24 6d 15 5a 49 5f 8e b9 5b 06 ad ec .-aF$m.ZI_..[... 04c0 54 8b e4 b7 6c d2 b0 72 bc 07 f5 ac 20 2a 38 ed T...l..r.... *8. 04d0 24 28 8c 12 6b 5d 68 ad 70 ed a3 08 da 23 5b cd $(..k]h.p....#[. 04e0 9a 9b ef b7 30 d5 eb 69 a9 b5 97 67 b1 e4 9a 55 ....0..i...g...U 04f0 18 c3 f5 d9 10 48 68 bc bb cb da d1 6c 03 62 bb .....Hh.....l.b. 0500 10 9d 53 f7 d3 ca f1 85 69 2c de 95 86 8b d4 3b ..S.....i,.....; 0510 01 a9 4e e5 8a 1d 89 9e a0 02 cd d3 8a ca ca a6 ..N............. 0520 eb cb b6 cd 43 79 4f 61 84 61 75 26 d8 a8 5d 67 ....CyOa.au&..]g 0530 b6 b1 d6 27 5f 9c eb f6 ...'_... No. Time Source Destination Protocol Info 275 1.399229 193.99.144.85 141.3.161.43 HTTP Continuation or non-HTTP traffic Frame 275 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 17769, Ack: 737, Len: 1360 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 276 1.399262 141.3.161.43 193.99.144.85 TCP 55331 > http [ACK] Seq=737 Ack=19129 Win=35456 Len=0 TSV=626948 TSER=776120996 Frame 276 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 19129, Len: 0 No. Time Source Destination Protocol Info 277 1.403016 193.99.144.85 141.3.161.43 TCP http > 55337 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776121003 TSER=626947 Frame 277 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55337 (55337), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 278 1.403057 141.3.161.43 193.99.144.85 TCP 55337 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626949 TSER=776121003 Frame 278 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55337 (55337), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 279 1.403330 141.3.161.43 193.99.144.85 HTTP GET /tp/r4/artikel/28/28690/28690_0.gif HTTP/1.1 Frame 279 (910 bytes on wire, 910 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55337 (55337), Dst Port: http (80), Seq: 1, Ack: 1, Len: 842 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 280 1.404939 141.3.161.43 193.99.144.85 TCP 55338 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626949 TSER=0 WS=6 Frame 280 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55338 (55338), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 281 1.405757 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #282] Frame 281 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 ee 8f 37 7c b3 d2 80 10 12 f4 .P.#....7|...... 0010 f4 81 00 00 01 01 08 0a 2e 42 aa ac 00 09 91 04 .........B...... 0020 bd 71 85 e5 68 9a 8d a4 ba 76 ae 6e 09 3d 61 59 .q..h....v.n.=aY 0030 51 76 b2 56 35 d2 15 bb 7a c8 76 10 66 c2 d9 ca Qv.V5...z.v.f... 0040 ea 7a ea 1b 13 3e 4c 2a cb 1d ef 1c 71 2d 46 e5 .z...>L*....q-F. 0050 4e 38 79 8f aa 4e 3a 1e af b8 a7 b0 57 0b 7b e4 N8y..N:.....W.{. 0060 16 87 71 6e 44 c4 65 06 a3 67 66 d7 62 2e c3 aa ..qnD.e..gf.b... 0070 38 10 45 d7 b5 fb f6 6c 10 31 5d 01 19 04 5e 0e 8.E....l.1]...^. 0080 42 8f 05 1d 1a a8 91 6c d0 d3 fa d7 4f 12 ae 74 B......l....O..t 0090 6e 6b e7 e6 8d 4a 4a 38 1b 9d 5e ce 90 c8 53 aa nk...JJ8..^...S. 00a0 2e 63 b2 d6 93 71 0c 58 2a 45 40 b5 8d 05 3d 3d .c...q.X*E@...== 00b0 c0 94 ba ab 74 6c d4 97 d3 d8 f1 1f 1a d1 fc a2 ....tl.......... 00c0 12 c5 91 f5 35 52 2a 05 ac 9a ad b8 e5 ce 54 52 ....5R*.......TR 00d0 fb 5a bf 1e 0c f6 b6 b2 e3 a3 5b 6a d8 08 43 c8 .Z........[j..C. 00e0 6c 5b de 57 86 ed 4a f6 ab ab 99 ac 7c 38 83 57 l[.W..J.....|8.W 00f0 36 d5 c8 67 7a a0 08 35 eb 8b cc 14 7a ba 4b 00 6..gz..5....z.K. 0100 52 08 66 0e 62 21 e3 4b 66 e9 64 81 4a 98 01 af R.f.b!.Kf.d.J... 0110 0d ee 4c 25 ce 2e ed 1d c4 bb bf 66 5e 94 28 0b ..L%.......f^.(. 0120 59 0a 99 73 e7 51 31 5b 06 89 88 70 f3 05 92 f6 Y..s.Q1[...p.... 0130 66 f4 3e 3b 2c 8a 76 eb 84 56 83 0c ce 28 8b 30 f.>;,.v..V...(.0 0140 59 c0 66 35 f2 9d 48 a4 3a b9 c9 3c 9e aa 34 ca Y.f5..H.:..<..4. 0150 aa 8a aa ca 98 ec 0f d8 46 ae bd 2a e8 bf 6c f8 ........F..*..l. 0160 ac 2d 5e 8a 4b 09 6c 39 66 f9 73 82 bb 60 ce 05 .-^.K.l9f.s..`.. 0170 83 3a d9 71 82 32 cc ca 69 e3 d6 9e 7b 3f f6 2d .:.q.2..i...{?.- 0180 0f be 21 f8 b4 ff 00 f4 fb 3f d7 a7 1d 96 69 68 ..!......?....ih 0190 3d f1 1f c5 a7 9f eb fe a8 ff 00 af fe f8 ec 15 =............... 01a0 d4 19 b6 bd a0 08 9e aa 92 5a 0e 26 4b 3f b4 36 .........Z.&K?.6 01b0 b9 b8 31 34 69 38 23 eb 27 d0 73 8b e5 e3 6c bc ..14i8#.'.s...l. 01c0 bb 57 ef 5c 7d e2 ff 00 c5 d9 79 76 af de b8 fb .W.\}.....yv.... 01d0 c5 ff 00 8b b6 3e c5 a1 f7 c4 3f 14 9f db f6 7d .....>....?....} 01e0 9f eb d3 8e cb d8 b4 3e f8 87 e2 93 fb 7e cf b3 .......>.....~.. 01f0 fd 7a 71 da ef d7 f8 cd a3 2f b2 8f 57 4f 88 d1 .zq....../..WO.. 0200 c1 22 3b 1a 79 7d 67 f4 7b 8d b2 f2 ed 5f bd 71 .";.y}g.{...._.q 0210 f7 8b ff 00 17 65 e5 da bf 7a e3 ef 17 fe 2e d8 .....e...z...... 0220 fb 16 87 df 10 fc 52 7f 6f d9 f6 7f af 4e 3b 7c ......R.o....N;| 0230 f6 35 07 be 23 f8 a5 3f 87 b3 7e a2 cf b5 ed 19 .5..#..?..~..... 0240 7d 94 7a ba 7c 46 30 eb a2 1e 8d 3c b1 a9 fd 03 }.z.|F0....<.... 0250 ff 00 84 7f dd a8 22 9c 49 4d 14 a9 bd 5e 9f 79 ......".IM...^.y 0260 76 50 c8 9a 3e 73 ac f5 71 6b 57 55 18 4d 97 59 vP..>s..qkWU.M.Y 0270 89 58 47 1c ad ae 8c de 2b 05 cb 94 09 e6 bd 80 .XG.....+....... 0280 53 cd c5 95 84 a8 a2 a6 66 ab 8d e7 87 75 eb 50 S.......f....u.P 0290 20 19 f4 e1 c8 5b 44 c2 8b 51 80 dc ea b5 ba 34 ....[D..Q.....4 02a0 14 cb 19 00 e4 aa 65 8f 21 95 89 da b4 09 9c 77 ......e.!......w 02b0 8d 46 bd 61 cb 5a ce d2 8c 2d 2e 07 68 5a 2d 84 .F.a.Z...-..hZ-. 02c0 a6 97 4a 7c 0a da 55 4c 1b 49 67 04 8a 93 66 38 ..J|..UL.Ig...f8 02d0 06 e5 be 28 2c 33 63 92 b8 c3 38 5d 5d 9c 20 f1 ...(,3c...8]]. . 02e0 03 69 d3 99 13 f7 7d ed 5c f0 bf b3 26 a6 13 4f .i....}.\...&..O 02f0 00 91 b8 e9 47 80 f6 1e ee 17 5a 29 1f 5c 29 cd ....G.....Z).\). 0300 35 d1 2e dd bc 42 b1 61 cc cb b0 43 29 56 1d 94 5....B.a...C)V.. 0310 75 ca be 69 2a 11 1e d1 75 45 64 75 7b d4 8c dc u..i*...uEdu{... 0320 d3 61 80 17 aa e8 9b ea 51 af 59 89 c1 c7 24 b8 .a......Q.Y...$. 0330 e6 cd 18 b4 e0 04 12 14 19 2f 4e 99 74 82 fc 4f ........./N.t..O 0340 8a 09 c0 f7 99 79 32 f2 e2 48 f1 1d 46 61 dd 67 .....y2..H..Fa.g 0350 a7 ee 5d 96 66 2a fc c6 06 ea ea dc 88 66 62 af ..].f*.......fb. 0360 88 bd 77 fd 7e 55 21 25 60 9e 33 e0 d8 74 48 be ..w.~U!%`.3..tH. 0370 76 d9 89 98 c3 8c 0f 31 68 d8 21 c5 d5 2d 8e 8c v......1h.!..-.. 0380 f2 e1 0e 6e 7f 01 10 47 86 af ba 9e 7e a1 b4 a0 ...n...G....~... 0390 5a 7e e6 10 62 b1 7e 42 4b 07 ae 9e 0f 95 9f 01 Z~..b.~BK....... 03a0 d1 8b 61 1b 76 30 95 4c ca 39 d6 48 bb 8e 94 b8 ..a.v0.L.9.H.... 03b0 13 18 8e 3c 8e 7c c3 d4 5c 72 14 b7 0d ea 4b 96 ...<.|..\r....K. 03c0 09 af e0 d7 c3 0b cb 66 c8 19 f5 03 1f 4c b2 c0 .......f.....L.. 03d0 cb 92 b1 32 b8 5c cd b3 18 f3 87 d4 3a 66 e1 67 ...2.\......:f.g 03e0 a9 35 ad 81 ed 52 c1 fb 53 eb 48 84 c7 7f 76 df .5...R..S.H...v. 03f0 5d 09 42 d2 cb 9e 61 9a 2d 6c e5 42 42 11 a6 43 ].B...a.-l.BB..C 0400 24 3c ab 98 57 14 a5 22 11 5a 65 26 65 37 64 11 $<..W..".Ze&e7d. 0410 db 56 26 e2 44 ab 28 bc 31 e4 63 27 0c c0 12 4e .V&.D.(.1.c'...N 0420 af 02 14 37 68 1c 59 5e 63 c2 89 2e 73 20 b8 98 ...7h.Y^c...s .. 0430 c4 9b 71 34 3c 55 45 50 aa 4d ff 00 37 9e 43 4e ..q4 http [ACK] Seq=737 Ack=20489 Win=38144 Len=0 TSV=626949 TSER=776121004 Frame 283 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 20489, Len: 0 No. Time Source Destination Protocol Info 284 1.409904 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #285] Frame 284 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 23 e9 b8 f3 df 37 7c b3 d2 80 18 12 f4 .P.#....7|...... 0010 49 24 00 00 01 01 08 0a 2e 42 aa ac 00 09 91 04 I$.......B...... 0020 77 ac 59 f6 66 b3 ef 0c fe 28 5f 0b b4 57 82 5b w.Y.f....(_..W.[ 0030 fb 2f f1 93 f8 fb 2f 04 b7 f6 5f e3 27 f1 f6 d9 ./..../..._.'... 0040 a0 b2 7f 8b da 79 62 34 d7 4f 07 86 10 72 16 63 .....yb4.O...r.c 0050 b2 a4 70 c4 ab 3b ba 6b ed 2e f9 ca fb 33 59 f7 ..p..;.k.....3Y. 0060 86 7f 14 2f 85 d9 7b 33 59 f7 86 7f 14 2f 85 da .../..{3Y..../.. 0070 2b c1 2d fd 97 f8 c9 fc 7d 97 82 5b fb 2f f1 93 +.-.....}..[./.. 0080 f8 fb 4d c2 ff 00 17 b4 fe 63 4d 74 f6 f7 b8 2c ..M......cMt..., 0090 c7 65 4b 2c d5 ea 69 af b4 f8 ca fb 33 59 f7 86 .eK,..i.....3Y.. 00a0 7f 14 2f 85 d9 7b 33 59 f7 86 7f 14 2f 85 da 2b ../..{3Y..../..+ 00b0 c1 2d fd 97 f8 c9 fc 7d 97 82 5b fb 2f f1 93 f8 .-.....}..[./... 00c0 fb 37 0b fc 5e d3 f9 8d 35 d3 e2 5c 14 63 b2 a5 .7..^...5..\.c.. 00d0 97 de f5 34 d7 da 7c 69 6e df c3 d4 0d ed 7b d3 ...4..|in.....{. 00e0 78 e9 df 77 b9 85 ad c6 c6 f1 6e a8 7a a2 77 58 x..w......n.z.wX 00f0 d7 f6 d8 58 24 a8 f1 63 0d 70 5b bd 14 29 5e b8 ...X$..c.p[..)^. 0100 cc bb 86 50 2d 12 ab 55 16 37 6e 01 f6 08 ee 0d ...P-..U.7n..... 0110 72 76 e0 bd 1f 5c d6 a9 76 00 13 47 d8 38 d6 4e rv...\..v..G.8.N 0120 db d5 b5 ec fd 97 95 89 ca 16 76 d1 16 9f ac a1 ..........v..... 0130 87 c9 6a d5 e6 cb 2a d9 23 e1 3c be dd 78 ec 64 ..j...*.#.<..x.d 0140 27 2c a9 df bf 8c 9c f6 ce 6d 1f 83 b8 e9 63 82 ',.......m....c. 0150 2f ee 6f af ec f4 82 92 d7 65 6a ca c2 e4 ea ed /.o......ej..... 0160 bb bd 68 5a b1 b6 00 97 b3 b1 12 35 9b 22 68 23 ..hZ.......5."h# 0170 62 f2 e0 18 19 7d 05 55 6c a1 c4 c5 23 64 65 2c b....}.Ul...#de, 0180 67 df e8 3c 51 a0 f1 92 2f 55 e9 34 53 a7 4a d1 g....Qa.. 01d0 2c c1 b8 9b 14 8e 67 97 b7 c4 c5 73 4e 95 ae ec ,.....g....sN... 01e0 da fd 52 23 d3 6e 79 1b 21 bd 51 ac 54 d4 f2 64 ..R#.ny.!.Q.T..d 01f0 f8 e7 08 48 38 9e 63 6c e5 a2 b6 b4 e5 70 0a e3 ...H8.cl.....p.. 0200 d6 ee d2 87 8d 24 cf 31 e6 2b 46 3d e1 c2 d7 84 .....$.1.+F=.... 0210 b5 1a 0a 14 37 25 0f ac ed fa 2e 4b b5 aa 78 d7 ....7%.....K..x. 0220 6d 3c 88 4d fc 4e e3 3a 5e a2 29 58 6b d6 ce 58 m<.M.N.:^.)Xk..X 0230 5b 98 15 58 98 a4 8b aa e5 99 44 9b 2a 57 cf 7a [..X......D.*W.z 0240 49 37 26 49 74 9b af 18 68 dc 8f 5c 95 56 e9 47 I7&It...h..\.V.G 0250 ed aa f4 5e 15 a2 ca ca ca dd 01 e1 d0 46 78 11 ...^.........Fx. 0260 0d ec bb 04 a4 d0 e1 99 7a de 19 a9 19 59 12 23 ........z....Y.# 0270 24 83 22 08 72 84 1f 1a 71 e6 a1 a2 9b 7c aa d5 $.".r...q....|.. 0280 6a a7 57 5c 6d bd 36 64 a6 6c ed df 14 0d 1d 13 j.W\m.6d.l...... 0290 4b 57 d2 0f 69 be e4 96 84 84 b8 e5 30 ad 21 04 KW..i.......0.!. 02a0 87 c9 9a 20 e4 d3 0c 18 b4 51 53 a9 3d 6b 68 7e ... .....QS.=kh~ 02b0 13 79 c3 c0 63 98 e6 d3 7b 13 22 41 c9 3e 61 dd .y..c...{."A.>a. 02c0 53 24 02 e0 bb 3a 95 49 9b 1f ba 5f 0c 9c 1c 9e S$...:.I..._.... 02d0 f3 26 97 ad ec da 90 6b a3 a9 97 91 b3 1b 85 59 .&.....k.......Y 02e0 f2 f8 79 02 7a 11 a3 81 aa f8 f2 f4 2e d6 22 92 ..y.z.........". 02f0 2e 03 83 65 72 d7 11 88 09 90 34 52 4f 05 c8 30 ...er.....4RO..0 0300 22 57 dc 71 4d 1e 75 1d 4d 22 70 67 25 9e 4a eb "W.qM.u.M"pg%.J. 0310 d9 5e 74 90 ea 37 b9 ba aa 29 73 75 ff 00 71 b9 .^t..7...)su..q. 0320 d9 a5 bb a0 d5 c4 c9 86 63 93 1b 17 6f 8c 1e d1 ........c...o... 0330 53 ba 47 24 a8 14 53 b3 1b 97 1c e9 7c 83 51 ec S.G$..S.....|.Q. 0340 1d c6 88 17 95 30 70 2f 41 43 b2 f0 30 37 17 19 .....0p/AC..07.. 0350 46 16 06 64 9a 59 81 96 03 64 f0 c4 a0 58 fa 62 F..d.Y...d...X.b 0360 59 c7 3e 9c 67 d1 d8 4d 8e 97 b8 32 c6 93 5a a1 Y.>.g..M...2..Z. 0370 7b 49 23 55 ba ed 6a 79 a3 89 76 ad d2 4e d5 90 {I#U..jy..v..N.. 0380 24 70 c3 61 3b 5f 31 62 d4 4d c6 56 76 10 f1 98 $p.a;_1b.M.Vv... 0390 77 c5 64 0d 9d 69 1b 2b 4f 22 ec dc 13 7d 2a da w.d..i.+O"...}*. 03a0 2b 97 34 e5 c1 25 8e 60 96 8c 9e f7 84 b9 2a 94 +.4..%.`......*. 03b0 9d dd 37 0e 5f 8a 5c 53 20 43 1c a4 89 1e b5 82 ..7._.\S C...... 03c0 d5 dc 2f 4c 95 69 02 2e 9b 39 42 aa 39 7e 9e 58 ../L.i...9B.9~.X 03d0 47 5d eb 06 e0 44 ce 01 ae 6b d5 99 3c 58 87 26 G]...D...k..R.5.V......... 0500 56 44 56 dd 54 bf 32 d8 e1 66 70 78 eb f5 cf 4b VDV.T.2..fpx...K 0510 93 46 65 ab 93 ce 70 e5 26 c1 83 b2 51 ce 4b a2 .Fe...p.&...Q.K. 0520 27 11 0d 6a cb d6 18 9c e9 2b a7 e7 60 48 31 a1 '..j.....+..`H1. 0530 9b 23 9c 9b 94 06 2d c7 .#....-. No. Time Source Destination Protocol Info 285 1.410166 193.99.144.85 141.3.161.43 HTTP Continuation or non-HTTP traffic Frame 285 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 20489, Ack: 737, Len: 1360 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 286 1.410200 141.3.161.43 193.99.144.85 TCP 55331 > http [ACK] Seq=737 Ack=21849 Win=40896 Len=0 TSV=626950 TSER=776121004 Frame 286 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 21849, Len: 0 No. Time Source Destination Protocol Info 287 1.410893 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #289] Frame 287 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 28 39 07 3f 9e 38 27 ba 84 80 10 13 5d .P.(9.?.8'.....] 0010 19 f1 00 00 01 01 08 0a 2e 42 aa ad 00 09 91 02 .........B...... 0020 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d HTTP/1.1 200 OK. 0030 0a 44 61 74 65 3a 20 46 72 69 2c 20 31 32 20 53 .Date: Fri, 12 S 0040 65 70 20 32 30 30 38 20 31 31 3a 33 36 3a 30 32 ep 2008 11:36:02 0050 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 GMT..Server: Ap 0060 61 63 68 65 2f 31 2e 33 2e 33 34 0d 0a 4c 61 73 ache/1.3.34..Las 0070 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f 6e 2c t-Modified: Mon, 0080 20 30 37 20 41 70 72 20 32 30 30 38 20 31 35 3a 07 Apr 2008 15: 0090 31 37 3a 30 32 20 47 4d 54 0d 0a 45 54 61 67 3a 17:02 GMT..ETag: 00a0 20 22 33 30 63 39 30 34 2d 61 64 34 2d 34 37 66 "30c904-ad4-47f 00b0 61 33 61 65 65 22 0d 0a 41 63 63 65 70 74 2d 52 a3aee"..Accept-R 00c0 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f anges: bytes..Co 00d0 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 32 37 ntent-Length: 27 00e0 37 32 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 72..Connection: 00f0 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 close..Content-T 0100 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a ype: image/gif.. 0110 0d 0a 47 49 46 38 39 61 89 00 23 00 f7 ff 00 d3 ..GIF89a..#..... 0120 b7 b9 c3 15 28 a9 96 97 d3 d4 d4 84 78 79 c1 37 ....(.......xy.7 0130 46 eb 9c a3 e2 00 18 e4 13 2a e9 00 17 d2 46 55 F........*....FU 0140 ee e5 e6 b0 3b 47 ea 8c 96 ee e9 e9 eb a4 aa e8 ....;G.......... 0150 e8 e8 ed d2 d5 b8 1b 2b dc 04 1c 76 65 66 ca cd .......+...vef.. 0160 cc e5 e5 e5 d3 0b 21 c6 29 3a d5 29 3b 9b 78 7b ......!.):.);.x{ 0170 95 33 3d bc bd bc eb 96 9e 84 55 59 c1 c3 c2 eb .3=.......UY.... 0180 b5 bb eb ce d1 e5 40 53 e4 19 2f 8b 3a 42 be 09 ......@S../.:B.. 0190 1c b2 b3 b2 77 59 5b d2 cc cb a6 88 8a e9 77 83 ....wY[.......w. 01a0 ad 23 32 90 7e 7f eb aa b1 93 69 6d e2 00 0c ab .#2.~.....im.... 01b0 77 7c a0 63 69 e1 e2 e2 e3 0c 24 b8 24 34 c5 ca w|.ci.....$.$4.. 01c0 c9 da d0 d0 b9 7f 85 e2 00 15 af ad ac e3 de de ................ 01d0 e4 24 39 bc c2 c1 b5 be bd e6 5d 6c e8 71 7e ec .$9.......]l.q~. 01e0 bd c2 93 2a 35 87 85 84 a0 a3 a1 ec ca ce 7a 71 ...*5.........zq 01f0 71 e4 00 19 d4 7c 85 c7 a6 aa e6 51 62 97 4b 52 q....|.....Qb.KR 0200 83 4c 51 e9 00 19 e8 5b 6a c7 68 72 ee dd de d9 .LQ....[j.hr.... 0210 17 2c 9b 43 4c e7 00 18 a6 4b 54 e8 69 75 ef e0 .,.CL....KT.iu.. 0220 e1 c7 bb bc c8 72 7a cd 82 88 ec eb eb eb c1 c6 .....rz......... 0230 e4 3b 4e eb 65 72 e1 00 11 ce 94 98 95 92 92 eb .;N.er.......... 0240 b8 bd a1 ae ab cb 06 1b e4 28 3d e6 ec eb 8a 41 .........(=....A 0250 47 e9 ee ed ed 00 15 9c 81 82 ea 7a 86 b8 ac ac G..........z.... 0260 81 69 6b de df de ce c8 c8 eb 82 8d ef ec ec ec .ik............. 0270 c6 ca b8 5b 65 f0 c7 ca eb b1 b6 9f 8e 8f 8a 5c ...[e..........\ 0280 60 eb 3b 4d d1 8c 92 a2 2a 37 9e a7 a5 de e2 df `.;M....*7...... 0290 ee d6 d7 ea 4a 5b e5 4d 5c ec 6c 78 eb 90 98 e4 ....J[.M\.lx.... 02a0 1f 34 f2 00 13 e1 32 44 92 8c 8c e6 00 15 8c 94 .4....2D........ 02b0 91 e4 00 11 ed d9 db bd b4 b5 b3 67 6e e6 35 49 ...........gn.5I 02c0 e8 6e 77 ee ee ee e5 e2 e1 da dc db a5 33 3f ed .nw..........3?. 02d0 da dd d9 db da ab 2d 3a a9 42 4d f1 b1 b6 e5 65 ......-:.BM....e 02e0 72 e8 7e 89 e7 e7 e7 e6 6a 78 e1 05 1d ea 88 90 r.~.....jx...... 02f0 9c a0 9e cb 10 24 eb 27 3c 7a 4e 52 ed ee ee e9 .....$.'P....... 0330 2f 44 ca 21 33 eb 08 1e e8 2c 3f e1 02 1b e3 00 /D.!3....,?..... 0340 1a cf d0 cf ae 0d 1e 77 46 4a df e0 e0 b7 2f 3d .......wFJ..../= 0350 ec f0 ef d7 d7 d6 be 4e 5a 92 9c 9a dc 0e 25 b2 .......NZ.....%. 0360 20 30 d3 55 62 e9 5e 6d da 93 9a ae b3 b2 e8 e0 0.Ub.^m........ 0370 e1 ac b0 af ed e2 e3 b8 94 97 a4 a8 a7 b0 b1 b0 ................ 0380 ad a7 a7 e6 59 61 e2 08 21 e8 55 65 e5 06 1d e1 ....Ya..!.Ue.... 0390 c3 c7 e5 c9 cd f0 d8 d9 b7 50 5b c0 8d 91 ee ea .........P[..... 03a0 eb db b1 b4 e5 b7 ba e4 b9 be e9 df e0 e4 30 3c ..............0< 03b0 e6 41 4f e6 53 5c eb 00 11 f0 a4 aa da 21 36 e6 .AO.S\.......!6. 03c0 38 49 dc 65 71 ee e7 e7 a1 9c 9b df 9f a7 e2 4a 8I.eq..........J 03d0 58 e5 44 56 dc d8 d8 de dc da 88 90 8e c7 c7 c6 X.DV............ 03e0 cf 67 70 d0 a6 a9 d2 62 6f e7 75 82 c0 4c 59 d4 .gp....bo.u..LY. 03f0 4f 5c dd ca cc 95 87 87 a0 85 87 b4 8d 91 8a 2b O\.............+ 0400 2f ca af b2 a6 56 5e c0 1f 31 ee ed ed e7 02 1a /....V^..1...... 0410 93 97 95 91 12 1e e0 94 9c e2 00 1a ee ee ee 21 ...............! 0420 f9 04 01 00 00 ff 00 2c 00 00 00 00 89 00 23 00 .......,......#. 0430 00 08 ff 00 ff 09 1c 48 b0 a0 c1 83 08 13 2a 5c .......H......*\ 0440 c8 b0 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 33 ......#J.H.....3 0450 6a dc c8 b1 a3 c7 8f 20 43 8a 1c 49 b2 a4 c9 93 j...... C..I.... 0460 28 53 aa 5c c9 92 63 15 03 30 0d 3c 60 74 10 0c (S.\..c..0.<`t.. 0470 ac 11 3e c4 41 14 07 08 81 4f 41 a1 5a 0a 25 d8 ..>.A....OA.Z.%. 0480 a1 cb 81 03 5d be 59 30 78 68 84 3f 7f 09 6e 40 ....].Y0xh.?..n@ 0490 94 d3 c5 1f 52 05 a0 0a 56 59 30 51 9c ce a1 13 ....R...VY0Q.... 04a0 9b 54 f5 67 08 9e 19 83 2a 9e fa 3b 33 25 ab c3 .T.g....*..;3%.. 04b0 3f 46 c9 62 c9 37 90 48 92 11 80 48 29 da f2 43 ?F.b.7.H...H)..C 04c0 55 c2 43 2d 54 f4 81 05 08 90 22 3f 7e c1 3a 14 U.C-T....."?~.:. 04d0 37 e2 c0 53 43 77 68 16 14 26 a5 56 82 0b f2 1e 7..SCwh..&.V.... 04e0 e6 b3 d3 cd c8 81 4c 00 06 82 40 00 b5 d6 85 09 ......L...@..... 04f0 52 a4 64 b0 52 70 4f 03 73 08 a4 24 48 20 c5 c8 R.d.RpO.s..$H .. 0500 6c 29 18 da 28 fe 07 44 58 12 15 6e 0c 70 25 18 l)..(..DX..n.p%. 0510 01 c7 d3 cf 28 0e 46 c3 40 8b 53 9d 48 0f c5 49 ....(.F.@.S.H..I 0520 e2 27 26 c1 37 74 02 43 90 4e 10 c0 c3 b8 1c 4e .'&.7t.C.N.....N 0530 66 e3 ff b3 25 70 81 0a f...