---

11883	1932.267596700	130.49.160.11	192.168.0.180	TCP	54	8388 → 53988 [FIN, ACK] Seq=3678 Ack=726 Win=45056 Len=0
11884	1932.267737300	192.168.0.180	130.49.160.11	TCP	54	53988 → 8388 [ACK] Seq=726 Ack=3679 Win=130560 Len=0
11885	1933.763263700	130.49.160.11	192.168.0.180	TCP	54	[TCP Keep-Alive] 8388 → 52764 [ACK] Seq=13573 Ack=7489 Win=45056 Len=0
11886	1933.763317100	192.168.0.180	130.49.160.11	TCP	54	[TCP Keep-Alive ACK] 52764 → 8388 [ACK] Seq=7489 Ack=13574 Win=130560 Len=0
11887	1934.999439900	192.168.0.180	130.49.160.11	TCP	66	53990 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
11888	1935.066483200	130.49.160.11	192.168.0.180	TCP	66	8388 → 53990 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
11889	1935.066621900	192.168.0.180	130.49.160.11	TCP	54	53990 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
11890	1935.067055800	192.168.0.180	130.49.160.11	TCP	785	53990 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=731
11891	1935.133327600	130.49.160.11	192.168.0.180	TCP	54	8388 → 53990 [ACK] Seq=1 Ack=732 Win=45056 Len=0
11892	1935.164353500	130.49.160.11	192.168.0.180	TCP	1274	8388 → 53990 [ACK] Seq=1 Ack=732 Win=45056 Len=1220
11893	1935.164414000	130.49.160.11	192.168.0.180	TCP	1274	8388 → 53990 [PSH, ACK] Seq=1221 Ack=732 Win=45056 Len=1220
11894	1935.164443600	192.168.0.180	130.49.160.11	TCP	54	53990 → 8388 [ACK] Seq=732 Ack=2441 Win=131584 Len=0
11895	1935.164532500	130.49.160.11	192.168.0.180	TCP	295	8388 → 53990 [PSH, ACK] Seq=2441 Ack=732 Win=45056 Len=241
11896	1935.167288800	192.168.0.180	130.49.160.11	TCP	152	53990 → 8388 [PSH, ACK] Seq=732 Ack=2682 Win=131328 Len=98
11897	1935.167374100	192.168.0.180	130.49.160.11	TCP	237	53990 → 8388 [PSH, ACK] Seq=830 Ack=2682 Win=131328 Len=183
11898	1935.240938200	130.49.160.11	192.168.0.180	TCP	1051	8388 → 53990 [PSH, ACK] Seq=2682 Ack=1013 Win=45056 Len=997
11899	1935.241712500	192.168.0.180	130.49.160.11	TCP	54	53990 → 8388 [FIN, ACK] Seq=1013 Ack=3679 Win=131584 Len=0
11900	1935.243798500	130.49.160.11	192.168.0.180	TCP	54	8388 → 53990 [ACK] Seq=2682 Ack=1013 Win=45056 Len=0
11901	1935.243809600	192.168.0.180	130.49.160.11	TCP	54	[TCP Dup ACK 11899#1] 53990 → 8388 [ACK] Seq=1014 Ack=3679 Win=131584 Len=0
11902	1935.300640900	130.49.160.11	192.168.0.180	TCP	54	8388 → 53990 [FIN, ACK] Seq=3679 Ack=1014 Win=45056 Len=0
11903	1935.300700900	192.168.0.180	130.49.160.11	TCP	54	53990 → 8388 [ACK] Seq=1014 Ack=3680 Win=131584 Len=0
11904	1937.999694400	192.168.0.180	130.49.160.11	TCP	66	53992 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
11905	1938.059679700	130.49.160.11	192.168.0.180	TCP	66	8388 → 53992 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
11906	1938.059754600	192.168.0.180	130.49.160.11	TCP	54	53992 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
11907	1938.059960300	192.168.0.180	130.49.160.11	TCP	621	53992 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=567
11908	1938.123592100	130.49.160.11	192.168.0.180	TCP	54	8388 → 53992 [ACK] Seq=1 Ack=568 Win=45056 Len=0
11909	1938.127369400	130.49.160.11	192.168.0.180	TCP	2494	8388 → 53992 [PSH, ACK] Seq=1 Ack=568 Win=45056 Len=2440
11910	1938.127370600	130.49.160.11	192.168.0.180	TCP	294	8388 → 53992 [PSH, ACK] Seq=2441 Ack=568 Win=45056 Len=240
11911	1938.127424700	192.168.0.180	130.49.160.11	TCP	54	53992 → 8388 [ACK] Seq=568 Ack=2681 Win=131584 Len=0
11912	1938.130606800	192.168.0.180	130.49.160.11	TCP	152	53992 → 8388 [PSH, ACK] Seq=568 Ack=2681 Win=131584 Len=98
11913	1938.130655900	192.168.0.180	130.49.160.11	TCP	237	53992 → 8388 [PSH, ACK] Seq=666 Ack=2681 Win=131584 Len=183
11914	1938.193167900	130.49.160.11	192.168.0.180	TCP	54	8388 → 53992 [ACK] Seq=2681 Ack=849 Win=45056 Len=0
11915	1938.198584500	130.49.160.11	192.168.0.180	TCP	1051	8388 → 53992 [PSH, ACK] Seq=2681 Ack=849 Win=45056 Len=997
11916	1938.199438000	192.168.0.180	130.49.160.11	TCP	54	53992 → 8388 [FIN, ACK] Seq=849 Ack=3678 Win=130560 Len=0
11917	1938.253446700	130.49.160.11	192.168.0.180	TCP	54	8388 → 53992 [FIN, ACK] Seq=3678 Ack=850 Win=45056 Len=0
11918	1938.253559500	192.168.0.180	130.49.160.11	TCP	54	53992 → 8388 [ACK] Seq=850 Ack=3679 Win=130560 Len=0
11919	1941.000806500	192.168.0.180	130.49.160.11	TCP	66	53994 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
11920	1941.077593000	130.49.160.11	192.168.0.180	TCP	66	8388 → 53994 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
11921	1941.077673800	192.168.0.180	130.49.160.11	TCP	54	53994 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
11922	1941.077896400	192.168.0.180	130.49.160.11	TCP	939	53994 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=885
11923	1941.144113700	130.49.160.11	192.168.0.180	TCP	54	8388 → 53994 [ACK] Seq=1 Ack=886 Win=45056 Len=0
11924	1941.153357000	130.49.160.11	192.168.0.180	TCP	2494	8388 → 53994 [PSH, ACK] Seq=1 Ack=886 Win=45056 Len=2440
11925	1941.153358100	130.49.160.11	192.168.0.180	TCP	294	8388 → 53994 [PSH, ACK] Seq=2441 Ack=886 Win=45056 Len=240
11926	1941.153460500	192.168.0.180	130.49.160.11	TCP	54	53994 → 8388 [ACK] Seq=886 Ack=2681 Win=131584 Len=0
11927	1941.156624500	192.168.0.180	130.49.160.11	TCP	152	53994 → 8388 [PSH, ACK] Seq=886 Ack=2681 Win=131584 Len=98
11928	1941.157118100	192.168.0.180	130.49.160.11	TCP	237	53994 → 8388 [PSH, ACK] Seq=984 Ack=2681 Win=131584 Len=183
11929	1941.223550000	130.49.160.11	192.168.0.180	TCP	1051	8388 → 53994 [PSH, ACK] Seq=2681 Ack=1167 Win=45056 Len=997
11930	1941.224670200	192.168.0.180	130.49.160.11	TCP	54	53994 → 8388 [FIN, ACK] Seq=1167 Ack=3678 Win=130560 Len=0
11931	1941.233939000	130.49.160.11	192.168.0.180	TCP	54	8388 → 53994 [ACK] Seq=2681 Ack=1167 Win=45056 Len=0
11932	1941.233956100	192.168.0.180	130.49.160.11	TCP	54	[TCP Dup ACK 11930#1] 53994 → 8388 [ACK] Seq=1168 Ack=3678 Win=130560 Len=0
11933	1941.278305400	130.49.160.11	192.168.0.180	TCP	54	8388 → 53994 [FIN, ACK] Seq=3678 Ack=1168 Win=45056 Len=0
11934	1941.278411700	192.168.0.180	130.49.160.11	TCP	54	53994 → 8388 [ACK] Seq=1168 Ack=3679 Win=130560 Len=0
11935	1943.999631900	192.168.0.180	130.49.160.11	TCP	66	53996 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
11936	1944.059775100	130.49.160.11	192.168.0.180	TCP	66	8388 → 53996 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
11937	1944.059936600	192.168.0.180	130.49.160.11	TCP	54	53996 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
11938	1944.060334800	192.168.0.180	130.49.160.11	TCP	1108	53996 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=1054
11939	1944.186726400	130.49.160.11	192.168.0.180	TCP	54	8388 → 53996 [ACK] Seq=1 Ack=1055 Win=49152 Len=0
11940	1944.186940000	130.49.160.11	192.168.0.180	TCP	1274	8388 → 53996 [ACK] Seq=1 Ack=1055 Win=49152 Len=1220
11941	1944.187207900	130.49.160.11	192.168.0.180	TCP	1274	8388 → 53996 [PSH, ACK] Seq=1221 Ack=1055 Win=49152 Len=1220
11942	1944.187208600	130.49.160.11	192.168.0.180	TCP	295	8388 → 53996 [PSH, ACK] Seq=2441 Ack=1055 Win=49152 Len=241
11943	1944.187245400	192.168.0.180	130.49.160.11	TCP	54	53996 → 8388 [ACK] Seq=1055 Ack=2682 Win=131584 Len=0
11944	1944.190135700	192.168.0.180	130.49.160.11	TCP	152	53996 → 8388 [PSH, ACK] Seq=1055 Ack=2682 Win=131584 Len=98
11945	1944.190184800	192.168.0.180	130.49.160.11	TCP	237	53996 → 8388 [PSH, ACK] Seq=1153 Ack=2682 Win=131584 Len=183
11946	1944.253645800	130.49.160.11	192.168.0.180	TCP	54	8388 → 53996 [ACK] Seq=2682 Ack=1336 Win=49152 Len=0
11947	1944.253659500	130.49.160.11	192.168.0.180	TCP	1052	8388 → 53996 [PSH, ACK] Seq=2682 Ack=1336 Win=49152 Len=998
11948	1944.255095300	192.168.0.180	130.49.160.11	TCP	54	53996 → 8388 [FIN, ACK] Seq=1336 Ack=3680 Win=130560 Len=0
11949	1944.311707700	130.49.160.11	192.168.0.180	TCP	54	8388 → 53996 [FIN, ACK] Seq=3680 Ack=1337 Win=49152 Len=0
11950	1944.311760600	192.168.0.180	130.49.160.11	TCP	54	53996 → 8388 [ACK] Seq=1337 Ack=3681 Win=130560 Len=0
11951	1946.070768100	TPLink_b7:1d:f9	LiteonTechno_78:06:fb	ARP	42	Who has 192.168.0.180? Tell 192.168.0.1
11952	1946.070782700	LiteonTechno_78:06:fb	TPLink_b7:1d:f9	ARP	42	192.168.0.180 is at 74:4c:a1:78:06:fb
11953	1946.999600800	192.168.0.180	130.49.160.11	TCP	66	53998 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
11954	1947.059795100	130.49.160.11	192.168.0.180	TCP	66	8388 → 53998 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
11955	1947.060007600	192.168.0.180	130.49.160.11	TCP	54	53998 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
11956	1947.060363900	192.168.0.180	130.49.160.11	TCP	633	53998 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=579
11957	1947.123244400	130.49.160.11	192.168.0.180	TCP	54	8388 → 53998 [ACK] Seq=1 Ack=580 Win=45056 Len=0
11958	1947.131907800	130.49.160.11	192.168.0.180	TCP	1274	8388 → 53998 [ACK] Seq=1 Ack=580 Win=45056 Len=1220
11959	1947.132134700	130.49.160.11	192.168.0.180	TCP	1274	8388 → 53998 [PSH, ACK] Seq=1221 Ack=580 Win=45056 Len=1220
11960	1947.132135600	130.49.160.11	192.168.0.180	TCP	293	8388 → 53998 [PSH, ACK] Seq=2441 Ack=580 Win=45056 Len=239
11961	1947.132168300	192.168.0.180	130.49.160.11	TCP	54	53998 → 8388 [ACK] Seq=580 Ack=2680 Win=131584 Len=0
11962	1947.134985900	192.168.0.180	130.49.160.11	TCP	152	53998 → 8388 [PSH, ACK] Seq=580 Ack=2680 Win=131584 Len=98
11963	1947.135088400	192.168.0.180	130.49.160.11	TCP	237	53998 → 8388 [PSH, ACK] Seq=678 Ack=2680 Win=131584 Len=183
11964	1947.203549500	130.49.160.11	192.168.0.180	TCP	54	8388 → 53998 [ACK] Seq=2680 Ack=861 Win=45056 Len=0
11965	1947.203553100	130.49.160.11	192.168.0.180	TCP	1051	8388 → 53998 [PSH, ACK] Seq=2680 Ack=861 Win=45056 Len=997
11966	1947.204848000	192.168.0.180	130.49.160.11	TCP	54	53998 → 8388 [FIN, ACK] Seq=861 Ack=3677 Win=130560 Len=0
11967	1947.262911200	130.49.160.11	192.168.0.180	TCP	54	8388 → 53998 [FIN, ACK] Seq=3677 Ack=862 Win=45056 Len=0
11968	1947.263000000	192.168.0.180	130.49.160.11	TCP	54	53998 → 8388 [ACK] Seq=862 Ack=3678 Win=130560 Len=0
11969	1948.863336800	130.49.160.11	192.168.0.180	TCP	54	[TCP Keep-Alive] 8388 → 52764 [ACK] Seq=13573 Ack=7489 Win=45056 Len=0
11970	1948.863363100	192.168.0.180	130.49.160.11	TCP	54	[TCP Keep-Alive ACK] 52764 → 8388 [ACK] Seq=7489 Ack=13574 Win=130560 Len=0
11971	1950.000257600	192.168.0.180	130.49.160.11	TCP	66	54000 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
11972	1950.085391700	130.49.160.11	192.168.0.180	TCP	66	8388 → 54000 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
11973	1950.085476500	192.168.0.180	130.49.160.11	TCP	54	54000 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
11974	1950.085722900	192.168.0.180	130.49.160.11	TCP	569	54000 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=515
11975	1950.264534400	130.49.160.11	192.168.0.180	TCP	1274	8388 → 54000 [ACK] Seq=1 Ack=516 Win=45056 Len=1220
11976	1950.264535200	130.49.160.11	192.168.0.180	TCP	54	8388 → 54000 [ACK] Seq=1 Ack=516 Win=45056 Len=0
11977	1950.264536400	130.49.160.11	192.168.0.180	TCP	1274	8388 → 54000 [PSH, ACK] Seq=1221 Ack=516 Win=45056 Len=1220
11978	1950.264683700	192.168.0.180	130.49.160.11	TCP	54	54000 → 8388 [ACK] Seq=516 Ack=1221 Win=131584 Len=0
11979	1950.264779400	192.168.0.180	130.49.160.11	TCP	54	54000 → 8388 [ACK] Seq=516 Ack=2441 Win=131584 Len=0
11980	1950.264826800	130.49.160.11	192.168.0.180	TCP	295	8388 → 54000 [PSH, ACK] Seq=2441 Ack=516 Win=45056 Len=241
11981	1950.268077600	192.168.0.180	130.49.160.11	TCP	152	54000 → 8388 [PSH, ACK] Seq=516 Ack=2682 Win=131328 Len=98
11982	1950.268142100	192.168.0.180	130.49.160.11	TCP	237	54000 → 8388 [PSH, ACK] Seq=614 Ack=2682 Win=131328 Len=183
11983	1950.330168600	130.49.160.11	192.168.0.180	TCP	295	[TCP Spurious Retransmission] 8388 → 54000 [PSH, ACK] Seq=2441 Ack=516 Win=45056 Len=241
11984	1950.330237500	192.168.0.180	130.49.160.11	TCP	66	[TCP Dup ACK 11981#1] 54000 → 8388 [ACK] Seq=797 Ack=2682 Win=131328 Len=0 SLE=2441 SRE=2682
11985	1950.344121800	130.49.160.11	192.168.0.180	TCP	1050	8388 → 54000 [PSH, ACK] Seq=2682 Ack=797 Win=45056 Len=996
11986	1950.344122200	130.49.160.11	192.168.0.180	TCP	54	8388 → 54000 [ACK] Seq=2682 Ack=797 Win=45056 Len=0
11987	1950.344230300	192.168.0.180	130.49.160.11	TCP	54	54000 → 8388 [ACK] Seq=797 Ack=3678 Win=131584 Len=0
11988	1950.345329100	192.168.0.180	130.49.160.11	TCP	54	54000 → 8388 [FIN, ACK] Seq=797 Ack=3678 Win=131584 Len=0
11989	1950.402828100	130.49.160.11	192.168.0.180	TCP	54	8388 → 54000 [FIN, ACK] Seq=3678 Ack=798 Win=45056 Len=0
11990	1950.402915200	192.168.0.180	130.49.160.11	TCP	54	54000 → 8388 [ACK] Seq=798 Ack=3679 Win=131584 Len=0
11991	1953.000642800	192.168.0.180	130.49.160.11	TCP	66	54002 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
11992	1953.059833500	130.49.160.11	192.168.0.180	TCP	66	8388 → 54002 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
11993	1953.059908100	192.168.0.180	130.49.160.11	TCP	54	54002 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
11994	1953.060196600	192.168.0.180	130.49.160.11	TCP	494	54002 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=440
11995	1953.129415900	130.49.160.11	192.168.0.180	TCP	2494	8388 → 54002 [PSH, ACK] Seq=1 Ack=441 Win=45056 Len=2440
11996	1953.129417300	130.49.160.11	192.168.0.180	TCP	294	8388 → 54002 [PSH, ACK] Seq=2441 Ack=441 Win=45056 Len=240
11997	1953.129499900	192.168.0.180	130.49.160.11	TCP	54	54002 → 8388 [ACK] Seq=441 Ack=2681 Win=131584 Len=0
11998	1953.132036300	192.168.0.180	130.49.160.11	TCP	152	54002 → 8388 [PSH, ACK] Seq=441 Ack=2681 Win=131584 Len=98
11999	1953.132093400	192.168.0.180	130.49.160.11	TCP	237	54002 → 8388 [PSH, ACK] Seq=539 Ack=2681 Win=131584 Len=183
12000	1953.132890800	130.49.160.11	192.168.0.180	TCP	54	8388 → 54002 [ACK] Seq=1 Ack=441 Win=45056 Len=0
12001	1953.132899600	192.168.0.180	130.49.160.11	TCP	54	[TCP Dup ACK 11997#1] 54002 → 8388 [ACK] Seq=722 Ack=2681 Win=131584 Len=0
12002	1953.198636300	130.49.160.11	192.168.0.180	TCP	54	8388 → 54002 [ACK] Seq=2681 Ack=722 Win=45056 Len=0
12003	1953.200641200	130.49.160.11	192.168.0.180	TCP	1052	8388 → 54002 [PSH, ACK] Seq=2681 Ack=722 Win=45056 Len=998
12004	1953.201316600	192.168.0.180	130.49.160.11	TCP	54	54002 → 8388 [FIN, ACK] Seq=722 Ack=3679 Win=130560 Len=0
12005	1953.258164000	130.49.160.11	192.168.0.180	TCP	54	8388 → 54002 [FIN, ACK] Seq=3679 Ack=723 Win=45056 Len=0
