https://pastein.ru/t/5VS
Загрузка данных
n.razhev@n-razhev ~ % >....
tb_tso=$(/usr/sbin/sysctl -n net.inet.tcp.tso) || exit 1
echo "TCP TSO=$tb_tso"
[ "$tb_tso" = 0 ] || { echo 'Stop: TSO differs from the previous sample.'; exit 1; }
tb_route=$(/sbin/route -n get 172.21.0.1) || exit 1
printf '%s\n' "$tb_route" | awk '/route to:|gateway:|interface:/ {print}'
case "$tb_route" in
*'interface: utun10'*) ;;
*) echo 'Stop: corporate DNS is no longer on utun10.'; exit 1 ;;
esac
tb_flow() {
/usr/sbin/netstat -an -p tcp |
awk '/194[.]186[.]63[.]/ && /ESTABLISHED/ {print $4, $5}'
}
tb_before=$(tb_flow)
[ -n "$tb_before" ] || { echo 'Stop: no corporate TCP connection.'; exit 1; }
date -u
/usr/sbin/netstat -an -p tcp | awk '/194[.]186[.]63[.]/ && /ESTABLISHED/ {print}'
tb_pids=''
tb_cleanup() {
trap - EXIT
kill -INT $tb_pids 2>/dev/null || :
sleep 1
kill -KILL $tb_pids 2>/dev/null || :
wait $tb_pids 2>/dev/null || :
}
trap tb_cleanup EXIT
trap 'exit 130' HUP INT TERM
/usr/sbin/tcpdump -p --immediate-mode -l -nn -tttt -S -K -i bridge0 -y EN10MB -s 54 -c 160 'ip and tcp and net 194.186.63.0/24 and port 443 and host 192.168.77.2' &
tb_pids="$tb_pids $!"
/usr/sbin/tcpdump -p --immediate-mode -l -nn -tttt -q -K -i utun10 -y NULL -s 32 -c 8 'ip and udp and host 172.21.0.1 and port 53 and port 53053' &
tb_pids="$tb_pids $!"
sleep 2
echo 'Identified corporate DNS probe (source port 53053):'
/usr/bin/dig -b '0.0.0.0#53053' @172.21.0.1 www.apple.com A +time=5 +tries=1 +notcp +ignore +noall +comments +answer
sleep 5
/usr/sbin/netstat -an -p tcp | awk '/194[.]186[.]63[.]/ && /ESTABLISHED/ {print}'
if [ "$(tb_flow)" = "$tb_before" ]; then
echo 'Corporate TCP connection unchanged.'
else
echo 'Corporate TCP connection changed; comparison is limited.'
fi
date -u
echo 'Stopping both captures now. A capture that hit its packet cap covers only its printed interval.'
TB_DELIVERY
Password:
TCP TSO=0
route to: 172.21.0.1
interface: utun10
Tue Oct 6 14:53:06 UTC 2026
tcp4 0 87051 192.168.77.2.51926 194.186.63.24.443 ESTABLISHED
tcpdump: data link type NULL
tcpdump: data link type EN10MB
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on utun10, link-type NULL (BSD loopback), snapshot length 32 bytes
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on bridge0, link-type EN10MB (Ethernet), snapshot length 54 bytes
2026-10-06 14:53:06.185219 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [P.], seq 727747710:727748178, ack 4101467358, win 3363, options [ [|tcp]
2026-10-06 14:53:06.185416 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], ack 727748178, win 2816, options [ [|tcp]
2026-10-06 14:53:06.187253 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101468546, win 3354, options [ [|tcp]
2026-10-06 14:53:06.187350 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101475674:4101476862, ack 727748178, win 2816, options [ [|tcp]
2026-10-06 14:53:06.187369 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101476862:4101478050, ack 727748178, win 2816, options [ [|tcp]
2026-10-06 14:53:06.187383 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101470922, win 3338, options [ [|tcp]
2026-10-06 14:53:06.187424 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101478050:4101479238, ack 727748178, win 2816, options [ [|tcp]
2026-10-06 14:53:06.187434 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101479238:4101480426, ack 727748178, win 2816, options [ [|tcp]
2026-10-06 14:53:06.187447 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101480426:4101481614, ack 727748178, win 2816, options [ [|tcp]
2026-10-06 14:53:06.373818 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101473298, win 3354, options [ [|tcp]
2026-10-06 14:53:06.373891 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101481614:4101482802, ack 727748178, win 2816, options [ [|tcp]
2026-10-06 14:53:06.373901 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101482802:4101483990, ack 727748178, win 2816, options [ [|tcp]
2026-10-06 14:53:06.373903 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101483990:4101485178, ack 727748178, win 2816, options [ [|tcp]
2026-10-06 14:53:06.386162 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101475674, win 3354, options [ [|tcp]
2026-10-06 14:53:06.386211 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101485178:4101486366, ack 727748178, win 2816, options [ [|tcp]
2026-10-06 14:53:06.386220 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101486366:4101487554, ack 727748178, win 2816, options [ [|tcp]
2026-10-06 14:53:06.550970 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [P.], seq 727748178:727748646, ack 4101475674, win 3363, options [ [|tcp]
2026-10-06 14:53:06.550977 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101476862, win 3354, options [ [|tcp]
2026-10-06 14:53:06.550978 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101479238, win 3346, options [ [|tcp]