%p.. No. Time Source Destination Protocol Info 288 1.413703 141.3.161.43 193.99.144.85 TCP 55339 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626951 TSER=0 WS=6 Frame 288 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55339 (55339), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 289 1.418962 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 289 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55336 (55336), Seq: 1, Ack: 842, Len: 1360 No. Time Source Destination Protocol Info 290 1.419019 141.3.161.43 193.99.144.85 TCP 55336 > http [ACK] Seq=842 Ack=1361 Win=8256 Len=0 TSV=626953 TSER=776121005 Frame 290 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55336 (55336), Dst Port: http (80), Seq: 842, Ack: 1361, Len: 0 No. Time Source Destination Protocol Info 291 1.419273 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 291 (156 bytes on wire, 156 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55336 (55336), Seq: 1361, Ack: 842, Len: 88 No. Time Source Destination Protocol Info 292 1.419288 141.3.161.43 193.99.144.85 TCP 55336 > http [ACK] Seq=842 Ack=1449 Win=8256 Len=0 TSV=626953 TSER=776121005 Frame 292 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55336 (55336), Dst Port: http (80), Seq: 842, Ack: 1449, Len: 0 No. Time Source Destination Protocol Info 293 1.419637 193.99.144.85 141.3.161.43 TCP http > 55338 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776121010 TSER=626949 Frame 293 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55338 (55338), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 294 1.419663 141.3.161.43 193.99.144.85 TCP 55338 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626953 TSER=776121010 Frame 294 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55338 (55338), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 295 1.420230 193.99.144.85 141.3.161.43 HTTP Continuation or non-HTTP traffic Frame 295 (1149 bytes on wire, 1149 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 21849, Ack: 737, Len: 1081 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 296 1.420246 141.3.161.43 193.99.144.85 TCP 55331 > http [ACK] Seq=737 Ack=22930 Win=43584 Len=0 TSV=626953 TSER=776121010 Frame 296 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 22930, Len: 0 No. Time Source Destination Protocol Info 297 1.420587 193.99.144.85 141.3.161.43 TCP http > 55331 [FIN, ACK] Seq=22930 Ack=737 Win=4852 Len=0 TSV=776121010 TSER=626949 Frame 297 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 22930, Ack: 737, Len: 0 No. Time Source Destination Protocol Info 298 1.420724 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 304 Not Modified Frame 298 (206 bytes on wire, 206 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55337 (55337), Seq: 1, Ack: 843, Len: 138 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 299 1.420742 141.3.161.43 193.99.144.85 TCP 55337 > http [ACK] Seq=843 Ack=139 Win=6592 Len=0 TSV=626953 TSER=776121015 Frame 299 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55337 (55337), Dst Port: http (80), Seq: 843, Ack: 139, Len: 0 No. Time Source Destination Protocol Info 300 1.421547 141.3.161.43 193.99.144.85 TCP 55331 > http [FIN, ACK] Seq=737 Ack=22931 Win=43584 Len=0 TSV=626953 TSER=776121010 Frame 300 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55331 (55331), Dst Port: http (80), Seq: 737, Ack: 22931, Len: 0 No. Time Source Destination Protocol Info 301 1.421624 141.3.161.43 193.99.144.85 HTTP GET /tp/r4/icons/heise/tp.gif HTTP/1.1 Frame 301 (899 bytes on wire, 899 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55338 (55338), Dst Port: http (80), Seq: 1, Ack: 1, Len: 831 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 302 1.421667 141.3.161.43 193.99.144.85 TCP 55337 > http [FIN, ACK] Seq=843 Ack=139 Win=6592 Len=0 TSV=626953 TSER=776121015 Frame 302 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55337 (55337), Dst Port: http (80), Seq: 843, Ack: 139, Len: 0 No. Time Source Destination Protocol Info 303 1.423921 141.3.161.43 193.99.144.85 TCP 55340 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626954 TSER=0 WS=6 Frame 303 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55340 (55340), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 304 1.428545 193.99.144.85 141.3.161.43 TCP http > 55337 [FIN, ACK] Seq=139 Ack=843 Win=4958 Len=0 TSV=776121015 TSER=626949 Frame 304 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55337 (55337), Seq: 139, Ack: 843, Len: 0 No. Time Source Destination Protocol Info 305 1.428581 141.3.161.43 193.99.144.85 TCP 55337 > http [ACK] Seq=844 Ack=140 Win=6592 Len=0 TSV=626955 TSER=776121015 Frame 305 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55337 (55337), Dst Port: http (80), Seq: 844, Ack: 140, Len: 0 No. Time Source Destination Protocol Info 306 1.429047 193.99.144.85 141.3.161.43 TCP http > 55339 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776121018 TSER=626951 Frame 306 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55339 (55339), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 307 1.429078 141.3.161.43 193.99.144.85 TCP 55339 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626955 TSER=776121018 Frame 307 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55339 (55339), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 308 1.429723 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #309] Frame 308 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 28 39 07 45 46 38 27 ba 84 80 10 13 5d .P.(9.EF8'.....] 0010 79 c6 00 00 01 01 08 0a 2e 42 aa c0 00 09 91 09 y........B...... 0020 3c 55 4b 33 a5 1c 01 c1 40 90 38 55 8b 11 01 70 ..u.'&8.@3. 0220 e3 b0 4e 0d a3 84 12 8a 0c 32 10 b8 45 ac 13 58 ..N......2..E..X 0230 42 06 12 c0 09 5c 04 a0 36 af a0 c0 25 fe 21 0c B....\..6...%.!. 0240 74 c9 0b 12 5b 78 45 00 4e a0 83 da c5 aa 16 4b t...[xE.N......K 0250 b0 c0 1b 14 61 9c 5a 18 e2 0a 35 f8 80 08 d5 e1 ....a.Z...5..... 0260 a8 7f 24 e1 82 3b fa 87 a5 a2 47 87 7f 94 e2 00 ..$..;....G..... 0270 09 88 02 e7 08 02 0a 0b 8c 09 0c 90 ba c0 a9 0c ................ 0280 22 2d 29 98 ee 1f 11 d8 41 02 ff 0a 00 0f 23 9c "-).....A.....#. 0290 61 82 78 73 88 01 2e 94 01 3d 20 64 01 4e c9 58 a.xs.....= d.N.X 02a0 1e b2 41 8f 7d 20 41 16 8b 0b 83 40 14 01 95 32 ..A.} A....@...2 02b0 d8 c8 01 89 58 45 01 7c a0 82 31 c8 48 87 3c 6a ....XE.|..1.H. http [ACK] Seq=842 Ack=2809 Win=10944 Len=0 TSV=626955 TSER=776121024 Frame 310 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55336 (55336), Dst Port: http (80), Seq: 842, Ack: 2809, Len: 0 No. Time Source Destination Protocol Info 311 1.430260 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (GIF89a) Frame 311 (274 bytes on wire, 274 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55336 (55336), Seq: 2809, Ack: 842, Len: 206 [Reassembled TCP Segments (3014 bytes): #289(1360), #291(88), #309(1360), #311(206)] Hypertext Transfer Protocol Compuserve GIF, Version: GIF89a No. Time Source Destination Protocol Info 312 1.430274 141.3.161.43 193.99.144.85 TCP 55336 > http [ACK] Seq=842 Ack=3015 Win=13696 Len=0 TSV=626955 TSER=776121024 Frame 312 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55336 (55336), Dst Port: http (80), Seq: 842, Ack: 3015, Len: 0 No. Time Source Destination Protocol Info 313 1.430641 193.99.144.85 141.3.161.43 TCP http > 55336 [FIN, ACK] Seq=3015 Ack=842 Win=4957 Len=0 TSV=776121024 TSER=626953 Frame 313 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55336 (55336), Seq: 3015, Ack: 842, Len: 0 No. Time Source Destination Protocol Info 314 1.430991 141.3.161.43 193.99.144.85 TCP 55336 > http [FIN, ACK] Seq=842 Ack=3016 Win=13696 Len=0 TSV=626956 TSER=776121024 Frame 314 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55336 (55336), Dst Port: http (80), Seq: 842, Ack: 3016, Len: 0 No. Time Source Destination Protocol Info 315 1.431070 141.3.161.43 193.99.144.85 HTTP GET /bilder/115470/102/0 HTTP/1.1 Frame 315 (806 bytes on wire, 806 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55339 (55339), Dst Port: http (80), Seq: 1, Ack: 1, Len: 738 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 316 1.432551 193.99.144.85 141.3.161.43 TCP http > 55337 [FIN, ACK] Seq=139 Ack=844 Win=4958 Len=0 TSV=776121032 TSER=626953 Frame 316 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55337 (55337), Seq: 139, Ack: 844, Len: 0 No. Time Source Destination Protocol Info 317 1.432826 193.99.144.85 141.3.161.43 TCP http > 55331 [ACK] Seq=22931 Ack=738 Win=4852 Len=0 TSV=776121032 TSER=626953 Frame 317 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55331 (55331), Seq: 22931, Ack: 738, Len: 0 No. Time Source Destination Protocol Info 318 1.433214 141.3.161.43 193.99.144.85 TCP 55341 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626956 TSER=0 WS=6 Frame 318 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55341 (55341), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 319 1.438730 193.99.144.85 141.3.161.43 TCP http > 55340 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776121032 TSER=626954 Frame 319 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55340 (55340), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 320 1.438766 141.3.161.43 193.99.144.85 TCP 55340 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626958 TSER=776121032 Frame 320 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55340 (55340), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 321 1.438980 193.99.144.85 141.3.161.43 TCP http > 55336 [ACK] Seq=3016 Ack=843 Win=4957 Len=0 TSV=776121035 TSER=626956 Frame 321 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55336 (55336), Seq: 3016, Ack: 843, Len: 0 No. Time Source Destination Protocol Info 322 1.439166 141.3.161.43 193.99.144.85 HTTP GET /software/specials/knoppix.jpg HTTP/1.1 Frame 322 (905 bytes on wire, 905 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55340 (55340), Dst Port: http (80), Seq: 1, Ack: 1, Len: 837 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 323 1.440398 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #324] Frame 323 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 2a f0 46 a8 97 37 84 1c 31 80 10 13 53 .P.*.F..7..1...S 0010 9e 2e 00 00 01 01 08 0a 2e 42 aa cd 00 09 91 09 .........B...... 0020 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d HTTP/1.1 200 OK. 0030 0a 44 61 74 65 3a 20 46 72 69 2c 20 31 32 20 53 .Date: Fri, 12 S 0040 65 70 20 32 30 30 38 20 31 31 3a 33 36 3a 30 32 ep 2008 11:36:02 0050 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 GMT..Server: Ap 0060 61 63 68 65 2f 31 2e 33 2e 33 34 0d 0a 4c 61 73 ache/1.3.34..Las 0070 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f 6e 2c t-Modified: Mon, 0080 20 31 33 20 41 75 67 20 32 30 30 37 20 31 31 3a 13 Aug 2007 11: 0090 30 36 3a 31 36 20 47 4d 54 0d 0a 45 54 61 67 3a 06:16 GMT..ETag: 00a0 20 22 35 61 34 61 39 62 2d 36 63 37 2d 34 36 63 "5a4a9b-6c7-46c 00b0 30 33 62 32 38 22 0d 0a 41 63 63 65 70 74 2d 52 03b28"..Accept-R 00c0 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f anges: bytes..Co 00d0 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 37 ntent-Length: 17 00e0 33 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 35..Connection: 00f0 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 close..Content-T 0100 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a ype: image/gif.. 0110 0d 0a 47 49 46 38 39 61 50 00 18 00 f7 00 00 ff ..GIF89aP....... 0120 ff ff ff ff cc ff ff 99 ff ff 66 ff ff 33 ff ff ..........f..3.. 0130 00 ff cc ff ff cc cc ff cc 99 ff cc 66 ff cc 33 ............f..3 0140 ff cc 00 ff 99 ff ff 99 cc ff 99 99 ff 99 66 ff ..............f. 0150 99 33 ff 99 00 ff 66 ff ff 66 cc ff 66 99 ff 66 .3....f..f..f..f 0160 66 ff 66 33 ff 66 00 ff 33 ff ff 33 cc ff 33 99 f.f3.f..3..3..3. 0170 ff 33 66 ff 33 33 ff 33 00 ff 00 ff ff 00 cc ff .3f.33.3........ 0180 00 99 ff 00 66 ff 00 33 ff 00 00 cc ff ff cc ff ....f..3........ 0190 cc cc ff 99 cc ff 66 cc ff 33 cc ff 00 cc cc ff ......f..3...... 01a0 cc cc cc cc cc 99 cc cc 66 cc cc 33 cc cc 00 cc ........f..3.... 01b0 99 ff cc 99 cc cc 99 99 cc 99 66 cc 99 33 cc 99 ..........f..3.. 01c0 00 cc 66 ff cc 66 cc cc 66 99 cc 66 66 cc 66 33 ..f..f..f..ff.f3 01d0 cc 66 00 cc 33 ff cc 33 cc cc 33 99 cc 33 66 cc .f..3..3..3..3f. 01e0 33 33 cc 33 00 cc 00 ff cc 00 cc cc 00 99 cc 00 33.3............ 01f0 66 cc 00 33 cc 00 00 99 ff ff 99 ff cc 99 ff 99 f..3............ 0200 99 ff 66 99 ff 33 99 ff 00 99 cc ff 99 cc cc 99 ..f..3.......... 0210 cc 99 99 cc 66 99 cc 33 99 cc 00 99 99 ff 99 99 ....f..3........ 0220 cc 99 99 99 99 99 66 99 99 33 99 99 00 99 66 ff ......f..3....f. 0230 99 66 cc 99 66 99 99 66 66 99 66 33 99 66 00 99 .f..f..ff.f3.f.. 0240 33 ff 99 33 cc 99 33 99 99 33 66 99 33 33 99 33 3..3..3..3f.33.3 0250 00 99 00 ff 99 00 cc 99 00 99 99 00 66 99 00 33 ............f..3 0260 99 00 00 66 ff ff 66 ff cc 66 ff 99 66 ff 66 66 ...f..f..f..f.ff 0270 ff 33 66 ff 00 66 cc ff 66 cc cc 66 cc 99 66 cc .3f..f..f..f..f. 0280 66 66 cc 33 66 cc 00 66 99 ff 66 99 cc 66 99 99 ff.3f..f..f..f.. 0290 66 99 66 66 99 33 66 99 00 66 66 ff 66 66 cc 66 f.ff.3f..ff.ff.f 02a0 66 99 66 66 66 66 66 33 66 66 00 66 33 ff 66 33 f.fffff3ff.f3.f3 02b0 cc 66 33 99 66 33 66 66 33 33 66 33 00 66 00 ff .f3.f3ff33f3.f.. 02c0 66 00 cc 66 00 99 66 00 66 66 00 33 66 00 00 33 f..f..f.ff.3f..3 02d0 ff ff 33 ff cc 33 ff 99 33 ff 66 33 ff 33 33 ff ..3..3..3.f3.33. 02e0 00 33 cc ff 33 cc cc 33 cc 99 33 cc 66 33 cc 33 .3..3..3..3.f3.3 02f0 33 cc 00 33 99 ff 33 99 cc 33 99 99 33 99 66 33 3..3..3..3..3.f3 0300 99 33 33 99 00 33 66 ff 33 66 cc 33 66 99 33 66 .33..3f.3f.3f.3f 0310 66 33 66 33 33 66 00 33 33 ff 33 33 cc 33 33 99 f3f33f.33.33.33. 0320 33 33 66 33 33 33 33 33 00 33 00 ff 33 00 cc 33 33f33333.3..3..3 0330 00 99 33 00 66 33 00 33 33 00 00 00 ff ff 00 ff ..3.f3.33....... 0340 cc 00 ff 99 00 ff 66 00 ff 33 00 ff 00 00 cc ff ......f..3...... 0350 00 cc cc 00 cc 99 00 cc 66 00 cc 33 00 cc 00 00 ........f..3.... 0360 99 ff 00 99 cc 00 99 99 00 99 66 00 99 33 00 99 ..........f..3.. 0370 00 00 66 ff 00 66 cc 00 66 99 00 66 66 00 66 33 ..f..f..f..ff.f3 0380 00 66 00 00 33 ff 00 33 cc 00 33 99 00 33 66 00 .f..3..3..3..3f. 0390 33 33 00 33 00 00 00 ff 00 00 cc 00 00 99 00 00 33.3............ 03a0 66 00 00 33 00 00 00 ee ee ee e7 e7 e7 aa 1e 20 f..3........... 03b0 b4 22 23 ba 26 27 bd 2a 2b b0 28 29 b8 2e 2f ad ."#.&'.*+.()../. 03c0 33 34 ad 40 41 ae 4a 4b bd 5a 5b bf 6d 6e b1 6b 34.@A.JK.Z[.mn.k 03d0 6c cd 91 92 b6 95 96 de c4 c5 c0 2d 2d c4 30 2f l..........--.0/ 03e0 c7 32 32 ca 35 35 cd 37 37 cf 39 39 d4 3f 3f b2 .22.55.77.99.??. 03f0 39 39 ad 5d 5d c9 86 86 b1 82 82 d2 a5 a5 cd b2 99.]]........... 0400 b2 e3 da da e8 e1 e1 eb e7 e7 c7 c5 c5 ee ed ed ................ 0410 ed ed ed eb eb eb ea ea ea e2 e2 e2 d6 d6 d6 2c ..............., 0420 00 00 00 00 50 00 18 00 00 08 ff 00 b1 09 1c 48 ....P..........H 0430 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a ......*\......#J 0440 9c 48 b1 a2 c5 8b 18 33 6a dc 68 51 c6 b8 8f 20 .H.....3j.hQ... 0450 c7 d5 d3 57 2f e4 38 79 fb b0 dd 23 37 0e 5d ca ...W/.8y...#7.]. 0460 81 f2 4c a2 13 88 0e 24 39 73 f6 08 ee 33 17 ee ..L....$9s...3.. 0470 9b b8 7a 04 e9 9d ec 47 b0 a4 3c a2 02 e9 f5 84 ..z....G..<..... 0480 27 0f 1f 36 72 da b8 75 73 a7 8e 9b b6 79 f7 cc '..6r..us....y.. 0490 a5 5b c7 8d db 36 71 ff b0 d9 db c6 ed 5c 36 82 .[...6q......\6. 04a0 e2 da 75 eb aa cd 2c b6 7a dc d6 91 4d 07 6e a6 ..u...,.z...M.n. 04b0 40 72 dc d2 75 53 b7 8d 9e 40 7d f2 ba 85 0b fb @r..uS...@}..... 04c0 d7 1c 37 78 61 f5 19 5e d7 6d 9b b6 b0 e8 64 cc ..7xa..^.m....d. 04d0 13 b7 2e dc bc 79 e7 fc 99 53 07 ee 32 e6 b0 f6 .....y...S..2... 04e0 be 75 73 3b 70 1c 3b 71 9e eb 39 ad 97 ee db bc .us;p.;q..9..... 04f0 78 5b cb 11 45 b7 4d 1d 6a 70 74 73 62 93 b7 4e x[..E.M.jptsb..N 0500 dc 0a 82 e6 2a 83 f6 b6 ae f3 e4 7c fa b0 f5 f3 ....*......|.... 0510 c7 db b7 3f a2 9b e1 e5 f3 97 ed b9 d8 74 e9 32 ...?.........t.2 0520 13 1c b7 2e de bf ea d9 52 d6 ff 53 f7 ad 9e 3f ........R..S...? 0530 71 a7 c3 ca a3 5b ef 5f q....[._ No. Time Source Destination Protocol Info 324 1.440498 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 324 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55338 (55338), Seq: 1, Ack: 832, Len: 1360 No. Time Source Destination Protocol Info 325 1.440531 141.3.161.43 193.99.144.85 TCP 55338 > http [ACK] Seq=832 Ack=1361 Win=8256 Len=0 TSV=626958 TSER=776121037 Frame 325 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55338 (55338), Dst Port: http (80), Seq: 832, Ack: 1361, Len: 0 No. Time Source Destination Protocol Info 326 1.440904 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 326 (156 bytes on wire, 156 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55338 (55338), Seq: 1361, Ack: 832, Len: 88 No. Time Source Destination Protocol Info 327 1.440919 141.3.161.43 193.99.144.85 TCP 55338 > http [ACK] Seq=832 Ack=1449 Win=8256 Len=0 TSV=626958 TSER=776121037 Frame 327 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55338 (55338), Dst Port: http (80), Seq: 832, Ack: 1449, Len: 0 No. Time Source Destination Protocol Info 328 1.441296 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (GIF89a) Frame 328 (597 bytes on wire, 597 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55338 (55338), Seq: 1449, Ack: 832, Len: 529 [Reassembled TCP Segments (1977 bytes): #324(1360), #326(88), #328(529)] Hypertext Transfer Protocol Compuserve GIF, Version: GIF89a No. Time Source Destination Protocol Info 329 1.441310 141.3.161.43 193.99.144.85 TCP 55338 > http [ACK] Seq=832 Ack=1978 Win=10944 Len=0 TSV=626958 TSER=776121037 Frame 329 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55338 (55338), Dst Port: http (80), Seq: 832, Ack: 1978, Len: 0 No. Time Source Destination Protocol Info 330 1.441636 141.3.161.43 193.99.144.85 TCP 55338 > http [FIN, ACK] Seq=832 Ack=1978 Win=10944 Len=0 TSV=626958 TSER=776121037 Frame 330 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55338 (55338), Dst Port: http (80), Seq: 832, Ack: 1978, Len: 0 No. Time Source Destination Protocol Info 331 1.446709 141.3.161.43 193.99.144.85 TCP 55342 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626960 TSER=0 WS=6 Frame 331 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55342 (55342), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 332 1.448703 193.99.144.85 141.3.161.43 TCP http > 55338 [FIN, ACK] Seq=1978 Ack=832 Win=4947 Len=0 TSV=776121039 TSER=626953 Frame 332 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55338 (55338), Seq: 1978, Ack: 832, Len: 0 No. Time Source Destination Protocol Info 333 1.448735 141.3.161.43 193.99.144.85 TCP 55338 > http [ACK] Seq=833 Ack=1979 Win=10944 Len=0 TSV=626960 TSER=776121039 Frame 333 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55338 (55338), Dst Port: http (80), Seq: 833, Ack: 1979, Len: 0 No. Time Source Destination Protocol Info 334 1.449119 193.99.144.85 141.3.161.43 TCP http > 55341 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776121043 TSER=626956 Frame 334 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55341 (55341), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 335 1.449148 141.3.161.43 193.99.144.85 TCP 55341 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626960 TSER=776121043 Frame 335 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55341 (55341), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 336 1.449493 193.99.144.85 141.3.161.43 TCP http > 55338 [FIN, ACK] Seq=1978 Ack=833 Win=4947 Len=0 TSV=776121046 TSER=626958 Frame 336 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55338 (55338), Seq: 1978, Ack: 833, Len: 0 No. Time Source Destination Protocol Info 337 1.449653 141.3.161.43 193.99.144.85 HTTP GET /photokina/icons/photokina_logo2008.gif HTTP/1.1 Frame 337 (913 bytes on wire, 913 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55341 (55341), Dst Port: http (80), Seq: 1, Ack: 1, Len: 845 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 338 1.451010 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #339] Frame 338 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 2c e2 9a c2 13 37 80 89 db 80 10 13 59 .P.,....7......Y 0010 52 fb 00 00 01 01 08 0a 2e 42 aa d9 00 09 91 0e R........B...... 0020 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d HTTP/1.1 200 OK. 0030 0a 44 61 74 65 3a 20 46 72 69 2c 20 31 32 20 53 .Date: Fri, 12 S 0040 65 70 20 32 30 30 38 20 31 31 3a 33 36 3a 30 32 ep 2008 11:36:02 0050 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 GMT..Server: Ap 0060 61 63 68 65 2f 31 2e 33 2e 33 34 0d 0a 43 61 63 ache/1.3.34..Cac 0070 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d he-Control: max- 0080 61 67 65 3d 31 38 30 30 0d 0a 45 78 70 69 72 65 age=1800..Expire 0090 73 3a 20 46 72 69 2c 20 31 32 20 53 65 70 20 32 s: Fri, 12 Sep 2 00a0 30 30 38 20 31 32 3a 30 36 3a 30 32 20 47 4d 54 008 12:06:02 GMT 00b0 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a ..Last-Modified: 00c0 20 54 68 75 2c 20 30 34 20 53 65 70 20 32 30 30 Thu, 04 Sep 200 00d0 38 20 31 34 3a 34 35 3a 33 38 20 47 4d 54 0d 0a 8 14:45:38 GMT.. 00e0 45 54 61 67 3a 20 22 31 36 39 31 65 38 2d 31 39 ETag: "1691e8-19 00f0 31 66 2d 34 38 62 66 66 34 39 32 22 0d 0a 41 63 1f-48bff492"..Ac 0100 63 65 70 74 2d 52 61 6e 67 65 73 3a 20 62 79 74 cept-Ranges: byt 0110 65 73 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 es..Content-Leng 0120 74 68 3a 20 36 34 33 31 0d 0a 43 6f 6e 6e 65 63 th: 6431..Connec 0130 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e tion: close..Con 0140 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 tent-Type: image 0150 2f 6a 70 65 67 0d 0a 0d 0a ff d8 ff e0 00 10 4a /jpeg..........J 0160 46 49 46 00 01 02 00 00 64 00 64 00 00 ff ec 00 FIF.....d.d..... 0170 11 44 75 63 6b 79 00 01 00 04 00 00 00 50 00 00 .Ducky.......P.. 0180 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ....Adobe.d..... 0190 ff db 00 84 00 02 02 02 02 02 02 02 02 02 02 03 ................ 