12006	1953.258214500	192.168.0.180	130.49.160.11	TCP	54	54002 → 8388 [ACK] Seq=723 Ack=3680 Win=130560 Len=0
12007	1956.000178700	192.168.0.180	130.49.160.11	TCP	66	54004 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12008	1956.060758300	130.49.160.11	192.168.0.180	TCP	66	8388 → 54004 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
12009	1956.060840800	192.168.0.180	130.49.160.11	TCP	54	54004 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
12010	1956.061055300	192.168.0.180	130.49.160.11	TCP	1018	54004 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=964
12011	1956.133008700	130.49.160.11	192.168.0.180	TCP	54	8388 → 54004 [ACK] Seq=1 Ack=965 Win=49152 Len=0
12012	1956.133366100	130.49.160.11	192.168.0.180	TCP	1274	8388 → 54004 [ACK] Seq=1 Ack=965 Win=49152 Len=1220
12013	1956.133821700	130.49.160.11	192.168.0.180	TCP	1274	8388 → 54004 [PSH, ACK] Seq=1221 Ack=965 Win=49152 Len=1220
12014	1956.133822800	130.49.160.11	192.168.0.180	TCP	294	8388 → 54004 [PSH, ACK] Seq=2441 Ack=965 Win=49152 Len=240
12015	1956.133850700	192.168.0.180	130.49.160.11	TCP	54	54004 → 8388 [ACK] Seq=965 Ack=2681 Win=131584 Len=0
12016	1956.136563000	192.168.0.180	130.49.160.11	TCP	152	54004 → 8388 [PSH, ACK] Seq=965 Ack=2681 Win=131584 Len=98
12017	1956.136626900	192.168.0.180	130.49.160.11	TCP	237	54004 → 8388 [PSH, ACK] Seq=1063 Ack=2681 Win=131584 Len=183
12018	1956.203328200	130.49.160.11	192.168.0.180	TCP	54	8388 → 54004 [ACK] Seq=2681 Ack=1246 Win=49152 Len=0
12019	1956.203333100	130.49.160.11	192.168.0.180	TCP	1051	8388 → 54004 [PSH, ACK] Seq=2681 Ack=1246 Win=49152 Len=997
12020	1956.204735300	192.168.0.180	130.49.160.11	TCP	54	54004 → 8388 [FIN, ACK] Seq=1246 Ack=3678 Win=130560 Len=0
12021	1956.261759100	130.49.160.11	192.168.0.180	TCP	54	8388 → 54004 [FIN, ACK] Seq=3678 Ack=1247 Win=49152 Len=0
12022	1956.262034200	192.168.0.180	130.49.160.11	TCP	54	54004 → 8388 [ACK] Seq=1247 Ack=3679 Win=130560 Len=0
12023	1958.999823600	192.168.0.180	130.49.160.11	TCP	66	54006 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12024	1959.173755300	130.49.160.11	192.168.0.180	TCP	66	8388 → 54006 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
12025	1959.173846300	192.168.0.180	130.49.160.11	TCP	54	54006 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
12026	1959.174072700	192.168.0.180	130.49.160.11	TCP	527	54006 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=473
12027	1959.253489300	130.49.160.11	192.168.0.180	TCP	54	8388 → 54006 [ACK] Seq=1 Ack=474 Win=45056 Len=0
12028	1959.260774300	130.49.160.11	192.168.0.180	TCP	2494	8388 → 54006 [PSH, ACK] Seq=1 Ack=474 Win=45056 Len=2440
12029	1959.260776500	130.49.160.11	192.168.0.180	TCP	294	8388 → 54006 [PSH, ACK] Seq=2441 Ack=474 Win=45056 Len=240
12030	1959.260909100	192.168.0.180	130.49.160.11	TCP	54	54006 → 8388 [ACK] Seq=474 Ack=2681 Win=131584 Len=0
12031	1959.263792100	192.168.0.180	130.49.160.11	TCP	152	54006 → 8388 [PSH, ACK] Seq=474 Ack=2681 Win=131584 Len=98
12032	1959.263905200	192.168.0.180	130.49.160.11	TCP	237	54006 → 8388 [PSH, ACK] Seq=572 Ack=2681 Win=131584 Len=183
12033	1959.338795600	130.49.160.11	192.168.0.180	TCP	1051	8388 → 54006 [PSH, ACK] Seq=2681 Ack=755 Win=45056 Len=997
12034	1959.339512500	192.168.0.180	130.49.160.11	TCP	54	54006 → 8388 [FIN, ACK] Seq=755 Ack=3678 Win=130560 Len=0
12035	1959.343140600	130.49.160.11	192.168.0.180	TCP	54	8388 → 54006 [ACK] Seq=2681 Ack=755 Win=45056 Len=0
12036	1959.343153600	192.168.0.180	130.49.160.11	TCP	54	[TCP Dup ACK 12034#1] 54006 → 8388 [ACK] Seq=756 Ack=3678 Win=130560 Len=0
12037	1959.396162700	130.49.160.11	192.168.0.180	TCP	54	8388 → 54006 [FIN, ACK] Seq=3678 Ack=756 Win=45056 Len=0
12038	1959.396288700	192.168.0.180	130.49.160.11	TCP	54	54006 → 8388 [ACK] Seq=756 Ack=3679 Win=130560 Len=0
12039	1962.000190600	192.168.0.180	130.49.160.11	TCP	66	54008 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12040	1962.068940100	130.49.160.11	192.168.0.180	TCP	66	8388 → 54008 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
12041	1962.069080600	192.168.0.180	130.49.160.11	TCP	54	54008 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
12042	1962.069498600	192.168.0.180	130.49.160.11	TCP	1260	54008 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=1206
12043	1962.219932600	130.49.160.11	192.168.0.180	TCP	54	8388 → 54008 [ACK] Seq=1 Ack=1207 Win=45056 Len=0
12044	1962.220672100	130.49.160.11	192.168.0.180	TCP	1274	8388 → 54008 [ACK] Seq=1 Ack=1207 Win=45056 Len=1220
12045	1962.221455400	130.49.160.11	192.168.0.180	TCP	1274	8388 → 54008 [PSH, ACK] Seq=1221 Ack=1207 Win=45056 Len=1220
12046	1962.221456500	130.49.160.11	192.168.0.180	TCP	294	8388 → 54008 [PSH, ACK] Seq=2441 Ack=1207 Win=45056 Len=240
12047	1962.221490200	192.168.0.180	130.49.160.11	TCP	54	54008 → 8388 [ACK] Seq=1207 Ack=2681 Win=131584 Len=0
12048	1962.223897500	192.168.0.180	130.49.160.11	TCP	152	54008 → 8388 [PSH, ACK] Seq=1207 Ack=2681 Win=131584 Len=98
12049	1962.223938900	192.168.0.180	130.49.160.11	TCP	237	54008 → 8388 [PSH, ACK] Seq=1305 Ack=2681 Win=131584 Len=183
12050	1962.347687600	130.49.160.11	192.168.0.180	TCP	294	[TCP Spurious Retransmission] 8388 → 54008 [PSH, ACK] Seq=2441 Ack=1207 Win=45056 Len=240
12051	1962.347688900	130.49.160.11	192.168.0.180	TCP	54	8388 → 54008 [ACK] Seq=2681 Ack=1488 Win=45056 Len=0
12052	1962.347807500	192.168.0.180	130.49.160.11	TCP	66	[TCP Dup ACK 12047#1] 54008 → 8388 [ACK] Seq=1488 Ack=2681 Win=131584 Len=0 SLE=2441 SRE=2681
12053	1962.347979800	130.49.160.11	192.168.0.180	TCP	1051	8388 → 54008 [PSH, ACK] Seq=2681 Ack=1488 Win=45056 Len=997
12054	1962.349025600	192.168.0.180	130.49.160.11	TCP	54	54008 → 8388 [FIN, ACK] Seq=1488 Ack=3678 Win=130560 Len=0
12055	1962.412594500	130.49.160.11	192.168.0.180	TCP	54	8388 → 54008 [FIN, ACK] Seq=3678 Ack=1489 Win=45056 Len=0
12056	1962.412652400	192.168.0.180	130.49.160.11	TCP	54	54008 → 8388 [ACK] Seq=1489 Ack=3679 Win=130560 Len=0
12057	1963.625367900	192.168.0.180	130.49.160.11	TCP	55	[TCP Keep-Alive] 52764 → 8388 [ACK] Seq=7488 Ack=13574 Win=130560 Len=1
12058	1963.698342300	130.49.160.11	192.168.0.180	TCP	66	[TCP Keep-Alive ACK] 8388 → 52764 [ACK] Seq=13574 Ack=7489 Win=45056 Len=0 SLE=7488 SRE=7489
12059	1964.999910800	192.168.0.180	130.49.160.11	TCP	66	54010 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12060	1965.061653700	130.49.160.11	192.168.0.180	TCP	66	8388 → 54010 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
12061	1965.061742200	192.168.0.180	130.49.160.11	TCP	54	54010 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
12062	1965.061961300	192.168.0.180	130.49.160.11	TCP	576	54010 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=522
12063	1965.133353300	130.49.160.11	192.168.0.180	TCP	54	8388 → 54010 [ACK] Seq=1 Ack=523 Win=45056 Len=0
12064	1965.139954300	130.49.160.11	192.168.0.180	TCP	2494	8388 → 54010 [PSH, ACK] Seq=1 Ack=523 Win=45056 Len=2440
12065	1965.140001700	192.168.0.180	130.49.160.11	TCP	54	54010 → 8388 [ACK] Seq=523 Ack=2441 Win=131584 Len=0
12066	1965.140042500	130.49.160.11	192.168.0.180	TCP	295	8388 → 54010 [PSH, ACK] Seq=2441 Ack=523 Win=45056 Len=241
12067	1965.143426400	192.168.0.180	130.49.160.11	TCP	152	54010 → 8388 [PSH, ACK] Seq=523 Ack=2682 Win=131328 Len=98
12068	1965.143533200	192.168.0.180	130.49.160.11	TCP	237	54010 → 8388 [PSH, ACK] Seq=621 Ack=2682 Win=131328 Len=183
12069	1965.211722200	130.49.160.11	192.168.0.180	TCP	1051	8388 → 54010 [PSH, ACK] Seq=2682 Ack=804 Win=45056 Len=997
12070	1965.213444000	192.168.0.180	130.49.160.11	TCP	54	54010 → 8388 [FIN, ACK] Seq=804 Ack=3679 Win=131584 Len=0
12071	1965.213863600	130.49.160.11	192.168.0.180	TCP	54	8388 → 54010 [ACK] Seq=2682 Ack=804 Win=45056 Len=0
12072	1965.213871600	192.168.0.180	130.49.160.11	TCP	54	[TCP Dup ACK 12070#1] 54010 → 8388 [ACK] Seq=805 Ack=3679 Win=131584 Len=0
12073	1965.277178800	130.49.160.11	192.168.0.180	TCP	54	8388 → 54010 [FIN, ACK] Seq=3679 Ack=805 Win=45056 Len=0
12074	1965.277228900	192.168.0.180	130.49.160.11	TCP	54	54010 → 8388 [ACK] Seq=805 Ack=3680 Win=131584 Len=0
12075	1967.999654100	192.168.0.180	130.49.160.11	TCP	66	54012 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12076	1968.059766700	130.49.160.11	192.168.0.180	TCP	66	8388 → 54012 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
12077	1968.059850200	192.168.0.180	130.49.160.11	TCP	54	54012 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
12078	1968.060057600	192.168.0.180	130.49.160.11	TCP	1228	54012 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=1174
12079	1968.133757600	130.49.160.11	192.168.0.180	TCP	54	8388 → 54012 [ACK] Seq=1 Ack=1175 Win=45056 Len=0
12080	1968.163365200	130.49.160.11	192.168.0.180	TCP	1274	8388 → 54012 [ACK] Seq=1 Ack=1175 Win=45056 Len=1220
12081	1968.163596300	130.49.160.11	192.168.0.180	TCP	1274	8388 → 54012 [PSH, ACK] Seq=1221 Ack=1175 Win=45056 Len=1220
12082	1968.163598800	130.49.160.11	192.168.0.180	TCP	294	8388 → 54012 [PSH, ACK] Seq=2441 Ack=1175 Win=45056 Len=240
12083	1968.163663400	192.168.0.180	130.49.160.11	TCP	54	54012 → 8388 [ACK] Seq=1175 Ack=2681 Win=131584 Len=0
12084	1968.166281000	192.168.0.180	130.49.160.11	TCP	152	54012 → 8388 [PSH, ACK] Seq=1175 Ack=2681 Win=131584 Len=98
12085	1968.166341600	192.168.0.180	130.49.160.11	TCP	237	54012 → 8388 [PSH, ACK] Seq=1273 Ack=2681 Win=131584 Len=183
12086	1968.232785400	130.49.160.11	192.168.0.180	TCP	1051	8388 → 54012 [PSH, ACK] Seq=2681 Ack=1456 Win=45056 Len=997
12087	1968.232786200	130.49.160.11	192.168.0.180	TCP	54	8388 → 54012 [ACK] Seq=2681 Ack=1456 Win=45056 Len=0
12088	1968.232946400	192.168.0.180	130.49.160.11	TCP	54	54012 → 8388 [ACK] Seq=1456 Ack=3678 Win=130560 Len=0
12089	1968.234057500	192.168.0.180	130.49.160.11	TCP	54	54012 → 8388 [FIN, ACK] Seq=1456 Ack=3678 Win=130560 Len=0
12090	1968.287163800	130.49.160.11	192.168.0.180	TCP	54	8388 → 54012 [FIN, ACK] Seq=3678 Ack=1457 Win=45056 Len=0
12091	1968.287216100	192.168.0.180	130.49.160.11	TCP	54	54012 → 8388 [ACK] Seq=1457 Ack=3679 Win=130560 Len=0
12092	1971.000952800	192.168.0.180	130.49.160.11	TCP	66	54014 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12093	1971.069738500	130.49.160.11	192.168.0.180	TCP	66	8388 → 54014 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
12094	1971.069907400	192.168.0.180	130.49.160.11	TCP	54	54014 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
12095	1971.070527300	192.168.0.180	130.49.160.11	TCP	1251	54014 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=1197
12096	1971.134161900	130.49.160.11	192.168.0.180	TCP	2494	8388 → 54014 [PSH, ACK] Seq=1 Ack=1198 Win=45056 Len=2440
12097	1971.134233200	192.168.0.180	130.49.160.11	TCP	54	54014 → 8388 [ACK] Seq=1198 Ack=2441 Win=131584 Len=0
12098	1971.137129400	130.49.160.11	192.168.0.180	TCP	295	8388 → 54014 [PSH, ACK] Seq=2441 Ack=1198 Win=45056 Len=241
12099	1971.139606200	192.168.0.180	130.49.160.11	TCP	152	54014 → 8388 [PSH, ACK] Seq=1198 Ack=2682 Win=131328 Len=98
12100	1971.139696100	192.168.0.180	130.49.160.11	TCP	237	54014 → 8388 [PSH, ACK] Seq=1296 Ack=2682 Win=131328 Len=183
12101	1971.147303100	130.49.160.11	192.168.0.180	TCP	54	8388 → 54014 [ACK] Seq=1 Ack=1198 Win=45056 Len=0
12102	1971.147317200	192.168.0.180	130.49.160.11	TCP	54	[TCP Dup ACK 12099#1] 54014 → 8388 [ACK] Seq=1479 Ack=2682 Win=131328 Len=0
12103	1971.203298500	130.49.160.11	192.168.0.180	TCP	54	8388 → 54014 [ACK] Seq=2682 Ack=1479 Win=45056 Len=0
12104	1971.209686400	130.49.160.11	192.168.0.180	TCP	1051	8388 → 54014 [PSH, ACK] Seq=2682 Ack=1479 Win=45056 Len=997
12105	1971.210788700	192.168.0.180	130.49.160.11	TCP	54	54014 → 8388 [FIN, ACK] Seq=1479 Ack=3679 Win=131584 Len=0
12106	1971.362170000	130.49.160.11	192.168.0.180	TCP	54	8388 → 54014 [FIN, ACK] Seq=3679 Ack=1480 Win=45056 Len=0
12107	1971.362222300	192.168.0.180	130.49.160.11	TCP	54	54014 → 8388 [ACK] Seq=1480 Ack=3680 Win=131584 Len=0
12108	1974.000117800	192.168.0.180	130.49.160.11	TCP	66	54016 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12109	1974.098317400	130.49.160.11	192.168.0.180	TCP	66	8388 → 54016 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
12110	1974.098406400	192.168.0.180	130.49.160.11	TCP	54	54016 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
12111	1974.098794100	192.168.0.180	130.49.160.11	TCP	1210	54016 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=1156
12112	1974.163918900	130.49.160.11	192.168.0.180	TCP	54	8388 → 54016 [ACK] Seq=1 Ack=1157 Win=45056 Len=0
12113	1974.164756200	130.49.160.11	192.168.0.180	TCP	1274	8388 → 54016 [ACK] Seq=1 Ack=1157 Win=45056 Len=1220
12114	1974.166968600	130.49.160.11	192.168.0.180	TCP	1274	8388 → 54016 [PSH, ACK] Seq=1221 Ack=1157 Win=45056 Len=1220
12115	1974.166994300	192.168.0.180	130.49.160.11	TCP	54	54016 → 8388 [ACK] Seq=1157 Ack=2441 Win=131584 Len=0
12116	1974.168325600	130.49.160.11	192.168.0.180	TCP	294	8388 → 54016 [PSH, ACK] Seq=2441 Ack=1157 Win=45056 Len=240
12117	1974.171146500	192.168.0.180	130.49.160.11	TCP	152	54016 → 8388 [PSH, ACK] Seq=1157 Ack=2681 Win=131328 Len=98
12118	1974.171203300	192.168.0.180	130.49.160.11	TCP	237	54016 → 8388 [PSH, ACK] Seq=1255 Ack=2681 Win=131328 Len=183
12119	1974.233911300	130.49.160.11	192.168.0.180	TCP	54	8388 → 54016 [ACK] Seq=2681 Ack=1438 Win=45056 Len=0
12120	1974.235905900	130.49.160.11	192.168.0.180	TCP	1052	8388 → 54016 [PSH, ACK] Seq=2681 Ack=1438 Win=45056 Len=998
12121	1974.237154200	192.168.0.180	130.49.160.11	TCP	54	54016 → 8388 [FIN, ACK] Seq=1438 Ack=3679 Win=131584 Len=0
12122	1974.293239400	130.49.160.11	192.168.0.180	TCP	54	8388 → 54016 [FIN, ACK] Seq=3679 Ack=1439 Win=45056 Len=0
12123	1974.293324400	192.168.0.180	130.49.160.11	TCP	54	54016 → 8388 [ACK] Seq=1439 Ack=3680 Win=131584 Len=0
12124	1976.073432300	TPLink_b7:1d:f9	LiteonTechno_78:06:fb	ARP	42	Who has 192.168.0.180? Tell 192.168.0.1
12125	1976.073446800	LiteonTechno_78:06:fb	TPLink_b7:1d:f9	ARP	42	192.168.0.180 is at 74:4c:a1:78:06:fb
12126	1977.000133300	192.168.0.180	130.49.160.11	TCP	66	54018 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12127	1977.059743200	130.49.160.11	192.168.0.180	TCP	66	8388 → 54018 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
