https://pastein.ru/t/8gW
Загрузка данных
31396 2926.761498800 fe80::bf7f:2782:66ba:e9ef ff02::2 ICMPv6 62 Router Solicitation
31397 2926.761523900 fe80::bf7f:2782:66ba:e9ef ff02::16 ICMPv6 150 Multicast Listener Report Message v2
31398 2926.997087300 fe80::bf7f:2782:66ba:e9ef ff02::1:3 LLMNR 95 Standard query 0x45cf ANY DESKTOP-QBP3PA9
31399 2926.997660200 169.254.64.102 224.0.0.252 LLMNR 75 Standard query 0x45cf ANY DESKTOP-QBP3PA9
31400 2927.027856200 169.254.64.102 239.255.255.250 SSDP 179 M-SEARCH * HTTP/1.1
31401 2927.058351100 fe80::bf7f:2782:66ba:e9ef ff02::1:ff18:a40 ICMPv6 86 Neighbor Solicitation for fe80::be07:1dff:fe18:a40 from e8:bf:e1:52:06:f2
31402 2927.062082600 fe80::be07:1dff:fe18:a40 fe80::bf7f:2782:66ba:e9ef ICMPv6 86 Neighbor Advertisement fe80::be07:1dff:fe18:a40 (rtr, sol, ovr) is at bc:07:1d:18:0a:40
31403 2927.093719700 fe80::be07:1dff:fe18:a40 fe80::bf7f:2782:66ba:e9ef ICMPv6 86 Neighbor Solicitation for fe80::bf7f:2782:66ba:e9ef from bc:07:1d:18:0a:40
31404 2927.093837400 fe80::bf7f:2782:66ba:e9ef fe80::be07:1dff:fe18:a40 ICMPv6 86 Neighbor Advertisement fe80::bf7f:2782:66ba:e9ef (sol, ovr) is at e8:bf:e1:52:06:f2
31405 2927.261313400 169.254.64.102 224.0.0.22 IGMPv3 62 Membership Report / Join group 224.0.0.251 for any sources / Join group 239.255.255.250 for any sources
31406 2927.261370500 fe80::bf7f:2782:66ba:e9ef ff02::16 ICMPv6 130 Multicast Listener Report Message v2
31407 2927.496177900 fe80::bf7f:2782:66ba:e9ef fec0:0:0:ffff::3 DNS 96 Standard query 0xdf9f A dns.msftncsi.com
31408 2927.499726300 fe80::be07:1dff:fe18:a40 fe80::bf7f:2782:66ba:e9ef ICMPv6 144 Destination Unreachable (No route to destination)
31409 2927.588068500 fe80::bf7f:2782:66ba:e9ef ff02::1:2 DHCPv6 159 Solicit XID: 0xb3c0b3 CID: 0001010031e455f7e8bfe15206f2
31410 2927.760860400 Intel_52:06:f2 Broadcast ARP 42 Who has 169.254.64.102? (ARP Probe)
31411 2927.760983600 fe80::bf7f:2782:66ba:e9ef ff02::1 ICMPv6 86 Neighbor Advertisement fe80::bf7f:2782:66ba:e9ef (ovr) is at e8:bf:e1:52:06:f2
31412 2927.761009200 fe80::bf7f:2782:66ba:e9ef ff02::2 ICMPv6 70 Router Solicitation from e8:bf:e1:52:06:f2
31413 2928.315078100 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
31414 2928.510879700 fe80::bf7f:2782:66ba:e9ef fec0:0:0:ffff::2 DNS 96 Standard query 0xdf9f A dns.msftncsi.com
31415 2928.515657500 fe80::be07:1dff:fe18:a40 fe80::bf7f:2782:66ba:e9ef ICMPv6 144 Destination Unreachable (No route to destination)
31416 2928.761371500 Intel_52:06:f2 Broadcast ARP 42 Who has 169.254.64.102? (ARP Probe)
31417 2929.389132200 169.254.64.102 239.255.255.250 SSDP 179 M-SEARCH * HTTP/1.1
31418 2929.514583900 fe80::bf7f:2782:66ba:e9ef fec0:0:0:ffff::1 DNS 96 Standard query 0xdf9f A dns.msftncsi.com
31419 2929.518120800 fe80::be07:1dff:fe18:a40 fe80::bf7f:2782:66ba:e9ef ICMPv6 144 Destination Unreachable (No route to destination)
31420 2929.594076000 fe80::bf7f:2782:66ba:e9ef ff02::1:2 DHCPv6 159 Solicit XID: 0xb3c0b3 CID: 0001010031e455f7e8bfe15206f2
31421 2929.765312600 Intel_52:06:f2 Broadcast ARP 42 ARP Announcement for 169.254.64.102
31422 2930.562573800 0.0.0.0 255.255.255.255 DHCP 342 DHCP Discover - Transaction ID 0xc433c0c1
31423 2930.567356200 192.168.68.1 192.168.68.53 DHCP 342 DHCP Offer - Transaction ID 0xc433c0c1
31424 2930.568379400 0.0.0.0 255.255.255.255 DHCP 371 DHCP Request - Transaction ID 0xc433c0c1
31425 2930.573366000 192.168.68.1 192.168.68.53 DHCP 342 DHCP ACK - Transaction ID 0xc433c0c1
31426 2930.578345600 Intel_52:06:f2 Broadcast ARP 42 Who has 192.168.68.1? Tell 192.168.68.53
31427 2930.580081100 192.168.68.53 192.168.71.255 NBNS 110 Release NB WORKGROUP<00>
31428 2930.580256200 192.168.68.53 192.168.71.255 NBNS 110 Release NB DESKTOP-QBP3PA9<00>
31429 2930.582957400 TPLink_18:0a:40 Intel_52:06:f2 ARP 42 192.168.68.1 is at bc:07:1d:18:0a:40
31430 2930.583535000 192.168.68.53 192.168.71.255 NBNS 110 Release NB DESKTOP-QBP3PA9<20>
31431 2930.589367000 192.168.68.53 224.0.0.22 IGMPv3 54 Membership Report / Leave group 224.0.0.252
31432 2930.589382800 fe80::bf7f:2782:66ba:e9ef ff02::16 ICMPv6 90 Multicast Listener Report Message v2
31433 2930.637988600 fe80::bf7f:2782:66ba:e9ef ff02::16 ICMPv6 90 Multicast Listener Report Message v2
31434 2930.638071500 192.168.68.53 224.0.0.22 IGMPv3 54 Membership Report / Join group 224.0.0.252 for any sources
31435 2930.639376300 Intel_52:06:f2 Broadcast ARP 42 Who has 192.168.68.1? Tell 192.168.68.53
31436 2930.640728600 fe80::bf7f:2782:66ba:e9ef ff02::16 ICMPv6 90 Multicast Listener Report Message v2
31437 2930.640751700 192.168.68.53 224.0.0.22 IGMPv3 54 Membership Report / Leave group 224.0.0.252
31438 2930.640888700 fe80::bf7f:2782:66ba:e9ef ff02::16 ICMPv6 90 Multicast Listener Report Message v2
31439 2930.641016200 192.168.68.53 224.0.0.22 IGMPv3 54 Membership Report / Join group 224.0.0.252 for any sources
31440 2930.641623700 TPLink_18:0a:40 Intel_52:06:f2 ARP 42 192.168.68.1 is at bc:07:1d:18:0a:40
31441 2930.641896300 fe80::bf7f:2782:66ba:e9ef ff02::1:3 LLMNR 95 Standard query 0x6db4 ANY DESKTOP-QBP3PA9
31442 2930.642233500 192.168.68.53 224.0.0.252 LLMNR 75 Standard query 0x6db4 ANY DESKTOP-QBP3PA9
31443 2930.644866700 fe80::bf7f:2782:66ba:e9ef ff02::16 ICMPv6 90 Multicast Listener Report Message v2
31444 2930.644890800 192.168.68.53 224.0.0.22 IGMPv3 54 Membership Report / Leave group 239.255.255.250
31445 2930.645058100 fe80::bf7f:2782:66ba:e9ef ff02::16 ICMPv6 90 Multicast Listener Report Message v2
31446 2930.645447200 192.168.68.53 224.0.0.22 IGMPv3 54 Membership Report / Join group 239.255.255.250 for any sources
31447 2930.659918600 192.168.68.53 192.168.71.255 NBNS 110 Registration NB DESKTOP-QBP3PA9<00>
31448 2930.660031400 192.168.68.53 192.168.71.255 NBNS 110 Registration NB WORKGROUP<00>
31449 2930.660301800 192.168.68.53 192.168.71.255 NBNS 110 Registration NB DESKTOP-QBP3PA9<20>
31450 2930.766282600 Intel_52:06:f2 Broadcast ARP 42 Who has 192.168.68.53? (ARP Probe)
31451 2930.766361600 192.168.68.53 224.0.0.22 IGMPv3 62 Membership Report / Join group 224.0.0.252 for any sources / Join group 239.255.255.250 for any sources