01a0 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 ................ 01b0 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 ................ 01c0 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ................ 01d0 0c 0c 0c 0c 0c 01 03 03 03 05 04 05 09 06 06 09 ................ 01e0 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c ................ 01f0 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c ................ 0200 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ................ 0210 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 64 00 64 03 ............d.d. 0220 01 11 00 02 11 01 03 11 01 ff c4 00 a5 00 00 02 ................ 0230 02 03 01 00 03 00 00 00 00 00 00 00 00 00 04 07 ................ 0240 03 08 02 06 09 00 01 05 0a 01 00 01 05 01 01 01 ................ 0250 01 00 00 00 00 00 00 00 00 00 03 00 01 02 05 06 ................ 0260 07 04 08 09 10 00 02 02 01 03 03 03 03 02 04 05 ................ 0270 05 00 00 00 00 01 02 03 04 05 00 11 06 21 12 07 .............!.. 0280 31 13 08 41 22 14 51 32 71 81 15 09 61 91 42 72 1..A".Q2q...a.Br 0290 23 a1 43 24 26 17 11 00 02 00 04 04 04 03 06 05 #.C$&........... 02a0 02 04 07 00 00 00 00 01 02 00 11 03 04 21 31 12 .............!1. 02b0 05 41 51 61 06 22 32 13 71 81 91 42 14 07 f0 a1 .AQa."2.q..B.... 02c0 b1 52 62 c1 72 d1 82 23 33 92 a2 b2 43 24 15 08 .Rb.r..#3...C$.. 02d0 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ee 0b ............?... 02e0 ae a7 15 84 40 ac ba 90 81 11 03 32 e9 44 08 88 ....@......2.D.. 02f0 19 74 f0 26 10 3b af f3 fd 74 a0 64 44 24 69 40 .t.&.;...t.dD$i@ 0300 c8 84 53 79 cb 88 56 f3 1e 53 c4 79 3c de 0b 1f ..Sy..V..S.y<... 0310 76 b6 2e b5 da 37 65 cc d0 46 92 d4 b2 3c 6d 40 v....7e..F...R.....E 0410 e2 6a d1 c9 24 9f 7b fb 42 53 18 2d d4 05 0a 7d .j..$.{.BS.-...} 0420 35 8a dc 28 8a 35 dd 06 40 91 cf f3 e3 05 aa 27 5..(.5..@......' 0430 23 cc 02 7d b1 76 88 d7 8e 00 44 60 46 dd 74 a2 #..}.v....D`F.t. 0440 31 98 3a 50 f1 32 36 c7 4a 08 a6 09 ef 3d ba 68 1.:P.26.J....=.h 0450 2c e3 74 65 d0 e2 ea 06 75 d3 c0 c8 81 9d 74 f0 ,.te....u.....t. 0460 32 20 57 4d 3c 0c 88 1d 97 4a 06 44 55 5f 9a b3 2 WM<....J.DU_.. 0470 49 07 c5 ff 00 2c c3 08 06 7c 9d 2a 18 ea ea 7a I....,...|.*...z 0480 06 7b 79 2a b0 85 3f c7 bb 4c 50 d4 21 07 12 07 .{y*..?..LP.!... 0490 c4 88 54 ce 96 9f 20 7f 43 14 9f 80 fc 30 8f c8 ..T... .C....0.. 04a0 90 57 e6 54 bc af 62 6f 0f f2 cc 0c 96 28 f0 39 .W.T..bo.....(.9 04b0 6a c6 d7 2a 67 8a 34 6f 14 b7 00 1e e5 58 2d 96 j..*g.4o.....X-. 04c0 b1 d9 b0 66 63 da 46 cc cc dc f7 ba 7e ec ee dd ...fc.F.....~... 04d0 ba ef 67 56 82 8a a2 ac 8b 01 3a 6e 88 66 42 ce ..gV......:n.fB. 04e0 64 17 59 4c 4f 09 eb e5 16 8b b4 db b0 5a ab 36 d.YLO........Z.6 04f0 42 17 19 c9 bc 5c 39 4d 71 1e e9 45 f4 f8 d3 e3 B....\9Mq..E.... 0500 dc cf 8c 3c 37 c6 b8 97 27 9a b5 9e 5b 04 d7 6d ...<7...'...[..m 0510 f2 bb 34 d4 24 12 5d b1 61 db 78 d4 01 b2 2c 42 ..4.$.].a.x...,B 0520 35 5d fa 95 50 4f 52 75 b6 db 7b 92 9f 71 51 1b 5]..PORu..{..qQ. 0530 85 39 4a a1 38 0f 96 58 .9J.8..X No. Time Source Destination Protocol Info 339 1.451140 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 339 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55340 (55340), Seq: 1, Ack: 838, Len: 1360 No. Time Source Destination Protocol Info 340 1.451174 141.3.161.43 193.99.144.85 TCP 55340 > http [ACK] Seq=838 Ack=1361 Win=8256 Len=0 TSV=626961 TSER=776121049 Frame 340 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55340 (55340), Dst Port: http (80), Seq: 838, Ack: 1361, Len: 0 No. Time Source Destination Protocol Info 341 1.451600 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 341 (156 bytes on wire, 156 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55340 (55340), Seq: 1361, Ack: 838, Len: 88 No. Time Source Destination Protocol Info 342 1.451615 141.3.161.43 193.99.144.85 TCP 55340 > http [ACK] Seq=838 Ack=1449 Win=8256 Len=0 TSV=626961 TSER=776121049 Frame 342 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55340 (55340), Dst Port: http (80), Seq: 838, Ack: 1449, Len: 0 No. Time Source Destination Protocol Info 343 1.451960 193.99.144.85 141.3.161.43 TCP http > 55342 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776121051 TSER=626960 Frame 343 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55342 (55342), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 344 1.451981 141.3.161.43 193.99.144.85 TCP 55342 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626961 TSER=776121051 Frame 344 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55342 (55342), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 345 1.452469 141.3.161.43 193.99.144.85 HTTP GET /icons/ho/emedia.gif HTTP/1.1 Frame 345 (894 bytes on wire, 894 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55342 (55342), Dst Port: http (80), Seq: 1, Ack: 1, Len: 826 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 346 1.456615 141.3.161.43 193.99.144.85 TCP 55343 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626962 TSER=0 WS=6 Frame 346 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55343 (55343), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 347 1.459679 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #348] Frame 347 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 2b ae ba e5 64 37 de 02 c7 80 10 12 f6 .P.+...d7....... 0010 13 c1 00 00 01 01 08 0a 2e 42 aa dc 00 09 91 0c .........B...... 0020 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d HTTP/1.1 200 OK. 0030 0a 44 61 74 65 3a 20 46 72 69 2c 20 31 32 20 53 .Date: Fri, 12 S 0040 65 70 20 32 30 30 38 20 31 31 3a 33 36 3a 30 32 ep 2008 11:36:02 0050 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 GMT..Server: Ap 0060 61 63 68 65 2f 31 2e 33 2e 33 34 0d 0a 56 61 72 ache/1.3.34..Var 0070 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 y: Accept-Encodi 0080 6e 67 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 ng..Connection: 0090 63 6c 6f 73 65 0d 0a 54 72 61 6e 73 66 65 72 2d close..Transfer- 00a0 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 Encoding: chunke 00b0 64 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a d..Content-Type: 00c0 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 0d 0a 31 36 image/png....16 00d0 39 30 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 90...PNG........ 00e0 49 48 44 52 00 00 00 64 00 00 00 60 08 06 00 00 IHDR...d...`.... 00f0 00 eb 73 d7 42 00 00 00 04 67 41 4d 41 00 00 b1 ..s.B....gAMA... 0100 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce ...a.....sRGB... 0110 1c e9 00 00 00 20 63 48 52 4d 00 00 7a 26 00 00 ..... cHRM..z&.. 0120 80 84 00 00 fa 00 00 00 80 e8 00 00 75 30 00 00 ............u0.. 0130 ea 60 00 00 3a 98 00 00 17 70 9c ba 51 3c 00 00 .`..:....p..Q<.. 0140 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f ..bKGD.......C.. 0150 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 ....pHYs........ 0160 01 00 9a 9c 18 00 00 15 b9 49 44 41 54 78 da ed .........IDATx.. 0170 5d 7b 70 15 55 9a ff 9d ee 7b 93 7b 93 00 09 90 ]{p.U....{.{.... 0180 07 21 37 89 64 a8 d5 f2 11 5d b5 80 f0 18 b0 2c .!7.d....]....., 0190 5d 91 95 d5 99 61 66 ab 70 65 1c 77 6b 77 05 61 ]....af.pe.wkw.a 01a0 5d b1 d0 d5 31 83 b3 35 ea ae f8 60 47 67 51 4a ]...1..5...`GgQJ 01b0 4a 74 c5 55 06 04 dc 81 f5 c1 cb 07 5a 01 61 49 Jt.U........Z.aI 01c0 09 84 90 b7 21 10 42 08 09 97 e4 3e fa db 3f fa ....!.B....>..?. 01d0 91 be f7 9e 7e de be 44 2d 3f ab e5 76 f7 39 df ....~..D-?..v.9. 01e0 39 e7 fb f5 f9 be ef 7c e7 eb 0e f0 03 fd 40 e9 9......|......@. 01f0 12 11 8d d9 b0 61 c3 5f 2e 5f be fc f0 f4 e9 d3 .....a._._...... 0200 0f 03 d0 8e a9 53 a7 1e 7e f8 e1 87 0f ab e5 46 .....S..~......F 0210 ba af df 0b ea ea ea 02 00 10 d1 2f 1f 79 e4 11 .........../.y.. 0220 02 40 00 22 3e 9f 4f fd ed e8 f0 f9 7c 12 80 21 .@.">.O.....|..! 0230 00 b4 7c f9 f2 43 44 34 8a 88 d8 48 8f f3 5b 4d ..|..CD4...H..[M 0240 d1 68 14 00 b0 78 f1 e2 8f 00 44 00 48 70 21 7c .h...x....D.Hp!| 0250 bb 07 63 4c 02 40 ef be fb ee ae 91 1e fb b7 8e ..cL.@.......... 0260 36 6d da 44 90 41 c8 18 00 66 87 20 08 04 80 f6 6m.D.A...f. .... 0270 ed db b7 6d a4 65 31 a2 54 5d 5d 4d 8c b1 11 01 ...m.e1.T]]M.... 0280 c1 e4 90 1e 78 e0 01 1a 69 d9 5c 32 22 a2 ac a2 ....x...i.\2"... 0290 a2 a2 91 16 ba e5 21 8a 22 4d 99 32 85 00 e0 e8 ......!."M.2.... 02a0 d1 a3 23 2d b6 cc 50 45 45 c5 b7 71 46 58 aa b3 ..#-..PEE..qFX.. 02b0 07 1f 7c f0 fb 35 63 5e 7d f5 d5 b3 aa 9e fe 2e ..|..5c^}....... 02c0 1f ed ed ed 87 e2 f1 f8 77 d7 3b 23 a2 f1 00 e2 ........w.;#.... 02d0 23 2d 48 2f 8f bc bc bc 8c ce 16 5f 26 98 6e da #-H/......._&.n. 02e0 b4 89 45 22 91 af 04 41 a8 f6 96 33 53 e4 a2 fe ..E"...A...3S... 02f0 eb 25 4f 7b 34 30 30 00 00 34 38 38 f8 fb 40 20 .%O{400..488..@ 0300 b0 d8 db f1 c9 bd f1 9c 2a 2b 2b a9 a5 a5 c5 75 ........*++....u 0310 fd a5 63 f3 b1 60 f4 68 48 20 10 18 18 00 11 00 ..c..`.hH ...... 0320 81 70 2c 12 c1 3b e7 07 b0 fd 42 18 44 89 82 54 .p,..;....B.D..T 0330 45 5b e9 f7 e1 99 a2 22 4c f4 fb 40 20 48 60 90 E[....."L..@ H`. 0340 40 60 00 04 30 08 0c 18 92 24 fc a6 bb 07 bb c3 @`..0....$...... 0350 17 5d f7 73 c5 8a 15 78 f4 d1 47 fd a3 47 8f 8e .].s...x..G..G.. 0360 79 25 bb 4c 00 32 04 20 cb 4d c5 05 a3 47 e3 fe y%.L.2. .M...G.. 0370 82 31 72 a7 18 03 11 81 b1 d4 2e 12 00 10 01 0c .1r............. 0380 10 08 10 05 01 22 08 51 02 62 20 08 24 80 98 a4 .....".Q.b .$... 0390 40 a9 d4 d1 f1 d2 7e 13 20 31 c2 f6 fe 30 9e ea @.....~. 1...0.. 03a0 e9 71 35 d8 fc fc 7c 9c 3b 77 ce 33 39 7a 0a 08 .q5...|.;w.39z.. 03b0 63 8c 92 9f 5a bb f4 87 92 62 5c 11 c8 02 03 03 c...Z....b\..... 03c0 81 34 2d 92 22 44 0c 2b 18 a6 b4 45 0c 60 04 10 .4-."D.+...E.`.. 03d0 63 60 32 5a b2 62 63 40 16 18 c2 44 68 8f 45 01 c`2Z.bc@...Dh.E. 03e0 02 fc 8c 61 a2 df a7 b4 03 a5 35 86 6c c6 30 b5 ...a......5.l.0. 03f0 b9 0d 2e 55 61 14 2e 1f c2 14 19 7a c1 84 88 7e ...Ua......z...~ 0400 2a 08 c2 3b 6e c1 10 01 ec ac 08 c9 02 1d e6 29 *..;n..........) 0410 77 90 19 77 31 f9 a9 d7 97 57 ef 31 00 27 63 31 w..w1....W.1.'c1 0420 bc d5 37 80 4d fd e7 b5 41 13 80 9a 60 00 bf 2b ..7.M...A...`..+ 0430 1e af 20 0a 88 60 98 d1 d2 e6 56 0c 71 78 60 93 .. ..`....V.qx`. 0440 d3 06 24 5d 30 00 e0 4f a1 10 72 04 be 71 65 8a ..$]0..O..r..qe. 0450 ea 32 bb ce 92 d4 1b d7 b6 30 99 ff cd 2d 1d 88 .2.......0...-.. 0460 ea da 79 a9 a4 08 57 66 67 6b 25 19 08 b3 5a db ..y...Wfgk%...Z. 0470 5d 8b 03 80 90 8e 3c d3 aa 0c 00 a2 28 a6 05 06 ].....<.....(... 0480 00 e4 08 2c 33 de 85 42 aa 4a 13 c0 10 4d 6a e9 ...,3..B.J...Mj. 0490 44 34 3e 7c c2 20 eb 39 f7 bd 61 90 83 a2 ae 29 D4>|. .9..a....) 04a0 5d 40 48 92 d2 6a 5f cf ca 23 3e a9 c4 00 88 0c ]@H..j_..#>..... 04b0 98 d9 d2 06 bd bc 6a 0b c7 61 7e 5e ae ae 0b 04 ......j..a~^.... 04c0 22 c2 bb 13 4b d2 6d 6e c8 6d e5 74 74 9e 07 ae "...K.mn.m.tt... 04d0 1e c3 3f 8f 2d 50 cc 2b 34 cf 87 64 0b 0d c0 5a ..?.-P.+4..d...Z 04e0 25 e9 6d 8c 66 37 74 e5 89 64 07 21 ce 80 3d 15 %.m.f7t..d.!..=. 04f0 a1 14 d8 89 d3 46 a1 4f 4c 77 60 59 c5 c5 c5 d4 .....F.OLw`Y.... 0500 d0 d0 e0 1f 33 66 8c 23 39 39 9e 21 1b 37 6e 64 ....3f.#99.!.7nd 0510 e3 c6 8d 23 c8 b6 38 4d 38 08 3f 19 93 27 bb b8 ...#..8M8.?..'.. 0520 8a 5c 17 75 9e 42 57 2c 8e 64 5b ae 17 7c b2 a1 .\.u.BW,.d[..|.. 0530 e7 b9 c7 ea 39 63 0c c4 ....9c.. No. Time Source Destination Protocol Info 348 1.459784 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 348 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55339 (55339), Seq: 1, Ack: 739, Len: 1360 No. Time Source Destination Protocol Info 349 1.459836 141.3.161.43 193.99.144.85 TCP 55339 > http [ACK] Seq=739 Ack=1361 Win=8256 Len=0 TSV=626963 TSER=776121052 Frame 349 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55339 (55339), Dst Port: http (80), Seq: 739, Ack: 1361, Len: 0 No. Time Source Destination Protocol Info 350 1.460227 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 350 (156 bytes on wire, 156 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55339 (55339), Seq: 1361, Ack: 739, Len: 88 No. Time Source Destination Protocol Info 351 1.460241 141.3.161.43 193.99.144.85 TCP 55339 > http [ACK] Seq=739 Ack=1449 Win=8256 Len=0 TSV=626963 TSER=776121052 Frame 351 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55339 (55339), Dst Port: http (80), Seq: 739, Ack: 1449, Len: 0 No. Time Source Destination Protocol Info 352 1.461463 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #354] Frame 352 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 2d bf e6 a1 42 38 26 7d b4 80 10 13 61 .P.-...B8&}....a 0010 ed 87 00 00 01 01 08 0a 2e 42 aa e4 00 09 91 10 .........B...... 0020 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d HTTP/1.1 200 OK. 0030 0a 44 61 74 65 3a 20 46 72 69 2c 20 31 32 20 53 .Date: Fri, 12 S 0040 65 70 20 32 30 30 38 20 31 31 3a 33 36 3a 30 32 ep 2008 11:36:02 0050 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 GMT..Server: Ap 0060 61 63 68 65 2f 31 2e 33 2e 33 34 0d 0a 4c 61 73 ache/1.3.34..Las 0070 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c t-Modified: Thu, 0080 20 31 31 20 53 65 70 20 32 30 30 38 20 31 34 3a 11 Sep 2008 14: 0090 34 32 3a 30 39 20 47 4d 54 0d 0a 45 54 61 67 3a 42:09 GMT..ETag: 00a0 20 22 62 65 63 30 62 62 2d 35 32 64 2d 34 38 63 "bec0bb-52d-48c 00b0 39 32 65 34 31 22 0d 0a 41 63 63 65 70 74 2d 52 92e41"..Accept-R 00c0 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f anges: bytes..Co 00d0 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 33 ntent-Length: 13 00e0 32 35 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 25..Connection: 00f0 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 close..Content-T 0100 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a ype: image/gif.. 0110 0d 0a 47 49 46 38 39 61 7d 00 25 00 c4 1a 00 24 ..GIF89a}.%....$ 0120 24 24 d0 d0 d0 3f 3f 3f 34 34 34 58 58 58 b6 b6 $$...???444XXX.. 0130 b6 bf bf bf d2 d2 d2 9c 9c 9c 6d 6d 6d 60 60 60 ..........mmm``` 0140 cb cb cb c6 c6 c6 49 49 49 4f 4f 4f 8f 8f 8f 95 ......IIIOOO.... 0150 95 95 77 77 77 66 66 66 a2 a2 a2 b0 b0 b0 a8 a8 ..wwwfff........ 0160 a8 80 80 80 87 87 87 13 13 13 00 00 00 ee ee ee ................ 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ...............! 0180 f9 04 01 00 00 1a 00 2c 00 00 00 00 7d 00 25 00 .......,....}.%. 0190 00 05 ff a0 26 8e 64 a9 15 58 8a 35 66 eb 9a 82 ....&.d..X.5f... 01a0 4a bc af a4 02 74 ae ef 3c 59 64 c0 8c a0 a7 03 J....t..d 0210 0d 0c 0f a7 04 0f 2e 0c 16 a8 04 12 08 25 05 6f .............%.o 0220 02 06 25 14 09 0e a8 16 bf 24 90 23 0b ca ca 22 ..%......$.#..." 0230 01 06 06 01 26 10 0a 02 02 0a 17 2f 05 11 02 00 ....&....../.... 0240 00 0e 0f d1 26 13 18 64 40 03 c6 7c 4c e4 87 25 ....&..d@..|L..% 0250 13 e5 e6 0c 22 8a 41 ab 1a 77 ef 09 c7 9d 22 14 ....".A..w....". 0260 64 38 10 64 a4 88 38 20 e0 1d 80 78 25 2c bc a3 d8.d..8 ...x%,.. 0270 63 86 44 82 85 41 74 a5 83 68 8e c4 3d 88 66 e6 c.D..At..h..=.f. 0280 01 91 b8 6e 61 1e 11 c8 34 74 cc f0 eb 01 19 89 ...na...4t...... 0290 22 29 ff 36 14 d1 80 62 86 7a ee 5c 62 88 a6 71 ").6...b.z.\b..q 02a0 a1 31 93 32 0f 48 7a 47 a9 a5 cb 4d 4a f6 21 20 .1.2.HzG...MJ.! 02b0 13 06 e7 46 11 0e 64 8e 50 e8 32 03 c2 91 19 ba ...F..d.P.2..... 02c0 95 1b 32 0f 40 82 08 6f 32 44 d0 70 e0 dd 80 ac ..2.@..o2D.p.... 02d0 19 2c 8c 79 47 a1 1f d1 01 50 e3 21 1b b9 ca 68 .,.yG....P.!...h 02e0 06 5d 0b ca 0d 18 50 4e 94 86 72 2b e8 92 d9 e4 .]....PN..r+.... 02f0 16 80 b1 a1 64 0e 8c 05 82 63 60 47 16 15 f0 dc ....d....c`G.... 0300 24 ea ac 97 5a 32 12 a2 2d 98 93 61 13 a4 0b fe $...Z2..-..a.... 0310 46 00 8c a8 c1 6d 3e 0d 9b d7 68 00 0c c4 c1 02 F....m>...h..... 0320 11 a4 81 2c d0 0b 04 21 6a 32 14 06 2f 1a d1 31 ...,...!j2../..1 0330 0f e5 70 22 dc 9a d1 24 a2 e3 0c 12 6f 9a 5c 3c ..p"...$....o.\< 0340 38 72 96 88 d0 6f 35 18 02 03 bc 53 52 e6 24 90 8r...o5....SR.$. 0350 43 e8 58 98 44 40 d9 6c 0e 74 1c f2 e6 e3 08 d9 C.X.D@.l.t...... 0360 a2 1c 05 38 99 90 4c 80 8b 18 b2 56 07 4d fe 21 ...8..L....V.M.! 0370 61 12 05 09 07 e8 55 62 27 90 04 d4 4b 74 8d 18 a.....Ub'...Kt.. 0380 f7 0a 89 ed 8d 04 b1 de 44 19 84 77 84 06 b2 a1 ........D..w.... 0390 24 42 ff 04 64 2c 70 d1 3b 02 1d d7 9e 80 24 b0 $B..d,p.;.....$. 03a0 06 c0 01 ac 79 27 82 7d 19 e0 47 86 6b a3 91 61 ....y'.}..G.k..a 03b0 00 76 ff 05 91 c7 72 ad 91 c0 14 10 bf 38 92 52 .v....r......8.R 03c0 69 25 04 a7 1c 13 59 f9 81 9c 2e ee 45 55 61 27 i%....Y.....EUa' 03d0 0c 06 71 da 08 3d de 37 d2 00 66 1c 10 53 10 1a ..q..=.7..f..S.. 03e0 70 e8 47 6d 1a 98 45 98 01 07 2c b0 22 1d 22 b8 p.Gm..E...,.".". 03f0 48 19 01 0b 44 89 62 06 0a 04 f5 e4 48 28 dd a8 H...D.b.....H(.. 0400 41 8e eb b1 d6 84 22 00 14 10 c0 02 39 0a f9 4e A.....".....9..N 0410 0a e5 74 79 49 89 15 dd 85 17 54 16 54 79 a0 06 ..tyI.....T.Ty.. 0420 89 e1 f5 ce 2f 90 04 a9 a3 84 9c 91 b9 23 74 60 ..../........#t` 0430 41 e5 66 53 85 cd 69 98 89 22 f4 49 51 75 2e da A.fS..i..".IQu.. 0440 d3 94 04 20 75 b2 5f 10 c6 89 69 e8 08 66 6e d8 ... u._...i..fn. 0450 d4 a2 14 61 80 90 93 b3 f5 06 69 6e 93 ba 56 a9 ...a......in..V. 0460 06 3e 2d f4 9b 97 54 6a 80 d9 3e 6e e9 82 de a1 .>-...Tj..>n.... 0470 b5 f2 39 aa 87 14 09 80 9b 92 cd 89 36 c2 38 ef ..9.........6.8. 0480 08 cb 2b 50 23 6c 19 c4 67 99 42 a7 1d 79 62 0e ..+P#l..g.B..yb. 0490 07 df ff 3e 22 ac 56 4e 03 1d 01 0b 04 04 14 48 ...>".VN.......H 04a0 20 0b 3a 23 04 60 2e 6e 03 9d 6b c2 01 14 44 00 .:#.`.n..k...D. 04b0 c5 05 20 a6 6b 6e 0b 01 54 20 81 02 09 54 10 af .. .kn..T ...T.. 04c0 06 e7 1e 30 c2 01 e7 06 e0 2f bf ea 36 63 ee c0 ...0...../..6c.. 04d0 f2 0a 6c c2 02 15 20 00 41 3c 00 cf 3b 92 5d a3 ..l... .A<..;.]. 04e0 54 6c 31 23 13 5f ac f1 c6 59 94 53 0f c7 20 87 Tl1#._...Y.S.. . 04f0 ec 42 02 50 40 41 ae c8 28 a7 ac f2 ca 2c b7 cc .B.P@A..(....,.. 0500 c8 01 14 77 96 4d 84 e8 f2 f0 a3 cb 21 33 c0 ac ...w.M......!3.. 0510 48 27 6f 38 00 4a 98 ec d0 c0 cd 38 53 31 f0 d1 H'o8.J.....8S1.. 