12128	1977.059832000	192.168.0.180	130.49.160.11	TCP	54	54018 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
12129	1977.060043800	192.168.0.180	130.49.160.11	TCP	990	54018 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=936
12130	1977.133246000	130.49.160.11	192.168.0.180	TCP	1274	8388 → 54018 [ACK] Seq=1 Ack=937 Win=45056 Len=1220
12131	1977.133571300	130.49.160.11	192.168.0.180	TCP	1274	8388 → 54018 [PSH, ACK] Seq=1221 Ack=937 Win=45056 Len=1220
12132	1977.133572400	130.49.160.11	192.168.0.180	TCP	294	8388 → 54018 [PSH, ACK] Seq=2441 Ack=937 Win=45056 Len=240
12133	1977.133608400	192.168.0.180	130.49.160.11	TCP	54	54018 → 8388 [ACK] Seq=937 Ack=2681 Win=131584 Len=0
12134	1977.133685500	130.49.160.11	192.168.0.180	TCP	54	8388 → 54018 [ACK] Seq=1 Ack=937 Win=45056 Len=0
12135	1977.133701500	192.168.0.180	130.49.160.11	TCP	54	[TCP Dup ACK 12133#1] 54018 → 8388 [ACK] Seq=937 Ack=2681 Win=131584 Len=0
12136	1977.136388200	192.168.0.180	130.49.160.11	TCP	152	54018 → 8388 [PSH, ACK] Seq=937 Ack=2681 Win=131584 Len=98
12137	1977.136472600	192.168.0.180	130.49.160.11	TCP	237	54018 → 8388 [PSH, ACK] Seq=1035 Ack=2681 Win=131584 Len=183
12138	1977.203385700	130.49.160.11	192.168.0.180	TCP	54	8388 → 54018 [ACK] Seq=2681 Ack=1218 Win=45056 Len=0
12139	1977.203581300	130.49.160.11	192.168.0.180	TCP	1051	8388 → 54018 [PSH, ACK] Seq=2681 Ack=1218 Win=45056 Len=997
12140	1977.204549000	192.168.0.180	130.49.160.11	TCP	54	54018 → 8388 [FIN, ACK] Seq=1218 Ack=3678 Win=130560 Len=0
12141	1977.280139000	130.49.160.11	192.168.0.180	TCP	54	8388 → 54018 [FIN, ACK] Seq=3678 Ack=1219 Win=45056 Len=0
12142	1977.280198100	192.168.0.180	130.49.160.11	TCP	54	54018 → 8388 [ACK] Seq=1219 Ack=3679 Win=130560 Len=0
12143	1978.568126300	192.168.0.180	130.49.160.11	TCP	189	52764 → 8388 [PSH, ACK] Seq=7489 Ack=13574 Win=130560 Len=135
12144	1978.733808400	130.49.160.11	192.168.0.180	TCP	259	8388 → 52764 [PSH, ACK] Seq=13574 Ack=7624 Win=45056 Len=205
12145	1978.733808900	130.49.160.11	192.168.0.180	TCP	54	8388 → 52764 [ACK] Seq=13574 Ack=7624 Win=45056 Len=0
12146	1978.733868500	192.168.0.180	130.49.160.11	TCP	54	52764 → 8388 [ACK] Seq=7624 Ack=13779 Win=131584 Len=0
12147	1979.999707200	192.168.0.180	130.49.160.11	TCP	66	54020 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12148	1980.059543600	130.49.160.11	192.168.0.180	TCP	66	8388 → 54020 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
12149	1980.059749400	192.168.0.180	130.49.160.11	TCP	54	54020 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
12150	1980.060001500	192.168.0.180	130.49.160.11	TCP	886	54020 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=832
12151	1980.130904100	130.49.160.11	192.168.0.180	TCP	2494	8388 → 54020 [PSH, ACK] Seq=1 Ack=833 Win=45056 Len=2440
12152	1980.130905300	130.49.160.11	192.168.0.180	TCP	294	8388 → 54020 [PSH, ACK] Seq=2441 Ack=833 Win=45056 Len=240
12153	1980.130975400	192.168.0.180	130.49.160.11	TCP	54	54020 → 8388 [ACK] Seq=833 Ack=2681 Win=131584 Len=0
12154	1980.133242500	130.49.160.11	192.168.0.180	TCP	54	8388 → 54020 [ACK] Seq=1 Ack=833 Win=45056 Len=0
12155	1980.133261100	192.168.0.180	130.49.160.11	TCP	54	[TCP Dup ACK 12153#1] 54020 → 8388 [ACK] Seq=833 Ack=2681 Win=131584 Len=0
12156	1980.133673800	192.168.0.180	130.49.160.11	TCP	152	54020 → 8388 [PSH, ACK] Seq=833 Ack=2681 Win=131584 Len=98
12157	1980.133756400	192.168.0.180	130.49.160.11	TCP	237	54020 → 8388 [PSH, ACK] Seq=931 Ack=2681 Win=131584 Len=183
12158	1980.196395800	130.49.160.11	192.168.0.180	TCP	54	8388 → 54020 [ACK] Seq=2681 Ack=1114 Win=45056 Len=0
12159	1980.196400700	130.49.160.11	192.168.0.180	TCP	1050	8388 → 54020 [PSH, ACK] Seq=2681 Ack=1114 Win=45056 Len=996
12160	1980.197775500	192.168.0.180	130.49.160.11	TCP	54	54020 → 8388 [FIN, ACK] Seq=1114 Ack=3677 Win=130560 Len=0
12161	1980.249030500	130.49.160.11	192.168.0.180	TCP	54	8388 → 54020 [FIN, ACK] Seq=3677 Ack=1115 Win=45056 Len=0
12162	1980.249079400	192.168.0.180	130.49.160.11	TCP	54	54020 → 8388 [ACK] Seq=1115 Ack=3678 Win=130560 Len=0
12163	1983.001085300	192.168.0.180	130.49.160.11	TCP	66	54022 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12164	1983.134311300	130.49.160.11	192.168.0.180	TCP	66	8388 → 54022 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
12165	1983.134391700	192.168.0.180	130.49.160.11	TCP	54	54022 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
12166	1983.134618800	192.168.0.180	130.49.160.11	TCP	658	54022 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=604
12167	1983.203250100	130.49.160.11	192.168.0.180	TCP	54	8388 → 54022 [ACK] Seq=1 Ack=605 Win=45056 Len=0
12168	1983.213896600	130.49.160.11	192.168.0.180	TCP	2494	8388 → 54022 [PSH, ACK] Seq=1 Ack=605 Win=45056 Len=2440
12169	1983.213897900	130.49.160.11	192.168.0.180	TCP	294	8388 → 54022 [PSH, ACK] Seq=2441 Ack=605 Win=45056 Len=240
12170	1983.213960300	192.168.0.180	130.49.160.11	TCP	54	54022 → 8388 [ACK] Seq=605 Ack=2681 Win=131584 Len=0
12171	1983.216636600	192.168.0.180	130.49.160.11	TCP	152	54022 → 8388 [PSH, ACK] Seq=605 Ack=2681 Win=131584 Len=98
12172	1983.216729400	192.168.0.180	130.49.160.11	TCP	237	54022 → 8388 [PSH, ACK] Seq=703 Ack=2681 Win=131584 Len=183
12173	1983.283350400	130.49.160.11	192.168.0.180	TCP	54	8388 → 54022 [ACK] Seq=2681 Ack=886 Win=45056 Len=0
12174	1983.283354900	130.49.160.11	192.168.0.180	TCP	1055	8388 → 54022 [PSH, ACK] Seq=2681 Ack=886 Win=45056 Len=1001
12175	1983.284229000	192.168.0.180	130.49.160.11	TCP	54	54022 → 8388 [FIN, ACK] Seq=886 Ack=3682 Win=130560 Len=0
12176	1983.337742400	130.49.160.11	192.168.0.180	TCP	54	8388 → 54022 [FIN, ACK] Seq=3682 Ack=887 Win=45056 Len=0
12177	1983.337865600	192.168.0.180	130.49.160.11	TCP	54	54022 → 8388 [ACK] Seq=887 Ack=3683 Win=130560 Len=0
12178	1985.999820400	192.168.0.180	130.49.160.11	TCP	66	54024 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12179	1986.065185700	130.49.160.11	192.168.0.180	TCP	66	8388 → 54024 [SYN, ACK] Seq=0 Ack=1 Win=42340 Len=0 MSS=1220 SACK_PERM WS=4096
12180	1986.065268200	192.168.0.180	130.49.160.11	TCP	54	54024 → 8388 [ACK] Seq=1 Ack=1 Win=131584 Len=0
12181	1986.065575400	192.168.0.180	130.49.160.11	TCP	566	54024 → 8388 [PSH, ACK] Seq=1 Ack=1 Win=131584 Len=512
12182	1986.137483400	130.49.160.11	192.168.0.180	TCP	1274	8388 → 54024 [ACK] Seq=1 Ack=513 Win=45056 Len=1220
12183	1986.138217700	130.49.160.11	192.168.0.180	TCP	1274	8388 → 54024 [PSH, ACK] Seq=1221 Ack=513 Win=45056 Len=1220
12184	1986.138219200	130.49.160.11	192.168.0.180	TCP	294	8388 → 54024 [PSH, ACK] Seq=2441 Ack=513 Win=45056 Len=240
12185	1986.138262900	192.168.0.180	130.49.160.11	TCP	54	54024 → 8388 [ACK] Seq=513 Ack=2681 Win=131584 Len=0
12186	1986.140616500	192.168.0.180	130.49.160.11	TCP	152	54024 → 8388 [PSH, ACK] Seq=513 Ack=2681 Win=131584 Len=98
12187	1986.140697300	192.168.0.180	130.49.160.11	TCP	237	54024 → 8388 [PSH, ACK] Seq=611 Ack=2681 Win=131584 Len=183
12188	1986.142744800	130.49.160.11	192.168.0.180	TCP	54	8388 → 54024 [ACK] Seq=1 Ack=513 Win=45056 Len=0
12189	1986.142770500	192.168.0.180	130.49.160.11	TCP	54	[TCP Dup ACK 12185#1] 54024 → 8388 [ACK] Seq=794 Ack=2681 Win=131584 Len=0
12190	1986.206714800	130.49.160.11	192.168.0.180	TCP	1052	8388 → 54024 [PSH, ACK] Seq=2681 Ack=794 Win=45056 Len=998
12191	1986.207682000	192.168.0.180	130.49.160.11	TCP	54	54024 → 8388 [FIN, ACK] Seq=794 Ack=3679 Win=130560 Len=0
12192	1986.212791700	130.49.160.11	192.168.0.180	TCP	54	8388 → 54024 [ACK] Seq=2681 Ack=794 Win=45056 Len=0
12193	1986.212805400	192.168.0.180	130.49.160.11	TCP	54	[TCP Dup ACK 12191#1] 54024 → 8388 [ACK] Seq=795 Ack=3679 Win=130560 Len=0
12194	1986.264195000	130.49.160.11	192.168.0.180	TCP	54	8388 → 54024 [FIN, ACK] Seq=3679 Ack=795 Win=45056 Len=0
12195	1986.264392800	192.168.0.180	130.49.160.11	TCP	54	54024 → 8388 [ACK] Seq=795 Ack=3680 Win=130560 Len=0
12196	1988.999749500	192.168.0.180	130.49.160.11	TCP	66	54026 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12197	1989.505725200	192.168.0.1	239.255.255.250	SSDP	460	NOTIFY * HTTP/1.1 
12198	1989.507187900	192.168.0.1	239.255.255.250	SSDP	469	NOTIFY * HTTP/1.1 
12199	1989.511239400	192.168.0.1	239.255.255.250	SSDP	532	NOTIFY * HTTP/1.1 
12200	1989.512053200	192.168.0.1	239.255.255.250	SSDP	524	NOTIFY * HTTP/1.1 
12201	1989.513704700	192.168.0.1	239.255.255.250	SSDP	469	NOTIFY * HTTP/1.1 
12202	1989.515417600	192.168.0.1	239.255.255.250	SSDP	508	NOTIFY * HTTP/1.1 
12203	1989.517184800	192.168.0.1	239.255.255.250	SSDP	540	NOTIFY * HTTP/1.1 
12204	1989.519505700	192.168.0.1	239.255.255.250	SSDP	469	NOTIFY * HTTP/1.1 
12205	1989.583039600	192.168.0.1	239.255.255.250	SSDP	528	NOTIFY * HTTP/1.1 
12206	1989.583626700	192.168.0.1	239.255.255.250	SSDP	522	NOTIFY * HTTP/1.1 
12207	1989.623247300	192.168.0.1	239.255.255.250	SSDP	460	NOTIFY * HTTP/1.1 
12208	1989.623815300	192.168.0.1	239.255.255.250	SSDP	469	NOTIFY * HTTP/1.1 
12209	1989.626239100	192.168.0.1	239.255.255.250	SSDP	532	NOTIFY * HTTP/1.1 
12210	1990.008488500	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54026 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12211	1991.528665800	192.168.0.1	239.255.255.250	SSDP	524	NOTIFY * HTTP/1.1 
12212	1991.529158000	192.168.0.1	239.255.255.250	SSDP	469	NOTIFY * HTTP/1.1 
12213	1991.529745700	192.168.0.1	239.255.255.250	SSDP	508	NOTIFY * HTTP/1.1 
12214	1991.531332300	192.168.0.1	239.255.255.250	SSDP	540	NOTIFY * HTTP/1.1 
12215	1991.531345400	192.168.0.1	239.255.255.250	SSDP	469	NOTIFY * HTTP/1.1 
12216	1991.531883600	192.168.0.1	239.255.255.250	SSDP	528	NOTIFY * HTTP/1.1 
12217	1991.532356900	192.168.0.1	239.255.255.250	SSDP	522	NOTIFY * HTTP/1.1 
12218	1992.000210300	192.168.0.180	130.49.160.11	TCP	66	54028 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12219	1992.023254100	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54026 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12220	1993.013923100	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54028 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12221	1993.938368200	130.49.160.11	192.168.0.180	TCP	54	[TCP Keep-Alive] 8388 → 52764 [ACK] Seq=13778 Ack=7624 Win=45056 Len=0
12222	1993.938398500	192.168.0.180	130.49.160.11	TCP	54	[TCP Keep-Alive ACK] 52764 → 8388 [ACK] Seq=7624 Ack=13779 Win=131584 Len=0
12223	1994.999495900	192.168.0.180	130.49.160.11	TCP	66	54030 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12224	1995.025480100	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54028 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12225	1996.000240800	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54030 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12226	1996.031291100	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54026 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12227	1996.543341200	LiteonTechno_78:06:fb	TPLink_b7:1d:f9	ARP	42	Who has 192.168.0.1? Tell 192.168.0.180
12228	1996.548012100	TPLink_b7:1d:f9	LiteonTechno_78:06:fb	ARP	42	192.168.0.1 is at 6c:4c:bc:b7:1d:f9
12229	1997.999904300	192.168.0.180	130.49.160.11	TCP	66	54032 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12230	1998.013870400	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54030 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12231	1999.003687900	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54032 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12232	1999.035622500	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54028 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12233	2001.000417900	192.168.0.180	130.49.160.11	TCP	66	54034 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12234	2001.014275600	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54032 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12235	2002.003000200	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54034 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12236	2002.018992600	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54030 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12237	2002.106336600	192.168.0.180	130.49.160.11	TCP	66	54039 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12238	2003.117320000	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54039 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12239	2004.000762300	192.168.0.180	130.49.160.11	TCP	66	54053 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12240	2004.012160900	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54034 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12241	2004.044112600	LiteonTechno_78:06:fb	TPLink_b7:1d:f9	ARP	42	Who has 192.168.0.1? Tell 192.168.0.180
12242	2004.044291000	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54026 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12243	2004.052093300	TPLink_b7:1d:f9	LiteonTechno_78:06:fb	ARP	42	192.168.0.1 is at 6c:4c:bc:b7:1d:f9
12244	2005.001764400	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54053 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12245	2005.017072100	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54032 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12246	2005.127992400	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54039 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12247	2006.106393100	192.168.0.180	130.49.160.11	TCP	66	54062 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12248	2006.106393400	192.168.0.180	130.49.160.11	TCP	66	54063 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12249	2006.108358900	192.168.0.180	130.49.160.11	TCP	66	54064 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12250	2006.108363800	192.168.0.180	130.49.160.11	TCP	66	54065 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12251	2006.133988200	192.168.0.180	130.49.160.11	TCP	66	54072 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12252	2006.999515000	192.168.0.180	130.49.160.11	TCP	66	54076 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12253	2007.009993300	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54053 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12254	2007.041546000	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54028 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12255	2007.120549400	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54065 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12256	2007.120549700	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54063 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12257	2007.120550700	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54064 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12258	2007.120550900	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54062 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12259	2007.135570300	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54072 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12260	2008.014626300	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54076 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12261	2008.014626300	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54034 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12262	2009.025870900	130.49.160.11	192.168.0.180	TCP	54	[TCP Keep-Alive] 8388 → 52764 [ACK] Seq=13778 Ack=7624 Win=45056 Len=0