31452 2930.766426200 fe80::bf7f:2782:66ba:e9ef ff02::16 ICMPv6 110 Multicast Listener Report Message v2
31453 2930.852467000 Intel_52:06:f2 Broadcast ARP 42 Who has 192.168.68.1? Tell 192.168.68.53
31454 2930.854825400 TPLink_18:0a:40 Intel_52:06:f2 ARP 42 192.168.68.1 is at bc:07:1d:18:0a:40
31455 2930.874726000 192.168.68.53 239.255.255.250 SSDP 179 M-SEARCH * HTTP/1.1
31456 2930.878771700 192.168.68.1 192.168.68.53 SSDP 461 HTTP/1.1 200 OK
31457 2931.062852900 fe80::bf7f:2782:66ba:e9ef ff02::1:3 LLMNR 95 Standard query 0x6db4 ANY DESKTOP-QBP3PA9
31458 2931.063154800 192.168.68.53 224.0.0.252 LLMNR 75 Standard query 0x6db4 ANY DESKTOP-QBP3PA9
31459 2931.149137100 192.168.68.53 192.168.1.1 DNS 83 Standard query 0x2a4c A www.msftconnecttest.com
31460 2931.163646400 192.168.1.1 192.168.68.53 DNS 193 Standard query response 0x2a4c A www.msftconnecttest.com CNAME www.msftconnecttest.com.edgesuite.net CNAME a39.d.akamai.net A 2.23.154.112 A 2.23.154.128
31461 2931.164799100 192.168.68.53 2.23.154.112 TCP 66 56461 → 80 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
31462 2931.181400900 2.23.154.112 192.168.68.53 TCP 66 80 → 56461 [SYN, ACK] Seq=0 Ack=1 Win=64240 Len=0 MSS=1384 SACK_PERM WS=128
31463 2931.181604300 192.168.68.53 2.23.154.112 TCP 54 56461 → 80 [ACK] Seq=1 Ack=1 Win=65280 Len=0
31464 2931.181971500 192.168.68.53 2.23.154.112 HTTP 165 GET /connecttest.txt HTTP/1.1
31465 2931.203252800 2.23.154.112 192.168.68.53 HTTP 241 HTTP/1.1 200 OK (text/plain)
31466 2931.203254500 2.23.154.112 192.168.68.53 TCP 54 80 → 56461 [FIN, ACK] Seq=188 Ack=112 Win=64256 Len=0
31467 2931.203395800 192.168.68.53 2.23.154.112 TCP 54 56461 → 80 [ACK] Seq=112 Ack=189 Win=65280 Len=0
31468 2931.203497800 192.168.68.53 2.23.154.112 TCP 54 56461 → 80 [FIN, ACK] Seq=112 Ack=189 Win=65280 Len=0
31469 2931.330184700 192.168.68.53 192.168.71.255 NBNS 110 Release NB WORKGROUP<00>
31470 2931.330244300 192.168.68.53 192.168.71.255 NBNS 110 Release NB DESKTOP-QBP3PA9<00>
31471 2931.345323100 192.168.68.53 192.168.71.255 NBNS 110 Release NB DESKTOP-QBP3PA9<20>
31472 2931.423365000 192.168.68.53 192.168.71.255 NBNS 110 Registration NB DESKTOP-QBP3PA9<00>
31473 2931.423485200 192.168.68.53 192.168.71.255 NBNS 110 Registration NB DESKTOP-QBP3PA9<20>
31474 2931.423574400 192.168.68.53 192.168.71.255 NBNS 110 Registration NB WORKGROUP<00>
31475 2931.518239800 fe80::bf7f:2782:66ba:e9ef fec0:0:0:ffff::1 DNS 96 Standard query 0xdf9f A dns.msftncsi.com
31476 2931.518382100 fe80::bf7f:2782:66ba:e9ef fec0:0:0:ffff::2 DNS 96 Standard query 0xdf9f A dns.msftncsi.com
31477 2931.518423300 192.168.68.53 2.23.154.112 TCP 54 [TCP Retransmission] 56461 → 80 [FIN, ACK] Seq=112 Ack=189 Win=65280 Len=0
31478 2931.518476000 fe80::bf7f:2782:66ba:e9ef fec0:0:0:ffff::3 DNS 96 Standard query 0xdf9f A dns.msftncsi.com
31479 2931.520767600 fe80::be07:1dff:fe18:a40 fe80::bf7f:2782:66ba:e9ef ICMPv6 144 Destination Unreachable (No route to destination)
31480 2931.520768100 fe80::be07:1dff:fe18:a40 fe80::bf7f:2782:66ba:e9ef ICMPv6 144 Destination Unreachable (No route to destination)
31481 2931.520768400 fe80::be07:1dff:fe18:a40 fe80::bf7f:2782:66ba:e9ef ICMPv6 144 Destination Unreachable (No route to destination)
31482 2931.541307100 2.23.154.112 192.168.68.53 TCP 54 80 → 56461 [ACK] Seq=189 Ack=113 Win=64256 Len=0
31483 2931.645096700 192.168.68.53 224.0.0.251 MDNS 93 Standard query 0x0000 ANY DESKTOP-QBP3PA9._dosvc._tcp.local, "QU" question
31484 2931.645752000 fe80::bf7f:2782:66ba:e9ef ff02::fb MDNS 113 Standard query 0x0000 ANY DESKTOP-QBP3PA9._dosvc._tcp.local, "QU" question
31485 2931.707800000 192.168.68.53 224.0.0.251 MDNS 93 Standard query 0x0000 ANY DESKTOP-QBP3PA9._dosvc._tcp.local, "QU" question
31486 2931.709964500 fe80::bf7f:2782:66ba:e9ef ff02::fb MDNS 113 Standard query 0x0000 ANY DESKTOP-QBP3PA9._dosvc._tcp.local, "QU" question
31487 2931.738403500 192.168.68.53 224.0.0.251 MDNS 93 Standard query 0x0000 ANY DESKTOP-QBP3PA9._dosvc._tcp.local, "QU" question
31488 2931.738662700 fe80::bf7f:2782:66ba:e9ef ff02::fb MDNS 113 Standard query 0x0000 ANY DESKTOP-QBP3PA9._dosvc._tcp.local, "QU" question
31489 2931.758561200 192.168.68.53 192.168.1.1 DNS 82 Standard query 0x290a A client.wns.windows.com
31490 2931.769216100 Intel_52:06:f2 Broadcast ARP 42 Who has 192.168.68.53? (ARP Probe)
31491 2931.773219600 192.168.1.1 192.168.68.53 DNS 141 Standard query response 0x290a A client.wns.windows.com CNAME wns.notify.trafficmanager.net A 172.211.123.250
31492 2931.774035200 192.168.68.53 172.211.123.250 TCP 66 49416 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
31493 2931.778830100 192.168.68.53 192.168.1.1 DNS 86 Standard query 0xf52a A licensing.mp.microsoft.com
31494 2931.793187400 192.168.1.1 192.168.68.53 DNS 283 Standard query response 0xf52a A licensing.mp.microsoft.com CNAME consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net CNAME licensing-prod-frontdoor-geomap.trafficmanager.net CNAME neu-1.frontdoor.licensing.commerce.microsoft.com A 135.236.136.184
31495 2931.797868300 192.168.68.53 135.236.136.184 TCP 66 56462 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
31496 2931.816438900 192.168.68.53 224.0.0.251 MDNS 170 Standard query response 0x0000 SRV, cache flush 0 0 7680 DESKTOP-QBP3PA9.local TXT, cache flush
31497 2931.816662100 fe80::bf7f:2782:66ba:e9ef ff02::fb MDNS 190 Standard query response 0x0000 SRV, cache flush 0 0 7680 DESKTOP-QBP3PA9.local TXT, cache flush
31498 2931.821204400 172.211.123.250 192.168.68.53 TCP 66 443 → 49416 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1440 WS=1 SACK_PERM
31499 2931.821352500 192.168.68.53 172.211.123.250 TCP 54 49416 → 443 [ACK] Seq=1 Ack=1 Win=65280 Len=0
31500 2931.822127800 192.168.68.53 172.211.123.250 TLSv1.2 232 Client Hello (SNI=client.wns.windows.com)
31501 2931.841300300 135.236.136.184 192.168.68.53 TCP 66 443 → 56462 [SYN, ACK] Seq=0 Ack=1 Win=64240 Len=0 MSS=1440 SACK_PERM WS=1024
31502 2931.841398200 192.168.68.53 135.236.136.184 TCP 54 56462 → 443 [ACK] Seq=1 Ack=1 Win=65280 Len=0