0520 fc 16 30 b0 33 05 74 a9 c1 02 e3 b8 66 40 43 16 ..0.3.t.....f@C. 0530 f8 f1 e3 01 66 3c b3 21 ....f<.! No. Time Source Destination Protocol Info 353 1.464434 141.3.161.43 193.99.144.85 TCP 55344 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626964 TSER=0 WS=6 Frame 353 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55344 (55344), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 354 1.470467 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 354 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55341 (55341), Seq: 1, Ack: 846, Len: 1360 No. Time Source Destination Protocol Info 355 1.470553 141.3.161.43 193.99.144.85 TCP 55341 > http [ACK] Seq=846 Ack=1361 Win=8256 Len=0 TSV=626966 TSER=776121060 Frame 355 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55341 (55341), Dst Port: http (80), Seq: 846, Ack: 1361, Len: 0 No. Time Source Destination Protocol Info 356 1.470819 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 356 (156 bytes on wire, 156 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55341 (55341), Seq: 1361, Ack: 846, Len: 88 No. Time Source Destination Protocol Info 357 1.470835 141.3.161.43 193.99.144.85 TCP 55341 > http [ACK] Seq=846 Ack=1449 Win=8256 Len=0 TSV=626966 TSER=776121060 Frame 357 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55341 (55341), Dst Port: http (80), Seq: 846, Ack: 1449, Len: 0 No. Time Source Destination Protocol Info 358 1.471220 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (GIF89a) Frame 358 (187 bytes on wire, 187 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55341 (55341), Seq: 1449, Ack: 846, Len: 119 [Reassembled TCP Segments (1567 bytes): #354(1360), #356(88), #358(119)] Hypertext Transfer Protocol Compuserve GIF, Version: GIF89a No. Time Source Destination Protocol Info 359 1.471232 141.3.161.43 193.99.144.85 TCP 55341 > http [ACK] Seq=846 Ack=1568 Win=8256 Len=0 TSV=626966 TSER=776121060 Frame 359 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55341 (55341), Dst Port: http (80), Seq: 846, Ack: 1568, Len: 0 No. Time Source Destination Protocol Info 360 1.471573 193.99.144.85 141.3.161.43 TCP http > 55341 [FIN, ACK] Seq=1568 Ack=846 Win=4961 Len=0 TSV=776121061 TSER=626960 Frame 360 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55341 (55341), Seq: 1568, Ack: 846, Len: 0 No. Time Source Destination Protocol Info 361 1.472107 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #363] Frame 361 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 2c e2 9a c7 bb 37 80 89 db 80 10 13 59 .P.,....7......Y 0010 1f 77 00 00 01 01 08 0a 2e 42 aa e7 00 09 91 11 .w.......B...... 0020 c7 79 9c 80 16 23 c7 65 2c 71 c5 82 3b 74 e6 77 .y...#.e,q..;t.w 0030 58 63 92 49 e1 95 5b b5 3d b6 1e e3 21 56 0a 37 Xc.I..[.=...!V.7 0040 ee 1b 02 3a 17 75 fd b2 d8 b7 cd 9c 5c 6e 0a e2 ...:.u......\n.. 0050 a9 a6 24 51 b4 97 60 bf e9 82 b2 2a cc 0e 0a 65 ..$Q..`....*...e 0060 aa 5e 19 e9 c2 05 6b bd d5 b0 3a 3c 3a 27 f3 0f .^....k...:<:'.. 0070 2f f6 b6 63 f4 9e 31 d8 3a bc 83 0e 9c 83 22 d2 /..c..1.:.....". 0080 72 ce 3c d8 f6 ad 14 35 a1 8f 21 08 99 e7 49 1c r.<....5..!...I. 0090 b3 bc 6e e3 b7 ed 6d 87 53 ae 1b d9 fd 83 7f db ..n...m.S....... 00a0 cb 59 0a bb d3 72 0a 9d 0c 32 1c 44 a5 3f 61 c6 .Y...r...2.D.?a. 00b0 2c b7 1d da c6 ea de 9a d2 c2 a0 66 2c 49 07 06 ,..........f,I.. 00c0 02 40 19 cc e2 27 90 8d b2 2b 54 ed 6e 6a dc af .@...'...+T.nj.. 00d0 6b a6 e7 d9 95 24 fe 7f 61 3a d5 bd 27 4f 32 91 k....$..a:..'O2. 00e0 ed 04 7e b1 4d 30 72 31 91 1a 84 44 88 c0 8d 28 ..~.M0r1...D...( 00f0 89 11 ed 28 61 19 6f fe 5a 51 29 c3 35 86 81 1a ...(a.o.ZQ).5... 0100 62 22 06 5d 3c 40 88 16 58 e4 64 91 61 21 66 65 b".]<@..X.d.a!fe 0110 61 0b 11 b8 0e 47 da 48 fa ec 75 25 20 1c 72 88 a....G.H..u% .r. 0120 11 14 07 15 f2 23 9c dd b5 35 4c b6 46 bd 59 aa .....#...5L.F.Y. 0130 ca f0 d9 58 2a c4 8a 1a 36 28 c3 a8 62 3a 8d 76 ...X*...6(..b:.v 0140 8a fd 8f 61 4d 43 53 42 41 00 89 b1 39 e3 15 42 ...aMCSBA...9..B 0150 e5 8c 39 78 77 94 4d fc ac 5f d7 32 e2 1c 71 86 ..9xw.M.._.2..q. 0160 42 f2 cd b0 4e f0 bb af 45 1f af a6 b2 bb c7 6e B...N...E......n 0170 ad 1a 07 d1 4f 14 c6 59 c1 e9 b9 73 28 ab ff 00 ....O..Y...s(... 0180 33 2d 37 93 ae 78 e7 89 d5 ba b4 3c 67 8f b7 2d 3-7..x.....V.,p.b1w{/ 0260 a6 e1 5a 78 67 c7 e1 16 03 e3 5f 1b f1 8f 1a e4 ..Zxg....._..... 0270 79 19 78 ef 3d e3 3c 83 39 95 c7 c1 52 85 1c 66 y.x.=.<.9...R..f 0280 46 b4 d2 4a 2c 37 be 56 15 12 77 c8 db 45 d4 2a F..J,7.V..w..E.* 0290 ee 36 3b ed b6 b1 fd ff 00 dc 17 17 f4 69 52 a8 .6;..........iR. 02a0 8c 83 51 6f 10 91 32 12 cb de 62 e3 6a da fe 9d ..Qo..2...b.j... 02b0 89 04 13 29 61 1d 12 87 01 8f fc 58 12 c5 30 66 ...)a......X..0f 02c0 08 3d d7 0c 43 77 11 d7 a8 23 eb ae 54 5c c6 cd .=..Cw...#..T\.. 02d0 2c a9 e8 01 86 30 bd ba b0 ad ab 09 5d 0a 42 8e ,....0......].B. 02e0 55 14 9e e3 b0 3b 6f bf f8 e8 a3 28 a3 ac 14 39 U....;o....(...9 02f0 0b 94 e0 3e a3 4f 01 22 3d a5 0a 1a 8c 34 08 d4 ...>.O."=....4.. 0300 c2 7b ce 58 8f 31 66 bc 73 96 c7 f8 23 92 62 38 .{.X.1f.s...#.b8 0310 a7 91 e5 9a bb 63 72 f9 b8 cc 95 85 75 7d ec 44 .....cr.....u}.D 0320 a7 da 9c 47 23 af 45 73 1b 01 fa 7d 41 a8 32 2b ...G#.Es...}A.2+ 0330 82 e2 63 94 0e a2 96 12 06 46 39 29 e3 cf 2e fc ..c......F9).... 0340 c9 9b 37 99 ab e4 6f 35 5f e1 90 f1 7c a5 8c 66 ..7...o5_...|..f 0350 67 1f 25 0c 35 fb 4f 62 a4 ad 14 be d9 34 e4 8d g.%.5.Ob.....4.. 0360 61 ee 53 b4 a4 ec c3 f6 8d 7b ae 2e f6 d6 1a 28 a.S......{.....( 0370 23 3d 4e 21 49 92 ff 00 73 1f 0c fa 4e 70 33 63 #=N!I...s...Np3c 0380 79 49 56 a5 76 54 a6 de 52 d9 b4 bf 6a ac dc fb yIV.vT..R...j... 0390 74 cb ac 49 3e 67 01 90 e5 79 5a d5 b9 ee 3a 3c t..I>g...yZ...:< 03a0 8d eb 92 58 8a 6c 8c 32 57 af 3c d3 bf 7b 11 3c ...X.l.2W.<..{.< 03b0 21 a3 56 66 63 f4 0b f4 1b 7a 6b a5 59 77 cd 7a !.Vfc....zk.Yw.z 03c0 56 94 fd 7b 52 50 20 1a a9 55 a5 52 aa 85 12 c6 V..{RP ..U.R.... 03d0 8b 15 63 96 4b 36 e3 23 00 1b 55 36 33 4a de 22 ..c.K6.#..U63J." 03e0 72 64 74 5c 7f 91 04 7c 65 1b 66 3b 2d 9d c6 e6 rdt\...|e.f;-... 03f0 60 c6 64 6f 1a f2 06 55 92 1f b7 da 2b 22 fd ac `.do...U....+".. 0400 76 1d db 75 df f5 d5 f3 ee 96 17 db 4b df 5a b7 v..u........K.Z. 0410 aa a3 89 c1 81 04 4d 48 12 91 91 9f 2c 41 04 88 ......MH....,A.. 0420 f0 5c 51 af 63 5f 45 51 a5 ba c8 89 65 39 fc 62 .\Q.c_EQ....e9.b 0430 ee f1 af 8f bc 33 c9 7c 4f ff 00 61 cb f2 4f c2 .....3.|O..a..O. 0440 9a 48 66 5b 2b 02 62 d2 49 21 90 93 ec ac e9 34 .Hf[+.b.I!.....4 0450 85 43 26 c4 b0 1b 83 ae 73 53 ba ee 6d 6b ab d2 .C&.....sS..mk.. 0460 a6 aa 41 98 07 c4 7d f2 23 e1 17 54 0e a5 cf 84 ..A...}.#..T.... 0470 a7 c3 dd 01 f2 de 21 c3 bc 27 cd 68 f2 5b 19 8c ......!..'.h.[.. 0480 f6 62 0c de 1a 5c 6e 1b 14 f5 d2 4a d8 f8 b1 cb .b...\n....J.... 0490 14 91 88 2c 42 23 28 40 85 50 06 f5 2c 37 6e ba ...,B#(@.P..,7n. 04a0 86 d9 7b 5a ee cf e8 c2 02 5a b1 76 7c d9 de a1 ..{Z.....Z.v|... 04b0 66 25 c7 29 9c 08 c0 4a 52 c2 2b 37 35 34 a9 53 f%.)...JR.+754.S 04c0 54 6d 29 4a 98 44 5c 80 03 33 3f de ed e2 72 7c Tm)J.D\..3?...r| 04d0 c4 f2 90 15 6b 9e 7c b2 a3 83 9a dd dc f2 de c2 ....k.|......... 04e0 62 ec 88 2b 09 32 91 c5 60 95 72 40 49 4f 73 37 b..+.2..`.r@IOs7 04f0 6f 5d f6 dc f4 df 71 ad 25 3d 9a de c6 97 ad 5a o]....q.%=.....Z 0500 6a 0f 2e 7c 87 f2 32 c8 72 8c e5 3f 5a ad 43 3f j..|..2.r..?Z.C? 0510 11 3f 8c e2 b5 f2 6f 28 f9 4b 14 98 4e 65 e1 ce .?....o(.K..Ne.. 0520 3f c6 f8 07 23 4b 72 5c c7 dc 15 6a 5a 5b 28 41 ?...#Kr\...jZ[(A 0530 3b f7 c1 0c c8 1e 48 e4 ;.....H. No. Time Source Destination Protocol Info 362 1.473481 141.3.161.43 193.99.144.85 TCP 55341 > http [FIN, ACK] Seq=846 Ack=1569 Win=8256 Len=0 TSV=626966 TSER=776121061 Frame 362 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55341 (55341), Dst Port: http (80), Seq: 846, Ack: 1569, Len: 0 No. Time Source Destination Protocol Info 363 1.478711 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 363 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55340 (55340), Seq: 1449, Ack: 838, Len: 1360 No. Time Source Destination Protocol Info 364 1.478757 141.3.161.43 193.99.144.85 TCP 55340 > http [ACK] Seq=838 Ack=2809 Win=10944 Len=0 TSV=626968 TSER=776121063 Frame 364 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55340 (55340), Dst Port: http (80), Seq: 838, Ack: 2809, Len: 0 No. Time Source Destination Protocol Info 365 1.479640 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #366] Frame 365 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 2c e2 9a cd 0b 37 80 89 db 80 10 13 59 .P.,....7......Y 0010 51 54 00 00 01 01 08 0a 2e 42 aa e7 00 09 91 11 QT.......B...... 0020 7d bc 67 2b 5b f0 df 17 92 a1 1a ab c4 84 cd 2d }.g+[..........- 0030 88 0c 96 59 26 42 d1 90 bf 68 0a 11 9c 11 43 e9 ...Y&B...h....C. 0040 48 92 72 11 ec ad 58 04 c4 cb ac 74 3f c6 79 0e H.r...X....t?.y. 0050 7d 93 e1 98 9b 1e 50 c4 e3 70 bc e0 19 a1 cb 53 }.....P..p.....S 0060 c4 cb ef 55 71 0c ad 1c 56 17 ee 71 19 9d 14 4a ...Uq...V..q...J 0070 63 0e dd 9d dd bd c7 6d 23 2e 11 44 c5 4b 1d 38 c......m#..D.K.8 0080 88 de 88 d2 88 11 18 ed a5 0d 0d b6 5f 5d 02 35 ............_].5 0090 52 85 af 96 79 6c dc 0f c7 1c bf 96 56 00 dc c4 R...yl......V... 00a0 50 26 89 3e 8b 3c ce b0 44 c7 fd ad 20 6f e5 a9 P&.>.<..D... o.. 00b0 22 cd 80 8f 3d c3 e8 a6 58 47 05 2d e7 38 be 4f "...=...XG.-.8.O 00c0 91 65 cf 34 cc c3 47 31 5b 27 69 e9 51 51 76 a5 .e.4..G1['i.QQv. 00d0 79 63 12 b0 f7 6c 23 c3 2d 69 24 df fe e4 25 3b yc...l#.-i$...%; 00e0 86 c5 87 71 3a ce 6d cd 5e de 90 5a 40 91 33 31 ...q:.m.^..Z@.31 00f0 25 61 ab 8e 21 95 97 1e 0c 1a 5c 30 8d 5e e1 e8 %a..!.....\0.^.. 0100 d6 ae 6a 54 21 66 00 56 9b 2b 05 97 84 78 95 95 ..jT!f.V.+...x.. 0110 b0 e2 ac b3 38 9c 61 91 c7 b8 df 18 e7 19 77 5e ....8.a.......w^ 0120 3f 67 29 c9 f2 e2 b1 94 e0 70 8c d3 37 b3 08 d9 ?g)......p..7... 0130 e4 69 15 89 44 1b 80 58 8e 9e 80 6e 75 ad 1d e5 .i..D..X...nu... 0140 7f 63 b7 9a 42 82 a8 c7 c4 cc ec 71 e0 b4 95 80 .c..B......q.... 0150 63 9f 9b c3 fb b0 8a eb 5d ab 6f ad 74 aa 6b b3 c.......].o.t.k. 0160 92 72 01 50 7b 5e ab 2c 94 73 d3 36 e4 27 1f 43 .r.P{^.,.s.6.'.C 0170 8e e5 37 ad e4 b3 70 5b 35 e7 38 ab a7 1d 5f d8 ..7...p[5.8..._. 0180 46 46 49 a2 dc cd 11 57 25 87 b4 ce 23 1d dd 7e FFI....W%...#..~ 0190 d2 4f 53 af 07 69 5e 56 a5 b6 14 57 74 a4 e7 56 .OS..i^V...Wt..V 01a0 86 3c 80 5d 4d d5 b4 cc 8c b2 c3 08 17 7a d1 6a .<.]M........z.j 01b0 9b a2 db d3 d3 51 c0 0a 3d 30 64 59 89 21 17 89 .....Q..=0dY.!.. 01c0 d3 39 0c c9 33 27 3c 2d 56 4f 9f 79 53 c6 fe 12 .9..3'<-VO.yS... 01d0 59 30 fc d3 27 8f e5 5c c2 41 07 0c a9 24 a2 65 Y0..'..\.A...$.e 01e0 a3 05 78 de 6e e8 92 c0 75 5f 70 a8 5f 4d 82 91 ..x.n...u_p._M.. 01f0 fa eb 47 f6 f6 d9 3b 8f 76 b9 72 ba ad 6d 69 90 ..G...;.v.r..mi. 0200 79 54 ac f9 4e 58 f8 06 39 e6 71 ca 3c bb 95 b8 yT..NX..9.q.<... 0210 db 37 1b 5d 98 36 aa fe 7b 82 0c c2 92 0e 9a 0b .7.].6..{....... 0220 d1 73 62 3c cd d0 08 a2 90 7c 82 f3 e7 2e ca 45 .sb<.....|.....E 0230 4b 97 e4 33 9c aa 2b 76 d2 49 b1 b9 c7 22 a5 41 K..3..+v.I...".A 0240 fb 5d a1 15 d6 11 5f b5 49 dc b0 3b f4 03 73 d4 .]...._.I..;..s. 0250 ef bf f5 d6 d6 ec 2b 5a bb d0 aa 01 13 42 0a b4 ......+Z.....B.. 0260 f2 d6 8c 08 60 3a e2 67 9c 11 18 05 6a 55 69 25 ....`:.g....jUi% 0270 44 62 26 18 19 8f ed 70 41 5f d3 a4 1f ce f8 3e Db&....pA_.....> 0280 3b c8 34 a4 c6 d8 c9 da 11 09 85 9a 91 c8 7d df ;.4...........}. 0290 6a 44 df b5 bb ba 1d 80 27 7d c6 da d0 9d d6 db jD......'}...... 02a0 70 b6 5b 7d c2 82 d5 23 1d 4a 4d 22 5a 59 c8 12 p.[}...#.JM"ZY.. 02b0 3f 39 46 7d f6 0a 54 6b 9a b6 ac 69 83 f2 9f 16 ?9F}..Tk...i.... 02c0 1c a7 84 fe 11 4b f9 1e 3f cb 3e 19 cc 4a f8 2f .....K..?.>..J./ 02d0 76 d6 0e ec c0 3c 15 87 bd 4e d3 46 7e c6 30 1e v....<...N.F~.0. 02e0 e8 59 86 db 8d c2 b0 f5 4e dd 86 b9 d6 fb b1 52 .Y......N......R 02f0 b3 56 b8 b6 a9 3a 43 12 b5 08 0c 9f e6 c1 5c 75 .V...:C.......\u 0300 f0 b7 f1 8b 5b 3b 2b 8b 9a 8b 45 10 bd 46 c8 28 ....[;+...E..F.( 0310 24 9f 62 89 9f d6 1e bf 1c 33 99 cb 9e 4d c7 f9 $.b......3...M.. 0320 5f 2d 05 38 66 a9 7d 32 16 68 bf 73 18 a6 ad 1f _-.8f.}2.h.s.... 0330 b3 05 7d e5 91 dd 0f 6e e7 66 24 fd 77 f4 3a 0d ..}....n.f$.w.:. 0340 2e dc be b9 b4 4b ca 54 bd 4a 4e b8 14 21 e5 fd .....K.T.JN..!.. 0350 c1 0e a0 46 78 8e 51 51 ba 39 b6 ae d6 d5 81 47 ...Fx.QQ.9.....G 0360 5c 08 60 54 8f 8c 76 9b c6 3f 2c 3e 3c 79 13 28 \.`T..v..?,>.<...... 03c0 e4 58 f9 6a c5 6b 6d fd 99 8f dd 0c bb 7d 7b 24 .X.j.km......}{$ 03d0 55 62 3f c3 52 56 91 06 05 56 9e b5 2b ce 38 97 Ub?.RV...V..+.8. 03e0 cf 78 a7 8b 78 25 28 3c 77 ce 70 39 7c 2f 94 ee .x..x%(.X*....ny 04b0 dd 57 57 2b 6e e9 62 a0 e3 a4 12 c8 93 3f e6 2b .WW+n.b......?.+ 04c0 80 e3 28 eb 3b 2f d1 76 ad b3 ee 9b 89 ff 00 cc ..(.;/.v........ 04d0 6a 73 a3 4c 82 7d 35 22 41 99 a5 a5 5d be 50 c4 js.L.}5"A...].P. 04e0 15 4c 78 c3 47 cf 7e 42 e3 fc 8f 9e 60 aa c1 c8 .Lx.G.~B....`... 04f0 b1 f8 be 3d c5 69 3a c9 1d 97 96 07 49 1d 7f e4 ...=.i:.....I... 0500 0b 03 44 5c 76 2f 6a 8d d4 7e dd 7d 07 f6 93 b7 ..D\v/j..~.}.... 0510 5b b6 fb 58 d3 7a 4e d5 aa 4d 9d 82 cd 4b 1e 6f [..X.zN..M...K.o 0520 e5 97 59 c7 0b ed 1b 8b 8b ad e9 af eb f8 dd d9 ..Y............. 0530 9a 4a 43 9c 41 96 47 87 .JC.A.G. No. Time Source Destination Protocol Info 366 1.479735 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 366 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55340 (55340), Seq: 2809, Ack: 838, Len: 1360 No. Time Source Destination Protocol Info 367 1.479758 141.3.161.43 193.99.144.85 TCP 55340 > http [ACK] Seq=838 Ack=4169 Win=13696 Len=0 TSV=626968 TSER=776121063 Frame 367 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55340 (55340), Dst Port: http (80), Seq: 838, Ack: 4169, Len: 0 No. Time Source Destination Protocol Info 368 1.480107 193.99.144.85 141.3.161.43 TCP http > 55344 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776121069 TSER=626964 Frame 368 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55344 (55344), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 369 1.480136 141.3.161.43 193.99.144.85 TCP 55344 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626968 TSER=776121069 Frame 369 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55344 (55344), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 370 1.480484 141.3.161.43 193.99.144.85 HTTP GET /icons/ho/mittelstandswiki.gif HTTP/1.1 Frame 370 (904 bytes on wire, 904 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55344 (55344), Dst Port: http (80), Seq: 1, Ack: 1, Len: 836 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 371 1.481209 193.99.144.85 141.3.161.43 TCP http > 55341 [ACK] Seq=1569 Ack=847 Win=4961 Len=0 TSV=776121081 TSER=626966 Frame 371 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55341 (55341), Seq: 1569, Ack: 847, Len: 0 No. Time Source Destination Protocol Info 372 1.492126 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #373] Frame 372 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 30 de 08 32 08 37 fa 75 b4 80 10 13 58 .P.0..2.7.u....X 0010 39 7f 00 00 01 01 08 0a 2e 42 ab 02 00 09 91 18 9........B...... 0020 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d HTTP/1.1 200 OK. 0030 0a 44 61 74 65 3a 20 46 72 69 2c 20 31 32 20 53 .Date: Fri, 12 S 0040 65 70 20 32 30 30 38 20 31 31 3a 33 36 3a 30 32 ep 2008 11:36:02 0050 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 GMT..Server: Ap 0060 61 63 68 65 2f 31 2e 33 2e 33 34 0d 0a 4c 61 73 ache/1.3.34..Las 0070 74 2d 4d 6f 64 69 66 69 65 64 3a 20 57 65 64 2c t-Modified: Wed, 0080 20 30 33 20 53 65 70 20 32 30 30 38 20 31 32 3a 03 Sep 2008 12: 0090 34 31 3a 31 37 20 47 4d 54 0d 0a 45 54 61 67 3a 41:17 GMT..ETag: 00a0 20 22 31 31 63 65 62 33 2d 34 63 37 2d 34 38 62 "11ceb3-4c7-48b 00b0 65 38 35 65 64 22 0d 0a 41 63 63 65 70 74 2d 52 e85ed"..Accept-R 00c0 61 6e 67 65 73 3a 20 62 79 74 65 73 0d 0a 43 6f anges: bytes..Co 00d0 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 31 32 ntent-Length: 12 00e0 32 33 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 23..Connection: 00f0 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 close..Content-T 0100 79 70 65 3a 20 69 6d 61 67 65 2f 67 69 66 0d 0a ype: image/gif.. 0110 0d 0a 47 49 46 38 39 61 18 01 1e 00 c4 11 00 7f ..GIF89a........ 0120 7f 7f ec 16 16 af af af 3f 3f 3f ce ce ce 20 20 ........???... 0130 20 5f 5f 5f 10 10 10 de de de be be be 30 30 30 ___.........000 0140 8f 8f 8f 6f 6f 6f 4f 4f 4f 9f 9f 9f a5 01 00 00 ...oooOOO....... 0150 00 00 ee ee ee 00 00 00 00 00 00 00 00 00 00 00 ................ 0160 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 0170 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 ...............! 0180 f9 04 01 00 00 11 00 2c 00 00 00 00 18 01 1e 00 .......,........ 0190 00 05 ff 60 24 8e 64 69 9e 68 aa ae 6c eb be 70 ...`$.di.h..l..p 01a0 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c ,.tm.x..|....pH, 01b0 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af ....r.l:...tJ.Z. 01c0 d8 ac 76 cb ed 7a 69 8f b0 78 4c 2e 91 cf e3 d8 ..v..zi..xL..... 01d0 00 c2 66 13 4e 85 36 7b d4 06 90 04 f8 37 89 80 ..f.N.6{.....7.. 01e0 17 d0 ea 32 7c 78 4d 80 2e 6b 06 26 02 6c 88 25 ...2|xM..k.&.l.% 01f0 04 6e 11 71 09 22 91 29 94 3d 68 98 66 98 67 6a .n.q.".).=h.f.gj 0200 72 10 76 25 8a 9e 74 6c a0 22 85 23 00 6d 7f a5 r.v%..tl.".#.m.. 0210 32 aa 73 4c a8 2c aa 07 26 0c 6c b5 25 aa 0a a7 2.sL.,..&.l.%... 0220 10 7a 8f 28 c0 3c 9b 9c 24 c4 65 30 6b 72 05 26 .z.(.<..$.e0kr.& 0230 06 9e 10 a9 00 00 7e a4 9f ba ab 33 b2 2e af d0 ......~....3.... 0240 b1 ad 2e 09 6c 92 24 71 07 10 d4 23 6b 0c 22 0b ....l.$q...#k.". 0250 00 08 bd 7a 27 ed ef 97 c7 62 9a f6 0f 9d 6c 0d ...z'....b....l. 0260 6c e8 11 08 cc 1d 50 d6 2d 85 36 6e ac ac c5 40 l.....P.-.6n...@ 0270 e8 4d a1 8b 38 eb 46 38 2a e0 8c 91 08 04 e2 4e .M..8.F8*......N 0280 08 3b 92 2f 0c 3e 7b fb 20 2c 58 44 62 24 04 03 .;./.>{. ,XDb$.. 0290 04 ab ff d9 11 f5 4c 00 41 39 03 46 20 00 30 c0 ......L.A9.F .0. 02a0 1c 04 8a ff 22 a0 12 80 52 8e 02 03 e8 5e b6 89 ...."...R....^.. 02b0 29 82 e7 80 38 37 07 30 88 a7 d3 1f 01 06 0a d8 )...87.0........ 02c0 28 30 25 d1 00 d2 a9 18 bf 45 30 ea 13 e8 88 5b (0%......E0....[ 02d0 bc 52 41 60 a0 28 97 08 07 37 47 58 12 96 20 8e .RA`.(...7GX.. . 02e0 02 49 96 86 8d 09 40 b7 ae dd bb 78 ed 22 7b 91 .I....@....x."{. 02f0 d2 26 bd 08 51 21 24 48 d9 cb 1a 4b 4f 2e 9f 41 .&..Q!$H...KO..A 0300 20 9a c0 e6 b3 88 85 41 99 54 bc 58 84 50 36 44 ......A.T.X.P6D 0310 6f 51 16 59 cd 80 e3 36 16 b7 7e 96 5a 68 b2 62 oQ.Y...6..~.Zh.b 0320 c6 c2 a2 4a 32 87 ae 1f 64 60 c0 04 98 53 f0 cb ...J2...d`...S.. 0330 97 0f 32 79 73 eb 0e b0 d7 d0 2a 67 0a c3 a5 25 ..2ys.....*g...% 0340 dc d4 1a 02 3c a0 f1 20 48 c0 b3 0d 1e 49 01 71 ....<.. H....I.q 0350 4d 73 d0 4f 6b 21 9b 03 fa 38 08 cc 99 39 f0 73 Ms.Ok!...8...9.s 0360 02 24 39 62 c3 80 1e 81 ea cc 0a b3 29 30 80 bb .$9b........)0.. 0370 60 11 04 1c 37 90 86 f4 1b 76 ed dc 17 4c e2 1c `...7....v...L.. 0380 c1 51 ae 7e 16 65 04 cf 80 26 35 40 c2 46 3a e0 .Q.~.e...&5@.F:. 0390 b6 db ff 82 75 f5 d6 42 4a a2 a4 07 9c 1d c4 c9 ....u..BJ....... 03a0 72 10 36 22 68 76 c0 38 19 e2 a2 52 61 53 0d 82 r.6"hv.8...RaS.. 03b0 02 43 2a 20 50 61 1b fa 89 c0 0d 28 df fd f3 1d .C* Pa.....(.... 03c0 28 6d 84 98 d3 08 ce 10 a5 0a 23 68 e5 a2 48 7a (m........#h..Hz 03d0 03 36 f5 94 56 3d ca 25 06 83 44 3a c8 02 61 48 .6..V=.%..D:..aH 03e0 09 10 9d 6d 27 3a 54 1c 55 11 90 08 18 49 24 64 ...m':T.U....I$d 03f0 75 4e 64 22 7c e7 89 52 4c 49 79 16 00 28 1d 35 uNd"|..RLIy..(.5 0400 4a 61 06 1e f8 0d 52 a1 01 54 88 96 30 2d 35 82 Ja....R..T..0-5. 