2026-10-06 14:53:06.550978 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101481614, win 3354, options [ [|tcp]
2026-10-06 14:53:06.551091 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], ack 727748646, win 2809, options [ [|tcp]
2026-10-06 14:53:06.551168 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101487554:4101488742, ack 727748646, win 2809, options [ [|tcp]
2026-10-06 14:53:06.551176 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101488742:4101489930, ack 727748646, win 2809, options [ [|tcp]
2026-10-06 14:53:06.551202 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101489930:4101491118, ack 727748646, win 2809, options [ [|tcp]
2026-10-06 14:53:06.551207 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101491118:4101492306, ack 727748646, win 2809, options [ [|tcp]
2026-10-06 14:53:06.551227 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101492306:4101493494, ack 727748646, win 2809, options [ [|tcp]
2026-10-06 14:53:06.551230 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101493494:4101494682, ack 727748646, win 2809, options [ [|tcp]
2026-10-06 14:53:06.551232 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101494682:4101495870, ack 727748646, win 2809, options [ [|tcp]
2026-10-06 14:53:06.717527 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101481614, win 3354, options [ [|tcp]
2026-10-06 14:53:06.717534 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101482802, win 3345, options [ [|tcp]
2026-10-06 14:53:06.717535 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101485178, win 3346, options [ [|tcp]
2026-10-06 14:53:06.717644 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101495870:4101497058, ack 727748646, win 2816, options [ [|tcp]
2026-10-06 14:53:06.717727 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101497058:4101498246, ack 727748646, win 2816, options [ [|tcp]
2026-10-06 14:53:06.717734 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101498246:4101499434, ack 727748646, win 2816, options [ [|tcp]
2026-10-06 14:53:06.717736 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101499434:4101500622, ack 727748646, win 2816, options [ [|tcp]
2026-10-06 14:53:06.731279 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101487554, win 3354, options [ [|tcp]
2026-10-06 14:53:06.731397 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101500622:4101501810, ack 727748646, win 2816, options [ [|tcp]
2026-10-06 14:53:06.731415 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101501810:4101502998, ack 727748646, win 2816, options [ [|tcp]
2026-10-06 14:53:06.893950 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [P.], seq 727748646:727749219, ack 4101488742, win 3354, options [ [|tcp]
2026-10-06 14:53:06.894085 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101502998:4101504186, ack 727749219, win 2808, options [ [|tcp]
2026-10-06 14:53:06.894124 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101504186:4101505374, ack 727749219, win 2808, options [ [|tcp]
2026-10-06 14:53:06.896089 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101488742, win 3363, options [ [|tcp]
2026-10-06 14:53:06.897669 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101488742, win 3363, options [ [|tcp]
2026-10-06 14:53:06.897676 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101488742, win 3363, options [ [|tcp]
2026-10-06 14:53:06.897677 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101492306, win 3338, options [ [|tcp]
2026-10-06 14:53:06.897677 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101493494, win 3354, options [ [|tcp]
2026-10-06 14:53:06.897752 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101505374:4101506562, ack 727749219, win 2816, options [ [|tcp]
2026-10-06 14:53:06.897805 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101506562:4101507750, ack 727749219, win 2816, options [ [|tcp]
2026-10-06 14:53:06.897848 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101507750:4101508938, ack 727749219, win 2816, options [ [|tcp]
2026-10-06 14:53:06.897855 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101508938:4101510126, ack 727749219, win 2816, options [ [|tcp]
2026-10-06 14:53:06.897878 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101510126:4101511314, ack 727749219, win 2816, options [ [|tcp]
2026-10-06 14:53:06.898444 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101495870, win 3346, options [ [|tcp]
2026-10-06 14:53:06.898533 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101511314:4101512502, ack 727749219, win 2816, options [ [|tcp]
2026-10-06 14:53:06.898547 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101512502:4101513690, ack 727749219, win 2816, options [ [|tcp]
2026-10-06 14:53:06.898548 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101513690:4101514878, ack 727749219, win 2816, options [ [|tcp]
2026-10-06 14:53:07.074578 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101495870, win 3354, options [ [|tcp]