31503 2931.846122800 192.168.68.53 135.236.136.184 TLSv1.2 530 Client Hello (SNI=licensing.mp.microsoft.com)
31504 2931.853290600 172.211.123.250 192.168.68.53 TCP 5894 443 → 49416 [PSH, ACK] Seq=1 Ack=179 Win=8014 Len=5840 [TCP PDU reassembled in 31506]
31505 2931.853402200 192.168.68.53 172.211.123.250 TCP 54 49416 → 443 [ACK] Seq=179 Ack=5841 Win=65280 Len=0
31506 2931.883397400 172.211.123.250 192.168.68.53 TLSv1.2 443 Server Hello, Certificate, Server Key Exchange, Server Hello Done
31507 2931.884795700 192.168.68.53 172.211.123.250 TLSv1.2 212 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
31508 2931.885302700 135.236.136.184 192.168.68.53 TCP 60 443 → 56462 [ACK] Seq=1 Ack=477 Win=64512 Len=0
31509 2931.885304600 135.236.136.184 192.168.68.53 TLSv1.2 7354 Server Hello, Certificate
31510 2931.885365200 192.168.68.53 135.236.136.184 TCP 54 56462 → 443 [ACK] Seq=477 Ack=7301 Win=65280 Len=0
31511 2931.893211200 135.236.136.184 192.168.68.53 TCP 1514 443 → 56462 [PSH, ACK] Seq=7301 Ack=477 Win=64512 Len=1460 [TCP PDU reassembled in 31512]
31512 2931.893213000 135.236.136.184 192.168.68.53 TLSv1.2 898 Certificate Status, Server Key Exchange, Server Hello Done
31513 2931.893274900 192.168.68.53 135.236.136.184 TCP 54 56462 → 443 [ACK] Seq=477 Ack=9605 Win=65280 Len=0
31514 2931.899423000 192.168.68.53 135.236.136.184 TLSv1.2 180 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
31515 2931.913212800 172.211.123.250 192.168.68.53 TLSv1.2 105 Change Cipher Spec, Encrypted Handshake Message
31516 2931.919570700 192.168.68.53 172.211.123.250 TLSv1.2 446 Application Data
31517 2931.919698300 192.168.68.53 172.211.123.250 TLSv1.2 1467 Application Data
31518 2931.919879500 192.168.68.53 172.211.123.250 TLSv1.2 307 Application Data
31519 2931.943267300 135.236.136.184 192.168.68.53 TLSv1.2 328 New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
31520 2931.943268400 135.236.136.184 192.168.68.53 TLSv1.2 123 Application Data
31521 2931.943352600 192.168.68.53 135.236.136.184 TCP 54 56462 → 443 [ACK] Seq=603 Ack=9948 Win=65024 Len=0
31522 2931.945236000 192.168.68.53 135.236.136.184 TLSv1.2 141 Application Data
31523 2931.945521300 192.168.68.53 135.236.136.184 TLSv1.2 1781 Application Data
31524 2931.945700400 192.168.68.53 135.236.136.184 TLSv1.2 92 Application Data
31525 2931.945828300 192.168.68.53 135.236.136.184 TLSv1.2 844 Application Data
31526 2931.953128200 172.211.123.250 192.168.68.53 TCP 60 443 → 49416 [ACK] Seq=6281 Ack=2395 Win=8192 Len=0
31527 2931.953129200 172.211.123.250 192.168.68.53 TLSv1.2 334 Application Data
31528 2931.953129500 172.211.123.250 192.168.68.53 TLSv1.2 155 Application Data
31529 2931.953129800 172.211.123.250 192.168.68.53 TLSv1.2 232 Application Data
31530 2931.953217300 192.168.68.53 172.211.123.250 TCP 54 49416 → 443 [ACK] Seq=2395 Ack=6840 Win=64512 Len=0
31531 2931.966696500 192.168.68.53 172.211.123.250 TLSv1.2 279 Application Data
31532 2931.984767600 192.168.68.53 172.211.123.250 TLSv1.2 301 Application Data
31533 2931.992411100 135.236.136.184 192.168.68.53 TLSv1.2 92 Application Data
31534 2931.992411700 135.236.136.184 192.168.68.53 TCP 60 443 → 56462 [ACK] Seq=9986 Ack=2417 Win=70656 Len=0
31535 2931.992411900 135.236.136.184 192.168.68.53 TCP 60 443 → 56462 [ACK] Seq=9986 Ack=3245 Win=73728 Len=0
31536 2931.992412200 135.236.136.184 192.168.68.53 TLSv1.2 96 Application Data
31537 2931.992416900 135.236.136.184 192.168.68.53 TCP 4434 443 → 56462 [PSH, ACK] Seq=10028 Ack=3245 Win=73728 Len=4380 [TCP PDU reassembled in 31538]
31538 2931.992417500 135.236.136.184 192.168.68.53 TLSv1.2 499 Application Data
31539 2931.992417900 172.211.123.250 192.168.68.53 TLSv1.2 155 Application Data
31540 2931.992533200 192.168.68.53 135.236.136.184 TCP 54 56462 → 443 [ACK] Seq=3245 Ack=14853 Win=65280 Len=0
31541 2931.993527500 192.168.68.53 135.236.136.184 TCP 54 56462 → 443 [FIN, ACK] Seq=3245 Ack=14853 Win=65280 Len=0
31542 2932.003152900 135.236.136.184 192.168.68.53 TLSv1.2 92 Application Data
31543 2932.003218400 192.168.68.53 135.236.136.184 TCP 54 56462 → 443 [RST, ACK] Seq=3246 Ack=14891 Win=0 Len=0
31544 2932.011357500 172.211.123.250 192.168.68.53 TLSv1.2 232 Application Data
31545 2932.011429100 192.168.68.53 172.211.123.250 TCP 54 49416 → 443 [ACK] Seq=2867 Ack=7119 Win=64256 Len=0
31546 2932.041165400 135.236.136.184 192.168.68.53 TCP 54 443 → 56462 [FIN, ACK] Seq=14891 Ack=3246 Win=73728 Len=0
31547 2932.042469900 192.168.68.53 135.236.136.184 TCP 66 56463 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
31548 2932.081311600 135.236.136.184 192.168.68.53 TCP 66 443 → 56463 [SYN, ACK] Seq=0 Ack=1 Win=64240 Len=0 MSS=1440 SACK_PERM WS=1024
31549 2932.081413800 192.168.68.53 135.236.136.184 TCP 54 56463 → 443 [ACK] Seq=1 Ack=1 Win=65280 Len=0
31550 2932.082220000 192.168.68.53 192.168.71.255 NBNS 110 Release NB WORKGROUP<00>
31551 2932.082263500 192.168.68.53 192.168.71.255 NBNS 110 Release NB DESKTOP-QBP3PA9<00>
31552 2932.086153000 192.168.68.53 135.236.136.184 TLSv1.2 530 Client Hello (SNI=licensing.mp.microsoft.com)
31553 2932.097815500 192.168.68.53 192.168.71.255 NBNS 110 Release NB DESKTOP-QBP3PA9<20>
31554 2932.125110300 135.236.136.184 192.168.68.53 TCP 60 443 → 56463 [ACK] Seq=1 Ack=477 Win=64512 Len=0
31555 2932.125115300 135.236.136.184 192.168.68.53 TLSv1.2 7354 Server Hello, Certificate
31556 2932.125194500 192.168.68.53 135.236.136.184 TCP 54 56463 → 443 [ACK] Seq=477 Ack=7301 Win=65280 Len=0
31557 2932.133258000 135.236.136.184 192.168.68.53 TCP 1514 443 → 56463 [PSH, ACK] Seq=7301 Ack=477 Win=64512 Len=1460 [TCP PDU reassembled in 31558]
31558 2932.133259400 135.236.136.184 192.168.68.53 TLSv1.2 898 Certificate Status, Server Key Exchange, Server Hello Done
31559 2932.133321500 192.168.68.53 135.236.136.184 TCP 54 56463 → 443 [ACK] Seq=477 Ack=9605 Win=65280 Len=0
31560 2932.135201600 192.168.68.53 135.236.136.184 TLSv1.2 180 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