0410 28 ef ac 41 4d 74 92 dc 02 99 8f bd 04 56 c0 5f (..AMt.......V._ 0420 41 ee a0 20 91 bb 19 b9 02 61 af 18 60 12 51 4d A.. .....a..`.QM 0430 52 75 21 2c ea 6d 06 e3 37 33 d5 f7 8c 03 62 31 Ru!,.m..73....b1 0440 1a 41 63 9e 0c 94 68 09 85 68 f3 e4 45 00 48 ea .Ac...h..h..E.H. 0450 09 a5 bd 38 90 15 09 ea 4c c9 21 9e c5 15 60 4e ...8....L.!...`N 0460 99 a4 30 95 60 47 1f 1d 13 12 7c 31 b2 91 e2 a6 ..0.`G....|1.... 0470 1f 92 20 e5 66 72 3c ea 24 40 02 38 00 66 7d 3c .. .fr<.$@.8.f}< 0480 4a 19 d8 01 a6 56 5a 90 36 9d 52 29 93 36 c7 19 J....VZ.6.R).6.. 0490 6b 55 ff 1b 3c 56 34 52 68 23 15 30 11 a7 b6 35 kU.. http [ACK] Seq=837 Ack=1361 Win=8256 Len=0 TSV=626973 TSER=776121090 Frame 374 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55344 (55344), Dst Port: http (80), Seq: 837, Ack: 1361, Len: 0 No. Time Source Destination Protocol Info 375 1.499357 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 375 (156 bytes on wire, 156 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55344 (55344), Seq: 1361, Ack: 837, Len: 88 No. Time Source Destination Protocol Info 376 1.499372 141.3.161.43 193.99.144.85 TCP 55344 > http [ACK] Seq=837 Ack=1449 Win=8256 Len=0 TSV=626973 TSER=776121090 Frame 376 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55344 (55344), Dst Port: http (80), Seq: 837, Ack: 1449, Len: 0 No. Time Source Destination Protocol Info 377 1.499722 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (GIF89a) Frame 377 (85 bytes on wire, 85 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55344 (55344), Seq: 1449, Ack: 837, Len: 17 [Reassembled TCP Segments (1465 bytes): #373(1360), #375(88), #377(17)] Hypertext Transfer Protocol Compuserve GIF, Version: GIF89a No. Time Source Destination Protocol Info 378 1.499736 141.3.161.43 193.99.144.85 TCP 55344 > http [ACK] Seq=837 Ack=1466 Win=8256 Len=0 TSV=626973 TSER=776121090 Frame 378 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55344 (55344), Dst Port: http (80), Seq: 837, Ack: 1466, Len: 0 No. Time Source Destination Protocol Info 379 1.499963 193.99.144.85 141.3.161.43 TCP http > 55344 [FIN, ACK] Seq=1466 Ack=837 Win=4952 Len=0 TSV=776121091 TSER=626968 Frame 379 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55344 (55344), Seq: 1466, Ack: 837, Len: 0 No. Time Source Destination Protocol Info 380 1.500287 141.3.161.43 193.99.144.85 TCP 55344 > http [FIN, ACK] Seq=837 Ack=1467 Win=8256 Len=0 TSV=626973 TSER=776121091 Frame 380 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55344 (55344), Dst Port: http (80), Seq: 837, Ack: 1467, Len: 0 No. Time Source Destination Protocol Info 381 1.505883 193.99.144.85 141.3.161.43 TCP http > 55344 [ACK] Seq=1467 Ack=838 Win=4952 Len=0 TSV=776121105 TSER=626973 Frame 381 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55344 (55344), Seq: 1467, Ack: 838, Len: 0 No. Time Source Destination Protocol Info 382 1.518478 141.3.161.43 193.99.144.85 TCP 55345 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626978 TSER=0 WS=6 Frame 382 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55345 (55345), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 383 1.524346 193.99.144.85 141.3.161.43 TCP http > 55345 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776121124 TSER=626978 Frame 383 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55345 (55345), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 384 1.524392 141.3.161.43 193.99.144.85 TCP 55345 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626979 TSER=776121124 Frame 384 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55345 (55345), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 385 1.524833 141.3.161.43 193.99.144.85 HTTP GET /icons/ho/background_onlinemarkt.gif HTTP/1.1 Frame 385 (864 bytes on wire, 864 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55345 (55345), Dst Port: http (80), Seq: 1, Ack: 1, Len: 796 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 386 1.535445 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (GIF89a) Frame 386 (468 bytes on wire, 468 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55345 (55345), Seq: 1, Ack: 797, Len: 400 Hypertext Transfer Protocol Compuserve GIF, Version: GIF89a No. Time Source Destination Protocol Info 387 1.535494 141.3.161.43 193.99.144.85 TCP 55345 > http [ACK] Seq=797 Ack=401 Win=6592 Len=0 TSV=626982 TSER=776121135 Frame 387 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55345 (55345), Dst Port: http (80), Seq: 797, Ack: 401, Len: 0 No. Time Source Destination Protocol Info 388 1.535933 141.3.161.43 193.99.144.85 TCP 55345 > http [FIN, ACK] Seq=797 Ack=401 Win=6592 Len=0 TSV=626982 TSER=776121135 Frame 388 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55345 (55345), Dst Port: http (80), Seq: 797, Ack: 401, Len: 0 No. Time Source Destination Protocol Info 389 1.538702 193.99.144.85 141.3.161.43 TCP http > 55345 [FIN, ACK] Seq=401 Ack=797 Win=4912 Len=0 TSV=776121136 TSER=626979 Frame 389 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55345 (55345), Seq: 401, Ack: 797, Len: 0 No. Time Source Destination Protocol Info 390 1.538723 141.3.161.43 193.99.144.85 TCP 55345 > http [ACK] Seq=798 Ack=402 Win=6592 Len=0 TSV=626983 TSER=776121136 Frame 390 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55345 (55345), Dst Port: http (80), Seq: 798, Ack: 402, Len: 0 No. Time Source Destination Protocol Info 391 1.540568 193.99.144.85 141.3.161.43 TCP http > 55345 [FIN, ACK] Seq=401 Ack=798 Win=4912 Len=0 TSV=776121140 TSER=626982 Frame 391 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55345 (55345), Seq: 401, Ack: 798, Len: 0 No. Time Source Destination Protocol Info 392 1.587802 141.3.161.43 193.99.144.85 TCP 55346 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=626995 TSER=0 WS=6 Frame 392 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55346 (55346), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 393 1.592909 193.99.144.85 141.3.161.43 TCP http > 55346 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776121193 TSER=626995 Frame 393 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55346 (55346), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 394 1.592956 141.3.161.43 193.99.144.85 TCP 55346 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=626996 TSER=776121193 Frame 394 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55346 (55346), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 395 1.593404 141.3.161.43 193.99.144.85 HTTP GET /ivw-bin/ivw/CP/newsticker/meldungen/internet/115857 HTTP/1.1 Frame 395 (925 bytes on wire, 925 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55346 (55346), Dst Port: http (80), Seq: 1, Ack: 1, Len: 857 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 396 1.606908 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (GIF89a) Frame 396 (1200 bytes on wire, 1200 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55346 (55346), Seq: 1, Ack: 858, Len: 1132 Hypertext Transfer Protocol Compuserve GIF, Version: GIF89a No. Time Source Destination Protocol Info 397 1.606958 141.3.161.43 193.99.144.85 TCP 55346 > http [ACK] Seq=858 Ack=1133 Win=8256 Len=0 TSV=627000 TSER=776121205 Frame 397 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55346 (55346), Dst Port: http (80), Seq: 858, Ack: 1133, Len: 0 No. Time Source Destination Protocol Info 398 1.607413 141.3.161.43 193.99.144.85 TCP 55346 > http [FIN, ACK] Seq=858 Ack=1133 Win=8256 Len=0 TSV=627000 TSER=776121205 Frame 398 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55346 (55346), Dst Port: http (80), Seq: 858, Ack: 1133, Len: 0 No. Time Source Destination Protocol Info 399 1.608876 193.99.144.85 141.3.161.43 TCP http > 55346 [FIN, ACK] Seq=1133 Ack=858 Win=4973 Len=0 TSV=776121206 TSER=626996 Frame 399 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55346 (55346), Seq: 1133, Ack: 858, Len: 0 No. Time Source Destination Protocol Info 400 1.608899 141.3.161.43 193.99.144.85 TCP 55346 > http [ACK] Seq=859 Ack=1134 Win=8256 Len=0 TSV=627000 TSER=776121206 Frame 400 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55346 (55346), Dst Port: http (80), Seq: 859, Ack: 1134, Len: 0 No. Time Source Destination Protocol Info 401 1.613085 193.99.144.85 141.3.161.43 TCP http > 55346 [FIN, ACK] Seq=1133 Ack=859 Win=4973 Len=0 TSV=776121212 TSER=627000 Frame 401 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55346 (55346), Seq: 1133, Ack: 859, Len: 0 No. Time Source Destination Protocol Info 402 2.666762 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #403] Frame 402 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 2b ae ba eb 0c 37 de 02 c7 80 10 12 f6 .P.+....7....... 0010 e3 7a 00 00 01 01 08 0a 2e 42 af 99 00 09 91 13 .z.......B...... 0020 a6 b3 2b a1 cc 3f 16 e4 a3 26 27 88 a8 04 bc 33 ..+..?...&'....3 0030 70 1e ff d3 7f 01 00 90 2f 30 3c 53 52 84 eb 02 p......./0I...........3.g 00b0 d5 1d a6 fb ff 30 fd 6f 79 99 36 10 52 3c 25 1e .....0.oy.6.R<%. 00c0 99 b9 e7 29 f7 08 08 30 6f 9c f1 ce ce 4e 9c 3e ...)...0o....N.> 00d0 7d fa 35 3b 65 ed 4f a5 34 c2 22 46 b4 bb a2 5c }.5;e.O.4."F...\ 00e0 0d 94 a8 6d 20 0b 0c 53 5b 5a b9 3d 5d 5a 30 16 ...m ..S[Z.=]Z0. 00f0 b7 e5 05 91 2f fa 30 48 12 04 c5 13 23 b9 b2 a6 ..../.0H....#... 0100 fa 54 01 27 7b 5b 76 66 48 82 47 47 84 e7 7b fb .T.'{[vfH.GG..{. 0110 f0 c7 f3 e7 bd 1a b2 00 0b ff de 2e 20 19 59 24 ............ .Y$ 0120 ec ae 08 71 3a c4 10 27 60 d3 85 f3 58 7d f6 1c ...q:..'`...X}.. 0130 76 96 97 2b 5e 11 c9 f1 2a f0 43 24 66 2b 75 37 v..+^...*.C$f+u7 0140 a4 02 92 25 30 4c 6b 6e f3 44 00 cb 96 2d c3 7d ...%0Lkn.D...-.} 0150 f7 dd c7 ae ba ea 2a e3 76 ad 98 10 51 09 63 ec ......*.v...Q.c. 0160 a4 07 fd 49 a0 ab b3 b3 f1 fb 92 a2 94 81 ca 61 ...I...........a 0170 0e b5 6d 40 60 8a 3d 56 e2 4d 4a 9f 4c 43 27 6a ..m@`.=V.MJ.LC'j 0180 19 9e 90 9d d8 10 b5 73 b3 5a 5d c7 b7 b8 4d 99 .......s.Z]...M. 0190 dd 34 55 da 1d 1d 1d 8c 31 e6 69 6f 54 3a 1d 8d .4U.....1.ioT:.. 01a0 cb 7d d3 ad 17 18 93 cf 19 64 61 a8 16 43 9e 21 .}.......da..C.! 01b0 89 c2 4b 16 24 4f d8 2a 4f de 1a c6 e8 5e e2 2c ..K.$O.*O....^., 01c0 93 f9 6d 09 95 79 16 da b9 ed b6 db dc ab 2c 22 ..m..y........," 01d0 ba 8a 31 76 d8 9b ae a4 06 0f 77 55 86 54 71 73 ..1v......wU.Tqs 01e0 85 09 98 ab 1f 33 1b c1 7b e2 ed dc e3 b5 2d 80 .....3..{.....-. 01f0 30 ab b5 c3 13 b5 25 08 02 24 49 32 94 bb 69 e8 0.....%..$I2..i. 0200 c4 29 18 79 02 c3 6d 79 a3 30 3f 2f 07 c5 3e 1f .).y..my.0?/..>. 0210 82 4c 40 8e 4f 7e da e3 04 f8 18 83 00 a0 ba a9 .L@.O~.......... 0220 05 00 f0 d9 c5 8b 98 11 cc e1 ae b4 9d 84 df 8d ................ 0230 ec 88 d1 5a c3 ce 3a 24 a1 6d 62 c8 13 44 f4 4b ...Z..:$.mb..D.K 0240 71 a4 4b 92 24 e1 89 27 9e a0 da da 5a c6 1b 9b q.K.$..'....Z... 0250 e9 0c b1 e3 59 95 fb fd 78 7b 62 29 06 49 82 a8 ....Y...x{b).I.. 0260 19 00 52 c2 dd d0 56 d0 aa c0 b2 18 43 4d cb b0 ..R...V.....CM.. 0270 91 dc 12 9a 88 7c 41 50 b6 6a 29 d5 a6 78 10 7e .....|AP.j)..x.~ 0280 77 43 c9 e0 09 44 98 e1 3e 2c cf 6d 82 77 d1 d0 wC...D..>,.m.w.. 0290 86 2c 5c b8 50 b2 1a d8 87 15 65 58 3f b1 04 11 .,\.P.....eX?... 02a0 92 64 7f 4e f1 82 b4 2d 56 8e 90 b2 84 e1 b8 15 .d.N...-V....... 02b0 00 dc d1 fe 0d fe e9 d4 19 f8 04 68 f6 44 15 88 ...........h.D.. 02c0 99 11 36 dc de 75 01 86 51 1c 4c e5 45 20 48 69 ..6..u..Q.L.E Hi 02d0 45 e5 53 e9 e8 d1 a3 5b b9 7d 31 a9 13 83 49 00 E.S....[.}1...I. 02e0 f1 d3 ca 72 c4 68 38 03 c4 4c 78 ea 20 89 08 e7 ...r.h8..Lx. ... 02f0 24 09 f3 db bf 49 b9 2f 00 18 27 8a d8 18 2a 85 $....I./..'...*. 0300 a4 7a 57 aa 67 35 c2 33 04 8c 81 51 5a 1b 57 5c .zW.g5.3...QZ.W\ 0310 ea e8 e8 f0 97 95 95 25 84 a2 b8 33 84 88 44 63 .......%...3..Dc 0320 30 18 36 85 4a 11 27 c5 ff d1 b9 a2 96 03 03 50 0.6.J.'........P 0330 66 10 da 96 00 74 c7 25 cc 6a 69 c7 ec d6 76 fc f....t.%.ji...v. 0340 7b cf 39 04 04 65 cf 48 f5 b7 f4 a1 29 8b 19 62 {.9..e.H....)..b 0350 f4 d4 5b dd e3 f5 19 1e 00 cc a3 64 30 00 03 40 ..[........d0..@ 0360 e6 cf 9f 6f 12 40 24 e4 0b a2 ac 98 58 e2 1e 84 ...o.@$.....X... 0370 de 6d 4c 56 39 ea f5 41 49 de bb 36 e2 ad d2 96 .mLV9..AI..6.... 0380 fe 7e 4c 6d 6e c7 ac 96 36 ac ee ed 85 c0 98 16 .~Lmn...6....... 0390 1f 64 d0 f1 e6 80 a4 9f 31 c9 e7 89 a0 25 d6 53 .d......1....%.S 03a0 fb a9 ef b3 de 1d f7 9a b6 6f df be 31 f9 5a 4a .........o..1.ZJ 03b0 2b 6d 6d 6d ac bc bc 3c 0e 13 75 b6 a7 a2 3c 01 +mmm...<..u...<. 03c0 0c ab 0d a3 84 df 04 fc 77 7f 3f fe e3 6c af ab ........w.?..l.. 03d0 41 5c 1b 08 e0 99 a2 71 08 08 a2 bc 81 4d 90 73 A\.....q.....M.s 03e0 ae 4c fa c1 eb 8f d5 3d de 8c ff b1 c7 2a cb e7 .L.....=.....*.. 03f0 f3 d1 81 03 07 c4 6b ae b9 46 6b cc fa 51 e5 90 ......k..Fk..Q.. 0400 3e b2 6a e4 b2 32 b3 fb 00 be 0c 0f 62 f9 e9 d3 >.j..2......b... 0410 69 0d 28 8b 01 ab 4b 4a 70 55 76 16 e2 6a ea 90 i.(...KJpUv..j.. 0420 85 6b cb cb 4e d1 9f 1b 5d 03 79 be 62 07 00 cc .k..N...].y.b... 0430 9f 3f df f7 de 7b ef 69 fe 74 8a ca 5a b5 6a d5 .?...{.i.t..Z.j. 0440 93 66 0c d4 fd 69 75 ff 59 1d a4 fe 50 07 c5 bb .f...iu.Y...P... 0450 af d2 d4 60 10 9f 55 96 23 27 8d a4 82 08 01 7f ...`..U.#'...... 0460 7f f2 14 a6 b7 b4 61 65 f7 59 c5 e3 96 57 d8 c9 ......ae.Y...W.. 0470 ed f2 9c 00 de 79 b2 da d3 8e e1 d0 01 0e 5c 56 .....y........\V 0480 81 bd 15 15 78 68 ec d8 b4 01 d9 bc 79 f3 ad c9 ....xh......y... 0490 f2 4d a0 9c 9c 1c 0a 87 c3 96 8c 76 55 96 2b ae .M.........vU.+. 04a0 ae fd 19 a2 09 00 c3 ae 2f 23 c2 20 24 dc d2 fa ......../#. $... 04b0 8d 65 9b 76 68 4f c5 44 c8 6b 6b a4 35 43 12 67 .e.vhO.D.kk.5C.g 04c0 07 61 94 28 e0 ba 26 39 0a bd bb a2 1c 2a e8 12 .a.(..&9.....*.. 04d0 11 76 86 c3 f8 4d b7 bb 5d d4 f5 eb d7 e3 ee bb .v...M..]....... 04e0 ef d6 1a 4b 99 21 e1 70 38 62 87 d1 63 a7 ba 0d ...K.!.p8b..c... 04f0 75 b2 91 9e 1e 36 90 d0 d6 29 60 0c 01 08 d8 55 u....6...)`....U 0500 11 c2 0b c5 c5 69 03 72 32 2e c9 6e aa c9 1e bb .....i.r2..n.... 0510 51 fc 4a 7f 2d c1 86 30 60 43 df 00 00 e0 85 e2 Q.J.-..0`C...... 0520 42 30 0c db 43 81 31 dc 94 93 8b 3d 15 e5 58 30 B0..C.1....=..X0 0530 26 cf f1 5c 5f b6 6c 59 &..\_.lY No. Time Source Destination Protocol Info 403 2.669050 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 403 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55339 (55339), Seq: 1449, Ack: 739, Len: 1360 No. Time Source Destination Protocol Info 404 2.669112 141.3.161.43 193.99.144.85 TCP 55339 > http [ACK] Seq=739 Ack=2809 Win=10944 Len=0 TSV=627265 TSER=776122265 Frame 404 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55339 (55339), Dst Port: http (80), Seq: 739, Ack: 2809, Len: 0 No. Time Source Destination Protocol Info 405 2.670040 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (GIF89a) Frame 405 (1367 bytes on wire, 1367 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55342 (55342), Seq: 1, Ack: 827, Len: 1299 Hypertext Transfer Protocol Compuserve GIF, Version: GIF89a No. Time Source Destination Protocol Info 406 2.670082 141.3.161.43 193.99.144.85 TCP 55342 > http [ACK] Seq=827 Ack=1301 Win=8256 Len=0 TSV=627265 TSER=776122266 Frame 406 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55342 (55342), Dst Port: http (80), Seq: 827, Ack: 1301, Len: 0 No. Time Source Destination Protocol Info 407 2.670671 141.3.161.43 193.99.144.85 TCP 55342 > http [FIN, ACK] Seq=827 Ack=1301 Win=8256 Len=0 TSV=627266 TSER=776122266 Frame 407 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55342 (55342), Dst Port: http (80), Seq: 827, Ack: 1301, Len: 0 No. Time Source Destination Protocol Info 408 2.676536 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #409] Frame 408 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 2b ae ba f0 5c 37 de 02 c7 80 10 12 f6 .P.+...\7....... 0010 d8 bf 00 00 01 01 08 0a 2e 42 af a1 00 09 92 41 .........B.....A 0020 f7 f4 60 b4 20 e0 ba 40 10 a4 db 9b d7 82 90 8c ..`. ..@........ 0030 b0 24 bf 00 7b 2b 43 28 f2 89 b6 81 e9 e9 e9 c1 .$..{+C(........ 0040 be 7d fb 34 99 f3 ea 39 72 ba 9f 2b 2e c2 9f 07 .}.4...9r..+.... 0050 03 4a 4d e3 05 9c 55 00 2f a1 0e 00 02 43 43 24 .JM...U./....CC$ 0060 82 bf 3d d9 05 27 34 56 14 b1 39 34 31 ed c5 61 ..=..'4V..941..a 0070 82 ca 05 d0 19 8b 61 82 df a7 ec c9 a4 8e 2f e1 ......a......./. 0080 55 09 79 2b 05 73 5a db 39 c1 20 7e 73 29 3f 74 U.y+.sZ.9. ~s)?t 0090 e4 78 24 af 97 4e 40 45 96 4f d9 8e 45 8a b1 e4 .x$..N@E.O..E... 00a0 fd d6 1a 33 00 11 20 10 0d 27 5e cf 6d ef 40 98 ...3.. ..'^.m.@. 00b0 88 13 33 4e a5 3d e5 e5 ea 82 25 bd 1d 43 4d 20 ..3N.=....%..CM 00c0 6a ca 0a 34 75 6b ba 07 c3 64 3b 99 0d 60 6a 8b j..4uk...d;..`j. 00d0 f5 e6 16 11 f9 d5 e4 91 04 95 f5 eb 5f ff 7a 87 ............_.z. 00e0 53 30 00 e0 9e ce 93 68 1c 8a a5 a4 e3 b8 7d 4a S0.....h......}J 00f0 87 53 73 08 02 63 60 02 f0 a7 f2 10 f6 56 86 50 .Ss..c`......V.P 0100 5b 68 ee d9 30 08 f8 b7 5e d9 e3 52 05 a9 f7 fc [h..0...^..R.... 0110 cc da e4 95 51 53 94 54 ef 0d 9c 72 29 fb f8 4a ....QS.T...r)..J 0120 d1 21 00 4b c7 16 58 8e 57 9f c9 93 00 c8 eb af .!.K..X.W....... 0130 bf 5e e1 4a 80 00 7e 75 b2 0b 1f 5f b8 90 32 9d .^.J..~u..._..2. 0140 dd 50 8a 91 85 ba 77 ce 30 27 37 0f bb 2b 42 f8 .P....w.0'7..+B. 0150 ec b2 72 2c 29 28 d0 95 51 fb 22 61 6b 7f 18 ed ..r,)(..Q."ak... 0160 d1 88 fc 6a 02 4b 34 e8 56 6d f2 0c bc 51 24 22 ...j.K4.Vm...Q$" 0170 b9 4c a2 4c e4 87 ea 67 a3 47 59 66 92 1c 3b 76 .L.L...g.GYf..;v 0180 ec 03 2e 20 c1 60 f0 cf 5c 49 50 e9 42 6d 77 0f ... .`..\IP.Bmw. 0190 56 9f ed d5 5e b8 71 cd c9 24 e9 4d 5e 0f 30 44 V...^.q..$.M^.0D 01a0 25 e0 a7 63 46 61 77 45 39 f6 56 96 e3 8f a1 32 %..cFawE9.V....2 01b0 cc ca 09 2a a5 24 ec bf 78 11 aa 5e 77 32 53 79 ...*.$..x..^w2Sy 01c0 6d f3 ea 93 2d 4d 40 88 c2 3a fb fa e3 8f 3f d6 m...-M@..:....?. 01d0 7e 27 6c 50 9d 39 73 c6 b5 10 55 7a b7 7f 00 1f ~'lP.9s...Uz.... 01e0 85 2f 62 53 59 a9 0c 8a 92 2c e0 05 0d 0f 3c d1 ./bSY....,....<. 01f0 1e 10 18 c6 0b 02 9e 2c 1a 0f 7d 5a 30 31 24 ec .......,..}Z01$. 0200 b2 38 4a 03 32 b8 6f 94 a7 6f 68 9b 6c 0c 7d 68 .8J.2.o..oh.l.}h 0210 68 e8 66 f5 77 c2 0c e9 ee ee f6 44 70 bd f1 38 h.f.w......Dp..8 0220 66 b7 b6 43 84 1c 6b 72 f2 b2 81 d1 ba 80 01 29 f..C..kr.......) 0230 6a 43 bd 07 c8 f1 2c 35 74 a2 45 87 81 84 6c 46 jC....,5t.E...lF 0240 2f 54 96 3a 14 3b 6b 99 e1 4e 98 53 43 43 83 f6 /T.:.;k..N.SCC.. 0250 3b ed f7 43 cc 68 66 4b 1b 7c 8a da 90 c0 9f e2 ;..C.hfK.|...... 0260 c9 83 49 56 11 c3 a1 0b c0 68 ad a0 e7 95 12 be ..IV.....h...... 0270 01 b9 36 ea 46 6b 94 e4 f2 c9 7d 4e f0 28 6d cc ..6.Fk....}N.(m. 0280 10 fd f8 33 0a 08 01 98 d6 da 8a 7f 3d d3 03 a6 ...3........=... 0290 ce 14 06 53 00 cc 3a 9b 7c dd c8 65 76 e3 4c 58 ...S..:.|..ev.LX 02a0 45 1c 78 b3 53 5f c6 c8 95 cf 76 28 e1 84 e2 85 E.x.S_....v(.... 02b0 85 85 8e 07 62 87 76 5c 08 e3 c7 ad ed c8 11 04 ....b.v\........ 02c0 6e 86 89 19 39 05 cb 0a 60 37 ed e8 f9 da 49 53 n...9...`7....IS 02d0 d5 f7 eb f3 8b d6 af 5d 4f 9e 3c 59 fb 9d 00 c8 .......]O....C.k&... 0440 40 16 e2 92 1a 26 41 0a 8f 8c 27 ca 99 95 53 82 @....&A...'...S. 0450 33 22 04 dc f9 4d 07 4e c5 9c e5 ff fa fd 7e 9c 3"...M.N......~. 0460 3e 7d 5a 28 28 28 20 80 33 43 82 c1 a0 67 af ad >}Z((( .3C...g.. 0470 75 77 f3 b7 79 f5 c0 ec d8 b1 03 82 20 77 a3 b9 uw..y....... w.. 0480 b9 19 bd bd 89 e9 41 7f 77 b2 0b d3 9b db f0 cb ......A.w....... 0490 ce 93 da 8b f1 a4 c4 44 78 6e b3 17 60 58 92 5e .......Dxn..`X.^ 04a0 0d 33 c2 d1 48 14 35 ad ad 8e c1 00 80 c7 1f 7f .3..H.5......... 04b0 1c 2a 18 00 67 86 ac 5b b7 8e 16 2d 5a e4 59 df .