12263	2009.025917300	192.168.0.180	130.49.160.11	TCP	54	[TCP Keep-Alive ACK] 52764 → 8388 [ACK] Seq=7624 Ack=13779 Win=131584 Len=0
12264	2009.131059000	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54062 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12265	2009.131059700	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54064 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12266	2009.131060100	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54063 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12267	2009.131249100	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54039 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12268	2009.131299100	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54065 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12269	2009.146014500	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54072 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12270	2009.544084800	LiteonTechno_78:06:fb	TPLink_b7:1d:f9	ARP	42	Who has 192.168.0.1? Tell 192.168.0.180
12271	2009.547421300	TPLink_b7:1d:f9	LiteonTechno_78:06:fb	ARP	42	192.168.0.1 is at 6c:4c:bc:b7:1d:f9
12272	2010.023349500	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54030 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12273	2010.023350000	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54076 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12274	2010.107715600	192.168.0.180	130.49.160.11	TCP	66	54086 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12275	2010.108739400	192.168.0.180	130.49.160.11	TCP	66	54087 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12276	2010.108740600	192.168.0.180	130.49.160.11	TCP	66	54088 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12277	2010.134576400	192.168.0.180	130.49.160.11	TCP	66	54091 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12278	2010.134576500	192.168.0.180	130.49.160.11	TCP	66	54090 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12279	2010.134576500	192.168.0.180	130.49.160.11	TCP	66	54092 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12280	2010.134576900	192.168.0.180	130.49.160.11	TCP	66	54089 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12281	2011.011922500	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54053 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12282	2011.122863000	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54086 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12283	2011.122863500	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54088 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12284	2011.122949500	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54087 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12285	2011.138842200	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54091 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12286	2011.138842300	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54090 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12287	2011.138858100	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54089 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12288	2011.138874800	192.168.0.180	130.49.160.11	TCP	66	[TCP Retransmission] 54092 → 8388 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12289	2011.230918800	fe80::579f:fab1:723b:1064	ff02::16	ICMPv6	90	Multicast Listener Report Message v2
12290	2011.230959200	192.168.0.180	224.0.0.22	IGMPv3	54	Membership Report / Leave group 224.0.0.251
12291	2011.234736100	fe80::579f:fab1:723b:1064	ff02::16	ICMPv6	90	Multicast Listener Report Message v2
12292	2011.235594500	192.168.0.180	224.0.0.22	IGMPv3	54	Membership Report / Join group 224.0.0.251 for any sources
12293	2011.236580000	192.168.0.180	130.49.160.11	TCP	54	52764 → 8388 [RST, ACK] Seq=7624 Ack=13779 Win=0 Len=0
12294	2011.240015900	fe80::579f:fab1:723b:1064	ff02::16	ICMPv6	90	Multicast Listener Report Message v2
12295	2011.240074000	192.168.0.180	224.0.0.22	IGMPv3	54	Membership Report / Leave group 224.0.0.252
12296	2011.249813800	fe80::579f:fab1:723b:1064	ff02::16	ICMPv6	90	Multicast Listener Report Message v2
12297	2011.250179900	192.168.0.180	224.0.0.22	IGMPv3	54	Membership Report / Join group 224.0.0.252 for any sources
12298	2011.251407200	192.168.0.180	224.0.0.251	MDNS	81	Standard query 0x0000 ANY DESKTOP-JA39QTF.local, "QM" question
12299	2011.251736500	fe80::579f:fab1:723b:1064	ff02::fb	MDNS	101	Standard query 0x0000 ANY DESKTOP-JA39QTF.local, "QM" question
12300	2011.252321300	fe80::579f:fab1:723b:1064	ff02::1:3	LLMNR	95	Standard query 0x6493 ANY DESKTOP-JA39QTF
12301	2011.252533700	192.168.0.180	224.0.0.252	LLMNR	75	Standard query 0x6493 ANY DESKTOP-JA39QTF
12302	2011.258028400	192.168.0.180	224.0.0.251	MDNS	119	Standard query response 0x0000 AAAA fe80::579f:fab1:723b:1064 A 192.168.0.180
12303	2011.258188400	fe80::579f:fab1:723b:1064	ff02::fb	MDNS	139	Standard query response 0x0000 AAAA fe80::579f:fab1:723b:1064 A 192.168.0.180
12304	2011.283505500	192.168.0.180	192.168.0.1	DNS	89	Standard query 0x6105 A v10.events.data.microsoft.com
12305	2011.310107600	192.168.0.1	192.168.0.180	DNS	233	Standard query response 0x6105 A v10.events.data.microsoft.com CNAME win-global-asimov-leafs-events-data.trafficmanager.net CNAME onedscolprdaue52.australiaeast.cloudapp.azure.com A 40.79.163.154
12306	2011.311475600	192.168.0.180	40.79.163.154	TCP	66	54093 → 443 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12307	2011.382681400	192.168.0.180	192.168.0.1	DNS	91	Standard query 0x9a32 A settings-win.data.microsoft.com
12308	2011.413747900	192.168.0.1	192.168.0.180	DNS	232	Standard query response 0x9a32 A settings-win.data.microsoft.com CNAME atm-settingsfe-prod-geo2.trafficmanager.net CNAME settings-prod-neu-1-tagged.northeurope.cloudapp.azure.com A 48.209.133.15
12309	2011.414805700	192.168.0.180	48.209.133.15	TCP	66	54094 → 443 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12310	2011.473834900	48.209.133.15	192.168.0.180	TCP	66	443 → 54094 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1220 WS=256 SACK_PERM
12311	2011.473891500	192.168.0.180	48.209.133.15	TCP	54	54094 → 443 [ACK] Seq=1 Ack=1 Win=131584 Len=0
12312	2011.474106200	192.168.0.180	48.209.133.15	TLSv1.2	270	Client Hello (SNI=settings-win.data.microsoft.com)
12313	2011.510088500	192.168.0.180	192.168.0.1	DNS	84	Standard query 0xa373 A ipv6.msftconnecttest.com
12314	2011.510088900	192.168.0.180	192.168.0.1	DNS	83	Standard query 0x6d4e A www.msftconnecttest.com
12315	2011.533325400	192.168.0.180	224.0.0.22	IGMPv3	62	Membership Report / Join group 224.0.0.251 for any sources / Join group 224.0.0.252 for any sources
12316	2011.533402900	fe80::579f:fab1:723b:1064	ff02::16	ICMPv6	110	Multicast Listener Report Message v2
12317	2011.534553700	192.168.0.1	192.168.0.180	DNS	229	Standard query response 0xa373 A ipv6.msftconnecttest.com CNAME ipv6.msftconnecttest.com.edgesuite.net CNAME a1968.i6g1.akamai.net SOA n0i6g1.akamai.net
12318	2011.535109600	192.168.0.180	192.168.0.1	DNS	76	Standard query 0x229d AAAA dns.msftncsi.com
12319	2011.535156900	48.209.133.15	192.168.0.180	TCP	2494	443 → 54094 [ACK] Seq=1 Ack=217 Win=4194048 Len=2440 [TCP PDU reassembled in 12322]
12320	2011.535181600	192.168.0.180	48.209.133.15	TCP	54	54094 → 443 [ACK] Seq=217 Ack=2441 Win=131584 Len=0
12321	2011.535259300	48.209.133.15	192.168.0.180	TCP	1274	443 → 54094 [ACK] Seq=2441 Ack=217 Win=4194048 Len=1220 [TCP PDU reassembled in 12322]
12322	2011.535259700	48.209.133.15	192.168.0.180	TLSv1.2	152	Server Hello, Certificate, Server Key Exchange, Server Hello Done
12323	2011.535271300	192.168.0.180	48.209.133.15	TCP	54	54094 → 443 [ACK] Seq=217 Ack=3759 Win=131584 Len=0
12324	2011.536972800	192.168.0.180	48.209.133.15	TLSv1.2	212	Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
12325	2011.541490900	192.168.0.1	192.168.0.180	DNS	193	Standard query response 0x6d4e A www.msftconnecttest.com CNAME www.msftconnecttest.com.edgesuite.net CNAME a39.d.akamai.net A 104.83.4.144 A 104.83.4.139
12326	2011.542515200	192.168.0.180	104.83.4.144	TCP	66	54095 → 80 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12327	2011.577503500	192.168.0.1	192.168.0.180	DNS	104	Standard query response 0x229d AAAA dns.msftncsi.com AAAA fd3e:4f5a:5b81::1
12328	2011.578092400	192.168.0.180	192.168.0.1	TCP	66	61610 → 53 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12329	2011.579964700	192.168.0.1	192.168.0.180	TCP	66	53 → 61610 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=32
12330	2011.580025200	192.168.0.180	192.168.0.1	TCP	54	61610 → 53 [ACK] Seq=1 Ack=1 Win=131328 Len=0
12331	2011.580038000	192.168.0.180	192.168.0.1	DNS	90	Standard query 0x0001 AAAA dns.msftncsi.com
12332	2011.582990900	192.168.0.1	192.168.0.180	TCP	54	53 → 61610 [ACK] Seq=1 Ack=37 Win=29216 Len=0
12333	2011.583322900	192.168.0.180	192.168.0.1	DNS	71	Standard query 0x0489 A arc.msn.com
12334	2011.587201500	192.168.0.1	192.168.0.180	DNS	118	Standard query response 0x0001 AAAA dns.msftncsi.com AAAA fd3e:4f5a:5b81::1
12335	2011.587371000	192.168.0.180	192.168.0.1	TCP	54	61610 → 53 [FIN, ACK] Seq=37 Ack=65 Win=131328 Len=0
12336	2011.589447400	192.168.0.1	192.168.0.180	TCP	54	53 → 61610 [FIN, ACK] Seq=65 Ack=38 Win=29216 Len=0
12337	2011.589462900	192.168.0.180	192.168.0.1	TCP	54	61610 → 53 [ACK] Seq=38 Ack=66 Win=131328 Len=0
12338	2011.601294300	192.168.0.1	192.168.0.180	DNS	191	Standard query response 0x0489 A arc.msn.com CNAME arc.trafficmanager.net CNAME iris-de-prod-azsc-v2-frc.francecentral.cloudapp.azure.com A 20.199.58.43
12339	2011.602241900	192.168.0.180	20.199.58.43	TCP	66	61611 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
12340	2011.604386800	48.209.133.15	192.168.0.180	TLSv1.2	105	Change Cipher Spec, Encrypted Handshake Message
12341	2011.604387300	48.209.133.15	192.168.0.180	TLSv1.2	123	Application Data
12342	2011.604414500	192.168.0.180	48.209.133.15	TCP	54	54094 → 443 [ACK] Seq=375 Ack=3879 Win=131584 Len=0
12343	2011.609223200	192.168.0.180	48.209.133.15	TLSv1.2	141	Application Data
12344	2011.609340000	192.168.0.180	48.209.133.15	TCP	1274	54094 → 443 [ACK] Seq=462 Ack=3879 Win=131584 Len=1220 [TCP PDU reassembled in 12346]
12345	2011.609340000	192.168.0.180	48.209.133.15	TCP	1274	54094 → 443 [ACK] Seq=1682 Ack=3879 Win=131584 Len=1220 [TCP PDU reassembled in 12346]
12346	2011.609340000	192.168.0.180	48.209.133.15	TLSv1.2	925	Application Data
12347	2011.609521000	192.168.0.180	48.209.133.15	TLSv1.2	92	Application Data
12348	2011.648738800	40.79.163.154	192.168.0.180	TCP	66	443 → 54093 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1220 WS=256 SACK_PERM
12349	2011.648890000	192.168.0.180	40.79.163.154	TCP	54	54093 → 443 [ACK] Seq=1 Ack=1 Win=131584 Len=0
12350	2011.649724200	192.168.0.180	40.79.163.154	TLSv1.2	268	Client Hello (SNI=v10.events.data.microsoft.com)
12351	2011.659442500	20.199.58.43	192.168.0.180	TCP	66	443 → 61611 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1220 WS=256 SACK_PERM
12352	2011.659489800	192.168.0.180	20.199.58.43	TCP	54	61611 → 443 [ACK] Seq=1 Ack=1 Win=262144 Len=0
12353	2011.661309800	192.168.0.180	20.199.58.43	TLSv1.2	250	Client Hello (SNI=arc.msn.com)
12354	2011.670463500	48.209.133.15	192.168.0.180	TLSv1.2	92	Application Data
12355	2011.672927800	48.209.133.15	192.168.0.180	TCP	54	443 → 54094 [ACK] Seq=3917 Ack=2902 Win=4194304 Len=0
12356	2011.684816500	48.209.133.15	192.168.0.180	TCP	54	443 → 54094 [ACK] Seq=3917 Ack=3811 Win=4193280 Len=0
12357	2011.724290100	192.168.0.180	48.209.133.15	TCP	54	54094 → 443 [ACK] Seq=3811 Ack=3917 Win=131584 Len=0
12358	2011.729968600	20.199.58.43	192.168.0.180	TCP	3714	443 → 61611 [ACK] Seq=1 Ack=197 Win=261888 Len=3660 [TCP PDU reassembled in 12367]
12359	2011.730002900	192.168.0.180	20.199.58.43	TCP	54	61611 → 443 [ACK] Seq=197 Ack=3661 Win=262144 Len=0
12360	2011.730058300	20.199.58.43	192.168.0.180	TCP	1274	443 → 61611 [ACK] Seq=3661 Ack=197 Win=261888 Len=1220 [TCP PDU reassembled in 12367]
12361	2011.730069500	192.168.0.180	20.199.58.43	TCP	54	61611 → 443 [ACK] Seq=197 Ack=4881 Win=262144 Len=0
12362	2011.730124100	20.199.58.43	192.168.0.180	TCP	1274	443 → 61611 [ACK] Seq=4881 Ack=197 Win=261888 Len=1220 [TCP PDU reassembled in 12367]
12363	2011.730131600	192.168.0.180	20.199.58.43	TCP	54	61611 → 443 [ACK] Seq=197 Ack=6101 Win=262144 Len=0
12364	2011.730155700	20.199.58.43	192.168.0.180	TCP	1274	443 → 61611 [ACK] Seq=6101 Ack=197 Win=261888 Len=1220 [TCP PDU reassembled in 12367]
12365	2011.730163900	192.168.0.180	20.199.58.43	TCP	54	61611 → 443 [ACK] Seq=197 Ack=7321 Win=262144 Len=0
12366	2011.730308400	20.199.58.43	192.168.0.180	TCP	1274	443 → 61611 [ACK] Seq=7321 Ack=197 Win=261888 Len=1220 [TCP PDU reassembled in 12367]
12367	2011.730309300	20.199.58.43	192.168.0.180	TLSv1.2	429	Server Hello, Certificate, Certificate Status, Server Key Exchange, Server Hello Done
12368	2011.730322800	192.168.0.180	20.199.58.43	TCP	54	61611 → 443 [ACK] Seq=197 Ack=8916 Win=262144 Len=0
12369	2011.741402200	192.168.0.180	192.168.0.1	DNS	76	Standard query 0xd91a AAAA dns.msftncsi.com
12370	2011.745515800	192.168.0.1	192.168.0.180	DNS	104	Standard query response 0xd91a AAAA dns.msftncsi.com AAAA fd3e:4f5a:5b81::1