2026-10-06 14:53:07.074662 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101497058, win 3345, options [ [|tcp]
2026-10-06 14:53:07.074663 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101497058, win 3345, options [ [|tcp]
2026-10-06 14:53:07.074664 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101500622, win 3338, options [ [|tcp]
2026-10-06 14:53:07.074730 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101514878:4101516066, ack 727749219, win 2816, options [ [|tcp]
2026-10-06 14:53:07.074784 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101516066:4101517254, ack 727749219, win 2816, options [ [|tcp]
2026-10-06 14:53:07.074826 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101517254:4101518442, ack 727749219, win 2816, options [ [|tcp]
2026-10-06 14:53:07.074832 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101518442:4101519630, ack 727749219, win 2816, options [ [|tcp]
2026-10-06 14:53:07.074834 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101519630:4101520818, ack 727749219, win 2816, options [ [|tcp]
2026-10-06 14:53:07.074902 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101502998, win 3354, options [ [|tcp]
2026-10-06 14:53:07.074980 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101520818:4101522006, ack 727749219, win 2816, options [ [|tcp]
2026-10-06 14:53:07.074994 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101522006:4101523194, ack 727749219, win 2816, options [ [|tcp]
2026-10-06 14:53:07.074997 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101523194:4101524382, ack 727749219, win 2816, options [ [|tcp]
2026-10-06 14:53:07.238283 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [P.], seq 727749219:727749687, ack 4101504186, win 3354, options [ [|tcp]
2026-10-06 14:53:07.238394 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101524382:4101525570, ack 727749687, win 2809, options [ [|tcp]
2026-10-06 14:53:07.241117 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101506562, win 3354, options [ [|tcp]
2026-10-06 14:53:07.241123 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101507750, win 3354, options [ [|tcp]
2026-10-06 14:53:07.241197 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101525570:4101526758, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.241209 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101526758:4101527946, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.241212 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101527946:4101529134, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.241241 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101529134:4101530322, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.242252 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101507750, win 3354, options [ [|tcp]
2026-10-06 14:53:07.242317 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101530322:4101531510, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.243594 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101507750, win 3354, options [ [|tcp]
2026-10-06 14:53:07.243649 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101531510:4101532698, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.249719 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101510126, win 3336, options [ [|tcp]
2026-10-06 14:53:07.249727 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101511314, win 3327, options [ [|tcp]
2026-10-06 14:53:07.249728 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101514878, win 3314, options [ [|tcp]
2026-10-06 14:53:07.249818 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101532698:4101533886, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.249866 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101533886:4101535074, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.249898 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101535074:4101536262, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.249906 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101536262:4101537450, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.249909 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101537450:4101538638, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.249910 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101538638:4101539826, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.425614 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101517254, win 3354, options [ [|tcp]
2026-10-06 14:53:07.425626 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101517254, win 3354, options [ [|tcp]
2026-10-06 14:53:07.425627 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101517254, win 3354, options [ [|tcp]
2026-10-06 14:53:07.425627 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101518442, win 3345, options [ [|tcp]