*..g..[...-Z.Y. 04c0 8d be f4 60 66 80 ad 56 db 35 c1 00 9e 2b 2e 52 ...`f..V.5...+.R 04d0 3e ee 4b da 16 3d 53 02 99 5e 40 c2 7d df 04 ba >.K..=S..^@.}... 04e0 19 0a 19 97 99 2d e9 e5 6a 11 d1 5f 31 c6 de d3 .....-..j.._1... 04f0 b7 c1 2d e7 c1 98 64 e1 d5 d4 e0 d3 4f 3f 55 1b ..-...d.....O?U. 0500 d7 06 ab eb 90 a1 40 ec b8 98 65 7e 1f 7e 57 58 ......@...e~.~WX 0510 88 c9 d9 7e 0c 4a b2 49 75 f3 c1 39 4b 2f 0b f2 ...~.J.Iu..9K/.. 0520 6c 60 24 7f 00 2d 8d af 06 a5 34 6d 78 02 00 bb l`$..-....4mx... 0530 76 ed 12 67 cf 9e 1d 81 v..g.... No. Time Source Destination Protocol Info 409 2.678882 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 409 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55339 (55339), Seq: 2809, Ack: 739, Len: 1360 No. Time Source Destination Protocol Info 410 2.678930 141.3.161.43 193.99.144.85 TCP 55339 > http [ACK] Seq=739 Ack=4169 Win=13696 Len=0 TSV=627268 TSER=776122273 Frame 410 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55339 (55339), Dst Port: http (80), Seq: 739, Ack: 4169, Len: 0 No. Time Source Destination Protocol Info 411 2.679993 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #412] Frame 411 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 2b ae ba f5 ac 37 de 02 c7 80 10 12 f6 .P.+....7....... 0010 64 61 00 00 01 01 08 0a 2e 42 af a1 00 09 92 41 da.......B.....A 0020 f0 8e a2 dc a6 ba 5b a0 7c 54 00 f2 6b 08 12 80 ......[.|T..k... 0030 2c c6 b0 ff e2 10 16 9f 3a e5 15 10 00 80 d5 ab ,.......:....... 0040 57 b3 25 4b 96 18 03 d2 db db 8b eb af bf 9e 9a W.%K............ 0050 9a 9a 00 00 91 48 04 3e df f0 b6 89 99 31 05 e4 .....H.>.....1.. 0060 6f dc 5e 71 c5 15 29 0d 27 27 a6 d9 05 04 90 df o.^q..).''...... 0070 3a 72 66 1b d4 34 89 e1 89 52 28 8a 98 91 13 c4 :rf..4...R(..... 0080 8c 9c 20 6e 08 04 e1 67 04 51 60 f0 43 40 5c 51 .. n...g.Q`.C@\Q 0090 73 22 e4 17 8b a2 20 9c 8b 4b d8 da 3f 80 cd 03 s".... ..K..?... 00a0 fd e8 8a c5 21 20 cd cf fc 70 68 fd fa f5 98 3b ....! ...ph....; 00b0 77 2e 1b 37 6e 9c 79 c1 78 3c fe 38 d4 9d 64 22 w..7n.y.x<.8..d" 00c0 92 24 49 3b f4 e7 ea 6f 95 d4 df 8d 8d 8d a4 d6 .$I;...o........ 00d0 d7 1f c9 75 93 79 f3 0e 22 a2 33 67 ce 70 f9 79 ...u.y..".3g.p.y 00e0 71 30 dd 21 64 a8 0d 93 c3 3e a9 7f 89 20 59 70 q0.!d....>... Yp 00f0 c9 c2 d7 5f d3 53 7b 7b 3b b7 13 6b d7 ae b5 04 ..._.S{{;..k.... 0100 84 77 bd b3 b3 f3 52 0b 2b d3 47 fc e0 c1 83 f6 .w....R.+.G..... 0110 3f 0b 58 5d 5d 4d cd cd cd dc 19 62 05 88 be 2c ?.X]]M.....b..., 0120 af 33 66 80 18 3d 00 ea b5 83 07 0f d2 84 09 13 .3f..=.......... 0130 52 78 86 42 21 5a b0 60 01 bd f5 d6 5b 74 e0 c0 Rx.B!Z.`....[t.. 0140 01 3a 7e fc 38 1d 3f 7e 9c ea ea ea e8 ae bb ee .:~.8.?~........ 0150 d2 ca dd 73 cf 3d b4 6b d7 2e da bf 7f 3f bd f8 ...s.=.k.....?.. 0160 e2 8b 74 f5 d5 57 0f cf 16 c6 b4 2f 6f 2f 5c b8 ..t..W...../o/\. 0170 30 a3 80 6c db b6 cd d9 0c 21 a2 2b 93 85 cf 23 0..l.....!.+...# 0180 b3 7b ea fd 87 1e 7a 88 ab b6 78 40 98 01 62 47 .{....z...x@..bG 0190 cd 99 95 8f c7 e3 96 f7 e2 f1 b8 76 ed 5b a3 ae ...........v.[.. 01a0 00 a0 af af 4f 28 2c 2c b4 d4 f1 66 6a 26 f9 50 ....O(,,...fj&.P 01b0 07 6b 57 b8 76 f9 da b5 4b 76 ee e9 29 53 60 d4 .kW.v...Kv..)S`. 01c0 d4 d4 d0 91 23 47 b8 72 37 f5 29 bb ba ba 6a 8b ....#G.r7.)...j. 01d0 8b 8b 9f 20 93 0c 71 22 eb ec 77 b5 2e d9 f0 b2 ... ..q"..w..... 01e0 cc a2 ac 9c 59 9c d1 e0 a2 73 ef ce 36 19 0e ca ....Y....s..6... 01f0 74 c7 b7 a4 a4 a4 76 ce 9c 39 43 4e 32 dc 79 f7 t.....v..9CN2.y. 0200 ec 66 7d a4 b3 97 61 7b 9f c2 a4 2f fa 6b db b7 .f}...a{.../.k.. 0210 6f cf 08 18 a1 50 08 9d 9d 9d c6 fd b3 62 d0 d0 o....P.......b.. 0220 d0 f0 da e4 c9 93 17 19 3d e9 bc 27 51 3f 40 a7 ........=..'Q?@. 0230 33 c4 a8 6c f2 ac e3 05 14 79 01 41 b3 59 61 d4 3..l.....y.A.Ya. 0240 26 00 8c 1b 37 2e 25 ae e6 05 11 91 a0 38 0e 5c &...7.%......8.\ 0250 b2 cc 89 c8 ce ce fe 55 49 49 49 c2 b7 03 9d cc .......UIII..... 0260 8e 4c 90 d9 7b 82 44 84 92 92 12 08 82 90 32 1b .L..{.D.......2. 0270 ee bf ff 7e 5b bc 89 28 23 60 4c 9b 36 0d 66 60 ...~[..(#`L.6.f` 0280 d8 26 22 9a 66 e6 1d 99 19 4c de 7d 27 46 dd 8e .&".f....L.}'F.. 0290 01 d7 ff 1b 0c 06 53 8c e8 d6 ad 5b b5 df 81 40 ......S....[...@ 02a0 c0 16 6f e6 f1 1f 9e f1 04 08 3d 55 55 55 51 2c ..o.......=UUUQ, 02b0 16 73 e5 f6 da 71 5d 9d d4 35 02 43 92 24 9a 3b .s...q]..5.C.$.; 02c0 77 ae a9 60 16 2d 5a 64 c9 37 1a 8d 7a ee 59 bd w..`.-Zd.7..z.Y. 02d0 f2 ca 2b 5d 9e 6b 8f d7 5e 7b 4d e2 3d e1 66 82 ..+].k..^{M.=.f. 02e0 b4 2a 6f 04 8a 19 50 66 80 a8 ff aa 2e b6 fa 74 .*o...Pf.......t 02f0 32 c6 e8 da 6b af 35 5d 80 aa ff 6e d9 b2 c5 73 2...k.5]...n...s 0300 40 de 7c f3 4d 5b df 48 76 04 59 73 73 f3 5b 95 @.|.M[.Hv.Yss.[. 0310 95 95 bf 20 1b 46 d2 e8 be 99 ab 9c 5c 8f 77 9d ... .F......\.w. 0320 c7 db ce 0b 39 44 a4 6d 84 f1 da d2 f7 29 3f 3f ....9D.m.....)?? 0330 1f 7d 7d 7d 4e 44 63 4a 44 34 9e 31 66 eb ad 50 .}}}NDcJD4.1f..P 0340 47 5f b6 be ec b2 cb fe 7a f6 ec d9 bf f8 e8 a3 G_......z....... 0350 8f 5c fb e8 76 eb b8 e1 cd 23 2b e0 93 af d5 d5 .\..v....#+..... 0360 d5 19 82 b1 7d fb 76 cc 99 33 07 fd fd fd 08 87 ....}.v..3...... 0370 c3 a8 af af 47 63 63 23 7a 7a 7a d0 d9 d9 89 c3 ....Gcc#zzz..... 0380 87 0f 43 fd a6 71 6f 6f 2f 7c 3e 1f 9e 7e fa e9 ..C..qoo/|>..~.. 0390 3d 76 c1 00 5c be 20 3e 69 d2 a4 68 63 63 a3 cf =v..\. >i..hcc.. 03a0 c8 ad d5 0b 83 5c b8 bd 46 3c ac 78 a7 bb a7 1e .....\..F<.x.... 03b0 89 44 10 08 04 0c ef eb f9 1a cd 4c fd d8 aa aa .D.........L.... 03c0 aa 70 f8 f0 61 31 37 37 d7 76 e4 de 55 b2 75 53 .p..a177.v..U.uS 03d0 53 93 7f c3 86 0d 09 c2 b9 14 e4 74 f1 e7 94 b7 S..........t.... 03e0 19 18 2a 51 52 b6 09 ef 61 20 22 4c 9e 3c 99 9a ..*QR...a "L.<.. 03f0 9a 9a 98 13 30 d2 22 22 fa 59 6f 6f 2f d7 63 b2 ....0."".Yoo/.c. 0400 13 3f e2 19 66 37 ae af 1d d7 db ce 71 cb 2d b7 .?..f7......q.-. 0410 18 1a e4 ea ea 6a 47 bc 9f 7a ea a9 8c c4 5b 2c .....jG..z....[, 0420 e9 d0 a1 43 ff c0 f3 96 9c 00 62 55 ff 52 00 12 ...C......bU.R.. 0430 8b c5 b8 40 2c 5d ba d4 11 4f 22 a2 2f bf fc 52 ...@,]...O"./..R 0440 02 80 fd fb f7 8f 08 26 f8 fc f3 cf 87 ec 00 62 .......&.......b 0450 e4 ca 7a bd 30 74 c3 8b 07 86 5d 5e fa b6 eb ea ..z.0t....]^.... 0460 ea 88 88 6e 4e 4b a0 5e d0 17 5f 7c 11 4b 16 b2 ...nNK.^.._|.K.. 0470 91 9f 6f 05 88 db 75 88 11 50 56 aa 31 f9 ef f2 ..o...u..PV.1... 0480 de 70 c3 0d dc 7d 13 a3 f1 a9 e7 87 0e 1d 22 22 .p...}........"" 0490 9a 32 d2 58 68 54 57 57 f7 db 81 81 01 ae 80 ac .2.XhTWW........ 04a0 f6 1d ec 00 93 09 95 75 ef bd f7 26 80 b1 72 e5 .......u...&..r. 04b0 4a 57 bc d6 ac 59 43 00 70 3a cd cf 4d 79 4a db JW...YC.p:..MyJ. 04c0 b6 6d 03 11 fd fc ed b7 df e6 0a da 89 ca e2 95 .m.............. 04d0 35 53 53 66 e5 8d 00 db b0 61 43 02 18 ef bf ff 5SSf.....aC..... 04e0 be ab 99 79 e3 8d 37 c6 01 e0 c3 0f 3f f4 44 8e ...y..7.....?.D. 04f0 19 f1 57 27 4d 9a 14 3f 71 e2 84 40 26 a1 78 95 ..W'M..?q..@&.x. 0500 c8 e6 1a 43 5f 8f 38 be 3f 91 f5 eb 08 fa 72 a2 ...C_.8.?.....r. 0510 28 6a 59 95 5d 5d 5d 28 2e 2e 36 7c 2d cd 88 72 (jY.]]](..6|-..r 0520 73 73 11 0e 87 3d 95 61 46 5e fa 6c 6a 6a 12 67 ss...=.aF^.ljj.g 0530 cd 9a 65 6b 63 ca 0e 19 ..ekc... No. Time Source Destination Protocol Info 412 2.688879 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 412 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55339 (55339), Seq: 4169, Ack: 739, Len: 1360 No. Time Source Destination Protocol Info 413 2.688920 141.3.161.43 193.99.144.85 TCP 55339 > http [ACK] Seq=739 Ack=5529 Win=16384 Len=0 TSV=627270 TSER=776122273 Frame 413 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55339 (55339), Dst Port: http (80), Seq: 739, Ack: 5529, Len: 0 No. Time Source Destination Protocol Info 414 2.689195 193.99.144.85 141.3.161.43 TCP http > 55342 [ACK] Seq=1301 Ack=828 Win=4942 Len=0 TSV=776122275 TSER=627266 Frame 414 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55342 (55342), Seq: 1301, Ack: 828, Len: 0 No. Time Source Destination Protocol Info 415 2.689610 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (PNG) Frame 415 (503 bytes on wire, 503 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55339 (55339), Seq: 5529, Ack: 739, Len: 435 [Reassembled TCP Segments (5963 bytes): #348(1360), #350(88), #403(1360), #409(1360), #412(1360), #415(435)] Hypertext Transfer Protocol Portable Network Graphics No. Time Source Destination Protocol Info 416 2.690148 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #418] Frame 416 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 2c e2 9a d2 5b 37 80 89 db 80 10 13 59 .P.,...[7......Y 0010 5b 08 00 00 01 01 08 0a 2e 42 af ac 00 09 91 18 [........B...... 0020 e5 9e 70 1c d9 ee 39 0d 4a d0 41 7a fd fe 41 6a ..p...9.J.Az..Aj 0030 79 10 c7 51 60 9f 19 1d 55 01 a2 b0 f7 12 42 49 y..Q`...U.....BI 0040 98 36 cb 1f 6f 76 e0 92 76 d3 15 d2 4c f2 e1 ce .6..ov..v...L... 0050 7c 66 3a 7b e1 92 ab be 32 c3 8e 62 2b ff 00 90 |f:{....2..b+... 0060 f9 05 8c cc 59 7c 47 20 c9 cd e3 93 86 1d 92 9b ....Y|G ........ 0070 91 bc b3 99 1b a8 88 57 01 0a 48 eb d4 33 1e 83 .......W..H..3.. 0080 fe bc 73 73 dd eb ef 37 cb 4d e9 31 a7 4c 19 52 ..ss...7.M.1.L.R 0090 13 3a 9e 78 33 48 4b 97 9a 4a 39 99 c8 fd 21 b0 .:.x3HK..J9...!. 00a0 76 fd 8e d1 b1 d7 af 46 f9 28 bd 63 4c 1b a2 01 v......F.(.cL... 00b0 2b 48 89 bd 3a 4a 0e ad 4d 26 33 49 b3 48 09 2c +H..:J..M&3I.H., 00c0 a6 3e e7 c1 1c 32 a0 c6 49 91 e1 f1 5f b9 52 d9 .>...2..I..._.R. 00d0 6b 56 92 ac 72 5c b5 79 2b f7 c6 f3 5c 8a 14 77 kV..r\.y+...\..w 00e0 55 47 7f b6 35 00 ef b6 fd 4e da dd f6 c5 c5 fe UG..5....N...... 00f0 c6 95 6e 6b 54 0b 52 ac 82 53 53 e1 5d 33 96 39 ..nkT.R..SS.]3.9 0100 71 f1 1c 80 12 e4 23 8f f7 c5 e6 c1 5a 8d 2b 5d q.....#.....Z.+] 0110 b6 8b 7a 54 b5 17 ad 57 fd db 87 79 09 91 f2 a8 ..zT...W...y.... 0120 97 85 70 38 93 20 67 37 d7 8b 3e 24 73 df 27 f3 ..p8. g7..>$s.'. 0130 01 17 2d c2 e5 38 47 8b c7 b9 67 31 c8 ef d1 8a ..-..8G...g1.... 0140 8e 46 d3 96 ee 8e b6 3e bc c8 b2 12 e7 f7 4a f1 .F.....>......J. 0150 f6 a2 f5 04 be c3 55 a2 f4 50 13 06 6f f1 1d 63 ......U..P..o..c 0160 97 5c 5c a9 18 63 1d b9 8b 23 5e a5 7a f5 61 0c .\\..c...#^.z.a. 0170 21 ab 12 43 0a b3 17 60 91 a8 55 dd 98 92 4e c3 !..C...`..U...N. 0180 d4 f5 3a a8 2d 33 1e 13 5a 27 fe a5 ff 00 1f bb ..:.-3..Z'...... 0190 da 76 df 4a 70 de a9 87 b1 1a 14 6c 62 26 5d 28 .v.Jp......lb&]( 01a0 62 22 bf 79 cf e3 5f 8a 7e 40 d1 a2 9c f7 00 b2 b".y.._.~@...... 01b0 67 70 a8 eb c7 39 6d 4d a3 c8 d1 f7 3a 95 49 08 gp...9mM....:.I. 01c0 22 48 cb 00 4c 72 02 a4 f5 d8 1e ba 2d 2a cd 4e "H..Lr......-*.N 01d0 72 e2 24 7d 90 37 49 c7 2c fc 81 f0 e7 c9 1e 30 r.$}.7I.,......0 01e0 e4 71 d8 44 93 9c 70 92 04 91 72 6a 11 08 85 72 .q.D..p...rj...r 01f0 5f b5 63 bf 5d a4 2d 19 f4 3d cb dc 87 7f dc 0f _.c.].-..=...... 0200 4d 42 fa b5 6a 94 8a d0 59 b1 ea 01 f7 4e 51 ab MB..j...Y....NQ. 0210 fb 7f 6d b2 d1 dc 45 6d da a6 94 4c 51 4a 92 ae ..m...Em...LQJ.. 0220 fc 35 90 0c 80 eb 81 e7 16 ab 82 e1 70 5e 39 e1 .5..........p^9. 0230 73 5e c8 c9 1c 79 19 69 c9 91 ce 46 f2 95 64 ad s^...y.i...F..d. 0240 54 17 8e 02 84 8d 8b b8 04 8d bf 4d 71 fe df ed T..........Mq... 0250 bb de e3 ee 9a 54 6e 28 ba d3 a6 d2 1a 94 80 4f .....Tn(.......O 0260 16 c7 3e 43 df 19 af fe 88 ef e3 bb d4 4d be d9 ..>C.........M.. 0270 b5 51 9e a2 47 95 b9 62 33 13 96 1e d8 e5 67 25 .Q..G..b3.....g% 0280 bb 8d b1 c9 f2 bc bf 93 d6 58 d3 35 3d 89 b1 f4 .........X.5=... 0290 92 15 9e f5 f9 64 72 cc 2a c2 fe aa 37 d8 ca e4 .....dr.*...7... 02a0 22 fe a4 f4 d7 e9 46 e1 b9 8b 6b 0f a0 b5 06 ad ".....F...k..... 02b0 44 50 18 2f 92 90 96 1e a3 64 bd 13 cc 79 01 8c DP./.....d...y.. 02c0 64 3e db d0 ab 6d 59 4d 3a 7a c8 52 14 64 3d a7 d>...mYM:z.R.d=. 02d0 a0 e9 8c 68 79 2c f4 39 bc 64 78 59 b1 11 f1 bc ...hy,.9.dxY.... 02e0 3d 7b 92 4e 70 11 59 6b 72 5f 52 c5 e3 7c a5 ce ={.Np.Ykr_R..|.. 02f0 d8 fd e6 89 d8 f6 c4 14 46 37 e8 bf 6e b8 85 62 ........F7..n..b 0300 f4 ea b4 f3 fd 3d 83 f1 ef 8d a3 59 35 3a a4 d4 .....=.....Y5:.. 0310 91 69 9c 84 94 1e 3a 47 f5 ce 1a d5 ef e2 f1 54 .i....:G.......T 0320 30 95 3c 47 c7 73 7c af 9f e5 aa af f5 2c ec 58 0..... 03c0 80 f8 9c 5c 4b c7 f8 e9 61 88 b1 93 2b 9c b8 e2 ...\K...a...+... 03d0 5c 85 f9 8f 53 25 89 55 50 6d fa 22 2a a0 fa 2e \...S%.UPm."*... 03e0 fd 75 4b 73 72 f7 0f ad f3 fc 80 e4 23 0b 75 77 .uKsr.......#.uw 03f0 52 e0 f8 8e 1c a1 a6 ea 49 27 f5 f5 d0 23 c6 44 R.......I'...#.D 0400 49 5a 08 e5 6f bc ed a7 10 80 9c 6c bf 8f 07 e3 IZ..o......l.... 0410 76 f4 db 53 94 1f 40 d3 0e f3 a1 46 ba 30 23 4a v..S..@....F.0#J 0420 14 44 57 7e 9f 5f a0 d2 86 30 9d f2 8f ff 00 3f .DW~._...0.....? 0430 e6 fc 3b 98 f8 db 92 cf fd 63 1b cb b1 56 f0 99 ..;......c...V.. 0440 ac 75 10 26 91 23 b7 13 44 db be e2 34 74 27 b9 .u.&.#..D...4t'. 0450 7b 98 6c 40 d6 5f 77 ef 7d a7 66 69 57 ac 0b 8f {.l@._w.}.fiW... 0460 91 7c 4d ec 20 60 3d e4 45 85 0d 92 ea e5 75 05 .|M. `=.E.....u. 0470 d2 a7 e6 6c 07 b4 71 3e e0 63 f3 2f 96 cc f9 cb ...l..q>.c./.... 0480 e1 af 35 ce 78 a7 9f 64 b2 f2 61 ac d7 b1 0f 0f ..5.x..d..a..... 0490 ca 5c b7 66 6c 55 ba 36 01 48 ed c1 10 95 a2 f7 .\.flU.6.H...... 04a0 15 48 3d 9b 9f 6d fd 41 e9 ad 9f 6a f7 2e df bc .H=..m.A...j.... 04b0 da ad 4a 4d e0 9f 40 e8 7f 63 cb 15 6f fa 86 2a ..JM..@..c..o..* 04c0 48 8a 2d ce c6 aa 31 91 99 f7 e9 3d 44 f3 1f 83 H.-...1....=D... 04d0 8c 43 4f cd 3c c5 a1 56 83 3b 84 c9 2e cd db 66 .CO.<..V.;.....f 04e0 fe 13 0f 76 7e d7 3d c5 4c f6 2a 3c a5 77 3d 01 ...v~.=.L.*<.w=. 04f0 6e 9e 83 a6 ba 0d 30 a1 48 a7 55 95 4e 24 07 60 n.....0.H.U.N$.` 0500 09 e6 40 20 4e 29 69 5c d7 b7 3e 19 a9 e9 87 e7 ..@ N)i\..>..... 0510 01 65 3e 4d 73 0e 35 5c 9a b9 fc 4d 4b a0 11 02 .e>Ms.5\...MK... 0520 62 f0 38 5a f3 16 3e 9b 3c 54 83 ef fc 0e bc 37 b.8Z..>. http [FIN, ACK] Seq=739 Ack=5965 Win=19136 Len=0 TSV=627271 TSER=776122283 Frame 417 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55339 (55339), Dst Port: http (80), Seq: 739, Ack: 5965, Len: 0 No. Time Source Destination Protocol Info 418 2.698696 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 418 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55340 (55340), Seq: 4169, Ack: 838, Len: 1360 No. Time Source Destination Protocol Info 419 2.698723 141.3.161.43 193.99.144.85 TCP 55340 > http [ACK] Seq=838 Ack=5529 Win=16384 Len=0 TSV=627273 TSER=776122284 Frame 419 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55340 (55340), Dst Port: http (80), Seq: 838, Ack: 5529, Len: 0 No. Time Source Destination Protocol Info 420 2.698933 193.99.144.85 141.3.161.43 TCP http > 55339 [ACK] Seq=5965 Ack=740 Win=4854 Len=0 TSV=776122295 TSER=627271 Frame 420 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55339 (55339), Seq: 5965, Ack: 740, Len: 0 No. Time Source Destination Protocol Info 421 2.704711 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (JPEG JFIF image) Frame 421 (1284 bytes on wire, 1284 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55340 (55340), Seq: 5529, Ack: 838, Len: 1216 [Reassembled TCP Segments (6744 bytes): #339(1360), #341(88), #363(1360), #366(1360), #418(1360), #421(1216)] Hypertext Transfer Protocol JPEG File Interchange Format No. Time Source Destination Protocol Info 422 2.704938 141.3.161.43 193.99.144.85 TCP 55340 > http [FIN, ACK] Seq=838 Ack=6746 Win=19136 Len=0 TSV=627274 TSER=776122303 Frame 422 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55340 (55340), Dst Port: http (80), Seq: 838, Ack: 6746, Len: 0 No. Time Source Destination Protocol Info 423 2.709693 193.99.144.85 141.3.161.43 TCP http > 55340 [ACK] Seq=6746 Ack=839 Win=4953 Len=0 TSV=776122309 TSER=627274 Frame 423 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55340 (55340), Seq: 6746, Ack: 839, Len: 0 No. Time Source Destination Protocol Info 424 4.454428 141.3.161.43 193.99.144.85 TCP 55343 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=627712 TSER=0 WS=6 Frame 424 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55343 (55343), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 425 4.463309 193.99.144.85 141.3.161.43 TCP http > 55343 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776124063 TSER=626962 Frame 425 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55343 (55343), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 426 4.463351 141.3.161.43 193.99.144.85 TCP 55343 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=627714 TSER=776124063 Frame 426 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55343 (55343), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 427 4.463600 141.3.161.43 193.99.144.85 HTTP GET /icons/ho/dpunktfoto.gif HTTP/1.1 Frame 427 (898 bytes on wire, 898 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55343 (55343), Dst Port: http (80), Seq: 1, Ack: 1, Len: 830 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 428 4.479672 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 200 OK (GIF89a) Frame 428 (1166 bytes on wire, 1166 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55343 (55343), Seq: 1, Ack: 831, Len: 1098 Hypertext Transfer Protocol Compuserve GIF, Version: GIF89a No. Time Source Destination Protocol Info 429 4.479723 141.3.161.43 193.99.144.85 TCP 55343 > http [ACK] Seq=831 Ack=1099 Win=8256 Len=0 TSV=627718 TSER=776124078 Frame 429 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55343 (55343), Dst Port: http (80), Seq: 831, Ack: 1099, Len: 0 No. Time Source Destination Protocol Info 430 4.480373 141.3.161.43 193.99.144.85 TCP 55343 > http [FIN, ACK] Seq=831 Ack=1099 Win=8256 Len=0 TSV=627718 TSER=776124078 Frame 430 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55343 (55343), Dst Port: http (80), Seq: 831, Ack: 1099, Len: 0 No. Time Source Destination Protocol Info 431 4.491030 193.99.144.85 141.3.161.43 TCP http > 55343 [FIN, ACK] Seq=1099 Ack=831 Win=4946 Len=0 TSV=776124079 TSER=627714 Frame 431 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55343 (55343), Seq: 1099, Ack: 831, Len: 0 No. Time Source Destination Protocol Info 432 4.491067 141.3.161.43 193.99.144.85 TCP 55343 > http [ACK] Seq=832 Ack=1100 Win=8256 Len=0 TSV=627721 TSER=776124079 Frame 432 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55343 (55343), Dst Port: http (80), Seq: 832, Ack: 1100, Len: 0 No. Time Source Destination Protocol Info 433 4.491495 193.99.144.85 141.3.161.43 TCP http > 55343 [FIN, ACK] Seq=1099 Ack=832 Win=4946 Len=0 TSV=776124091 TSER=627718 Frame 433 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55343 (55343), Seq: 1099, Ack: 832, Len: 0 No. Time Source Destination Protocol Info 434 4.509194 141.3.161.43 193.99.144.85 TCP 55347 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=627725 TSER=0 WS=6 Frame 434 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55347 (55347), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 435 4.514443 193.99.144.85 141.3.161.43 TCP http > 55347 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776124114 TSER=627725 Frame 435 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55347 (55347), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 436 4.514490 141.3.161.43 193.99.144.85 TCP 55347 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=627727 TSER=776124114 Frame 436 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55347 (55347), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 437 4.514785 141.3.161.43 193.99.144.85 HTTP GET /newsticker/meldung/115859 HTTP/1.1 Frame 437 (833 bytes on wire, 833 