31561 2932.173314300 135.236.136.184 192.168.68.53 TLSv1.2 328 New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
31562 2932.173315100 135.236.136.184 192.168.68.53 TLSv1.2 123 Application Data
31563 2932.173380400 192.168.68.53 135.236.136.184 TCP 54 56463 → 443 [ACK] Seq=603 Ack=9948 Win=65024 Len=0
31564 2932.174214000 192.168.68.53 135.236.136.184 TLSv1.2 141 Application Data
31565 2932.174347500 192.168.68.53 135.236.136.184 TLSv1.2 1781 Application Data
31566 2932.174466700 192.168.68.53 135.236.136.184 TLSv1.2 92 Application Data
31567 2932.174511300 192.168.68.53 135.236.136.184 TLSv1.2 844 Application Data
31568 2932.176536300 192.168.68.53 192.168.71.255 NBNS 110 Registration NB WORKGROUP<00>
31569 2932.176597100 192.168.68.53 192.168.71.255 NBNS 110 Registration NB DESKTOP-QBP3PA9<20>
31570 2932.176626500 192.168.68.53 192.168.71.255 NBNS 110 Registration NB DESKTOP-QBP3PA9<00>
31571 2932.205291600 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.51? Tell 192.168.68.1
31572 2932.213300700 135.236.136.184 192.168.68.53 TLSv1.2 92 Application Data
31573 2932.213301200 135.236.136.184 192.168.68.53 TCP 60 443 → 56463 [ACK] Seq=9986 Ack=2417 Win=70656 Len=0
31574 2932.213307600 135.236.136.184 192.168.68.53 TCP 60 443 → 56463 [ACK] Seq=9986 Ack=3245 Win=73728 Len=0
31575 2932.213308000 135.236.136.184 192.168.68.53 TLSv1.2 96 Application Data
31576 2932.213455200 192.168.68.53 135.236.136.184 TCP 54 56463 → 443 [ACK] Seq=3245 Ack=10028 Win=65024 Len=0
31577 2932.233432900 135.236.136.184 192.168.68.53 TCP 4434 443 → 56463 [PSH, ACK] Seq=10028 Ack=3245 Win=73728 Len=4380 [TCP PDU reassembled in 31578]
31578 2932.233434100 135.236.136.184 192.168.68.53 TLSv1.2 545 Application Data
31579 2932.233434700 135.236.136.184 192.168.68.53 TLSv1.2 92 Application Data
31580 2932.233509700 192.168.68.53 135.236.136.184 TCP 54 56463 → 443 [ACK] Seq=3245 Ack=14937 Win=65280 Len=0
31581 2932.234295800 192.168.68.53 135.236.136.184 TCP 54 56463 → 443 [FIN, ACK] Seq=3245 Ack=14937 Win=65280 Len=0
31582 2932.281321700 135.236.136.184 192.168.68.53 TCP 54 443 → 56463 [FIN, ACK] Seq=14937 Ack=3246 Win=73728 Len=0
31583 2932.281444700 192.168.68.53 135.236.136.184 TCP 54 56463 → 443 [ACK] Seq=3246 Ack=14938 Win=65280 Len=0
31584 2932.397433900 192.168.68.53 239.255.255.250 SSDP 179 M-SEARCH * HTTP/1.1
31585 2932.403240300 192.168.68.1 192.168.68.53 SSDP 461 HTTP/1.1 200 OK
31586 2932.542501600 192.168.68.53 192.168.1.1 DNS 95 Standard query 0x03a9 A geover.prod.do.dsp.mp.microsoft.com
31587 2932.553286100 192.168.1.1 192.168.68.53 DNS 206 Standard query response 0x03a9 A geover.prod.do.dsp.mp.microsoft.com CNAME geover.prod.do.dsp.mp.microsoft.com.edgekey.net CNAME e10370.d.akamaiedge.net A 2.18.69.115
31588 2932.553880200 192.168.68.53 2.18.69.115 TCP 66 56464 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
31589 2932.571223900 2.18.69.115 192.168.68.53 TCP 66 443 → 56464 [SYN, ACK] Seq=0 Ack=1 Win=64240 Len=0 MSS=1460 SACK_PERM WS=128
31590 2932.571331600 192.168.68.53 2.18.69.115 TCP 54 56464 → 443 [ACK] Seq=1 Ack=1 Win=65280 Len=0
31591 2932.571953800 192.168.68.53 2.18.69.115 TLSv1.2 272 Client Hello (SNI=geover.prod.do.dsp.mp.microsoft.com)
31592 2932.593389300 2.18.69.115 192.168.68.53 TCP 60 443 → 56464 [ACK] Seq=1 Ack=219 Win=64128 Len=0
31593 2932.593393700 2.18.69.115 192.168.68.53 TLSv1.2 2974 Server Hello
31594 2932.593394300 2.18.69.115 192.168.68.53 TCP 1230 443 → 56464 [PSH, ACK] Seq=2921 Ack=219 Win=64128 Len=1176 [TCP PDU reassembled in 31597]
31595 2932.593396400 2.18.69.115 192.168.68.53 TCP 1514 443 → 56464 [ACK] Seq=4097 Ack=219 Win=64128 Len=1460 [TCP PDU reassembled in 31597]
31596 2932.593470500 192.168.68.53 2.18.69.115 TCP 54 56464 → 443 [ACK] Seq=219 Ack=5557 Win=65280 Len=0
31597 2932.613200500 2.18.69.115 192.168.68.53 TLSv1.2 2974 Certificate, Certificate Status
31598 2932.613201500 2.18.69.115 192.168.68.53 TLSv1.2 179 Server Key Exchange, Server Hello Done
31599 2932.613270500 192.168.68.53 2.18.69.115 TCP 54 56464 → 443 [ACK] Seq=219 Ack=8602 Win=65280 Len=0
31600 2932.615279100 192.168.68.53 2.18.69.115 TLSv1.2 147 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
31601 2932.633290000 2.18.69.115 192.168.68.53 TLSv1.2 360 New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
31602 2932.635116200 192.168.68.53 2.18.69.115 TLSv1.2 373 Application Data
31603 2932.639690300 192.168.68.53 192.168.1.1 DNS 76 Standard query 0x752e A mtalk.google.com
31604 2932.639975900 192.168.68.53 192.168.1.1 DNS 81 Standard query 0x4519 HTTPS zws4.web.telegram.org
31605 2932.640120900 192.168.68.53 192.168.1.1 DNS 81 Standard query 0x70bf A zws4.web.telegram.org
31606 2932.651344200 192.168.1.1 192.168.68.53 DNS 121 Standard query response 0x752e A mtalk.google.com CNAME mobile-gtalk.l.google.com A 142.250.147.188
31607 2932.651345100 192.168.1.1 192.168.68.53 DNS 160 Standard query response 0x4519 HTTPS zws4.web.telegram.org SOA ns-cloud-b1.googledomains.com
31608 2932.651345400 192.168.1.1 192.168.68.53 DNS 97 Standard query response 0x70bf A zws4.web.telegram.org A 149.154.167.99
31609 2932.651345800 2.18.69.115 192.168.68.53 TLSv1.2 470 Application Data
31610 2932.652139200 192.168.68.53 142.250.147.188 TCP 66 55711 → 5228 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
31611 2932.652492100 192.168.68.53 149.154.167.99 TCP 66 49865 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
31612 2932.693149600 192.168.68.53 2.18.69.115 TCP 54 56464 → 443 [ACK] Seq=631 Ack=9324 Win=64768 Len=0
31613 2932.693225700 149.154.167.99 192.168.68.53 TCP 66 443 → 49865 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1240 SACK_PERM WS=1024
31614 2932.693226300 142.250.147.188 192.168.68.53 TCP 66 5228 → 55711 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1412 SACK_PERM WS=256
31615 2932.693372600 192.168.68.53 149.154.167.99 TCP 54 49865 → 443 [ACK] Seq=1 Ack=1 Win=65280 Len=0
31616 2932.693400800 192.168.68.53 142.250.147.188 TCP 54 55711 → 5228 [ACK] Seq=1 Ack=1 Win=65280 Len=0
31617 2932.694270700 192.168.68.53 149.154.167.99 TLSv1.2 2111 Client Hello (SNI=zws4.web.telegram.org)