12371	2011.745986600	192.168.0.180	192.168.0.1	TCP	66	60992 → 53 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12372	2011.749645700	192.168.0.1	192.168.0.180	TCP	66	53 → 60992 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=32
12373	2011.749686900	192.168.0.180	192.168.0.1	TCP	54	60992 → 53 [ACK] Seq=1 Ack=1 Win=131328 Len=0
12374	2011.749702300	192.168.0.180	192.168.0.1	DNS	90	Standard query 0x0001 AAAA dns.msftncsi.com
12375	2011.751380300	192.168.0.180	20.199.58.43	TLSv1.2	212	Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
12376	2011.755723100	192.168.0.1	192.168.0.180	DNS	118	Standard query response 0x0001 AAAA dns.msftncsi.com AAAA fd3e:4f5a:5b81::1
12377	2011.755845100	192.168.0.180	192.168.0.1	TCP	54	60992 → 53 [FIN, ACK] Seq=37 Ack=65 Win=131328 Len=0
12378	2011.761248100	192.168.0.1	192.168.0.180	TCP	54	53 → 60992 [FIN, ACK] Seq=65 Ack=38 Win=29216 Len=0
12379	2011.761310300	192.168.0.180	192.168.0.1	TCP	54	60992 → 53 [ACK] Seq=38 Ack=66 Win=131328 Len=0
12380	2011.764596300	192.168.0.1	192.168.0.180	TCP	54	53 → 60992 [ACK] Seq=1 Ack=37 Win=29216 Len=0
12381	2011.764621500	192.168.0.180	192.168.0.1	TCP	54	[TCP ZeroWindow] 60992 → 53 [ACK] Seq=38 Ack=66 Win=0 Len=0
12382	2011.768664700	192.168.0.1	192.168.0.180	TCP	54	53 → 60992 [RST] Seq=66 Win=0 Len=0
12383	2011.776918000	48.209.133.15	192.168.0.180	TLSv1.2	504	Application Data
12384	2011.778869600	192.168.0.180	48.209.133.15	TCP	54	54094 → 443 [FIN, ACK] Seq=3811 Ack=4367 Win=131072 Len=0
12385	2011.816936200	20.199.58.43	192.168.0.180	TLSv1.2	105	Change Cipher Spec, Encrypted Handshake Message
12386	2011.816937000	20.199.58.43	192.168.0.180	TLSv1.2	123	Application Data
12387	2011.817017600	192.168.0.180	20.199.58.43	TCP	54	61611 → 443 [ACK] Seq=355 Ack=9036 Win=261888 Len=0
12388	2011.818972900	192.168.0.180	20.199.58.43	TLSv1.2	141	Application Data
12389	2011.819017800	192.168.0.180	20.199.58.43	TLSv1.2	92	Application Data
12390	2011.821113200	192.168.0.180	20.199.58.43	TLSv1.2	195	Application Data
12391	2011.821336500	192.168.0.180	20.199.58.43	TCP	1274	61611 → 443 [ACK] Seq=621 Ack=9036 Win=261888 Len=1220 [TCP PDU reassembled in 12392]
12392	2011.821336500	192.168.0.180	20.199.58.43	TLSv1.2	932	Application Data
12393	2011.821452300	192.168.0.180	20.199.58.43	TLSv1.2	92	Application Data
12394	2011.826414600	48.209.133.15	192.168.0.180	TLSv1.2	96	Application Data
12395	2011.826456700	192.168.0.180	48.209.133.15	TCP	54	54094 → 443 [RST, ACK] Seq=3812 Ack=4409 Win=0 Len=0
12396	2011.828853800	48.209.133.15	192.168.0.180	TCP	54	443 → 54094 [FIN, ACK] Seq=4409 Ack=3812 Win=4193280 Len=0
12397	2011.878615600	20.199.58.43	192.168.0.180	TLSv1.2	92	Application Data
12398	2011.878728100	192.168.0.180	20.199.58.43	TCP	54	61611 → 443 [ACK] Seq=2757 Ack=9074 Win=261888 Len=0
12399	2011.894411400	20.199.58.43	192.168.0.180	TLSv1.2	164	Application Data, Application Data
12400	2011.894458600	192.168.0.180	20.199.58.43	TCP	54	61611 → 443 [ACK] Seq=2757 Ack=9184 Win=261632 Len=0
12401	2011.905590900	20.199.58.43	192.168.0.180	TCP	54	443 → 61611 [ACK] Seq=9074 Ack=621 Win=261632 Len=0
12402	2011.905592300	20.199.58.43	192.168.0.180	TCP	54	443 → 61611 [ACK] Seq=9074 Ack=2757 Win=262144 Len=0
12403	2011.905627200	192.168.0.180	20.199.58.43	TCP	54	[TCP Dup ACK 12400#1] 61611 → 443 [ACK] Seq=2757 Ack=9184 Win=261632 Len=0
12404	2011.905648300	192.168.0.180	20.199.58.43	TCP	54	[TCP Dup ACK 12400#2] 61611 → 443 [ACK] Seq=2757 Ack=9184 Win=261632 Len=0
12405	2011.934050500	20.199.58.43	192.168.0.180	TLSv1.2	302	Application Data
12406	2011.934118700	192.168.0.180	20.199.58.43	TCP	54	61611 → 443 [ACK] Seq=2757 Ack=9432 Win=261376 Len=0
12407	2011.942778100	192.168.0.180	192.168.0.1	DNS	86	Standard query 0x0797 A ris.api.iris.microsoft.com
12408	2011.947047400	192.168.0.180	192.168.0.1	DNS	76	Standard query 0xaaea AAAA dns.msftncsi.com
12409	2011.950717400	192.168.0.1	192.168.0.180	DNS	104	Standard query response 0xaaea AAAA dns.msftncsi.com AAAA fd3e:4f5a:5b81::1
12410	2011.951082200	192.168.0.180	192.168.0.1	TCP	66	55697 → 53 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12411	2011.952808200	192.168.0.1	192.168.0.180	TCP	66	53 → 55697 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=32
12412	2011.952841600	192.168.0.180	192.168.0.1	TCP	54	55697 → 53 [ACK] Seq=1 Ack=1 Win=131328 Len=0
12413	2011.952856300	192.168.0.180	192.168.0.1	DNS	90	Standard query 0x0001 AAAA dns.msftncsi.com
12414	2011.957686900	192.168.0.1	192.168.0.180	DNS	118	Standard query response 0x0001 AAAA dns.msftncsi.com AAAA fd3e:4f5a:5b81::1
12415	2011.957894500	192.168.0.180	192.168.0.1	TCP	54	55697 → 53 [FIN, ACK] Seq=37 Ack=65 Win=131328 Len=0
12416	2011.961994300	192.168.0.1	192.168.0.180	DNS	206	Standard query response 0x0797 A ris.api.iris.microsoft.com CNAME ris-prod.trafficmanager.net CNAME asf-ris-prod-neu-azsc.northeurope.cloudapp.azure.com A 20.223.217.17
12417	2011.961995000	192.168.0.1	192.168.0.180	TCP	54	53 → 55697 [FIN, ACK] Seq=65 Ack=38 Win=29216 Len=0
12418	2011.962052100	192.168.0.180	192.168.0.1	TCP	54	55697 → 53 [ACK] Seq=38 Ack=66 Win=131328 Len=0
12419	2011.962660000	192.168.0.180	20.223.217.17	TCP	66	55698 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
12420	2011.966853300	192.168.0.1	192.168.0.180	TCP	54	53 → 55697 [ACK] Seq=1 Ack=37 Win=29216 Len=0
12421	2011.966855800	40.79.163.154	192.168.0.180	TCP	1274	443 → 54093 [ACK] Seq=1 Ack=215 Win=4194048 Len=1220 [TCP PDU reassembled in 12424]
12422	2011.966865700	192.168.0.180	192.168.0.1	TCP	54	[TCP ZeroWindow] 55697 → 53 [ACK] Seq=38 Ack=66 Win=0 Len=0
12423	2011.966928200	40.79.163.154	192.168.0.180	TCP	2494	443 → 54093 [ACK] Seq=1221 Ack=215 Win=4194048 Len=2440 [TCP PDU reassembled in 12424]
12424	2011.966928600	40.79.163.154	192.168.0.180	TLSv1.2	686	Server Hello, Certificate, Server Key Exchange, Server Hello Done
12425	2011.966939800	192.168.0.180	40.79.163.154	TCP	54	54093 → 443 [ACK] Seq=215 Ack=4293 Win=131584 Len=0
12426	2011.969088000	192.168.0.1	192.168.0.180	TCP	54	53 → 55697 [RST] Seq=66 Win=0 Len=0
12427	2011.969388900	192.168.0.180	40.79.163.154	TLSv1.2	212	Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
12428	2012.023283600	20.223.217.17	192.168.0.180	TCP	66	443 → 55698 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1220 WS=256 SACK_PERM
12429	2012.023339100	192.168.0.180	20.223.217.17	TCP	54	55698 → 443 [ACK] Seq=1 Ack=1 Win=262144 Len=0
12430	2012.023706300	192.168.0.180	20.223.217.17	TLSv1.2	265	Client Hello (SNI=ris.api.iris.microsoft.com)
12431	2012.086966200	20.223.217.17	192.168.0.180	TCP	8594	443 → 55698 [ACK] Seq=1 Ack=212 Win=262144 Len=8540 [TCP PDU reassembled in 12432]
12432	2012.086968000	20.223.217.17	192.168.0.180	TLSv1.2	151	Server Hello, Certificate, Certificate Status, Server Key Exchange, Server Hello Done
12433	2012.087085000	192.168.0.180	20.223.217.17	TCP	54	55698 → 443 [ACK] Seq=212 Ack=8638 Win=262144 Len=0
12434	2012.095560600	192.168.0.180	20.223.217.17	TLSv1.2	212	Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
12435	2012.096048900	192.168.0.180	20.223.217.17	TLSv1.2	141	Application Data
12436	2012.096293500	192.168.0.180	20.223.217.17	TLSv1.2	588	Application Data
12437	2012.153681800	192.168.0.180	192.168.0.1	DNS	76	Standard query 0x2033 AAAA dns.msftncsi.com
12438	2012.156490300	192.168.0.1	192.168.0.180	DNS	104	Standard query response 0x2033 AAAA dns.msftncsi.com AAAA fd3e:4f5a:5b81::1
12439	2012.157167300	192.168.0.180	192.168.0.1	TCP	66	61816 → 53 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12440	2012.159224200	20.223.217.17	192.168.0.180	TLSv1.2	105	Change Cipher Spec, Encrypted Handshake Message
12441	2012.159224800	20.223.217.17	192.168.0.180	TLSv1.2	123	Application Data
12442	2012.159225900	192.168.0.1	192.168.0.180	TCP	66	53 → 61816 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=32
12443	2012.159356300	192.168.0.180	20.223.217.17	TCP	54	55698 → 443 [ACK] Seq=991 Ack=8758 Win=261888 Len=0
12444	2012.159363900	192.168.0.180	192.168.0.1	DNS	90	Standard query 0x0001 AAAA dns.msftncsi.com
12445	2012.159859100	192.168.0.180	20.223.217.17	TLSv1.2	92	Application Data
12446	2012.162991200	20.223.217.17	192.168.0.180	TCP	54	443 → 55698 [ACK] Seq=8638 Ack=991 Win=261376 Len=0
12447	2012.162991500	192.168.0.1	192.168.0.180	TCP	54	53 → 61816 [ACK] Seq=1 Ack=37 Win=29216 Len=0
12448	2012.163002900	192.168.0.180	20.223.217.17	TCP	54	[TCP Dup ACK 12443#1] 55698 → 443 [ACK] Seq=1029 Ack=8758 Win=261888 Len=0
12449	2012.166642300	192.168.0.1	192.168.0.180	DNS	118	Standard query response 0x0001 AAAA dns.msftncsi.com AAAA fd3e:4f5a:5b81::1
12450	2012.166852500	192.168.0.180	192.168.0.1	TCP	54	61816 → 53 [FIN, ACK] Seq=37 Ack=65 Win=131328 Len=0
12451	2012.171902800	192.168.0.1	192.168.0.180	TCP	54	53 → 61816 [FIN, ACK] Seq=65 Ack=38 Win=29216 Len=0
12452	2012.171919400	192.168.0.180	192.168.0.1	TCP	54	61816 → 53 [ACK] Seq=38 Ack=66 Win=131328 Len=0
12453	2012.182251000	20.223.217.17	192.168.0.180	TLSv1.2	221	Application Data, Application Data
12454	2012.182270500	192.168.0.180	20.223.217.17	TCP	54	55698 → 443 [ACK] Seq=1029 Ack=8925 Win=261632 Len=0
12455	2012.182991400	192.168.0.180	20.223.217.17	TLSv1.2	98	Application Data
12456	2012.319579700	20.223.217.17	192.168.0.180	TCP	54	443 → 55698 [ACK] Seq=8925 Ack=1073 Win=261376 Len=0
12457	2012.319580900	40.79.163.154	192.168.0.180	TLSv1.2	105	Change Cipher Spec, Encrypted Handshake Message
12458	2012.319581300	40.79.163.154	192.168.0.180	TLSv1.2	123	Application Data
12459	2012.319581900	20.223.217.17	192.168.0.180	TLSv1.2	134	Application Data
12460	2012.319761000	192.168.0.180	40.79.163.154	TCP	54	54093 → 443 [ACK] Seq=373 Ack=4413 Win=131584 Len=0
12461	2012.319850200	192.168.0.180	20.223.217.17	TCP	54	55698 → 443 [ACK] Seq=1073 Ack=9005 Win=261632 Len=0
12462	2012.321209900	192.168.0.180	40.79.163.154	TLSv1.2	141	Application Data
12463	2012.321335600	192.168.0.180	40.79.163.154	TLSv1.2	959	Application Data
12464	2012.321457200	192.168.0.180	40.79.163.154	TLSv1.2	92	Application Data
12465	2012.321543400	192.168.0.180	40.79.163.154	TCP	1274	54093 → 443 [ACK] Seq=1403 Ack=4413 Win=131584 Len=1220 [TCP PDU reassembled in 12468]
12466	2012.321543400	192.168.0.180	40.79.163.154	TCP	1274	54093 → 443 [ACK] Seq=2623 Ack=4413 Win=131584 Len=1220 [TCP PDU reassembled in 12468]
12467	2012.321543400	192.168.0.180	40.79.163.154	TCP	1274	54093 → 443 [ACK] Seq=3843 Ack=4413 Win=131584 Len=1220 [TCP PDU reassembled in 12468]
12468	2012.321543400	192.168.0.180	40.79.163.154	TLSv1.2	136	Application Data
12469	2012.360309800	LiteonTechno_78:06:fb	Broadcast	ARP	42	Who has 192.168.0.1? Tell 192.168.0.180
12470	2012.366179600	TPLink_b7:1d:f9	LiteonTechno_78:06:fb	ARP	42	192.168.0.1 is at 6c:4c:bc:b7:1d:f9
12471	2012.366237200	192.168.0.180	192.168.0.1	DNS	76	Standard query 0x4011 AAAA dns.msftncsi.com
12472	2012.370060100	192.168.0.1	192.168.0.180	DNS	104	Standard query response 0x4011 AAAA dns.msftncsi.com AAAA fd3e:4f5a:5b81::1
12473	2012.370878900	192.168.0.180	192.168.0.1	TCP	66	64557 → 53 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12474	2012.376101300	192.168.0.1	192.168.0.180	TCP	66	53 → 64557 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=32
12475	2012.376218900	192.168.0.180	192.168.0.1	TCP	54	64557 → 53 [ACK] Seq=1 Ack=1 Win=131328 Len=0
12476	2012.376248500	192.168.0.180	192.168.0.1	DNS	90	Standard query 0x0001 AAAA dns.msftncsi.com
12477	2012.376251500	192.168.0.180	192.168.0.1	DNS	76	Standard query 0x0f76 AAAA dns.msftncsi.com
12478	2012.380983100	192.168.0.1	192.168.0.180	DNS	104	Standard query response 0x0f76 AAAA dns.msftncsi.com AAAA fd3e:4f5a:5b81::1
12479	2012.382857000	192.168.0.1	192.168.0.180	TCP	54	53 → 64557 [ACK] Seq=1 Ack=37 Win=29216 Len=0
12480	2012.383069200	192.168.0.1	192.168.0.180	DNS	118	Standard query response 0x0001 AAAA dns.msftncsi.com AAAA fd3e:4f5a:5b81::1
12481	2012.383180000	192.168.0.180	192.168.0.1	TCP	54	64557 → 53 [FIN, ACK] Seq=37 Ack=65 Win=131328 Len=0
12482	2012.385998400	192.168.0.1	192.168.0.180	TCP	54	53 → 64557 [FIN, ACK] Seq=65 Ack=38 Win=29216 Len=0
12483	2012.386086200	192.168.0.180	192.168.0.1	TCP	54	64557 → 53 [ACK] Seq=38 Ack=66 Win=131328 Len=0
12484	2012.550687500	192.168.0.180	104.83.4.144	TCP	66	[TCP Retransmission] 54095 → 80 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12485	2012.627863800	40.79.163.154	192.168.0.180	TLSv1.2	92	Application Data
12486	2012.632612000	40.79.163.154	192.168.0.180	TCP	54	443 → 54093 [ACK] Seq=4451 Ack=1403 Win=4194304 Len=0
12487	2012.632612500	40.79.163.154	192.168.0.180	TCP	54	443 → 54093 [ACK] Seq=4451 Ack=3843 Win=4194304 Len=0
12488	2012.632612800	40.79.163.154	192.168.0.180	TCP	54	443 → 54093 [ACK] Seq=4451 Ack=5063 Win=4194304 Len=0
12489	2012.632613100	40.79.163.154	192.168.0.180	TCP	54	443 → 54093 [ACK] Seq=4451 Ack=5145 Win=4194048 Len=0
12490	2012.668705600	192.168.0.180	40.79.163.154	TCP	54	54093 → 443 [ACK] Seq=5145 Ack=4451 Win=131584 Len=0
12491	2012.999165800	40.79.163.154	192.168.0.180	TLSv1.2	341	Application Data
12492	2013.008170300	192.168.0.180	192.168.0.1	DNS	89	Standard query 0x9277 A v20.events.data.microsoft.com
12493	2013.034459600	192.168.0.1	192.168.0.180	DNS	226	Standard query response 0x9277 A v20.events.data.microsoft.com CNAME win-global-asimov-leafs-events-data.trafficmanager.net CNAME onedscolprdeus20.eastus.cloudapp.azure.com A 20.42.65.93
12494	2013.035007000	192.168.0.180	20.42.65.93	TCP	66	64558 → 443 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12495	2013.043759900	192.168.0.180	40.79.163.154	TCP	54	54093 → 443 [ACK] Seq=5145 Ack=4738 Win=131072 Len=0
12496	2013.156098200	20.42.65.93	192.168.0.180	TCP	66	443 → 64558 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1220 WS=256 SACK_PERM
12497	2013.156230400	192.168.0.180	20.42.65.93	TCP	54	64558 → 443 [ACK] Seq=1 Ack=1 Win=131584 Len=0
12498	2013.156671700	192.168.0.180	20.42.65.93	TLSv1.2	268	Client Hello (SNI=v20.events.data.microsoft.com)
12499	2013.293120300	20.42.65.93	192.168.0.180	TCP	3714	443 → 64558 [ACK] Seq=1 Ack=215 Win=4194048 Len=3660 [TCP PDU reassembled in 12500]