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55347 (55347), Dst Port: http (80), Seq: 1, Ack: 1, Len: 765 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 438 4.544779 193.99.144.85 141.3.161.43 HTTP HTTP/1.1 301 Moved Permanently Frame 438 (406 bytes on wire, 406 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55347 (55347), Seq: 1, Ack: 766, Len: 338 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 439 4.544845 141.3.161.43 193.99.144.85 TCP 55347 > http [ACK] Seq=766 Ack=339 Win=6592 Len=0 TSV=627734 TSER=776124143 Frame 439 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55347 (55347), Dst Port: http (80), Seq: 766, Ack: 339, Len: 0 No. Time Source Destination Protocol Info 440 4.545256 193.99.144.85 141.3.161.43 TCP http > 55347 [FIN, ACK] Seq=339 Ack=766 Win=4881 Len=0 TSV=776124143 TSER=627727 Frame 440 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55347 (55347), Seq: 339, Ack: 766, Len: 0 No. Time Source Destination Protocol Info 441 4.545819 141.3.161.43 193.99.144.85 TCP 55347 > http [FIN, ACK] Seq=766 Ack=340 Win=6592 Len=0 TSV=627734 TSER=776124143 Frame 441 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55347 (55347), Dst Port: http (80), Seq: 766, Ack: 340, Len: 0 No. Time Source Destination Protocol Info 442 4.551685 193.99.144.85 141.3.161.43 TCP http > 55347 [ACK] Seq=340 Ack=767 Win=4881 Len=0 TSV=776124150 TSER=627734 Frame 442 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55347 (55347), Seq: 340, Ack: 767, Len: 0 No. Time Source Destination Protocol Info 443 4.595813 141.3.161.43 193.99.144.85 TCP 55348 > http [SYN] Seq=0 Win=5488 Len=0 MSS=1372 TSV=627747 TSER=0 WS=6 Frame 443 (76 bytes on wire, 76 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55348 (55348), Dst Port: http (80), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 444 4.601094 193.99.144.85 141.3.161.43 TCP http > 55348 [SYN, ACK] Seq=0 Ack=1 Win=4116 Len=0 MSS=1460 WS=0 TSV=776124200 TSER=627747 Frame 444 (80 bytes on wire, 80 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55348 (55348), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 445 4.601132 141.3.161.43 193.99.144.85 TCP 55348 > http [ACK] Seq=1 Ack=1 Win=5504 Len=0 TSV=627748 TSER=776124200 Frame 445 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55348 (55348), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 446 4.601380 141.3.161.43 193.99.144.85 HTTP GET /newsticker/Future-Security-08-Sicherheit-Gesundheit-und-ein-bisschen-Information--/meldung/115859 HTTP/1.1 Frame 446 (905 bytes on wire, 905 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55348 (55348), Dst Port: http (80), Seq: 1, Ack: 1, Len: 837 Hypertext Transfer Protocol No. Time Source Destination Protocol Info 447 4.708239 193.99.144.85 141.3.161.43 TCP http > 55348 [ACK] Seq=1 Ack=838 Win=4953 Len=0 TSV=776124308 TSER=627748 Frame 447 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55348 (55348), Seq: 1, Ack: 838, Len: 0 No. Time Source Destination Protocol Info 448 4.780794 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #449] Frame 448 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 34 10 8f 1d 1b 3a ee 7a 74 80 10 13 59 .P.4....:.zt...Y 0010 05 59 00 00 01 01 08 0a 2e 42 b7 db 00 09 94 24 .Y.......B.....$ 0020 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d HTTP/1.1 200 OK. 0030 0a 44 61 74 65 3a 20 46 72 69 2c 20 31 32 20 53 .Date: Fri, 12 S 0040 65 70 20 32 30 30 38 20 31 31 3a 33 36 3a 30 36 ep 2008 11:36:06 0050 20 47 4d 54 0d 0a 53 65 72 76 65 72 3a 20 41 70 GMT..Server: Ap 0060 61 63 68 65 2f 31 2e 33 2e 33 34 0d 0a 56 61 72 ache/1.3.34..Var 0070 79 3a 20 41 63 63 65 70 74 2d 45 6e 63 6f 64 69 y: Accept-Encodi 0080 6e 67 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 ng..Connection: 0090 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 close..Content-T 00a0 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 ype: text/html; 00b0 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 charset=UTF-8..C 00c0 6f 6e 74 65 6e 74 2d 45 6e 63 6f 64 69 6e 67 3a ontent-Encoding: 00d0 20 67 7a 69 70 0d 0a 43 6f 6e 74 65 6e 74 2d 4c gzip..Content-L 00e0 65 6e 67 74 68 3a 20 31 33 36 32 34 0d 0a 0d 0a ength: 13624.... 00f0 1f 8b 08 00 00 00 00 00 00 03 d4 5b db 72 1b 39 ...........[.r.9 0100 92 7d b6 22 f6 1f 30 35 d1 be 8c 45 16 25 b9 65 .}."..05...E.%.e 0110 5b 17 ce c8 92 dc d2 d8 96 1d a2 da ee e9 89 0d [............... 0120 46 91 05 92 68 d6 ad 01 14 29 69 66 f6 4b 36 62 F...h....)if.K6b 0130 5f fc 0d fd d4 6f fa b1 3d 99 a8 2a 16 a9 b2 6c _....o..=..*...l 0140 f7 74 6c c4 2a 6c b1 88 02 32 13 79 cf 04 b4 b6 .tl.*l...2.y.... 0150 46 3f 7b 7f 38 7a 7b 78 f1 b7 77 c7 62 62 e3 48 F?{.8z{x..w.bb.H 0160 bc fb fe c5 eb d3 43 e1 b5 7c ff c3 d6 a1 ef 1f ......C..|...... 0170 5d 1c 89 1f 4e 2e de bc 16 1b ed 8e e8 59 ad 86 ]...N........Y.. 0180 d6 f7 8f cf 3c e1 4d ac cd 76 7c 7f 3e 9f b7 e7 ....<.M..v|.>... 0190 5b ed 54 8f fd 8b 73 ff 92 a0 6c d0 b2 e2 b1 65 [.T...s...l....e 01a0 78 4d 3b b4 a1 d7 5d db 63 24 97 71 94 98 fd 06 xM;...].c$.q.... 01b0 00 1b cf 9f 3f 77 eb 3c 9a b4 13 05 c9 78 df 0b ....?w.<.....x.. 01c0 a5 27 aa a7 2e 48 9e c8 20 c4 e7 9a c0 cf 5e a4 .'...H.. .....^. 01d0 92 a9 d0 32 02 bc 34 c6 4c 7b 95 c9 7d cf ca 4b ...2..4.L{..}..K 01e0 eb 3b 40 56 d9 48 ba b7 3b 13 a9 8c 14 69 82 45 .;@V.H..;....i.E 01f0 98 3a d1 72 b4 ef f9 9e f0 41 d9 02 4e 90 db 49 .:.r.....A..N..I 0200 aa ab 85 af d2 c4 06 53 5b 4e 8f 03 15 d9 74 67 .......S[N....tg 0210 ea 46 bf 79 d2 61 98 ed 50 fe d9 e4 83 9f e4 d0 .F.y.a..P....... 0220 ee f3 c0 37 9b 9d 12 cd 32 f4 61 9a 5d 69 35 9e ...7....2.a.]i5. 0230 d8 0a c1 09 13 f5 a3 54 d6 0c 27 5a 8d ac 4c c4 .......T..'Z..L. 0240 7b a9 a3 60 5c 91 58 60 f3 55 9c 69 69 4c 1e b7 {..`\.X`.U.iiL.. 0250 8d db dc 32 6c 23 03 3d 9c 54 80 7b f9 70 b2 d8 ...2l#.=.T.{.p.. 0260 a6 a1 6f 6e b3 4b bb 8d ac d4 49 60 2b d6 05 59 ..on.K....I`+..Y 0270 16 a9 61 60 55 9a f8 81 4d e3 c7 97 35 2e 1e 4c ..a`U...M...5..L 0280 6d 2e a3 48 8a 33 39 37 62 96 26 62 99 a5 9f fa m..H.397b.&b.... 0290 71 34 d4 24 5e 72 cd 4f 00 c8 aa e1 54 6a 9f c7 q4.$^r.O....Tj.. 02a0 5a 84 b3 7d 79 7b 73 77 12 aa 8d 71 74 7e 19 a1 Z..}y{sw...qt~.. 02b0 e2 e1 e8 7e 9e c7 d1 ae 16 f7 03 fa 24 d8 52 9c ...~........$.R. 02c0 f7 7a ad 73 28 97 d4 8f bc af 20 b9 ad c3 91 e3 .z.s(..... ..... 02d0 6b a1 94 ab 9a 09 a1 cd 2a 16 be 4f 21 7e 29 de k.......*..O!~). 02e0 c8 28 cc 93 85 88 6b 40 63 f7 ca df d8 f8 f6 d9 .(....k@c....... 02f0 b7 4f 0b c8 2b 20 13 28 78 05 f2 2c 90 c3 89 b1 .O..+ .(x..,.... 0300 5f 0a 74 bb 53 02 5d 13 05 87 4b 1d b1 2a c2 af _.t.S.]...K..*.. 0310 20 09 03 1d 6e 76 3a cf da 43 63 bc 42 b9 ec 55 ...nv:..Cc.B..U 0320 24 cd 44 4a bb 64 64 3c a1 92 54 1d 4e 12 cc 54 $.DJ.dd<..T.N..T 0330 df a6 d9 d7 c1 59 5b 6b 00 35 49 7f 23 55 e5 cf .....Y[k.5I.#U.. 0340 82 7b 2b 60 c7 51 6a 4c a0 bf 12 22 83 e3 89 ab .{+`.QjL...".... 0350 53 ba 6b f7 fe 18 2b 0b 59 b8 8f be 86 68 ac 11 S.k...+.Y....h.. 0360 59 7b 1a 40 42 49 9f 44 22 fe b1 76 2f 0e f4 58 Y{.@BI.D"..v/..X 0370 25 3b a2 d3 de 96 b1 e8 ec 32 cc 7f 39 c8 3e 83 %;.......2..9.>. 0380 ee 36 b2 22 d4 39 e4 99 7c 21 c1 b1 0c 55 40 0a .6.".9..|!...U@. 0390 a8 12 5b 90 bf c7 4a d3 5d 32 87 d6 da c6 66 bb ..[...J.]2....f. 03a0 f3 bc dd 79 86 c7 97 b9 cd 61 0c 3d 39 cc b5 b2 ...y.....a.=9... 03b0 57 a2 f3 6c 47 f4 14 9c 87 c6 1a bb 2e be 93 26 W..lG..........& 03c0 4f 42 7a 16 f8 14 52 25 62 a0 0c 7c 17 fc d6 69 OBz...R%b..|...i 03d0 32 4a 75 cc 36 b9 e7 3b 44 c0 18 4b 1b 08 b2 a4 2Ju.6..;D..K.... 03e0 96 fc 39 57 b3 7d ef 10 fe 4c 26 b6 75 01 72 4b ..9W.}...L&.u.rK 03f0 a7 31 74 63 35 df bd 2b 86 93 40 1b 69 f7 73 3b .1tc5..+..@.i.s; 0400 6a 3d 73 6a f6 49 58 af 11 22 f2 60 cc f0 2a 58 j=sj.IX..".`..*X 0410 a1 fc cc aa 1e 31 af a0 63 99 82 85 c0 2b 93 66 .....1..c....+.f 0420 e1 30 a8 24 88 c1 e7 a9 bc 9a a7 3a 34 de f2 06 .0.$.......:4... 0430 7e 27 06 32 f6 26 b4 21 3b 41 b1 ca 37 b2 8c 56 ~'.2.&.!;A..7..V 0440 e7 79 6b 63 f3 62 63 73 e7 c9 d3 9d ce c6 a7 41 .ykc.bcs.......A 0450 48 33 d4 2a 73 68 16 20 0e f2 91 08 a1 8e 88 79 H3.*sh. .......y 0460 63 0a 34 f8 62 c4 4b 1d e4 c9 24 1d 49 2d 8e 75 c.4.b.K...$.I-.u 0470 62 6c eb 4d 30 9c b4 4e f1 a4 6c 0e d5 b6 41 0e bl.M0..N..l...A. 0480 da 29 6a 19 6c 52 40 d3 d8 4f 03 74 00 fb 38 be .)j.lR@..O.t..8. 0490 cc a4 a6 97 37 bf 0e 00 21 c4 53 50 f8 e6 44 bc ....7...!.SP..D. 04a0 4c 35 96 c2 2d 19 36 6f 31 90 aa c6 29 63 ae 60 L5..-.6o1...)c.` 04b0 32 31 ad c8 4d fb 93 7b 99 aa 28 ea 9b b9 b2 14 21..M..{..(..... 04c0 fa 16 7b a9 e6 af 95 1a e8 a6 d7 02 70 35 f7 ae ..{.........p5.. 04d0 10 ec df b2 c3 11 1c 1b 96 b6 f1 ab 34 41 24 0c ............4A$. 04e0 76 98 5b 41 e3 95 1b 73 2c 16 46 0f 39 fc 66 19 v.[A...s,.F.9.f. 04f0 26 f9 91 1a f8 50 2f 62 51 d4 fe c9 2c 99 ec 4f &....P/bQ...,..O 0500 c1 2c 70 8b bc 2e 9c 00 3f 31 f6 3f b4 5a c2 ff .,p.....?1.?.Z.. 0510 93 f8 63 92 82 e6 18 1c b1 e2 4f be 68 b5 c8 b8 ..c.......O.h... 0520 fc 32 1d da 1b a4 e1 55 39 7d 9c a6 e3 48 a6 a3 .2.....U9}...H.. 0530 d1 0e 04 12 ca 4b 37 37 .....K77 No. Time Source Destination Protocol Info 449 4.788986 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 449 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55348 (55348), Seq: 1, Ack: 838, Len: 1360 No. Time Source Destination Protocol Info 450 4.789026 141.3.161.43 193.99.144.85 TCP 55348 > http [ACK] Seq=838 Ack=1361 Win=8256 Len=0 TSV=627795 TSER=776124379 Frame 450 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55348 (55348), Dst Port: http (80), Seq: 838, Ack: 1361, Len: 0 No. Time Source Destination Protocol Info 451 4.789279 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 451 (156 bytes on wire, 156 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55348 (55348), Seq: 1361, Ack: 838, Len: 88 No. Time Source Destination Protocol Info 452 4.789292 141.3.161.43 193.99.144.85 TCP 55348 > http [ACK] Seq=838 Ack=1449 Win=8256 Len=0 TSV=627795 TSER=776124379 Frame 452 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55348 (55348), Dst Port: http (80), Seq: 838, Ack: 1449, Len: 0 No. Time Source Destination Protocol Info 453 4.797088 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #454] Frame 453 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 34 10 8f 22 c3 3a ee 7a 74 80 10 13 59 .P.4..".:.zt...Y 0010 61 30 00 00 01 01 08 0a 2e 42 b7 ea 00 09 94 53 a0.......B.....S 0020 ba 8b 79 f7 93 81 c9 76 dd e4 3b b1 64 75 2c 91 ..y....v..;.du,. 0030 cc d2 48 99 26 e8 19 41 2f de 2f 00 ee f9 79 84 ..H.&..A/./...y. 0040 df 5f 26 f0 1a da 38 1d 20 3c ad 08 9a 07 1b 70 ._&...8. <.....p 0050 63 1c ea c1 0c 73 13 0b ee f1 fc bb 36 67 0a a7 c....s......6g.. 0060 ba 8a a8 74 b6 0d b8 b0 a4 11 57 b9 e4 2e 74 89 ...t......W...t. 0070 b4 d7 72 15 d7 19 0d 36 20 c2 e4 46 44 3c ff 2e ..r....6 ..FD<.. 0080 2c 69 26 93 5b 26 82 b1 06 1c 64 b3 6f f1 4a f4 ,i&.[&....d.o.J. 0090 d2 5c 0f e5 bf 2f 36 b8 79 b8 e9 55 ec 6e b4 01 .\.../6.y..U.n.. 00a0 3f 5e 34 ee f1 9c 17 dc b5 c9 51 6a d3 55 34 2f ?^4.......Qj.U4/ 00b0 31 d6 80 84 a6 36 62 a1 f9 77 e1 40 e9 96 9a 55 1....6b..w.@...U 00c0 24 07 34 d8 80 05 93 1b 91 f0 fc cf 38 1e 3b ab $.4.........8.;. 00d0 f9 1e 1b 3b 0f d0 b6 b3 26 33 9b b1 13 6a 5d bc ...;....&3...j]. 00e0 5f 15 d6 1a e7 7a f0 bd b7 bd f0 f5 1c b1 e8 b7 _....z.......... 00f0 b9 e1 cf 78 62 93 8e ec 3c d0 35 89 f7 8a 91 16 ...xb...<.5..... 0100 22 1e 10 12 b0 26 76 99 f9 ac 64 57 b9 c2 2f 38 "....&v...dW../8 0110 76 94 ce 93 28 0d c2 65 a6 ad b2 ed a7 74 70 4b v...(..e.....tpK 0120 36 34 d6 80 eb 27 72 0f 3d cb 49 02 d2 3a 39 48 64...'r.=.I..:9H 0130 ed 8a 6e ad c0 46 85 a5 cc 4c 6a c4 3c 6c 60 81 ..n..F...Lj...u 0160 cb f7 ff b6 a1 ae 16 a2 16 a3 23 aa 46 97 39 ca ..........#.F.9. 0170 c3 45 0c e5 e7 3b d9 26 67 48 25 6e 09 e5 98 47 .E...;.&gH%n...G 0180 1b 76 84 e9 8d 16 03 c5 09 90 0e a2 42 47 2a 27 .v..........BG*' 0190 93 bb d5 60 3e 81 66 67 01 b2 c2 5b 88 3f 2c 5e ...`>.fg...[.?,^ 01a0 35 60 c7 c2 46 ec b5 55 ab 98 57 dd c3 a0 e6 81 5`..F..U..W..... 01b0 96 b2 bd d6 c1 a0 c9 11 61 81 d7 c5 ab fb 41 9c ........a.....A. 01c0 ed 9e c8 91 bd 85 60 05 c3 54 a5 66 fa 49 1c 7a ......`..T.f.I.z 01d0 38 51 4d 2e 02 ab 80 86 df de f2 11 45 45 c8 5e 8QM.........EE.^ 01e0 a2 f8 58 e4 71 94 c0 06 48 93 74 3d 91 5b 7a d1 ..X.q...H.t=.[z. 01f0 2f 72 5c 2a 4c ab b7 c8 26 d2 3e b2 71 b6 89 ee /r\*L...&.>.q... 0200 da f2 52 7a 59 82 fb 4c fe d6 dd 53 f1 b8 c8 6f ..RzY..L...S...o 0210 29 f3 35 54 51 f3 8c be 9b d1 27 60 ed b1 1a 79 ).5TQ.....'`...y 0220 02 ca b1 9a fd cd 55 68 27 5c b7 78 d4 9d 41 4a ......Uh'\.x..AJ 0230 be ef 7d cb 35 0b 71 a1 d6 49 29 b6 bd 18 a8 d1 ..}.5.q..I)..... 0240 aa e0 99 b8 cf 85 0d d6 b6 c8 cc e5 d7 bc f3 22 ..............." 0250 15 6f ce b5 1b 32 74 07 78 92 52 86 5e 4b c5 ef .o...2t.x.R.^K.. 0260 ed 25 69 f5 cc c8 e8 13 ff f8 bf fb 75 6f c1 b5 .%i.........uo.. 0270 dc 48 1d 0e 7c 63 d2 3f eb 78 1f 45 c2 dc 91 c4 .H..|c.?.x.E.... 0280 ea 14 2a 0d 42 37 f8 39 1d fc 24 a7 76 df f7 ba ..*.B7.9..$.v... 0290 c7 0a 9e 74 5c 18 91 f8 e7 dd 10 c3 94 19 9c db ...t\........... 02a0 3a 40 68 52 6e 16 30 2a c2 1c a1 05 2f f1 b9 d8 :@hRn.0*..../... 02b0 49 c9 df 7b 7b 54 7b 32 fb 88 a5 23 19 85 90 db I..{{T{2...#.... 02c0 90 2a b9 5a ff 10 a5 d4 24 c5 94 31 f5 1b 82 e1 .*.Z....$..1.... 02d0 50 66 b6 55 d6 e9 9e 2b d4 a9 d1 fb a4 5b c8 4a Pf.U...+.....[.J 02e0 25 59 5e e7 bc 57 d4 61 3f 7b 8c 09 1f b3 20 ca %Y^..W.a?{.... . 02f0 25 15 6c 85 61 d0 ac 91 62 ec 36 18 70 f9 b2 ef %.l.a...b.6.p... 0300 6d 74 aa 82 6e 09 a4 c9 07 b1 aa 80 ba 0e 68 bf mt..n.........h. 0310 1c 2c 20 17 8d d0 02 fc ca 9c 26 a0 13 15 86 94 ., .......&..... 0320 7e 39 a0 3a ae 20 95 1d 56 ea 29 f8 d8 23 7e 13 ~9.:. ..V.)..#~. 0330 cf ba 6b cb 86 ea ca ce 92 af 60 2c bc 7d a9 95 ..k.......`,.}.. 0340 63 57 dc d7 f5 9b 5c 88 b1 1a 45 77 53 c9 d4 b3 cW....\...EwS... 0350 81 b6 86 f2 81 e5 66 6b f7 24 8d 8b a8 58 2e 5e ......fk.$...X.^ 0360 8e 5a b7 40 d6 da 81 cc 0b 35 5c 60 39 ab de 89 .Z.@.....5\`9... 0370 e2 9d d7 5d 8c fd 56 34 15 f8 a7 ad 8b 60 2c 5b ...]..V4.....`,[ 0380 04 d1 eb d6 be fc 56 c0 01 7b cb 65 f2 4b 07 db ......V..{.e.K.. 0390 ad 7d f9 2a f8 10 65 3d 11 7f 2d 61 6d 18 cb 11 .}.*..e=..-am... 03a0 c7 17 cf 9f 86 58 2a 98 eb 2e ac d0 dd 72 45 3f .....X*......rE? 03b0 3f 97 dd fb 02 0f b5 9d 5f 4a 49 7d 24 ee e5 d1 ?......._JI}$... 03c0 21 03 35 07 5b 0c 68 47 74 76 bd 2e e6 dc ca 4b !.5.[.hGtv.....K 03d0 3e 85 af 48 15 5c 3b dd 29 4b 9b 0a ab 65 6e 15 >..H.\;.)K...en. 03e0 b5 59 77 f1 fc c5 08 78 13 91 b4 b6 2e e1 b3 6a .Yw....x.......j 03f0 cc c1 74 cf cb 30 cb a0 46 9e 7a f2 84 4d 62 a0 ..t..0..F.z..Mb. 0400 65 10 0e c1 d7 01 3b ea cf 45 9c d5 e6 00 f9 76 e.....;..E.....v 0410 24 01 15 a5 26 f8 39 47 f8 ba ef 1e 76 8b 14 81 $...&.9G....v... 0420 31 de bb 5b 43 97 1b a2 c2 e9 a8 70 0a 5b 6a 2a 1..[C......p.[j* 0430 01 f9 12 74 9f c0 55 28 2d 35 ea 3e 89 77 49 91 ...t..U(-5.>.wI. 0440 69 e6 ef 8c 77 eb e9 97 a0 16 af 50 cd c1 f1 ea i...w......P.... 0450 79 0a d7 29 b6 9e 7a dd 57 1f f0 f1 75 c4 fc 4e y..)..z.W...u..N 0460 8d d0 35 0e 5d ce df ae b1 3b 2d a3 3c b7 d8 49 ..5.]....;-.<..I 0470 6f 58 b9 ee ad bc e8 53 d3 ce 94 af 09 86 9b 56 oX.....S.......V 0480 4e a6 ae 9a 51 12 fb bb 90 71 16 05 70 b0 d4 26 N...Q....q..p..& 0490 2b de af d5 f2 2c 07 2e 61 5d 70 c6 91 55 59 1c +....,..a]p..UY. 04a0 06 fb 61 60 c9 49 b8 26 3a b1 59 70 07 76 cf cf ..a`.I.&:.Yp.v.. 04b0 6e 97 76 bc c0 25 59 35 6d bf 23 95 8a 51 59 7e n.v..%Y5m.#..QY~ 04c0 26 85 da aa 65 50 5b 9d 32 83 aa 07 a3 15 82 29 &...eP[.2......) 04d0 10 2d 85 a0 46 81 46 2c 4f d7 77 2a db 5b 4d fa .-..F.F,O.w*.[M. 04e0 b5 72 60 d5 75 47 5c cb 49 dc 3f 45 0d db 67 80 .r`.uG\.I.?E..g. 04f0 d0 01 55 f7 cc 9d cc f1 c1 16 ef a6 91 44 a6 ed ..U..........D.. 0500 be 5e 52 bc c2 d3 64 dd bd 81 2e 17 0c 23 44 ee .^R...d......#D. 0510 ea d4 8b 68 20 e9 9f 1c 9f f6 8e 2f 8e 7f b8 60 ...h ....../...` 0520 c1 97 c3 45 ef 34 a9 b5 4e f9 d5 64 a3 84 16 a1 ...E.4..N..d.... 0530 14 f0 ba bf db 41 c9 64 .....A.d No. Time Source Destination Protocol Info 454 4.799260 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 454 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55348 (55348), Seq: 1449, Ack: 838, Len: 1360 No. Time Source Destination Protocol Info 455 4.799288 141.3.161.43 193.99.144.85 TCP 55348 > http [ACK] Seq=838 Ack=2809 Win=10944 Len=0 TSV=627798 TSER=776124394 Frame 455 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55348 (55348), Dst Port: http (80), Seq: 838, Ack: 2809, Len: 0 No. Time Source Destination Protocol Info 456 4.800099 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #457] Frame 456 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 34 10 8f 28 13 3a ee 7a 74 80 10 13 59 .P.4..(.:.zt...Y 0010 34 56 00 00 01 01 08 0a 2e 42 b7 ea 00 09 94 53 4V.......B.....S 0020 26 71 04 79 a8 52 27 d9 e7 0f d6 c5 03 c8 36 42 &q.y.R'.......6B 0030 2c 4c e8 d9 69 df 93 e7 9b eb 85 f2 6d 77 3a eb ,L..i.......mw:. 0040 c4 9b fd 0d 3c a0 a4 e5 cf 58 26 f9 20 d0 fb 49 ....<....X&. ..I 0050 ba 8e 1a d1 e6 86 9f 86 3a 8d 22 0c 9b 75 2d 8d ........:."..u-. 0060 ba 0e 06 91 c4 8a 34 2a 66 4e 52 3b 95 57 66 3d ......4*fNR;.Wf= 0070 4a dd 09 2f c6 1e 3c da 5d fb d7 5a 98 0e 73 6a J../..<.]..Z..sj 0080 80 b7 e7 e0 b9 7c f8 a0 6e 5a 14 4a 4c 26 83 29 .....|..nZ.JL&.) 0090 c5 a0 4a c9 16 3c da a9 6f bf d9 e4 66 c5 f6 6a ..J..<..o...f..j 00a0 16 57 1c aa 8a f2 55 65 75 db 4f 16 56 b7 b1 55 .W....Ueu.O.V..U 00b0 e5 97 a7 bd d3 fe e9 77 67 6f cf 8f d9 10 1f 88 .......wgo...... 00c0 c7 e2 01 e9 af 7b 20 93 a4 9d 14 82 fa cf ff a4 .....{ ......... 00d0 1c b2 c8 c4 a1 b5 b5 ac fc 53 1b 5b bb d3 7c ea .........S.[..|. 00e0 f2 fa bf da 22 19 7a 55 a2 2e 76 b0 7c 14 91 2c ....".zU..v.|.., 00f0 29 f4 aa 57 2c c8 ef cf 75 90 65 55 3d eb 5c 2d )..W,...u.eU=.\- 0100 55 76 3f e6 b1 08 35 b9 e1 44 bc 09 22 31 43 b5 Uv?...5..D.."1C. 0110 9f d7 4e 9d 3e c0 b0 64 02 db 0a 46 08 6d 5a 04 ..N.>..d...F.mZ. 0120 7c 92 a5 45 53 ff 64 c4 76 db 2a 5b c9 6d 99 17 |..ES.d.v.*[.m.. 0130 c7 38 e5 b9 cc 2d d3 e6 62 0c e6 fb 2a d0 91 d1 .8...-..b...*... 0140 39 22 06 35 e8 04 67 08 74 35 45 c0 33 49 2a b7 9".5..g.t5E.3I*. 0150 45 8f ce b1 50 45 0e 24 04 13 c7 c4 54 22 a3 76 E...PE.$....T".v 0160 a8 35 2a cf bc da e2 c3 cd 47 10 07 d7 40 53 be .5*......G...@S. 0170 a7 73 33 18 48 60 b1 93 a9 96 f6 e6 a3 e6 f3 37 .s3.H`.........7 0180 d4 20 5a 4d 83 44 39 cf 71 24 33 d4 03 7c 06 94 . ZM.D9.q$3..|.. 0190 8e 04 d5 00 11 1d 9d 55 5e e8 e1 51 7a d2 7b 24 .......U^..Qz.{$ 01a0 bc c3 2b 54 f8 24 5f 23 42 85 88 31 1a 49 44 f9 ..+T.$_#B..1.ID. 01b0 97 98 3c 95 62 0e f2 22 a6 89 bc 94 8c 22 c7 39 ..<.b..".....".9 01c0 80 0f e5 48 25 8a 8e ec d6 85 32 96 d7 ca 5c a7 ...H%.....2...\. 01d0 d9 cd 47 26 60 71 66 27 e4 a4 60 b4 37 4d 13 ea ..G&`qf'..`.7M.. 01e0 19 c1 4e a9 65 e7 21 9e 6a 9d ea d6 81 b5 01 1d ..N.e.!.j....... 01f0 56 8b 51 3a cd 51 52 00 6a 5b 1c 01 e0 82 1d 7c V.Q:.QR.j[.....| 0200 35 e3 35 8a 62 b0 6b da 7a 25 59 c0 39 ef 47 4e 5.5.b.k.z%Y.9.GN 0210 6e 3e 82 e6 75 26 e1 2c b7 d7 4e 43 13 d1 0b a8 n>..u&.,..NC.... 0220 33 a8 68 26 ed ee 58 8f 6f 3e 26 fc f6 3a d7 e2 3.h&..X.o>&..:.. 0230 bd 0a 65 ca 87 8d f3 c0 d1 69 d2 39 20 10 94 d3 ..e......i.9 ... 0240 8b d6 18 3b bf f9 d5 5e 23 d8 23 14 e6 20 b6 61 ...;...^#.#.. .a 0250 01 09 11 d0 55 2c de 90 ca 45 59 9e 4c 2d 4b 09 ....U,...EY.L-K. 0260 ee cf ea 9b 8f 63 d9 e6 e0 ee 8e e6 86 41 38 13 .....c.......A8. 