31618 2932.694978200 192.168.68.53 142.250.147.188 TLSv1.3 1855 Client Hello (SNI=mtalk.google.com)
31619 2932.725752700 149.154.167.99 192.168.68.53 TCP 60 443 → 49865 [ACK] Seq=1 Ack=1241 Win=68608 Len=0
31620 2932.725753100 149.154.167.99 192.168.68.53 TCP 60 443 → 49865 [ACK] Seq=1 Ack=2058 Win=70656 Len=0
31621 2932.725756900 149.154.167.99 192.168.68.53 TLSv1.2 3774 Server Hello
31622 2932.725757700 149.154.167.99 192.168.68.53 TLSv1.2 430 Certificate
31623 2932.725758200 149.154.167.99 192.168.68.53 TLSv1.2 276 Server Key Exchange, Server Hello Done
31624 2932.725758400 142.250.147.188 192.168.68.53 TCP 60 5228 → 55711 [ACK] Seq=1 Ack=1413 Win=268288 Len=0
31625 2932.725758600 142.250.147.188 192.168.68.53 TCP 60 5228 → 55711 [ACK] Seq=1 Ack=1802 Win=268032 Len=0
31626 2932.725858800 192.168.68.53 149.154.167.99 TCP 54 49865 → 443 [ACK] Seq=2058 Ack=4319 Win=65280 Len=0
31627 2932.726890100 192.168.68.53 149.154.167.99 TLSv1.2 147 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
31628 2932.727364500 192.168.68.53 149.154.167.99 TLSv1.2 153 Application Data
31629 2932.727736000 192.168.68.53 149.154.167.99 TLSv1.2 364 Application Data
31630 2932.733265700 142.250.147.188 192.168.68.53 TLSv1.3 5702 Server Hello, Change Cipher Spec
31631 2932.733267000 142.250.147.188 192.168.68.53 TLSv1.3 601 Application Data
31632 2932.733332100 192.168.68.53 142.250.147.188 TCP 54 55711 → 5228 [ACK] Seq=1802 Ack=6196 Win=65280 Len=0
31633 2932.734367300 192.168.68.53 142.250.147.188 TLSv1.3 118 Change Cipher Spec, Application Data
31634 2932.735087300 192.168.68.53 142.250.147.188 TLSv1.3 408 Application Data
31635 2932.763325800 149.154.167.99 192.168.68.53 TCP 60 443 → 49865 [ACK] Seq=4319 Ack=2560 Win=73728 Len=0
31636 2932.763327800 149.154.167.99 192.168.68.53 TLSv1.2 344 New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
31637 2932.763328600 149.154.167.99 192.168.68.53 TLSv1.2 132 Application Data
31638 2932.763329600 149.154.167.99 192.168.68.53 TLSv1.2 472 Application Data
31639 2932.763465700 192.168.68.53 149.154.167.99 TCP 54 49865 → 443 [ACK] Seq=2560 Ack=5105 Win=64512 Len=0
31640 2932.764402100 192.168.68.53 149.154.167.99 TLSv1.2 92 Application Data
31641 2932.766513700 192.168.68.53 149.154.167.99 TCP 66 49288 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
31642 2932.768288000 192.168.68.53 149.154.167.99 TLSv1.2 121 Application Data
31643 2932.768374200 192.168.68.53 149.154.167.99 TLSv1.2 308 Application Data
31644 2932.769923800 Intel_52:06:f2 Broadcast ARP 42 Who has 192.168.68.53? (ARP Probe)
31645 2932.771634900 142.250.147.188 192.168.68.53 TCP 60 5228 → 55711 [ACK] Seq=6196 Ack=2220 Win=267776 Len=0
31646 2932.783249300 142.250.147.188 192.168.68.53 TLSv1.3 591 Application Data, Application Data
31647 2932.783250000 142.250.147.188 192.168.68.53 TLSv1.3 147 Application Data
31648 2932.783250400 142.250.147.188 192.168.68.53 TLSv1.3 88 Application Data
31649 2932.783312200 192.168.68.53 142.250.147.188 TCP 54 55711 → 5228 [ACK] Seq=2220 Ack=6860 Win=64768 Len=0
31650 2932.803401800 149.154.167.99 192.168.68.53 TCP 66 443 → 49288 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1240 SACK_PERM WS=1024
31651 2932.803402500 149.154.167.99 192.168.68.53 TCP 60 443 → 49865 [ACK] Seq=5105 Ack=2665 Win=73728 Len=0
31652 2932.803402800 149.154.167.99 192.168.68.53 TLSv1.2 96 Application Data
31653 2932.803403200 149.154.167.99 192.168.68.53 TLSv1.2 575 Application Data
31654 2932.803526000 192.168.68.53 149.154.167.99 TCP 54 49288 → 443 [ACK] Seq=1 Ack=1 Win=65280 Len=0
31655 2932.803641500 192.168.68.53 149.154.167.99 TCP 54 49865 → 443 [ACK] Seq=2919 Ack=5668 Win=65280 Len=0
31656 2932.804278200 192.168.68.53 149.154.167.99 TLSv1.2 2035 Client Hello (SNI=zws4.web.telegram.org)
31657 2932.807888800 192.168.68.53 149.154.167.99 TLSv1.2 121 Application Data
31658 2932.808006400 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
31659 2932.808726800 192.168.68.53 149.154.167.99 TLSv1.2 121 Application Data
31660 2932.808796100 192.168.68.53 149.154.167.99 TLSv1.2 180 Application Data
31661 2932.817125700 192.168.68.53 224.0.0.251 MDNS 170 Standard query response 0x0000 SRV, cache flush 0 0 7680 DESKTOP-QBP3PA9.local TXT, cache flush
31662 2932.817413200 fe80::bf7f:2782:66ba:e9ef ff02::fb MDNS 190 Standard query response 0x0000 SRV, cache flush 0 0 7680 DESKTOP-QBP3PA9.local TXT, cache flush
31663 2932.840519600 149.154.167.99 192.168.68.53 TLSv1.2 96 Application Data
31664 2932.840520400 149.154.167.99 192.168.68.53 TCP 60 443 → 49288 [ACK] Seq=1 Ack=1241 Win=68608 Len=0
31665 2932.840520600 149.154.167.99 192.168.68.53 TCP 60 443 → 49288 [ACK] Seq=1 Ack=1982 Win=70656 Len=0
31666 2932.840524700 149.154.167.99 192.168.68.53 TLSv1.2 3774 Server Hello
31667 2932.840525200 149.154.167.99 192.168.68.53 TLSv1.2 430 Certificate
31668 2932.840525700 149.154.167.99 192.168.68.53 TLSv1.2 282 Server Key Exchange, Server Hello Done
31669 2932.840525900 149.154.167.99 192.168.68.53 TCP 60 443 → 49865 [ACK] Seq=5710 Ack=3369 Win=78848 Len=0
31670 2932.840639800 192.168.68.53 149.154.167.99 TCP 54 49288 → 443 [ACK] Seq=1982 Ack=4325 Win=65280 Len=0
31671 2932.841153000 192.168.68.53 149.154.167.99 TLSv1.2 147 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
31672 2932.841494700 192.168.68.53 149.154.167.99 TLSv1.2 627 Application Data
31673 2932.841742100 149.154.167.99 192.168.68.53 TLSv1.2 96 Application Data
31674 2932.841813800 192.168.68.53 149.154.167.99 TCP 54 49865 → 443 [ACK] Seq=3369 Ack=5752 Win=65280 Len=0
31675 2932.853727400 149.154.167.99 192.168.68.53 TLSv1.2 430 Application Data
31676 2932.873369400 149.154.167.99 192.168.68.53 TCP 60 443 → 49288 [ACK] Seq=4325 Ack=2648 Win=73728 Len=0
31677 2932.873370200 149.154.167.99 192.168.68.53 TLSv1.2 344 New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
31678 2932.883270300 149.154.167.99 192.168.68.53 TLSv1.2 303 Application Data
31679 2932.883317100 192.168.68.53 149.154.167.99 TCP 54 49288 → 443 [ACK] Seq=2648 Ack=4864 Win=64768 Len=0