12500	2013.293123600	20.42.65.93	192.168.0.180	TLSv1.2	686	Server Hello, Certificate, Server Key Exchange, Server Hello Done
12501	2013.293200100	192.168.0.180	20.42.65.93	TCP	54	64558 → 443 [ACK] Seq=215 Ack=4293 Win=131584 Len=0
12502	2013.295844300	192.168.0.180	20.42.65.93	TLSv1.2	212	Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
12503	2013.435319600	20.42.65.93	192.168.0.180	TLSv1.2	105	Change Cipher Spec, Encrypted Handshake Message
12504	2013.436148800	192.168.0.180	20.42.65.93	TLSv1.2	141	Application Data
12505	2013.436208700	192.168.0.180	20.42.65.93	TLSv1.2	938	Application Data
12506	2013.436287300	192.168.0.180	20.42.65.93	TLSv1.2	871	Application Data
12507	2013.441787600	20.42.65.93	192.168.0.180	TLSv1.2	123	Application Data
12508	2013.441883800	192.168.0.180	20.42.65.93	TLSv1.2	92	Application Data
12509	2013.573451700	20.42.65.93	192.168.0.180	TCP	54	443 → 64558 [ACK] Seq=4413 Ack=2161 Win=4194304 Len=0
12510	2013.573453000	20.42.65.93	192.168.0.180	TCP	54	443 → 64558 [ACK] Seq=4413 Ack=2199 Win=4194304 Len=0
12511	2013.573454200	20.42.65.93	192.168.0.180	TLSv1.2	92	Application Data
12512	2013.616890600	192.168.0.180	20.42.65.93	TCP	54	64558 → 443 [ACK] Seq=2199 Ack=4451 Win=131584 Len=0
12513	2013.648261900	192.168.0.180	192.168.0.1	DNS	85	Standard query 0xf06d A fd.api.iris.microsoft.com
12514	2013.683720700	192.168.0.1	192.168.0.180	DNS	303	Standard query response 0xf06d A fd.api.iris.microsoft.com CNAME fd-api-iris.trafficmanager.net CNAME ideas-irisselection-irisfd-lb.prod-weu.ideas-irisselection-irisfd.westeurope-prod.cosmic.office.net CNAME cosmic-westeurope-ns-94e430034cf7.trafficmanager.net A 20.76.64.74
12515	2013.684435200	192.168.0.180	20.76.64.74	TCP	66	64559 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
12516	2013.733952500	20.76.64.74	192.168.0.180	TCP	66	443 → 64559 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1220 WS=256 SACK_PERM
12517	2013.734021200	192.168.0.180	20.76.64.74	TCP	54	64559 → 443 [ACK] Seq=1 Ack=1 Win=262144 Len=0
12518	2013.734455500	192.168.0.180	20.76.64.74	TLSv1.2	264	Client Hello (SNI=fd.api.iris.microsoft.com)
12519	2013.748774600	20.42.65.93	192.168.0.180	TLSv1.2	339	Application Data
12520	2013.754609000	192.168.0.180	40.79.163.154	TLSv1.2	133	Application Data
12521	2013.754749900	192.168.0.180	40.79.163.154	TCP	1274	54093 → 443 [ACK] Seq=5224 Ack=4738 Win=131072 Len=1220 [TCP PDU reassembled in 12522]
12522	2013.754749900	192.168.0.180	40.79.163.154	TLSv1.2	789	Application Data
12523	2013.779238000	20.76.64.74	192.168.0.180	TCP	2494	443 → 64559 [ACK] Seq=1 Ack=211 Win=4194048 Len=2440 [TCP PDU reassembled in 12533]
12524	2013.779276000	192.168.0.180	20.76.64.74	TCP	54	64559 → 443 [ACK] Seq=211 Ack=2441 Win=262144 Len=0
12525	2013.779400900	20.76.64.74	192.168.0.180	TCP	2494	443 → 64559 [ACK] Seq=2441 Ack=211 Win=4194048 Len=2440 [TCP PDU reassembled in 12533]
12526	2013.779412500	192.168.0.180	20.76.64.74	TCP	54	64559 → 443 [ACK] Seq=211 Ack=4881 Win=262144 Len=0
12527	2013.779501300	20.76.64.74	192.168.0.180	TCP	1274	443 → 64559 [ACK] Seq=4881 Ack=211 Win=4194048 Len=1220 [TCP PDU reassembled in 12533]
12528	2013.779510700	192.168.0.180	20.76.64.74	TCP	54	64559 → 443 [ACK] Seq=211 Ack=6101 Win=262144 Len=0
12529	2013.779534500	20.76.64.74	192.168.0.180	TCP	1274	443 → 64559 [ACK] Seq=6101 Ack=211 Win=4194048 Len=1220 [TCP PDU reassembled in 12533]
12530	2013.779542600	192.168.0.180	20.76.64.74	TCP	54	64559 → 443 [ACK] Seq=211 Ack=7321 Win=262144 Len=0
12531	2013.779568900	20.76.64.74	192.168.0.180	TCP	1274	443 → 64559 [ACK] Seq=7321 Ack=211 Win=4194048 Len=1220 [TCP PDU reassembled in 12533]
12532	2013.779581000	192.168.0.180	20.76.64.74	TCP	54	64559 → 443 [ACK] Seq=211 Ack=8541 Win=262144 Len=0
12533	2013.782790600	20.76.64.74	192.168.0.180	TLSv1.2	431	Server Hello, Certificate, Certificate Status, Server Key Exchange, Server Hello Done
12534	2013.782802500	192.168.0.180	20.76.64.74	TCP	54	64559 → 443 [ACK] Seq=211 Ack=8918 Win=261632 Len=0
12535	2013.788474600	192.168.0.180	20.76.64.74	TLSv1.2	212	Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
12536	2013.788693200	192.168.0.180	20.76.64.74	TLSv1.2	141	Application Data
12537	2013.788877200	192.168.0.180	20.76.64.74	TCP	1274	64559 → 443 [ACK] Seq=456 Ack=8918 Win=261632 Len=1220 [TCP PDU reassembled in 12538]
12538	2013.788877200	192.168.0.180	20.76.64.74	TLSv1.2	1114	Application Data
12539	2013.790902100	192.168.0.180	20.42.65.93	TCP	54	64558 → 443 [ACK] Seq=2199 Ack=4736 Win=131072 Len=0
12540	2013.845604400	20.76.64.74	192.168.0.180	TCP	54	443 → 64559 [ACK] Seq=8918 Ack=2736 Win=4194304 Len=0
12541	2013.846148900	20.76.64.74	192.168.0.180	TLSv1.2	105	Change Cipher Spec, Encrypted Handshake Message
12542	2013.846150800	20.76.64.74	192.168.0.180	TLSv1.2	123	Application Data
12543	2013.846203300	192.168.0.180	20.76.64.74	TCP	54	64559 → 443 [ACK] Seq=2736 Ack=9038 Win=261632 Len=0
12544	2013.846821400	192.168.0.180	20.76.64.74	TLSv1.2	92	Application Data
12545	2013.882892900	20.76.64.74	192.168.0.180	TLSv1.2	92	Application Data
12546	2013.882930500	192.168.0.180	20.76.64.74	TCP	54	64559 → 443 [ACK] Seq=2774 Ack=9076 Win=261376 Len=0
12547	2013.892750000	20.76.64.74	192.168.0.180	TCP	3714	443 → 64559 [ACK] Seq=9076 Ack=2774 Win=4194304 Len=3660 [TCP PDU reassembled in 12550]
12548	2013.892798400	192.168.0.180	20.76.64.74	TCP	54	64559 → 443 [ACK] Seq=2774 Ack=12736 Win=262144 Len=0
12549	2013.892851000	20.76.64.74	192.168.0.180	TCP	1274	443 → 64559 [ACK] Seq=12736 Ack=2774 Win=4194304 Len=1220 [TCP PDU reassembled in 12550]
12550	2013.892856700	20.76.64.74	192.168.0.180	TLSv1.2	949	Application Data
12551	2013.892857700	20.76.64.74	192.168.0.180	TLSv1.2	92	Application Data
12552	2013.892878600	192.168.0.180	20.76.64.74	TCP	54	64559 → 443 [ACK] Seq=2774 Ack=14889 Win=262144 Len=0
12553	2014.084472200	40.79.163.154	192.168.0.180	TLSv1.2	162	Application Data
12554	2014.088559200	192.168.0.180	40.79.163.154	TCP	54	54093 → 443 [FIN, ACK] Seq=7179 Ack=4846 Win=131072 Len=0
12555	2014.089049600	192.168.0.180	20.42.65.93	TCP	54	64558 → 443 [FIN, ACK] Seq=2199 Ack=4736 Win=131072 Len=0
12556	2014.093749500	40.79.163.154	192.168.0.180	TCP	54	443 → 54093 [ACK] Seq=4738 Ack=7179 Win=4194304 Len=0
12557	2014.093821200	192.168.0.180	40.79.163.154	TCP	54	[TCP Dup ACK 12554#1] 54093 → 443 [ACK] Seq=7180 Ack=4846 Win=131072 Len=0
12558	2014.098822300	192.168.0.180	20.199.58.43	TCP	54	61611 → 443 [RST, ACK] Seq=2757 Ack=9432 Win=0 Len=0
12559	2014.099106000	192.168.0.180	20.223.217.17	TCP	54	55698 → 443 [RST, ACK] Seq=1073 Ack=9005 Win=0 Len=0
12560	2014.099143300	192.168.0.180	20.76.64.74	TCP	54	64559 → 443 [RST, ACK] Seq=2774 Ack=14889 Win=0 Len=0
12561	2014.213124000	20.42.65.93	192.168.0.180	TCP	54	443 → 64558 [FIN, ACK] Seq=4736 Ack=2200 Win=4194304 Len=0
12562	2014.213155800	192.168.0.180	20.42.65.93	TCP	54	64558 → 443 [ACK] Seq=2200 Ack=4737 Win=131072 Len=0
12563	2014.524094600	192.168.0.180	40.79.163.154	TCP	54	[TCP Retransmission] 54093 → 443 [FIN, ACK] Seq=7179 Ack=4846 Win=131072 Len=0
12564	2014.550327700	40.79.163.154	192.168.0.180	TLSv1.2	96	Application Data
12565	2014.550328400	40.79.163.154	192.168.0.180	TCP	54	443 → 54093 [FIN, ACK] Seq=4888 Ack=7180 Win=4194304 Len=0
12566	2014.550366100	192.168.0.180	40.79.163.154	TCP	54	54093 → 443 [RST, ACK] Seq=7180 Ack=4888 Win=0 Len=0
12567	2014.556084800	192.168.0.180	104.83.4.144	TCP	66	[TCP Retransmission] 54095 → 80 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12568	2014.883051100	40.79.163.154	192.168.0.180	TCP	54	[TCP Dup ACK 12564#1] 443 → 54093 [ACK] Seq=4889 Ack=7180 Win=4194304 Len=0
12569	2018.561001400	192.168.0.180	104.83.4.144	TCP	66	[TCP Retransmission] 54095 → 80 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12570	2019.533211500	LiteonTechno_78:06:fb	TPLink_b7:1d:f9	ARP	42	Who has 192.168.0.1? Tell 192.168.0.180
12571	2019.536311000	TPLink_b7:1d:f9	LiteonTechno_78:06:fb	ARP	42	192.168.0.1 is at 6c:4c:bc:b7:1d:f9
12572	2025.823077300	192.168.0.180	192.168.0.1	DNS	89	Standard query 0xba10 A v20.events.data.microsoft.com
12573	2025.856065400	192.168.0.1	192.168.0.180	DNS	226	Standard query response 0xba10 A v20.events.data.microsoft.com CNAME win-global-asimov-leafs-events-data.trafficmanager.net CNAME onedscolprdeus00.eastus.cloudapp.azure.com A 20.42.72.131
12574	2025.856585100	192.168.0.180	20.42.72.131	TCP	66	64560 → 443 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12575	2025.973195600	20.42.72.131	192.168.0.180	TCP	66	443 → 64560 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1220 WS=256 SACK_PERM
12576	2025.973252600	192.168.0.180	20.42.72.131	TCP	54	64560 → 443 [ACK] Seq=1 Ack=1 Win=131584 Len=0
12577	2025.973549200	192.168.0.180	20.42.72.131	TLSv1.2	268	Client Hello (SNI=v20.events.data.microsoft.com)
12578	2026.119393300	20.42.72.131	192.168.0.180	TCP	2494	443 → 64560 [ACK] Seq=1 Ack=215 Win=4194048 Len=2440 [TCP PDU reassembled in 12581]
12579	2026.119429800	192.168.0.180	20.42.72.131	TCP	54	64560 → 443 [ACK] Seq=215 Ack=2441 Win=131584 Len=0
12580	2026.119514700	20.42.72.131	192.168.0.180	TCP	1274	443 → 64560 [ACK] Seq=2441 Ack=215 Win=4194048 Len=1220 [TCP PDU reassembled in 12581]
12581	2026.119515400	20.42.72.131	192.168.0.180	TLSv1.2	686	Server Hello, Certificate, Server Key Exchange, Server Hello Done
12582	2026.119532700	192.168.0.180	20.42.72.131	TCP	54	64560 → 443 [ACK] Seq=215 Ack=4293 Win=131584 Len=0
12583	2026.121852100	192.168.0.180	20.42.72.131	TLSv1.2	212	Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
12584	2026.263500300	20.42.72.131	192.168.0.180	TLSv1.2	105	Change Cipher Spec, Encrypted Handshake Message
12585	2026.263501200	20.42.72.131	192.168.0.180	TLSv1.2	123	Application Data
12586	2026.263579700	192.168.0.180	20.42.72.131	TCP	54	64560 → 443 [ACK] Seq=373 Ack=4413 Win=131584 Len=0
12587	2026.265013700	192.168.0.180	20.42.72.131	TLSv1.2	141	Application Data
12588	2026.265075900	192.168.0.180	20.42.72.131	TLSv1.2	938	Application Data
12589	2026.265141700	192.168.0.180	20.42.72.131	TLSv1.2	92	Application Data
12590	2026.265182600	192.168.0.180	20.42.72.131	TCP	1274	64560 → 443 [ACK] Seq=1382 Ack=4413 Win=131584 Len=1220 [TCP PDU reassembled in 12591]
12591	2026.265182600	192.168.0.180	20.42.72.131	TLSv1.2	219	Application Data
12592	2026.393019300	20.42.72.131	192.168.0.180	TCP	54	443 → 64560 [ACK] Seq=4413 Ack=1382 Win=4194304 Len=0
12593	2026.393019900	20.42.72.131	192.168.0.180	TCP	54	443 → 64560 [ACK] Seq=4413 Ack=2602 Win=4194304 Len=0
12594	2026.393021700	20.42.72.131	192.168.0.180	TLSv1.2	92	Application Data
12595	2026.434805900	192.168.0.180	20.42.72.131	TCP	54	64560 → 443 [ACK] Seq=2767 Ack=4451 Win=131584 Len=0
12596	2026.559259700	20.42.72.131	192.168.0.180	TLSv1.2	339	Application Data
12597	2026.561829500	192.168.0.180	104.83.4.144	TCP	66	[TCP Retransmission] 54095 → 80 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12598	2026.564419400	192.168.0.180	20.42.72.131	TCP	54	64560 → 443 [FIN, ACK] Seq=2767 Ack=4736 Win=131072 Len=0
12599	2026.720392500	20.42.72.131	192.168.0.180	TCP	54	443 → 64560 [FIN, ACK] Seq=4736 Ack=2768 Win=4194048 Len=0
12600	2026.720425800	192.168.0.180	20.42.72.131	TCP	54	64560 → 443 [ACK] Seq=2768 Ack=4737 Win=131072 Len=0
12601	2032.570624100	192.168.0.180	104.83.4.139	TCP	66	64561 → 80 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12602	2033.574456600	192.168.0.180	104.83.4.139	TCP	66	[TCP Retransmission] 64561 → 80 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12603	2035.585926100	192.168.0.180	104.83.4.139	TCP	66	[TCP Retransmission] 64561 → 80 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12604	2039.600901300	192.168.0.180	104.83.4.139	TCP	66	[TCP Retransmission] 64561 → 80 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12605	2040.544051600	LiteonTechno_78:06:fb	TPLink_b7:1d:f9	ARP	42	Who has 192.168.0.1? Tell 192.168.0.180
12606	2040.547389200	TPLink_b7:1d:f9	LiteonTechno_78:06:fb	ARP	42	192.168.0.1 is at 6c:4c:bc:b7:1d:f9
12607	2047.608715100	192.168.0.180	104.83.4.139	TCP	66	[TCP Retransmission] 64561 → 80 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12608	2053.621658200	LiteonTechno_78:06:fb	Broadcast	ARP	42	Who has 192.168.0.1? Tell 192.168.0.180
12609	2053.625632400	TPLink_b7:1d:f9	LiteonTechno_78:06:fb	ARP	42	192.168.0.1 is at 6c:4c:bc:b7:1d:f9
12610	2055.608187400	192.168.0.180	192.168.0.1	DNS	71	Standard query 0xe529 A arc.msn.com
12611	2055.646021200	192.168.0.1	192.168.0.180	DNS	289	Standard query response 0xe529 A arc.msn.com CNAME arc.trafficmanager.net CNAME ideas-irisselection-irisfd-lb.prod-b-frc.ideas-irisselection-irisfd.francecentral-prod.cosmic.office.net CNAME cosmic-francecentral-ns-e68249b2c189.trafficmanager.net A 4.211.70.206
12612	2055.646970100	192.168.0.180	4.211.70.206	TCP	66	64562 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
12613	2055.709963000	4.211.70.206	192.168.0.180	TCP	66	443 → 64562 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1220 WS=256 SACK_PERM
12614	2055.710044200	192.168.0.180	4.211.70.206	TCP	54	64562 → 443 [ACK] Seq=1 Ack=1 Win=262144 Len=0
12615	2055.711815200	192.168.0.180	4.211.70.206	TLSv1.2	250	Client Hello (SNI=arc.msn.com)
12616	2055.778720200	4.211.70.206	192.168.0.180	TCP	1274	443 → 64562 [ACK] Seq=1 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12630]
12617	2055.778759500	192.168.0.180	4.211.70.206	TCP	54	64562 → 443 [ACK] Seq=197 Ack=1221 Win=262144 Len=0
12618	2055.784452200	4.211.70.206	192.168.0.180	TCP	1274	443 → 64562 [ACK] Seq=1221 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12630]
12619	2055.784513200	192.168.0.180	4.211.70.206	TCP	54	64562 → 443 [ACK] Seq=197 Ack=2441 Win=262144 Len=0
12620	2055.791129700	4.211.70.206	192.168.0.180	TCP	1274	443 → 64562 [ACK] Seq=2441 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12630]
12621	2055.791185900	192.168.0.180	4.211.70.206	TCP	54	64562 → 443 [ACK] Seq=197 Ack=3661 Win=262144 Len=0
12622	2055.797618600	4.211.70.206	192.168.0.180	TCP	1274	443 → 64562 [ACK] Seq=3661 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12630]
12623	2055.797647900	192.168.0.180	4.211.70.206	TCP	54	64562 → 443 [ACK] Seq=197 Ack=4881 Win=262144 Len=0
12624	2055.802936200	4.211.70.206	192.168.0.180	TCP	1274	443 → 64562 [ACK] Seq=4881 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12630]