0270 6c ce cd fe 9b 15 bd 8a 44 34 b9 66 40 bc ea ed l.......D4.f@... 0280 41 4f 1c 1c c1 10 51 78 46 72 c3 e3 55 04 da 85 AO....QxFr..U... 0290 fb 01 dc 20 55 66 7f c9 a0 71 f7 ff 92 a5 46 b1 ... Uf...q....F. 02a0 3b 27 9c 85 dd 35 1a 9a 3b 38 2c c9 73 10 07 5f ;'...5..;8,.s.._ 02b0 45 ed e0 0b c8 dd f4 c4 e1 9b 7d 4f 0d e2 ce b7 E.........}O.... 02c0 fd ad 6d 9d 9a 7e e7 99 db 02 c7 ec a2 a8 19 a5 ..m..~.......... 02d0 89 6d 8d 82 58 45 57 3b e2 40 ab 20 5a 17 27 32 .m..XEW;.@. Z.'2 02e0 9a 49 78 b0 60 5d 98 20 31 b0 49 ad 46 bb 62 98 .Ix.`]. 1.I.F.b. 02f0 46 a9 de 11 2f 22 a8 cf ae e0 85 88 11 72 e7 69 F.../".......r.i 0300 66 8b af 73 e9 6a a3 84 a2 68 b4 2b 28 1a b6 82 f..s.j...h.+(... 0310 48 8d b1 7b 8a 40 28 99 0e 92 6b c9 69 88 4b 5c H..{.@(...k.i.K\ 0320 90 0b f8 dd ff 58 5b 75 08 69 60 16 37 7b ce 65 .....X[u.i`.7{.e 0330 10 bd a1 2b 13 3e fc 2d 6a 64 b8 d6 7e 74 d9 a6 ...+.>.-jd..~t.. 0340 2f 9f ba 01 54 38 2e d4 8d f3 9a 0b f2 37 9f 3f /...T8.......7.? 0350 7d be bd b9 b9 fd dc 2f 78 e4 bf 0d cc 91 1c 05 }....../x....... 0360 79 64 fd 65 4e f9 b1 42 30 a4 be 3c 06 37 36 dc yd.eN..B0..<.76. 0370 60 df 39 d1 36 15 8a fe d6 b3 ed 27 5b 9d ad ad `.9.6......'[... 0380 ed 8d ad 8d ed 27 db 5b 5b 4f b6 9e e1 ff 73 7c .....'.[[O....s| 0390 ff 16 4f 9d 3f 7f e6 96 92 c9 07 84 b3 0f ee ce ..O.?........... 03a0 5c c9 83 fa 92 da 35 fd 01 b9 03 8f d8 52 05 8a \.....5......R.. 03b0 cf f3 e5 10 e1 c8 aa 99 34 77 ed 29 cb 5b 20 f8 ........4w.).[ . 03c0 72 f3 59 c7 c5 99 32 53 dd da 5e 44 14 bc 2c 02 r.Y...2S..^D..,. 03d0 50 19 46 be 8e 10 fc b7 a0 25 fe 7f 21 a3 fe f9 P.F......%..!... 03e0 9b fe f1 9b 77 17 7f eb 57 cc d8 a8 05 d7 25 46 ....w...W.....%F 03f0 7c d6 a4 2b 23 86 07 ca 28 df e6 6b 1b a4 ee 89 |..+#...(..k.... 0400 f3 eb 49 fd 0e 47 43 fc c1 d8 38 18 08 84 17 8a ..I..GC...8..... 0410 5b 09 fc 6a 2c 5e c0 ef ca 45 7c 32 28 3c e0 96 [..j,^...E|2(<.. 0420 61 91 88 bd b3 aa c5 2f c9 ef 7e 48 f5 d4 4c d2 a....../..~H..L. 0430 ac bc d5 01 df 7a ac e1 e9 93 d2 47 1f be 38 3f .....z.....G..8? 0440 3b 6e 7d 07 66 4e 10 d4 38 f8 88 87 87 13 09 3e ;n}.fN..8......> 0450 92 dd bf 50 74 a4 ed 9e cf 83 b0 fa e6 9f e5 9c ...Pt........... 0460 a9 0b 0a 69 c7 97 59 04 4f 37 93 8f d6 c5 48 df ...i..Y.O7....H. 0470 fc 4a 44 e7 14 25 79 b3 67 01 dd 0c 39 78 71 d8 .JD..%y.g...9xq. 0480 ea 81 5c 7b 2d 06 12 41 12 89 a1 38 41 a0 11 f3 ..\{-..A...8A... 0490 5c 93 0b a7 3c 01 05 ad 0c 29 f8 bd 97 9a e8 e1 \...<....)...... 04a0 ed 6a 0a 04 08 23 c8 d3 07 0e 3d 47 37 0a 3d 43 .j...#....=G7.=C 04b0 22 93 bf bd 0a e2 6c e4 c8 17 a8 01 29 6b d7 81 ".....l.....)k.. 04c0 4e 6d 4b a4 c4 55 84 b9 00 44 d9 6b 90 00 d4 c8 NmK..U...D.k.... 04d0 1d 10 81 04 44 10 4a be a3 25 de 05 a4 6e 21 46 ....D.J..%...n!F 04e0 e3 05 cb 46 5a e6 88 3e 9c b6 84 81 41 88 a9 d8 ...FZ..>....A... 04f0 8c 90 9b 18 10 16 c4 56 6c 3c 13 ef 74 4a 7d 61 .......Vl<..tJ}a 0500 87 7b 6b 0b 33 11 f6 52 12 d7 31 22 32 e1 1a dd .{k.3..R..1"2... 0510 fc 82 6d 6a 17 32 c3 40 2f c4 d1 94 f8 0c e2 01 ..mj.2.@/....... 0520 1f 19 65 a9 f5 c3 e2 cc ae 9d 4d 32 ff cd 37 5b ..e.......M2..7[ 0530 07 9d c7 55 64 7f 3c fa ...Ud.<. No. Time Source Destination Protocol Info 457 4.800193 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 457 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55348 (55348), Seq: 2809, Ack: 838, Len: 1360 No. Time Source Destination Protocol Info 458 4.800215 141.3.161.43 193.99.144.85 TCP 55348 > http [ACK] Seq=838 Ack=4169 Win=13696 Len=0 TSV=627798 TSER=776124394 Frame 458 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55348 (55348), Dst Port: http (80), Seq: 838, Ack: 4169, Len: 0 No. Time Source Destination Protocol Info 459 4.801002 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #461] Frame 459 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 34 10 8f 2d 63 3a ee 7a 74 80 10 13 59 .P.4..-c:.zt...Y 0010 b3 09 00 00 01 01 08 0a 2e 42 b7 ea 00 09 94 53 .........B.....S 0020 87 32 52 9a 25 75 f1 c4 c3 77 47 2f 5b 47 08 f6 .2R.%u...wG/[G.. 0030 ea 11 c9 f1 e6 17 1a 2e d5 1b 9b 9f de fc 02 a6 ................ 0040 27 65 24 ce ba 07 c8 06 f8 e0 54 2f dd 2d 1a 4e 'e$.......T/.-.N 0050 e6 52 bb 10 9e 90 86 c8 05 cb 83 88 ba e6 64 35 .R............d5 0060 90 4f 34 6a 21 39 21 fd 7a 9d 4f 21 18 92 1a 37 .O4j!9!.z.O!...7 0070 5f d9 84 56 ab bd b0 ca 63 4a 9d 5f 4d 63 c6 12 _..V....cJ._Mc.. 0080 80 11 99 28 17 a2 17 ac 52 2f 64 a8 d3 09 7b a3 ...(....R/d...{. 0090 36 65 17 45 de 38 92 50 da 62 6b 4d a2 9b 85 ca 6e.E.8.P.bkM.... 00a0 5e 93 ec e8 1e b3 3f 4d e3 8c ec f0 1a 2e 6d 61 ^.....?M......ma 00b0 af a3 54 92 32 50 15 60 1a f2 4d 1f 94 c0 a4 a5 ..T.2P.`..M..... 00c0 af 92 24 9d 71 55 65 a8 eb 61 a9 12 ed 1b 36 a2 ..$.qUe..a....6. 00d0 3e f6 d1 07 af a7 12 72 50 a4 ed f0 b0 f9 94 76 >......rP......v 00e0 9e f8 ec 82 da ae 75 b9 22 d7 83 7c 44 17 94 67 ......u."..|D..g 00f0 f5 83 40 96 b0 41 95 c7 5b 14 5e ad e4 5d e0 15 ..@..A..[.^..].. 0100 85 f1 12 ff de 37 e3 f5 44 72 f3 d1 dd 6f fd c0 .....7..Dr...o.. 0110 dd a8 20 e1 6b 64 4e 34 63 64 a1 e0 e4 69 65 37 .. .kdN4cd...ie7 0120 14 f4 4b f3 72 72 34 00 0a e3 20 14 74 98 8c e4 ..K.rr4... .t... 0130 6e 5d 94 19 21 f5 d5 3f 59 28 54 b1 a4 ba 75 e2 n]..!..?Y(T...u. 0140 94 a0 55 2a 41 0b 62 6d 95 29 f8 62 b4 c5 c1 a7 ..U*A.bm.).b.... 0150 2a c9 9e 7e db 79 d2 a9 9a 6e f7 7f ce 53 bb bb *..~.y...n...S.. 0160 a2 4d 6e 90 13 6e f7 78 2b af 77 c3 5e 97 ef 67 .Mn..n.x+.w.^..g 0170 25 ab da c8 bc de ec 74 b6 d9 91 2f 54 bf c5 8e %......t.../T... 0180 e1 3d a5 f3 2a 54 e3 55 af ce 67 80 b6 f4 84 54 .=..*T.U..g....T 0190 5a 71 ba cb d2 90 76 1e 88 8d ad ce aa d7 61 02 Zq....v.......a. 01a0 c4 04 b4 8d 68 1d a5 df 72 90 50 5c 25 af 3a 27 ....h...r.P\%.:' 01b0 96 25 b7 4d f3 25 6c 9e a5 b6 b8 4d 48 f7 0d 06 .%.M.%l....MH... 01c0 b7 c8 73 14 37 d5 4b 22 96 74 b7 b0 0e e1 1d 52 ..s.7.K".t.....R 01d0 71 83 f4 1d e6 7b 42 e9 e3 5f e1 0e c7 88 63 20 q....{B.._....c 01e0 18 82 d6 eb e4 5f 4d e1 69 97 ca 8e 1a 54 45 25 ....._M.i....TE% 01f0 55 4e c7 b4 cc 6f 0b f7 7e cd 75 97 41 c9 63 4b UN...o..~.u.A.cK 0200 3d 33 54 0c bc 2f af 08 90 f7 e9 91 5b a1 1d 71 =3T../......[..q 0210 28 a0 87 ef 7b 07 80 76 3d 2f 0a 35 43 9a 29 22 (...{..v=/.5C.)" 0220 0e 01 05 43 da c2 6b 6e 10 ad d7 1b 42 cc 81 ef ...C..kn....B... 0230 e3 b9 8c ac c7 5b 20 2d a5 d2 0c 5b b8 98 d0 85 .....[ -...[.... 0240 48 57 13 11 ce 17 e0 eb 98 c2 5d f1 fd 65 19 dd HW........]..e.. 0250 f9 1a a6 e4 a2 8b ec a3 12 44 63 99 f9 d7 e0 4a .........Dc....J 0260 1c a6 93 22 0f f8 be d7 3a 91 0a b4 38 9f 50 57 ..."....:...8.PW 0270 98 a2 b8 34 92 0b 28 45 9b 84 6d c7 ae 2c 0a a8 ...4..(E..m..,.. 0280 0e 0e e9 22 fd c1 14 9e c9 62 bb 07 28 07 0d ac ...".....b..(... 0290 0d 7b a0 18 56 16 a5 d7 39 4c 15 fb 40 85 07 39 .{..V...9L..@..9 02a0 ad 43 9b 06 92 2f 7f 72 21 dc 6b 2d 14 b8 08 70 .C.../.r!.k-...p 02b0 24 a8 74 e0 54 af c9 52 c3 89 69 8f d3 99 7f 19 $.t.T..R..i..... 02c0 a9 01 22 f4 95 4f 5c b7 c6 3f 41 76 d5 7f a7 55 .."..O\..?Av...U 02d0 4a 46 d2 5f dc a5 eb 9f d1 79 4b 63 88 2a 66 43 JF._.....yKc.*fC 02e0 f6 6c 54 b5 20 44 b2 48 50 22 8a 29 dd c1 74 05 .lT. D.HP".)..t. 02f0 e5 f1 d1 82 58 f1 f0 34 91 97 19 f2 4b e4 2c 8b ....X..4....K.,. 0300 ec 05 ea 35 53 43 69 1e 15 41 3a 49 b8 67 20 91 ...5SCi..A:I.g . 0310 80 69 91 28 ba 1e de 16 cc 18 e2 26 b4 1c de 8a .i.(.......&.... 0320 ab 76 30 ed 94 2f d3 4a 14 3a 5e 71 1d 06 4a 5c .v0../.J.:^q..J\ 0330 38 37 58 db 3a f5 af 51 5f 49 27 3a 2d 9c 34 be 87X.:..Q_I':-.4. 0340 83 e3 a1 ab 50 10 61 51 4d 17 f6 28 a6 d4 84 a4 ....P.aQM..(.... 0350 d7 e2 9a 1a df e4 08 a5 8a 8a 7a 5d b1 67 a1 6d ..........z].g.m 0360 bd 4a a9 75 a1 a6 4e 1d 51 30 ff c2 4a 74 44 b4 .J.u..N.Q0..JtD. 0370 93 ac 12 e8 9b 4b 33 5c c8 2e 82 98 49 af 15 9d .....K3\....I... 0380 1b 88 83 84 8f 1c 24 d9 09 d2 b2 9b 8f 48 a3 00 ......$......H.. 0390 c0 ab b4 f0 68 a5 ab 50 53 dc 79 ea 5c 91 9a c4 ....h..PS.y.\... 03a0 94 d1 80 5e e6 11 b6 31 40 e2 9f 8c 2d 0a c0 88 ...^...1@...-... 03b0 a3 27 71 62 20 29 9f f8 38 b2 e4 f4 ab 1b c8 58 .'qb )..8......X 03c0 4c 29 40 55 ac 83 e3 4a 12 83 49 09 a7 69 42 7a L)@U...J..I..iBz 03d0 8f c1 d2 98 d8 d5 51 4e 59 04 a3 d0 f9 03 0a fa ......QNY....... 03e0 a7 2f 0f 5a 70 00 a1 2a 18 5c e5 86 b4 c9 31 8a ./.Zp..*.\....1. 03f0 55 d7 a1 c0 d4 e2 ab 59 84 5e e6 8a 11 63 9d de U......Y.^...c.. 0400 fc 0f 79 4f 95 4c 83 7c 64 c8 34 74 1e b3 47 f9 ..yO.L.|d.4t..G. 0410 d1 3d b3 c3 45 2d 8c d0 37 55 a5 43 21 90 41 74 .=..E-..7U.C!.At 0420 c5 7e 35 21 d2 08 fa 40 ce e5 98 b3 07 5a 7e 12 .~5!...@.....Z~. 0430 8c a4 4b 9d ce 53 3a 6d 0b 83 b8 2d 3e 20 0d a7 ..K..S:m...-> .. 0440 c4 1e 75 31 70 43 fa 06 ba 7c 5d 74 7b 38 2d 5e ..u1pC...|]t{8-^ 0450 77 5a 08 23 82 55 bb db d9 7f cd 9d f8 c1 d5 54 wZ.#.U.........T 0460 80 a1 91 8b 8a 9c e2 f1 9f 30 50 53 8d 52 a4 31 .........0PS.R.1 0470 b5 bb 7a 94 c3 41 d3 08 0a 61 e7 64 f8 7b 71 04 ..z..A...a.d.{q. 0480 7e c7 4e c9 0d 39 cb 41 6a 4b d6 18 3b 67 6f 3f ~.N..9.AjK..;go? 0490 46 ca 8a 48 90 e9 74 10 49 72 77 e0 65 5b 1c 23 F..H..t.Irw.e[.# 04a0 6f 83 1f 82 49 e4 96 54 12 60 49 52 21 a5 01 05 o...I..T.`IR!... 04b0 b7 5f a8 88 13 5d e7 e8 e2 42 e3 90 70 cc 6f 7e ._...]...B..p.o~ 04c0 35 65 51 32 e1 fa 83 f9 57 f0 5e 9a 0c 9a c0 ba 5eQ2....W.^..... 04d0 71 12 e4 06 43 8c 9f 76 b4 d4 86 1a cb 79 aa 59 q...C..v.....y.Y 04e0 b1 25 d7 0d a5 bf ae 34 f6 14 28 29 a6 50 ef fe .%.....4..().P.. 04f0 a2 f5 c2 5d 9e 69 54 3f 32 60 fe 6b 22 62 6f 50 ...].iT?2`.k"boP 0500 64 ef cc cc 7c 9a 27 a3 a2 8f b4 da 74 6a c3 94 d...|.'.....tj.. 0510 74 28 4e d2 11 39 13 f2 b7 cc d9 b7 27 2f 5a 3d t(N..9......'/Z= 0520 be 06 bf ce db c6 26 32 a4 c0 0c 3a 71 fd 3a 5d ......&2...:q.:] 0530 e9 6b 73 ea 98 4e 06 2d .ks..N.- No. Time Source Destination Protocol Info 460 4.801107 141.3.161.43 193.99.144.85 TCP 55348 > http [RST, ACK] Seq=838 Ack=4169 Win=13696 Len=0 TSV=627798 TSER=776124394 Frame 460 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55348 (55348), Dst Port: http (80), Seq: 838, Ack: 4169, Len: 0 No. Time Source Destination Protocol Info 461 4.808818 193.99.144.85 141.3.161.43 TCP [TCP segment of a reassembled PDU] Frame 461 (92 bytes on wire, 92 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Transmission Control Protocol, Src Port: http (80), Dst Port: 55348 (55348), Seq: 4169, Ack: 838, Len: 1360 No. Time Source Destination Protocol Info 462 4.808844 141.3.161.43 193.99.144.85 TCP 55348 > http [RST] Seq=838 Win=0 Len=0 Frame 462 (56 bytes on wire, 56 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55348 (55348), Dst Port: http (80), Seq: 838, Len: 0 No. Time Source Destination Protocol Info 463 4.809801 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #464] Frame 463 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 34 10 8f 32 b3 3a ee 7a 74 80 10 13 59 .P.4..2.:.zt...Y 0010 08 b2 00 00 01 01 08 0a 2e 42 b7 f4 00 09 94 56 .........B.....V 0020 53 d4 2b fe 24 a0 ec c8 12 1d 37 ff bd 60 23 de S.+.$.....7..`#. 0030 d2 1d ba 69 1b 89 36 b2 c3 59 91 2b a2 ee 90 53 ...i..6..Y.+...S 0040 a6 f2 e2 ec 2d 1c 32 cc 66 08 33 a8 92 f9 fb a2 ....-.2.f.3..... 0050 07 53 c2 83 cb 1e 5d 7e 98 51 e1 7c 70 ce 07 37 .S....]~.Q.|p..7 0060 c8 2e 90 b6 3a 77 ca 62 23 51 97 2d 54 4e 4b 13 ....:w.b#Q.-TNK. 0070 be 19 48 56 99 50 b9 a9 c1 b0 24 ac 7a b6 11 e4 ..HV.P....$.z... 0080 5e 89 db 56 5a f6 bf ec 3d d9 6e 1b b9 b2 cf 13 ^..VZ...=.n..... 0090 20 ff c0 d1 01 c6 36 46 d4 2e 5b 4e 26 ca c8 92 .....6F..[N&... 00a0 17 c5 71 e2 b1 9d 05 07 17 30 ba a5 96 d4 a3 96 ..q......0...... 00b0 5a a7 17 3b f6 c5 fd 9b f9 86 f3 94 b7 e0 fe d7 Z..;............ 00c0 ad 85 ec 4d ed 3d 3a 98 00 37 b3 44 6a 35 8b 64 ...M.=:..7.Dj5.d 00d0 b1 58 1b ab 8a b0 81 32 3a d2 1b 12 e8 30 62 eb .X.....2:....0b. 00e0 0a 88 c8 23 81 9c 87 43 db 0e cc d2 68 32 2e 61 ...#...C....h2.a 00f0 8a 4b d6 7b 1d 67 6c f4 fb 67 3b 84 2b a0 99 31 .K.{.gl..g;.+..1 0100 7b 73 35 19 da 4c 3c c0 eb 4d 9b f3 35 e8 7b 01 {s5..L<..M..5.{. 0110 a6 3b 32 70 d8 79 ae d1 59 64 b1 7c b4 2d e7 da .;2p.y..Yd.|.-.. 0120 98 b0 b2 78 0a 42 0f 83 27 58 31 61 86 0d 9c e2 ...x.B..'X1a.... 0130 1a 44 82 98 00 76 c4 08 fb 87 69 cd 60 b7 e2 d9 .D...v....i.`... 0140 03 cc cf 5e 9a 97 ad 75 a0 29 8a d9 a0 74 01 12 ...^...u.)...t.. 0150 c8 43 12 19 81 9d 69 0c 41 11 a1 00 a8 f3 70 81 .C....i.A.....p. 0160 96 6b 99 3b c5 10 6d d9 39 da eb 9f e6 8a 73 fa .k.;..m.9.....s. 0170 85 25 39 18 29 53 58 15 52 26 90 4b 25 e9 86 26 .%9.)SX.R&.K%..& 0180 86 66 a1 01 7a f5 c8 09 c7 b0 d5 59 fd 83 05 e5 .f..z......Y.... 0190 8e 2e 58 5d dd d0 8b b7 e3 d8 b3 05 28 37 7b 48 ..X]........(7{H 01a0 b9 8e 69 38 0e 50 08 01 fe 23 34 86 03 77 11 30 ..i8.P...#4..w.0 01b0 1b 82 dd 80 ea 52 51 84 c4 b5 44 c7 b3 80 33 17 .....RQ...D...3. 01c0 80 05 82 c5 84 f1 80 11 82 d3 66 2d 29 4f a2 47 ..........f-)O.G 01d0 32 1c d1 47 42 c4 8e 0e 1a de 77 22 35 8a b1 ae 2..GB.....w"5... 01e0 29 86 d9 cd 0c be 93 40 12 85 63 98 0e 50 f8 31 )......@..c..P.1 01f0 68 b6 d6 20 28 30 d3 02 c6 6f a2 44 47 ad 2b 36 h.. (0...o.DG.+6 0200 d2 50 6b 84 3d 8c 06 b1 c5 ab 6f 28 19 84 c6 f0 .Pk.=.....o(.... 0210 3f 43 d0 5a 48 f9 51 5d aa 53 0e 78 f7 98 19 ba ?C.ZH.Q].S.x.... 0220 6f 07 21 91 12 ba 7b 00 61 43 b4 dc 80 39 02 df o.!...{.aC...9.. 0230 dd b7 40 d8 0f a6 45 f1 11 13 f9 1c db 9f 85 80 ..@...E......... 0240 bc 63 03 36 2b 28 80 b6 33 02 6d 09 e0 c0 ce 72 .c.6+(..3.m....r 0250 e7 a8 61 3a 26 18 43 16 39 95 ac 79 ac 3a 75 1c ..a:&.C.9..y.:u. 0260 03 ac 46 60 e5 ce b7 7f fb 7a 0b c1 3c 68 d6 20 ..F`.....z.. http [RST] Seq=838 Win=0 Len=0 Frame 465 (56 bytes on wire, 56 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55348 (55348), Dst Port: http (80), Seq: 838, Len: 0 No. Time Source Destination Protocol Info 466 4.819676 193.99.144.85 141.3.161.43 IP Fragmented IP protocol (proto=TCP 0x06, off=0) [Reassembled in #467] Frame 466 (1372 bytes on wire, 1372 bytes captured) Linux cooked capture Internet Protocol, Src: 193.99.144.85 (193.99.144.85), Dst: 141.3.161.43 (141.3.161.43) Data (1336 bytes) 0000 00 50 d8 34 10 8f 38 03 3a ee 7a 74 80 10 13 59 .P.4..8.:.zt...Y 0010 a8 8b 00 00 01 01 08 0a 2e 42 b7 f4 00 09 94 56 .........B.....V 0020 bb a8 ca c3 68 61 4b a2 7a 00 46 b1 c3 6a 58 d6 ....haK.z.F..jX. 0030 9f 4c 61 63 7a fb a2 6e 4f fa 35 1e 41 c2 f4 0c .Lacz..nO.5.A... 0040 00 58 12 fd 7c 55 30 ef c8 2b e7 c0 47 5e 92 8c .X..|U0..+..G^.. 0050 92 5d 36 ee 83 2b 69 a2 4d 35 97 32 f2 54 6e 37 .]6..+i.M5.2.Tn7 0060 b7 31 69 58 07 1e e7 1c 1a 31 0c 11 c1 10 0c a3 .1iX.....1...... 0070 d0 c6 f4 19 f4 6a a0 b0 7e 63 4c 28 f0 13 d4 16 .....j..~cL(.... 0080 77 ac 78 56 42 27 ba 50 c7 55 fa 84 4a 19 c4 a0 w.xVB'.P.U..J... 0090 0b 04 9e 1b da d0 01 45 09 f8 64 c0 da 18 68 80 .......E..d...h. 00a0 6a 95 bf 00 99 64 4c 43 d4 e0 10 e3 21 99 aa cc j....dLC....!... 00b0 95 88 dd 04 9e 15 28 c3 f9 00 c8 0c 8f 85 00 17 ......(......... 00c0 86 37 94 c9 10 07 36 5f 70 a4 b0 f0 c3 20 15 cf .7....6_p.... .. 00d0 80 f4 9a ab 6b 83 86 33 a5 83 13 75 20 f3 da f1 ....k..3...u ... 00e0 5f d5 97 0f 37 80 2c 7b b6 3f 65 c1 6a 83 15 81 _...7.,{.?e.j... 00f0 e4 fa 7e 01 e4 e0 2f d0 93 ad 8c d2 c4 79 53 ec ..~.../......yS. 0100 45 80 c7 16 3a 2b 80 e0 f0 4c 4a e9 79 48 c6 1e E...:+...LJ.yH.. 0110 90 ea 6c a6 ce 06 ba 3d 75 f6 d4 fb d8 93 c7 8e ..l....=u....... 0120 71 85 07 79 e8 87 1d 4c 33 bc b3 87 3b 9d 5f 20 q..y...L3...;._ 0130 86 3f 47 45 0d b6 2b b9 d9 60 41 48 63 51 ac 9c .?GE..+..`AHcQ.. 0140 dc 10 f6 28 44 5f 1c fe a6 4c 03 9c 0c 6b b0 2c ...(D_...L...k., 0150 2d 80 5a 43 13 83 23 ae 95 4c e9 44 ca 21 2b a2 -.ZC..#..L.D.!+. 0160 78 48 a7 63 3c 12 7e e1 a4 2f c3 67 02 ba 24 1b xH.c<.~../.g..$. 0170 09 16 7d 66 e0 f9 1c cc d4 b1 7c 94 7d 68 b1 d3 ..}f......|.}h.. 0180 46 02 eb 0d 9d 8b b4 8b c8 1f cd 6a af de e4 43 F..........j...C 0190 23 3a c1 4b db ec 30 f5 82 16 2b 78 b6 07 1c 9a #:.K..0...+x.... 01a0 7c 42 23 fb 1a 85 e2 eb 42 51 eb 0a 60 a8 58 21 |B#.....BQ..`.X! 01b0 11 c0 8c f4 a0 23 52 e0 e4 91 1a 11 ac a5 01 eb .....#R......... 01c0 a4 94 c3 a4 b3 00 87 14 fb 6e 4b 62 fd 37 6b d6 .........nKb.7k. 01d0 ee 59 b0 69 46 62 c7 f5 f0 3d ff b7 32 3c db 10 .Y.iFb...=..2<.. 01e0 65 8a 57 4d 86 2e 26 63 29 d6 23 6a 53 65 65 2e e.WM..&c).#jSee. 01f0 4c ef f7 41 10 ed e8 b8 9e c9 47 d0 59 60 10 3b L..A......G.Y`.; 0200 20 5f c6 8e 65 c2 7e 33 69 8b 95 07 bf fc a3 be _..e.~3i....... 0210 fd 32 d8 88 a2 6e 73 83 1e 7f 8a 43 51 13 09 87 .2...ns....CQ... 0220 37 04 80 44 e1 91 e5 74 7c a4 4a 6b c8 89 7f 75 7..D...t|.Jk...u 0230 17 89 9c 86 5b c3 d3 a8 12 85 0e 4f 53 a5 4c 5c ....[......OS.L\ 0240 e0 ed 8e 7b 59 c0 3c 32 e4 92 64 6b f4 b8 ce 05 ...{Y.<2..dk.... 0250 a7 c1 dc 23 6c 14 11 78 13 dc 63 2c 5d 00 eb 6a ...#l..x..c,]..j 0260 73 dc 18 69 4d 2a bf 66 19 ee cd 71 ed c0 f1 dd s..iM*.f...q.... 0270 39 5b 14 c9 10 f7 c4 63 15 09 b7 d0 b8 fa ff a8 9[.....c........ 0280 db 38 ea 36 87 6c 28 df 82 12 b7 44 fc 27 f9 f9 .8.6.l(....D.'.. 0290 86 41 73 9e c6 d8 e5 3c 8a d7 60 4b 06 2a 91 8a .As....<..`K.*.. 02a0 32 34 ce 31 0d aa 51 df ae 35 0b 30 98 f6 21 57 24.1..Q..5.0..!W 02b0 4c 40 a6 41 c1 8d 62 bd 81 de 87 c0 e3 a9 8e 2d L@.A..b........- 02c0 d8 3b 26 07 4c 53 8c 50 fe 60 d4 b2 62 99 85 bc .;&.LS.P.`..b... 02d0 e9 45 7b 66 d7 07 99 65 06 e4 69 b7 c4 07 f4 3a .E{f...e..i....: 02e0 a3 5a 8f f2 45 d5 6b 50 c9 56 f7 8b 42 cf c6 49 .Z..E.kP.V..B..I 02f0 1a 43 d3 0d 02 77 56 68 ab b6 3a 14 6b 87 1f 53 .C...wVh..:.k..S 0300 24 16 a2 ca 74 bf 9c 7b ae 9f 08 c3 d2 10 38 2c $...t..{......8, 0310 6a ee 80 24 70 74 88 7c 3a 56 ea f9 33 fc 87 46 j..$pt.|:V..3..F 0320 86 e0 81 05 7c 38 06 f1 04 b2 18 87 f6 fc 99 b8 ....|8.......... 0330 23 12 99 db 3e 7f 56 2e 0f 5c e0 bb e3 90 8d 83 #...>.V..\...... 0340 e7 cf 00 da 79 e8 39 e2 d5 5a 9e fa 92 0e ee 59 ....y.9..Z.....Y 0350 7b c9 ef e3 ea 2e 5c 5f bc 12 6b 5f 1a d5 e2 97 {.....\_..k_.... 0360 46 0d fe ab c3 7f 0d fd c6 bf 42 cb bb c2 df 5f F.........B...._ 0370 eb 27 3e 65 84 82 2a 07 0f 53 5d 34 ec 79 f5 7c .'>e..*..S]4.y.| 0380 0e 78 c1 37 cb 65 8c cd 70 47 22 67 94 17 8a 15 .x.7.e..pG"g.... 0390 bd 12 d5 8a 02 ea e1 b7 b5 0a 28 ff f5 46 73 73 ..........(..Fss 03a0 ab b5 5d 59 7b 29 f8 07 1a 5d f2 79 a2 05 2c 06 ..]Y{)...].y..,. 03b0 15 4e c3 f3 a1 23 23 98 94 3c 8c 10 9d ad 6f 6c .N...##..<....ol 03c0 24 5b f3 a7 92 8f f2 95 df ad 15 45 b5 ba 01 90 $[.........E.... 03d0 a2 e0 6d 7c 07 e4 c6 51 e7 ed 3a 20 64 43 fc f7 ..m|...Q..: dC.. 03e0 f3 e5 68 68 bd 5d 30 d8 58 63 fb 57 b1 c6 a1 6c ..hh.]0.Xc.W...l 03f0 73 0e 93 d2 bf 45 58 c2 b8 e4 aa 7e 8a e3 81 07 s....EX....~.... 0400 bf eb ef 1a ff f0 ec 67 7c c6 9f 63 bc c3 f3 28 .......g|..c...( 0410 a0 0c d3 98 31 ba 39 67 60 51 58 57 66 64 51 0c ....1.9g`QXWfdQ. 0420 d7 ea 06 67 ba 78 84 f8 aa c2 11 56 5d 44 c5 cf ...g.x.....V]D.. 0430 05 da f0 34 d4 ff 79 ce c1 d8 40 b5 e5 d3 ee 49 ...4..y...@....I 0440 ff f8 0c 3f f2 a7 bb 28 3c 43 2a 55 00 67 8f c4 ...?...( http [RST] Seq=838 Win=0 Len=0 Frame 468 (56 bytes on wire, 56 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 55348 (55348), Dst Port: http (80), Seq: 838, Len: 0 No. Time Source Destination Protocol Info 469 5.062431 141.3.161.43 193.99.144.85 TCP 48817 > http [FIN, ACK] Seq=1 Ack=1 Win=129 Len=0 TSV=627864 TSER=775974242 Frame 469 (68 bytes on wire, 68 bytes captured) Linux cooked capture Internet Protocol, Src: 141.3.161.43 (141.3.161.43), Dst: 193.99.144.85 (193.99.144.85) Transmission Control Protocol, Src Port: 48817 (48817), Dst Port: http (80), Seq: 1, Ack: 1, Len: 0