31680 2932.885003000 192.168.68.53 149.154.167.99 TLSv1.2 153 Application Data
31681 2932.894416600 192.168.68.53 149.154.167.99 TCP 54 49865 → 443 [ACK] Seq=3369 Ack=6128 Win=65024 Len=0
31682 2932.941574200 192.168.68.53 192.168.71.255 NBNS 110 Registration NB DESKTOP-QBP3PA9<00>
31683 2932.941644000 192.168.68.53 192.168.71.255 NBNS 110 Registration NB DESKTOP-QBP3PA9<20>
31684 2932.941677700 192.168.68.53 192.168.71.255 NBNS 110 Registration NB WORKGROUP<00>
31685 2932.961368000 149.154.167.99 192.168.68.53 TCP 60 443 → 49288 [ACK] Seq=4864 Ack=2747 Win=73728 Len=0
31686 2933.272799900 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
31687 2933.273735200 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
31688 2933.313423800 149.154.167.99 192.168.68.53 TCP 60 443 → 49288 [ACK] Seq=4864 Ack=2871 Win=73728 Len=0
31689 2933.313424700 149.154.167.99 192.168.68.53 TCP 60 443 → 49288 [ACK] Seq=4864 Ack=2995 Win=73728 Len=0
31690 2933.313425100 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
31691 2933.364452500 192.168.68.53 149.154.167.99 TCP 54 49288 → 443 [ACK] Seq=2995 Ack=4984 Win=64768 Len=0
31692 2933.383438200 149.154.167.99 192.168.68.53 TLSv1.2 528 Application Data
31693 2933.426398600 192.168.68.53 149.154.167.99 TCP 54 49288 → 443 [ACK] Seq=2995 Ack=5458 Win=64256 Len=0
31694 2933.599026400 fe80::bf7f:2782:66ba:e9ef ff02::1:2 DHCPv6 159 Solicit XID: 0xb3c0b3 CID: 0001010031e455f7e8bfe15206f2
31695 2933.771052900 Intel_52:06:f2 Broadcast ARP 42 ARP Announcement for 192.168.68.53
31696 2933.881426400 192.168.68.53 239.255.255.250 SSDP 179 M-SEARCH * HTTP/1.1
31697 2933.893424500 192.168.68.1 192.168.68.53 SSDP 461 HTTP/1.1 200 OK
31698 2933.897570700 192.168.68.53 149.154.167.99 TLSv1.2 89 Application Data
31699 2933.933606400 149.154.167.99 192.168.68.53 TLSv1.2 99 Application Data
31700 2933.933607200 149.154.167.99 192.168.68.53 TLSv1.2 85 Encrypted Alert
31701 2933.933607400 149.154.167.99 192.168.68.53 TCP 54 443 → 49288 [FIN, ACK] Seq=5534 Ack=3030 Win=73728 Len=0
31702 2933.933685700 192.168.68.53 149.154.167.99 TCP 54 49288 → 443 [ACK] Seq=3030 Ack=5535 Win=64256 Len=0
31703 2933.933975600 192.168.68.53 149.154.167.99 TCP 54 49288 → 443 [FIN, ACK] Seq=3030 Ack=5535 Win=64256 Len=0
31704 2933.971453700 149.154.167.99 192.168.68.53 TCP 54 443 → 49288 [RST] Seq=5535 Win=0 Len=0
31705 2934.634476800 192.168.68.53 2.18.69.115 TCP 54 56464 → 443 [FIN, ACK] Seq=631 Ack=9324 Win=64768 Len=0
31706 2934.653204100 2.18.69.115 192.168.68.53 TLSv1.2 85 Encrypted Alert
31707 2934.653204800 2.18.69.115 192.168.68.53 TCP 54 443 → 56464 [FIN, ACK] Seq=9355 Ack=632 Win=64128 Len=0
31708 2934.653270900 192.168.68.53 2.18.69.115 TCP 54 56464 → 443 [RST, ACK] Seq=632 Ack=9355 Win=0 Len=0
31709 2934.971128100 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
31710 2935.159597000 192.168.68.53 224.0.0.251 MDNS 82 Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
31711 2935.160002900 fe80::bf7f:2782:66ba:e9ef ff02::fb MDNS 102 Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
31712 2935.160122300 192.168.68.53 224.0.0.251 MDNS 82 Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
31713 2935.160208000 fe80::bf7f:2782:66ba:e9ef ff02::fb MDNS 102 Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
31714 2935.314032100 192.168.68.53 142.250.147.188 TCP 54 55711 → 5228 [FIN, ACK] Seq=2220 Ack=6860 Win=64768 Len=0
31715 2935.351281800 142.250.147.188 192.168.68.53 TCP 60 5228 → 55711 [ACK] Seq=6860 Ack=2221 Win=267776 Len=0
31716 2935.400788400 192.168.68.53 239.255.255.250 SSDP 179 M-SEARCH * HTTP/1.1
31717 2935.413800600 192.168.68.1 192.168.68.53 SSDP 461 HTTP/1.1 200 OK
31718 2935.525467500 fe80::bf7f:2782:66ba:e9ef fec0:0:0:ffff::1 DNS 96 Standard query 0xdf9f A dns.msftncsi.com
31719 2935.525581400 fe80::bf7f:2782:66ba:e9ef fec0:0:0:ffff::2 DNS 96 Standard query 0xdf9f A dns.msftncsi.com
31720 2935.525636900 fe80::bf7f:2782:66ba:e9ef fec0:0:0:ffff::3 DNS 96 Standard query 0xdf9f A dns.msftncsi.com
31721 2935.527573100 fe80::be07:1dff:fe18:a40 fe80::bf7f:2782:66ba:e9ef ICMPv6 144 Destination Unreachable (No route to destination)
31722 2935.527574300 fe80::be07:1dff:fe18:a40 fe80::bf7f:2782:66ba:e9ef ICMPv6 144 Destination Unreachable (No route to destination)
31723 2935.527574600 fe80::be07:1dff:fe18:a40 fe80::bf7f:2782:66ba:e9ef ICMPv6 144 Destination Unreachable (No route to destination)
31724 2935.774400600 Intel_52:06:f2 Broadcast ARP 42 ARP Announcement for 192.168.68.53
31725 2935.796738700 192.168.68.53 192.168.1.1 DNS 81 Standard query 0x802c HTTPS zws4.web.telegram.org
31726 2935.796975100 192.168.68.53 192.168.1.1 DNS 81 Standard query 0xa35d A zws4.web.telegram.org
31727 2935.797146900 192.168.68.53 192.168.1.1 DNS 76 Standard query 0x5080 A mtalk.google.com
31728 2935.803425800 192.168.1.1 192.168.68.53 DNS 97 Standard query response 0xa35d A zws4.web.telegram.org A 149.154.167.99
31729 2935.803426700 192.168.1.1 192.168.68.53 DNS 131 Standard query response 0x5080 A mtalk.google.com CNAME mobile-gtalk.l.google.com A 142.250.147.188
31730 2935.803857000 192.168.68.53 142.250.147.188 TCP 66 51336 → 5228 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
31731 2935.809659900 192.168.68.53 149.154.167.99 TCP 66 52757 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
31732 2935.813977400 192.168.1.1 192.168.68.53 DNS 160 Standard query response 0x802c HTTPS zws4.web.telegram.org SOA ns-cloud-b1.googledomains.com
31733 2935.843567900 142.250.147.188 192.168.68.53 TCP 66 5228 → 51336 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1412 SACK_PERM WS=256
31734 2935.843568700 149.154.167.99 192.168.68.53 TCP 66 443 → 52757 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1240 SACK_PERM WS=1024
31735 2935.843813100 192.168.68.53 142.250.147.188 TCP 54 51336 → 5228 [ACK] Seq=1 Ack=1 Win=65280 Len=0
31736 2935.843856100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=1 Ack=1 Win=65280 Len=0
31737 2935.845406400 192.168.68.53 149.154.167.99 TLSv1.2 2067 Client Hello (SNI=zws4.web.telegram.org)