12625	2055.802994000	192.168.0.180	4.211.70.206	TCP	54	64562 → 443 [ACK] Seq=197 Ack=6101 Win=262144 Len=0
12626	2055.809736000	4.211.70.206	192.168.0.180	TCP	1274	443 → 64562 [ACK] Seq=6101 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12630]
12627	2055.809801400	192.168.0.180	4.211.70.206	TCP	54	64562 → 443 [ACK] Seq=197 Ack=7321 Win=262144 Len=0
12628	2055.815031800	4.211.70.206	192.168.0.180	TCP	1274	443 → 64562 [ACK] Seq=7321 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12630]
12629	2055.815054400	192.168.0.180	4.211.70.206	TCP	54	64562 → 443 [ACK] Seq=197 Ack=8541 Win=262144 Len=0
12630	2055.817482900	4.211.70.206	192.168.0.180	TLSv1.2	431	Server Hello, Certificate, Certificate Status, Server Key Exchange, Server Hello Done
12631	2055.817534900	192.168.0.180	4.211.70.206	TCP	54	64562 → 443 [ACK] Seq=197 Ack=8918 Win=261632 Len=0
12632	2055.837374900	192.168.0.180	4.211.70.206	TLSv1.2	212	Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
12633	2055.903437600	4.211.70.206	192.168.0.180	TLSv1.2	105	Change Cipher Spec, Encrypted Handshake Message
12634	2055.903525000	192.168.0.180	4.211.70.206	TCP	54	64562 → 443 [ACK] Seq=355 Ack=8969 Win=261632 Len=0
12635	2055.903737800	4.211.70.206	192.168.0.180	TLSv1.2	123	Application Data
12636	2055.903759900	192.168.0.180	4.211.70.206	TCP	54	64562 → 443 [ACK] Seq=355 Ack=9038 Win=261632 Len=0
12637	2055.905004200	192.168.0.180	4.211.70.206	TLSv1.2	141	Application Data
12638	2055.905029300	192.168.0.180	4.211.70.206	TLSv1.2	92	Application Data
12639	2055.906297900	192.168.0.180	4.211.70.206	TLSv1.2	195	Application Data
12640	2055.906500600	192.168.0.180	4.211.70.206	TCP	1274	64562 → 443 [ACK] Seq=621 Ack=9038 Win=261632 Len=1220 [TCP PDU reassembled in 12641]
12641	2055.906500600	192.168.0.180	4.211.70.206	TLSv1.2	933	Application Data
12642	2055.906588100	192.168.0.180	4.211.70.206	TLSv1.2	92	Application Data
12643	2055.971760100	4.211.70.206	192.168.0.180	TLSv1.2	92	Application Data
12644	2055.971805900	192.168.0.180	4.211.70.206	TCP	54	64562 → 443 [ACK] Seq=2758 Ack=9076 Win=261376 Len=0
12645	2055.983359500	4.211.70.206	192.168.0.180	TCP	54	443 → 64562 [ACK] Seq=9076 Ack=621 Win=4193536 Len=0
12646	2055.993173100	4.211.70.206	192.168.0.180	TCP	54	443 → 64562 [ACK] Seq=9076 Ack=1841 Win=4194304 Len=0
12647	2055.993723500	4.211.70.206	192.168.0.180	TCP	54	443 → 64562 [ACK] Seq=9076 Ack=2758 Win=4193280 Len=0
12648	2056.040339300	4.211.70.206	192.168.0.180	TLSv1.2	303	Application Data
12649	2056.040404400	192.168.0.180	4.211.70.206	TCP	54	64562 → 443 [ACK] Seq=2758 Ack=9325 Win=261120 Len=0
12650	2056.049907000	192.168.0.180	192.168.0.1	DNS	86	Standard query 0x40aa A ris.api.iris.microsoft.com
12651	2056.073897600	192.168.0.1	192.168.0.180	DNS	206	Standard query response 0x40aa A ris.api.iris.microsoft.com CNAME ris-prod.trafficmanager.net CNAME asf-ris-prod-neu-azsc.northeurope.cloudapp.azure.com A 20.223.217.17
12652	2056.074320700	192.168.0.180	20.223.217.17	TCP	66	64563 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
12653	2056.170929800	20.223.217.17	192.168.0.180	TCP	66	443 → 64563 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1220 WS=256 SACK_PERM
12654	2056.170988300	192.168.0.180	20.223.217.17	TCP	54	64563 → 443 [ACK] Seq=1 Ack=1 Win=262144 Len=0
12655	2056.171343000	192.168.0.180	20.223.217.17	TLSv1.2	265	Client Hello (SNI=ris.api.iris.microsoft.com)
12656	2056.240297400	20.223.217.17	192.168.0.180	TCP	1274	443 → 64563 [ACK] Seq=1 Ack=212 Win=262144 Len=1220 [TCP PDU reassembled in 12668]
12657	2056.240354300	192.168.0.180	20.223.217.17	TCP	54	64563 → 443 [ACK] Seq=212 Ack=1221 Win=262144 Len=0
12658	2056.241949000	20.223.217.17	192.168.0.180	TCP	1274	443 → 64563 [ACK] Seq=1221 Ack=212 Win=262144 Len=1220 [TCP PDU reassembled in 12668]
12659	2056.241969700	192.168.0.180	20.223.217.17	TCP	54	64563 → 443 [ACK] Seq=212 Ack=2441 Win=262144 Len=0
12660	2056.245703100	20.223.217.17	192.168.0.180	TCP	1274	443 → 64563 [ACK] Seq=2441 Ack=212 Win=262144 Len=1220 [TCP PDU reassembled in 12668]
12661	2056.245724300	192.168.0.180	20.223.217.17	TCP	54	64563 → 443 [ACK] Seq=212 Ack=3661 Win=262144 Len=0
12662	2056.247696700	20.223.217.17	192.168.0.180	TCP	2494	443 → 64563 [ACK] Seq=3661 Ack=212 Win=262144 Len=2440 [TCP PDU reassembled in 12668]
12663	2056.247739400	192.168.0.180	20.223.217.17	TCP	54	64563 → 443 [ACK] Seq=212 Ack=6101 Win=262144 Len=0
12664	2056.248405900	20.223.217.17	192.168.0.180	TCP	1274	443 → 64563 [ACK] Seq=6101 Ack=212 Win=262144 Len=1220 [TCP PDU reassembled in 12668]
12665	2056.248420300	192.168.0.180	20.223.217.17	TCP	54	64563 → 443 [ACK] Seq=212 Ack=7321 Win=262144 Len=0
12666	2056.249850400	20.223.217.17	192.168.0.180	TCP	1274	443 → 64563 [ACK] Seq=7321 Ack=212 Win=262144 Len=1220 [TCP PDU reassembled in 12668]
12667	2056.249860600	192.168.0.180	20.223.217.17	TCP	54	64563 → 443 [ACK] Seq=212 Ack=8541 Win=262144 Len=0
12668	2056.249982600	20.223.217.17	192.168.0.180	TLSv1.2	151	Server Hello, Certificate, Certificate Status, Server Key Exchange, Server Hello Done
12669	2056.249988800	192.168.0.180	20.223.217.17	TCP	54	64563 → 443 [ACK] Seq=212 Ack=8638 Win=261888 Len=0
12670	2056.255285700	192.168.0.180	20.223.217.17	TLSv1.2	212	Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
12671	2056.255531600	192.168.0.180	20.223.217.17	TLSv1.2	141	Application Data
12672	2056.255665800	192.168.0.180	20.223.217.17	TLSv1.2	588	Application Data
12673	2056.320392600	20.223.217.17	192.168.0.180	TLSv1.2	105	Change Cipher Spec, Encrypted Handshake Message
12674	2056.320393700	20.223.217.17	192.168.0.180	TLSv1.2	123	Application Data
12675	2056.320527900	192.168.0.180	20.223.217.17	TCP	54	64563 → 443 [ACK] Seq=991 Ack=8758 Win=261888 Len=0
12676	2056.321053800	192.168.0.180	20.223.217.17	TLSv1.2	92	Application Data
12677	2056.333523600	20.223.217.17	192.168.0.180	TCP	54	443 → 64563 [ACK] Seq=8758 Ack=991 Win=261376 Len=0
12678	2056.373257100	20.223.217.17	192.168.0.180	TLSv1.2	92	Application Data
12679	2056.373311000	192.168.0.180	20.223.217.17	TCP	54	64563 → 443 [ACK] Seq=1029 Ack=8796 Win=261888 Len=0
12680	2056.392556000	20.223.217.17	192.168.0.180	TLSv1.2	183	Application Data
12681	2056.392611900	192.168.0.180	20.223.217.17	TCP	54	64563 → 443 [ACK] Seq=1029 Ack=8925 Win=261632 Len=0
12682	2056.393706900	192.168.0.180	20.223.217.17	TLSv1.2	98	Application Data
12683	2056.503788300	20.223.217.17	192.168.0.180	TCP	54	443 → 64563 [ACK] Seq=8925 Ack=1073 Win=261376 Len=0
12684	2056.531741400	20.223.217.17	192.168.0.180	TLSv1.2	134	Application Data
12685	2056.531823700	192.168.0.180	20.223.217.17	TCP	54	64563 → 443 [ACK] Seq=1073 Ack=9005 Win=261632 Len=0
12686	2056.583659500	192.168.0.180	4.211.70.206	TCP	54	64562 → 443 [RST, ACK] Seq=2758 Ack=9325 Win=0 Len=0
12687	2056.583805100	192.168.0.180	20.223.217.17	TCP	54	64563 → 443 [RST, ACK] Seq=1073 Ack=9005 Win=0 Len=0
12688	2060.653207700	TPLink_b7:1d:f9	LiteonTechno_78:06:fb	ARP	42	Who has 192.168.0.180? Tell 192.168.0.1
12689	2060.653236900	LiteonTechno_78:06:fb	TPLink_b7:1d:f9	ARP	42	192.168.0.180 is at 74:4c:a1:78:06:fb
12690	2069.965799000	192.168.0.180	192.168.0.1	DNS	92	Standard query 0x8f3d A mobile.events.data.microsoft.com
12691	2070.130080800	192.168.0.1	192.168.0.180	DNS	215	Standard query response 0x8f3d A mobile.events.data.microsoft.com CNAME mobile.events.data.trafficmanager.net CNAME onedscolprdcus72.centralus.cloudapp.azure.com A 4.150.223.99
12692	2070.130604000	192.168.0.180	4.150.223.99	TCP	66	64564 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
12693	2070.274495300	4.150.223.99	192.168.0.180	TCP	66	443 → 64564 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1220 WS=256 SACK_PERM
12694	2070.274631300	192.168.0.180	4.150.223.99	TCP	54	64564 → 443 [ACK] Seq=1 Ack=1 Win=262144 Len=0
12695	2070.275175400	192.168.0.180	4.150.223.99	TLSv1.2	285	Client Hello (SNI=mobile.events.data.microsoft.com)
12696	2070.467220400	4.150.223.99	192.168.0.180	TCP	7374	443 → 64564 [ACK] Seq=1 Ack=232 Win=4194048 Len=7320 [TCP PDU reassembled in 12699]
12697	2070.467268300	192.168.0.180	4.150.223.99	TCP	54	64564 → 443 [ACK] Seq=232 Ack=7321 Win=262144 Len=0
12698	2070.467414900	4.150.223.99	192.168.0.180	TCP	1274	443 → 64564 [ACK] Seq=7321 Ack=232 Win=4194048 Len=1220 [TCP PDU reassembled in 12699]
12699	2070.467415800	4.150.223.99	192.168.0.180	TLSv1.2	419	Server Hello, Certificate, Certificate Status, Server Key Exchange, Server Hello Done
12700	2070.467438200	192.168.0.180	4.150.223.99	TCP	54	64564 → 443 [ACK] Seq=232 Ack=8906 Win=262144 Len=0
12701	2070.476922600	192.168.0.180	4.150.223.99	TLSv1.2	212	Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
12702	2070.636479800	4.150.223.99	192.168.0.180	TLSv1.2	105	Change Cipher Spec, Encrypted Handshake Message
12703	2070.636519900	192.168.0.180	4.150.223.99	TCP	54	64564 → 443 [ACK] Seq=390 Ack=8957 Win=261888 Len=0
12704	2070.636950000	192.168.0.180	4.150.223.99	TLSv1.2	1051	Application Data
12705	2070.802936400	4.150.223.99	192.168.0.180	TLSv1.2	506	Application Data
12706	2070.802982400	192.168.0.180	4.150.223.99	TCP	54	64564 → 443 [ACK] Seq=1387 Ack=9409 Win=261632 Len=0
12707	2072.500973600	192.168.0.180	192.168.0.1	DNS	83	Standard query 0x83ea A ctldl.windowsupdate.com
12708	2072.533189600	192.168.0.1	192.168.0.180	DNS	232	Standard query response 0x83ea A ctldl.windowsupdate.com CNAME ctldl.windowsupdate.com.delivery.microsoft.com CNAME wu-b-net.trafficmanager.net CNAME cl-glcb907925.gcdn.co A 80.240.113.62
12709	2072.536154400	192.168.0.180	80.240.113.62	TCP	66	64565 → 80 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12710	2073.006681400	192.168.0.180	192.168.0.1	DNS	71	Standard query 0x9ac2 A api.msn.com
12711	2073.286121000	192.168.0.1	192.168.0.180	DNS	230	Standard query response 0x9ac2 A api.msn.com CNAME api-msn-com-oneservice-world-default.trafficmanager.net CNAME api-msn-com.ax-0003.ax-msedge.net CNAME ax-0003.ax-msedge.net A 150.171.28.12 A 150.171.27.12
12712	2073.287226200	192.168.0.180	150.171.28.12	TCP	66	64566 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
12713	2073.287226200	192.168.0.180	150.171.28.12	TCP	66	64567 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
12714	2073.480412400	150.171.28.12	192.168.0.180	TCP	66	443 → 64566 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1220 WS=256 SACK_PERM
12715	2073.480413000	150.171.28.12	192.168.0.180	TCP	66	443 → 64567 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1220 WS=256 SACK_PERM
12716	2073.480488500	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=1 Ack=1 Win=262144 Len=0
12717	2073.480515500	192.168.0.180	150.171.28.12	TCP	54	64567 → 443 [ACK] Seq=1 Ack=1 Win=262144 Len=0
12718	2073.482131800	192.168.0.180	150.171.28.12	TLSv1.2	250	Client Hello (SNI=api.msn.com)
12719	2073.482208700	192.168.0.180	150.171.28.12	TLSv1.2	250	Client Hello (SNI=api.msn.com)
12720	2073.541798000	192.168.0.180	80.240.113.62	TCP	66	[TCP Retransmission] 64565 → 80 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
12721	2073.749526800	150.171.28.12	192.168.0.180	TCP	3714	443 → 64567 [ACK] Seq=1 Ack=197 Win=4194048 Len=3660 [TCP PDU reassembled in 12730]
12722	2073.749569900	192.168.0.180	150.171.28.12	TCP	54	64567 → 443 [ACK] Seq=197 Ack=3661 Win=262144 Len=0
12723	2073.755512100	150.171.28.12	192.168.0.180	TCP	1274	443 → 64567 [ACK] Seq=3661 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12730]
12724	2073.755533000	192.168.0.180	150.171.28.12	TCP	54	64567 → 443 [ACK] Seq=197 Ack=4881 Win=262144 Len=0
12725	2073.755663100	150.171.28.12	192.168.0.180	TCP	1274	443 → 64567 [ACK] Seq=4881 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12730]
12726	2073.755673100	192.168.0.180	150.171.28.12	TCP	54	64567 → 443 [ACK] Seq=197 Ack=6101 Win=262144 Len=0
12727	2073.755705400	150.171.28.12	192.168.0.180	TCP	1274	443 → 64567 [ACK] Seq=6101 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12730]
12728	2073.755714000	192.168.0.180	150.171.28.12	TCP	54	64567 → 443 [ACK] Seq=197 Ack=7321 Win=262144 Len=0
12729	2073.755811600	150.171.28.12	192.168.0.180	TCP	1274	443 → 64567 [ACK] Seq=7321 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12730]
12730	2073.755812200	150.171.28.12	192.168.0.180	TLSv1.2	125	Server Hello, Certificate, Certificate Status, Server Key Exchange, Server Hello Done
12731	2073.755824400	192.168.0.180	150.171.28.12	TCP	54	64567 → 443 [ACK] Seq=197 Ack=8612 Win=262144 Len=0
12732	2073.755924600	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=1 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12745]
12733	2073.755938800	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=197 Ack=1221 Win=262144 Len=0
12734	2073.756020800	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=1221 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12745]
12735	2073.756031300	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=197 Ack=2441 Win=262144 Len=0
12736	2073.756182400	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=2441 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12745]
12737	2073.756196800	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=197 Ack=3661 Win=262144 Len=0
12738	2073.756231100	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=3661 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12745]
12739	2073.756242000	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=197 Ack=4881 Win=262144 Len=0
12740	2073.756277700	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=4881 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12745]
12741	2073.756288900	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=197 Ack=6101 Win=262144 Len=0
12742	2073.756345400	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=6101 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12745]
12743	2073.756357900	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=197 Ack=7321 Win=262144 Len=0
12744	2073.756405500	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=7321 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12745]
12745	2073.756406000	150.171.28.12	192.168.0.180	TLSv1.2	125	Server Hello, Certificate, Certificate Status, Server Key Exchange, Server Hello Done