2026-10-06 14:53:07.425748 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101539826:4101541014, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.425767 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101541014:4101542202, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.425807 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101542202:4101543390, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.425832 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101543390:4101544578, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.425878 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101518442, win 3345, options [ [|tcp]
2026-10-06 14:53:07.425879 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101524382, win 3322, options [ [|tcp]
2026-10-06 14:53:07.425940 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101544578:4101545766, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.425952 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101545766:4101546954, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.425954 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101546954:4101548142, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.425956 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101548142:4101549330, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.425958 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101549330:4101550518, ack 727749687, win 2816, options [ [|tcp]
2026-10-06 14:53:07.601156 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [P.], seq 727749687:727750335, ack 4101525570, win 3354, options [ [|tcp]
2026-10-06 14:53:07.601161 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101525570, win 3354, options [ [|tcp]
2026-10-06 14:53:07.601162 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101526758, win 3345, options [ [|tcp]
2026-10-06 14:53:07.601162 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101527946, win 3345, options [ [|tcp]
2026-10-06 14:53:07.601163 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101529134, win 3345, options [ [|tcp]
2026-10-06 14:53:07.601164 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101531510, win 3338, options [ [|tcp]
2026-10-06 14:53:07.601164 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101533886, win 3354, options [ [|tcp]
2026-10-06 14:53:07.601291 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101550518:4101551706, ack 727750335, win 2806, options [ [|tcp]
2026-10-06 14:53:07.601327 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101551706:4101552894, ack 727750335, win 2806, options [ [|tcp]
2026-10-06 14:53:07.601366 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101552894:4101554082, ack 727750335, win 2806, options [ [|tcp]
2026-10-06 14:53:07.601391 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [P.], seq 4101554082:4101555250, ack 727750335, win 2806, options [ [|tcp]
2026-10-06 14:53:07.601422 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101533886, win 3354, options [ [|tcp]
2026-10-06 14:53:07.601423 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101536262, win 3337, options [ [|tcp]
2026-10-06 14:53:07.601424 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101536262, win 3346, options [ [|tcp]
2026-10-06 14:53:07.601425 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101539826, win 3338, options [ [|tcp]
2026-10-06 14:53:07.773272 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101542202, win 3354, options [ [|tcp]
2026-10-06 14:53:07.773713 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101542202, win 3354, options [ [|tcp]
2026-10-06 14:53:07.773720 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101542202, win 3354, options [ [|tcp]
2026-10-06 14:53:07.773721 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101542202, win 3354, options [ [|tcp]
2026-10-06 14:53:07.773722 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101542202, win 3354, options [ [|tcp]
2026-10-06 14:53:07.773820 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [P.], seq 4101555250:4101555316, ack 727750335, win 2816, options [ [|tcp]
2026-10-06 14:53:07.773876 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101542202:4101543390, ack 727750335, win 2816, options [ [|tcp]
2026-10-06 14:53:07.773901 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101545766, win 3327, options [ [|tcp]
2026-10-06 14:53:07.773903 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101550518, win 3330, options [ [|tcp]
2026-10-06 14:53:07.773931 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101545766:4101546954, ack 727750335, win 2816, options [ [|tcp]
2026-10-06 14:53:07.773969 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101550518:4101551706, ack 727750335, win 2816, options [ [|tcp]
2026-10-06 14:53:07.953913 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [P.], seq 727750335:727751115, ack 4101551706, win 3354, options [ [|tcp]
2026-10-06 14:53:07.954003 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101551706:4101552894, ack 727750335, win 2816, options [ [|tcp]