31738 2935.846212800 192.168.68.53 142.250.147.188 TLSv1.3 1855 Client Hello (SNI=mtalk.google.com)
31739 2935.853399300 149.154.167.99 192.168.68.53 TLSv1.2 783 Application Data
31740 2935.854829400 192.168.68.53 149.154.167.99 TCP 54 49865 → 443 [FIN, ACK] Seq=3369 Ack=6857 Win=64256 Len=0
31741 2935.879038700 149.154.167.99 192.168.68.53 TCP 54 443 → 52757 [ACK] Seq=1 Ack=1241 Win=68608 Len=0
31742 2935.879039300 149.154.167.99 192.168.68.53 TCP 54 443 → 52757 [ACK] Seq=1 Ack=2014 Win=70656 Len=0
31743 2935.879043800 149.154.167.99 192.168.68.53 TLSv1.2 3774 Server Hello
31744 2935.879045000 149.154.167.99 192.168.68.53 TLSv1.2 430 Certificate
31745 2935.879045600 149.154.167.99 192.168.68.53 TLSv1.2 282 Server Key Exchange, Server Hello Done
31746 2935.879045800 142.250.147.188 192.168.68.53 TCP 60 5228 → 51336 [ACK] Seq=1 Ack=1413 Win=268288 Len=0
31747 2935.879046100 142.250.147.188 192.168.68.53 TCP 60 5228 → 51336 [ACK] Seq=1 Ack=1802 Win=268032 Len=0
31748 2935.879159700 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=2014 Ack=4325 Win=65280 Len=0
31749 2935.879616200 192.168.68.53 149.154.167.99 TLSv1.2 147 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
31750 2935.880103000 192.168.68.53 149.154.167.99 TLSv1.2 627 Application Data
31751 2935.881725800 142.250.147.188 192.168.68.53 TLSv1.3 5702 Server Hello, Change Cipher Spec
31752 2935.881728400 142.250.147.188 192.168.68.53 TLSv1.3 601 Application Data
31753 2935.881812500 192.168.68.53 142.250.147.188 TCP 54 51336 → 5228 [ACK] Seq=1802 Ack=6196 Win=65280 Len=0
31754 2935.882775600 192.168.68.53 142.250.147.188 TLSv1.3 118 Change Cipher Spec, Application Data
31755 2935.883415100 192.168.68.53 142.250.147.188 TLSv1.3 264 Application Data
31756 2935.891506000 149.154.167.99 192.168.68.53 TCP 54 443 → 49865 [FIN, ACK] Seq=6857 Ack=3370 Win=78848 Len=0
31757 2935.891564400 192.168.68.53 149.154.167.99 TCP 54 49865 → 443 [ACK] Seq=3370 Ack=6858 Win=64256 Len=0
31758 2935.913490600 149.154.167.99 192.168.68.53 TLSv1.2 344 New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
31759 2935.913492700 149.154.167.99 192.168.68.53 TLSv1.2 303 Application Data
31760 2935.913621300 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=2680 Ack=4864 Win=64768 Len=0
31761 2935.915765500 192.168.68.53 149.154.167.99 TLSv1.2 153 Application Data
31762 2935.916668000 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
31763 2935.923355700 142.250.147.188 192.168.68.53 TCP 60 5228 → 51336 [ACK] Seq=6196 Ack=2076 Win=267776 Len=0
31764 2935.923358600 142.250.147.188 192.168.68.53 TLSv1.3 591 Application Data, Application Data
31765 2935.933463200 142.250.147.188 192.168.68.53 TLSv1.3 147 Application Data
31766 2935.933464400 142.250.147.188 192.168.68.53 TLSv1.3 88 Application Data
31767 2935.933524800 192.168.68.53 142.250.147.188 TCP 54 51336 → 5228 [ACK] Seq=2076 Ack=6860 Win=64768 Len=0
31768 2935.953372000 149.154.167.99 192.168.68.53 TCP 54 443 → 52757 [ACK] Seq=4864 Ack=2969 Win=75776 Len=0
31769 2935.953372900 149.154.167.99 192.168.68.53 TLSv1.2 288 Application Data
31770 2935.983369800 149.154.167.99 192.168.68.53 TLSv1.2 528 Application Data
31771 2935.983433500 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=2969 Ack=5572 Win=65280 Len=0
31772 2935.984568400 192.168.68.53 149.154.167.99 TLSv1.2 276 Application Data
31773 2935.984640100 192.168.68.53 149.154.167.99 TLSv1.2 210 Application Data
31774 2936.021481200 149.154.167.99 192.168.68.53 TCP 54 443 → 52757 [ACK] Seq=5572 Ack=3347 Win=80896 Len=0
31775 2936.043524000 149.154.167.99 192.168.68.53 TLSv1.2 1246 Application Data
31776 2936.043528100 149.154.167.99 192.168.68.53 TLSv1.2 1011 Application Data
31777 2936.043603400 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=3347 Ack=7721 Win=65280 Len=0
31778 2936.753518600 149.154.167.99 192.168.68.53 TLSv1.2 1011 Application Data
31779 2936.802987400 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=3347 Ack=8678 Win=64512 Len=0
31780 2938.321347800 192.168.68.53 224.0.0.251 MDNS 82 Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
31781 2938.321613700 fe80::bf7f:2782:66ba:e9ef ff02::fb MDNS 102 Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
31782 2938.321704300 192.168.68.53 224.0.0.251 MDNS 82 Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
31783 2938.321782500 fe80::bf7f:2782:66ba:e9ef ff02::fb MDNS 102 Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
31784 2938.415935200 192.168.68.53 239.255.255.250 SSDP 179 M-SEARCH * HTTP/1.1
31785 2938.423426100 192.168.68.1 192.168.68.53 SSDP 461 HTTP/1.1 200 OK
31786 2938.964616700 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.50? Tell 192.168.68.1
31787 2938.970913100 192.168.68.53 149.154.167.99 TLSv1.2 260 Application Data
31788 2939.003274800 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
31789 2939.046271300 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=3553 Ack=8798 Win=64256 Len=0
31790 2939.170410400 192.168.68.1 239.255.255.250 SSDP 431 NOTIFY * HTTP/1.1
31791 2939.170411000 192.168.68.1 239.255.255.250 SSDP 440 NOTIFY * HTTP/1.1
31792 2939.170411400 192.168.68.1 239.255.255.250 SSDP 503 NOTIFY * HTTP/1.1
31793 2939.173601500 192.168.68.1 239.255.255.250 SSDP 499 NOTIFY * HTTP/1.1
31794 2939.173606500 192.168.68.1 239.255.255.250 SSDP 479 NOTIFY * HTTP/1.1
31795 2939.173607800 192.168.68.1 239.255.255.250 SSDP 511 NOTIFY * HTTP/1.1
31796 2939.173608300 192.168.68.1 239.255.255.250 SSDP 493 NOTIFY * HTTP/1.1
31797 2939.176712300 192.168.68.1 239.255.255.250 SSDP 495 NOTIFY * HTTP/1.1
31798 2939.176712600 192.168.68.1 239.255.255.250 SSDP 495 NOTIFY * HTTP/1.1
31799 2939.176716100 fe80::be07:1dff:fe18:a40 ff02::c SSDP 455 NOTIFY * HTTP/1.1
31800 2939.176717300 fe80::be07:1dff:fe18:a40 ff02::c SSDP 464 NOTIFY * HTTP/1.1
31801 2939.179760200 fe80::be07:1dff:fe18:a40 ff02::c SSDP 527 NOTIFY * HTTP/1.1
31802 2939.179763200 fe80::be07:1dff:fe18:a40 ff02::c SSDP 523 NOTIFY * HTTP/1.1
31803 2939.179763700 fe80::be07:1dff:fe18:a40 ff02::c SSDP 503 NOTIFY * HTTP/1.1