12746	2073.756406200	150.171.28.12	192.168.0.180	TCP	54	443 → 64567 [ACK] Seq=1 Ack=197 Win=4194048 Len=0
12747	2073.756406400	150.171.28.12	192.168.0.180	TCP	54	443 → 64566 [ACK] Seq=1 Ack=197 Win=4194048 Len=0
12748	2073.756420900	192.168.0.180	150.171.28.12	TCP	54	[TCP Dup ACK 12731#1] 64567 → 443 [ACK] Seq=197 Ack=8612 Win=262144 Len=0
12749	2073.756435500	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=197 Ack=8612 Win=262144 Len=0
12750	2073.756503400	150.171.28.12	192.168.0.180	TCP	1274	[TCP Spurious Retransmission] 443 → 64566 [PSH, ACK] Seq=7392 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12745]
12751	2073.756511900	192.168.0.180	150.171.28.12	TCP	66	[TCP Dup ACK 12749#1] 64566 → 443 [ACK] Seq=197 Ack=8612 Win=262144 Len=0 SLE=7392 SRE=8612
12752	2073.756535500	150.171.28.12	192.168.0.180	TCP	1274	[TCP Spurious Retransmission] 443 → 64567 [PSH, ACK] Seq=7392 Ack=197 Win=4194048 Len=1220 [TCP PDU reassembled in 12730]
12753	2073.756545100	192.168.0.180	150.171.28.12	TCP	66	[TCP Dup ACK 12731#2] 64567 → 443 [ACK] Seq=197 Ack=8612 Win=262144 Len=0 SLE=7392 SRE=8612
12754	2073.773224600	192.168.0.180	150.171.28.12	TLSv1.2	212	Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
12755	2073.773486400	192.168.0.180	150.171.28.12	TLSv1.2	141	Application Data
12756	2073.776881500	192.168.0.180	150.171.28.12	TCP	1274	64566 → 443 [ACK] Seq=442 Ack=8612 Win=262144 Len=1220 [TCP PDU reassembled in 12758]
12757	2073.776881500	192.168.0.180	150.171.28.12	TCP	1274	64566 → 443 [ACK] Seq=1662 Ack=8612 Win=262144 Len=1220 [TCP PDU reassembled in 12758]
12758	2073.776881500	192.168.0.180	150.171.28.12	TLSv1.2	749	Application Data
12759	2073.777636200	192.168.0.180	150.171.28.12	TLSv1.2	212	Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
12760	2073.777859300	192.168.0.180	150.171.28.12	TLSv1.2	141	Application Data
12761	2073.778089900	192.168.0.180	150.171.28.12	TCP	1274	64566 → 443 [ACK] Seq=3577 Ack=8612 Win=262144 Len=1220 [TCP PDU reassembled in 12763]
12762	2073.778089900	192.168.0.180	150.171.28.12	TCP	1274	64566 → 443 [ACK] Seq=4797 Ack=8612 Win=262144 Len=1220 [TCP PDU reassembled in 12763]
12763	2073.778089900	192.168.0.180	150.171.28.12	TLSv1.2	749	Application Data
12764	2073.802721100	150.171.28.12	192.168.0.180	TCP	54	443 → 64566 [ACK] Seq=8612 Ack=442 Win=4193792 Len=0
12765	2074.165856700	192.168.0.180	150.171.28.12	TCP	1274	[TCP Retransmission] 64566 → 443 [PSH, ACK] Seq=5492 Ack=8612 Win=262144 Len=1220 [TCP PDU reassembled in 12763]
12766	2074.277920000	192.168.0.180	150.171.28.12	TCP	299	[TCP Retransmission] 64567 → 443 [PSH, ACK] Seq=197 Ack=8612 Win=262144 Len=245
12767	2074.405912200	130.49.160.11	192.168.0.180	TCP	294	[TCP Spurious Retransmission] 8388 → 53672 [PSH, ACK] Seq=2441 Ack=1044 Win=49152 Len=240
12768	2074.405958800	130.49.160.11	192.168.0.180	TCP	294	[TCP Spurious Retransmission] 8388 → 53672 [PSH, ACK] Seq=2441 Ack=1044 Win=49152 Len=240
12769	2074.405970100	130.49.160.11	192.168.0.180	TCP	295	[TCP Spurious Retransmission] 8388 → 53862 [PSH, ACK] Seq=2441 Ack=994 Win=49152 Len=241
12770	2074.405980100	130.49.160.11	192.168.0.180	TCP	295	[TCP Spurious Retransmission] 8388 → 53862 [PSH, ACK] Seq=2441 Ack=994 Win=49152 Len=241
12771	2074.405988500	130.49.160.11	192.168.0.180	TCP	295	[TCP Spurious Retransmission] 8388 → 53862 [PSH, ACK] Seq=2441 Ack=994 Win=49152 Len=241
12772	2074.405996400	130.49.160.11	192.168.0.180	TCP	294	[TCP Spurious Retransmission] 8388 → 53908 [PSH, ACK] Seq=2441 Ack=338 Win=45056 Len=240
12773	2074.406010000	150.171.28.12	192.168.0.180	TLSv1.2	503	New Session Ticket, Change Cipher Spec, Encrypted Handshake Message, Application Data, Application Data
12774	2074.406050000	192.168.0.180	150.171.28.12	TCP	54	64567 → 443 [ACK] Seq=442 Ack=9061 Win=261632 Len=0
12775	2074.406089500	150.171.28.12	192.168.0.180	TLSv1.2	503	New Session Ticket, Change Cipher Spec, Encrypted Handshake Message, Application Data, Application Data
12776	2074.406106800	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=9061 Win=261632 Len=0
12777	2074.406121600	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=9061 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12781]
12778	2074.406129600	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=10281 Win=262144 Len=0
12779	2074.406140300	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=10281 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12781]
12780	2074.406145500	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=11501 Win=262144 Len=0
12781	2074.406156800	150.171.28.12	192.168.0.180	TLSv1.2	1048	Application Data
12782	2074.406165900	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=12495 Win=261120 Len=0
12783	2074.406222300	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=12495 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12785]
12784	2074.406231200	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=13715 Win=262144 Len=0
12785	2074.406245600	150.171.28.12	192.168.0.180	TLSv1.2	116	Application Data
12786	2074.406253900	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=13777 Win=261888 Len=0
12787	2074.406270700	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=13777 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12791]
12788	2074.406288000	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=14997 Win=262144 Len=0
12789	2074.406304600	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=14997 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12791]
12790	2074.406311200	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=16217 Win=262144 Len=0
12791	2074.406325900	150.171.28.12	192.168.0.180	TLSv1.2	498	Application Data
12792	2074.406333800	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=16661 Win=261632 Len=0
12793	2074.406348700	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=16661 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12799]
12794	2074.406365100	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=17881 Win=262144 Len=0
12795	2074.406378700	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=17881 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12799]
12796	2074.406387700	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=19101 Win=262144 Len=0
12797	2074.406426700	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=19101 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12799]
12798	2074.406437700	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=20321 Win=262144 Len=0
12799	2074.406451200	150.171.28.12	192.168.0.180	TLSv1.2	472	Application Data
12800	2074.406464000	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=20739 Win=261632 Len=0
12801	2074.406478200	150.171.28.12	192.168.0.180	TLSv1.2	142	Application Data
12802	2074.406485600	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=20827 Win=261632 Len=0
12803	2074.406498100	150.171.28.12	192.168.0.180	TLSv1.2	98	Application Data
12804	2074.406507500	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=20871 Win=261376 Len=0
12805	2074.406520600	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=20871 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12811]
12806	2074.406529700	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=22091 Win=262144 Len=0
12807	2074.406542700	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=22091 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12811]
12808	2074.406549600	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=23311 Win=262144 Len=0
12809	2074.406564600	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=23311 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12811]
12810	2074.406573000	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=24531 Win=262144 Len=0
12811	2074.406585400	150.171.28.12	192.168.0.180	TLSv1.2	473	Application Data
12812	2074.406597500	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=24950 Win=261632 Len=0
12813	2074.406611800	150.171.28.12	192.168.0.180	TLSv1.2	139	Application Data
12814	2074.406620500	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=25035 Win=261632 Len=0
12815	2074.406653100	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=25035 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12821]
12816	2074.406659600	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=26255 Win=262144 Len=0
12817	2074.406671900	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=26255 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12821]
12818	2074.406680100	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=27475 Win=262144 Len=0
12819	2074.406690700	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=27475 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12821]
12820	2074.406697100	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=28695 Win=262144 Len=0
12821	2074.406707800	150.171.28.12	192.168.0.180	TLSv1.2	472	Application Data
12822	2074.406714600	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=29113 Win=261632 Len=0
12823	2074.406727400	150.171.28.12	192.168.0.180	TLSv1.2	142	Application Data
12824	2074.406732300	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=29201 Win=261632 Len=0
12825	2074.406742300	150.171.28.12	192.168.0.180	TLSv1.2	98	Application Data
12826	2074.406746500	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=29245 Win=261376 Len=0
12827	2074.406756100	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=29245 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12833]
12828	2074.406762100	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=30465 Win=262144 Len=0
12829	2074.406772700	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=30465 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12833]
12830	2074.406778500	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=31685 Win=262144 Len=0
12831	2074.406789300	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=31685 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12833]
12832	2074.406800600	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=32905 Win=262144 Len=0
12833	2074.406819500	150.171.28.12	192.168.0.180	TLSv1.2	473	Application Data
12834	2074.406832000	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6712 Ack=33324 Win=261632 Len=0
12835	2074.406849900	150.171.28.12	192.168.0.180	TLSv1.2	139	Application Data
12836	2074.406876600	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=33409 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12837]
12837	2074.406888800	150.171.28.12	192.168.0.180	TLSv1.2	542	Application Data
12838	2074.406894600	192.168.0.180	150.171.28.12	TLSv1.2	92	Application Data
12839	2074.406902200	150.171.28.12	192.168.0.180	TLSv1.2	92	Application Data
12840	2074.406902700	192.168.0.180	150.171.28.12	TLSv1.2	92	Application Data
12841	2074.406913600	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=35155 Ack=6712 Win=4194304 Len=1220
12842	2074.421038400	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6750 Ack=36375 Win=262144 Len=0
12843	2074.682367300	150.171.28.12	192.168.0.180	TCP	66	[TCP Dup ACK 12775#1] 443 → 64566 [ACK] Seq=36375 Ack=6712 Win=4194304 Len=0 SLE=5492 SRE=6712
12844	2074.682367900	150.171.28.12	192.168.0.180	TCP	66	443 → 64567 [ACK] Seq=9023 Ack=442 Win=4193792 Len=0 SLE=197 SRE=442
12845	2074.682398800	192.168.0.180	150.171.28.12	TCP	54	[TCP Dup ACK 12774#1] 64567 → 443 [ACK] Seq=480 Ack=9061 Win=261632 Len=0
12846	2074.682502100	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=36375 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12848]
12847	2074.682520900	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6750 Ack=37595 Win=262144 Len=0
12848	2074.682560200	150.171.28.12	192.168.0.180	TLSv1.2	1274	Application Data
12849	2074.682573200	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6750 Ack=38815 Win=262144 Len=0
12850	2074.682733700	150.171.28.12	192.168.0.180	TLSv1.2	1274	Application Data
12851	2074.682741000	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6750 Ack=40035 Win=262144 Len=0
12852	2074.682906700	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=40035 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12856]
12853	2074.682919200	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6750 Ack=41255 Win=262144 Len=0
12854	2074.683082900	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=41255 Ack=6712 Win=4194304 Len=1220 [TCP PDU reassembled in 12856]
12855	2074.683093600	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6750 Ack=42475 Win=262144 Len=0
12856	2074.683268100	150.171.28.12	192.168.0.180	TLSv1.2	1274	Application Data
12857	2074.683295200	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6750 Ack=43695 Win=262144 Len=0
12858	2074.683329100	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=43695 Ack=6750 Win=4194304 Len=1220 [TCP PDU reassembled in 12862]
12859	2074.683346200	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6750 Ack=44915 Win=262144 Len=0
12860	2074.683388300	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=44915 Ack=6750 Win=4194304 Len=1220 [TCP PDU reassembled in 12862]
12861	2074.683398600	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6750 Ack=46135 Win=262144 Len=0
12862	2074.683451700	150.171.28.12	192.168.0.180	TLSv1.2	1274	Application Data, Application Data, Application Data
12863	2074.683461600	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6750 Ack=47355 Win=262144 Len=0
12864	2074.683528100	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=47355 Ack=6750 Win=4194304 Len=1220 [TCP PDU reassembled in 12868]
12865	2074.683545900	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6750 Ack=48575 Win=262144 Len=0
12866	2074.683588600	150.171.28.12	192.168.0.180	TCP	1274	443 → 64566 [ACK] Seq=48575 Ack=6750 Win=4194304 Len=1220 [TCP PDU reassembled in 12868]
12867	2074.683600800	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6750 Ack=49795 Win=262144 Len=0
12868	2074.683650500	150.171.28.12	192.168.0.180	TLSv1.2	1274	Application Data
12869	2074.683669300	192.168.0.180	150.171.28.12	TCP	54	64566 → 443 [ACK] Seq=6750 Ack=51015 Win=262144 Len=0
12870	2074.683713900	150.171.28.12	192.168.0.180	TLSv1.2	1274	Application Data