2026-10-06 14:53:07.954059 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], ack 727751115, win 2804, options [ [|tcp]
2026-10-06 14:53:07.954084 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101554082, win 3346, options [ [|tcp]
2026-10-06 14:53:07.954086 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], seq 727751115:727752343, ack 4101555250, win 3363, options [ [|tcp]
2026-10-06 14:53:07.954120 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], seq 4101554082:4101555270, ack 727751115, win 2804, options [ [|tcp]
2026-10-06 14:53:07.954154 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [P.], seq 4101555250:4101555316, ack 727751115, win 2804, options [ [|tcp]
2026-10-06 14:53:07.954859 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], seq 727752343:727753571, ack 4101555250, win 3363, options [ [|tcp]
2026-10-06 14:53:07.954911 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], ack 727753571, win 2793, options [ [|tcp]
2026-10-06 14:53:07.956866 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.W], seq 4101555316:4101556504, ack 727753571, win 2816, options [ [|tcp]
2026-10-06 14:53:07.957299 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [P.], seq 4101556504:4101556885, ack 727753571, win 2816, options [ [|tcp]
Identified corporate DNS probe (source port 53053):
2026-10-06 14:53:08.066495 IP 172.21.49.196.53053 > 172.21.0.1.53: UDP, length 42
2026-10-06 14:53:08.124056 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101555250, win 3363, options [ [|tcp]
2026-10-06 14:53:08.124229 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101555250, win 3363, options [ [|tcp]
2026-10-06 14:53:08.124325 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101555316, win 3363, options [ [|tcp]
2026-10-06 14:53:08.124413 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101555316, win 3363, options [ [|tcp]
2026-10-06 14:53:08.124473 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [P.], seq 4101556885:4101557354, ack 727753571, win 2816, options [ [|tcp]
2026-10-06 14:53:08.302505 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101555316, win 3363, options [ [|tcp]
2026-10-06 14:53:08.302578 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [P.], seq 727753571:727753932, ack 4101555316, win 3363, options [ [|tcp]
2026-10-06 14:53:08.302650 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101555316, win 3363, options [ [|tcp]
2026-10-06 14:53:08.302713 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101555316, win 3363, options [ [|tcp]
2026-10-06 14:53:08.302715 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101556504, win 3354, options [ [|tcp]
2026-10-06 14:53:08.302879 IP 192.168.77.2.51926 > 194.186.63.24.443: Flags [.], ack 727753932, win 2816, options [ [|tcp]
2026-10-06 14:53:08.302943 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101556504, win 3363, options [ [|tcp]
2026-10-06 14:53:08.302944 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101556885, win 3361, options [ [|tcp]
2026-10-06 14:53:08.467804 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], ack 4101557354, win 3358, options [ [|tcp]
2026-10-06 14:53:08.467810 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], seq 727753932:727755160, ack 4101557354, win 3363, options [ [|tcp]
2026-10-06 14:53:08.467811 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], seq 727755160:727756388, ack 4101557354, win 3363, options [ [|tcp]
2026-10-06 14:53:08.467812 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], seq 727756388:727757616, ack 4101557354, win 3363, options [ [|tcp]
2026-10-06 14:53:08.467813 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], seq 727757616:727758844, ack 4101557354, win 3363, options [ [|tcp]
2026-10-06 14:53:08.467813 IP 194.186.63.24.443 > 192.168.77.2.51926: Flags [.], seq 727758844:727760072, ack 4101557354, win 3363, options [ [|tcp]
160 packets captured
247 packets received by filter
0 packets dropped by kernel
2026-10-06 14:53:08.469520 IP 172.21.0.1.53 > 172.21.49.196.53053: UDP, length 504
; <<>> DiG 9.10.6 <<>> -b 0.0.0.0#53053 @172.21.0.1 www.apple.com A +time=5 +tries=1 +notcp +ignore +noall +comments +answer
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4849
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 8, ADDITIONAL: 10
;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; ANSWER SECTION:
www.apple.com. 91 IN CNAME www-apple-com.v.aaplimg.com.
www-apple-com.v.aaplimg.com. 96 IN CNAME www.apple.com.edgekey.net.
www.apple.com.edgekey.net. 96 IN CNAME e6858.dsce9.akamaiedge.net.
e6858.dsce9.akamaiedge.net. 19 IN A 23.12.156.37
tcp4 0 535 192.168.77.2.51926 194.186.63.24.443 ESTABLISHED
Corporate TCP connection unchanged.
Tue Oct 6 14:53:13 UTC 2026
Stopping both captures now. A capture that hit its packet cap covers only its printed interval.
2 packets captured
210 packets received by filter
0 packets dropped by kernel
n.razhev@n-razhev ~ %