31804 2939.179764200 fe80::be07:1dff:fe18:a40 ff02::c SSDP 535 NOTIFY * HTTP/1.1
31805 2939.182126600 fe80::be07:1dff:fe18:a40 ff02::c SSDP 517 NOTIFY * HTTP/1.1
31806 2939.182128500 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
31807 2939.182129200 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
31808 2939.326123900 192.168.68.53 224.0.0.251 MDNS 82 Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
31809 2939.326587900 fe80::bf7f:2782:66ba:e9ef ff02::fb MDNS 102 Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
31810 2939.326841300 192.168.68.53 224.0.0.251 MDNS 82 Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
31811 2939.327041000 fe80::bf7f:2782:66ba:e9ef ff02::fb MDNS 102 Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
31812 2939.530830300 192.168.68.53 192.168.1.1 TCP 66 62504 → 53 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
31813 2939.541173100 192.168.1.1 192.168.68.53 TCP 66 53 → 62504 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
31814 2939.541273100 192.168.68.53 192.168.1.1 TCP 54 62504 → 53 [ACK] Seq=1 Ack=1 Win=65280 Len=0
31815 2939.541341700 192.168.68.53 192.168.1.1 DNS 90 Standard query 0x0001 A dns.msftncsi.com
31816 2939.765182000 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 62504 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
31817 2940.080141500 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 62504 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
31818 2940.531768500 192.168.1.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 62504 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
31819 2940.531811100 192.168.68.53 192.168.1.1 TCP 66 [TCP Dup ACK 31814#1] 62504 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
31820 2940.583515300 192.168.68.53 192.168.1.1 DNS 89 Standard query 0x13fb HTTPS clientservices.googleapis.com
31821 2940.583716300 192.168.68.53 192.168.1.1 DNS 89 Standard query 0xc471 A clientservices.googleapis.com
31822 2940.603664400 192.168.1.1 192.168.68.53 DNS 146 Standard query response 0x13fb HTTPS clientservices.googleapis.com SOA ns1.google.com
31823 2940.603665100 192.168.1.1 192.168.68.53 DNS 185 Standard query response 0xc471 A clientservices.googleapis.com A 142.250.130.100 A 142.250.130.113 A 142.250.130.138 A 142.250.130.101 A 142.250.130.139 A 142.250.130.102
31824 2940.604766100 192.168.68.53 142.250.130.100 QUIC 1292 Initial, DCID=0bab59072b904611, PKN: 1, CRYPTO, CRYPTO, PING, PADDING, CRYPTO, PADDING, PING, CRYPTO, CRYPTO, CRYPTO, CRYPTO, PADDING, CRYPTO, CRYPTO, CRYPTO, PADDING
31825 2940.604870700 192.168.68.53 142.250.130.100 QUIC 1292 Initial, DCID=0bab59072b904611, PKN: 2, CRYPTO
31826 2940.604917600 192.168.68.53 142.250.130.100 QUIC 1292 Initial, DCID=0bab59072b904611, PKN: 3, PADDING, PING, PADDING, PING, PING, PING, CRYPTO, CRYPTO, PING, PING, PING, PING, PADDING, PING, PADDING, PING, CRYPTO, CRYPTO
31827 2940.606007600 192.168.68.53 142.250.130.100 QUIC 122 0-RTT, DCID=0bab59072b904611
31828 2940.606258100 192.168.68.53 142.250.130.100 QUIC 428 0-RTT, DCID=0bab59072b904611
31829 2940.634632300 142.250.130.100 192.168.68.53 QUIC 82 Initial, SCID=ebab59072b904611, PKN: 1, ACK
31830 2940.634632900 142.250.130.100 192.168.68.53 QUIC 82 Initial, SCID=ebab59072b904611, PKN: 2, ACK
31831 2940.634636400 142.250.130.100 192.168.68.53 QUIC 3792 Initial, SCID=ebab59072b904611, PKN: 5, CRYPTO, PADDING
31832 2940.644983000 192.168.68.53 142.250.130.100 QUIC 1292 Initial, DCID=ebab59072b904611, PKN: 6, ACK, PADDING
31833 2940.654451500 142.250.130.100 192.168.68.53 QUIC 1292 Handshake, SCID=ebab59072b904611
31834 2940.654454100 142.250.130.100 192.168.68.53 QUIC 1281 Handshake, SCID=ebab59072b904611
31835 2940.654454400 142.250.130.100 192.168.68.53 QUIC 103 Protected Payload (KP0)
31836 2940.654975300 192.168.68.53 142.250.130.100 QUIC 502 Protected Payload (KP0), DCID=ebab59072b904611
31837 2940.655014000 192.168.68.53 142.250.130.100 QUIC 141 Handshake, DCID=ebab59072b904611
31838 2940.683344800 142.250.130.100 192.168.68.53 QUIC 1046 Protected Payload (KP0)
31839 2940.683345500 142.250.130.100 192.168.68.53 QUIC 163 Protected Payload (KP0)
31840 2940.683588500 192.168.68.53 142.250.130.100 QUIC 73 Protected Payload (KP0), DCID=ebab59072b904611
31841 2940.691449900 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 62504 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
31842 2940.703224000 142.250.130.100 192.168.68.53 QUIC 421 Protected Payload (KP0)
31843 2940.703224700 142.250.130.100 192.168.68.53 QUIC 63 Protected Payload (KP0)
31844 2940.703493500 192.168.68.53 142.250.130.100 QUIC 77 Protected Payload (KP0), DCID=ebab59072b904611
31845 2940.731290700 142.250.130.100 192.168.68.53 QUIC 65 Protected Payload (KP0)
31846 2940.731513600 192.168.68.53 142.250.130.100 QUIC 73 Protected Payload (KP0), DCID=ebab59072b904611
31847 2941.332654800 192.168.68.53 224.0.0.251 MDNS 82 Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
31848 2941.332953500 fe80::bf7f:2782:66ba:e9ef ff02::fb MDNS 102 Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
31849 2941.333153300 192.168.68.53 224.0.0.251 MDNS 82 Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
31850 2941.333325400 fe80::bf7f:2782:66ba:e9ef ff02::fb MDNS 102 Standard query 0x0000 PTR _googlecast._tcp.local, "QM" question
31851 2941.426219500 192.168.68.53 239.255.255.250 SSDP 179 M-SEARCH * HTTP/1.1
31852 2941.433321500 192.168.68.1 192.168.68.53 SSDP 461 HTTP/1.1 200 OK
31853 2941.613242500 fe80::bf7f:2782:66ba:e9ef ff02::1:2 DHCPv6 159 Solicit XID: 0xb3c0b3 CID: 0001010031e455f7e8bfe15206f2
31854 2941.893380800 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 62504 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
31855 2942.019447500 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
31856 2942.053332600 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
31857 2942.096562400 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=3677 Ack=8918 Win=64256 Len=0
31858 2942.351522900 149.154.167.99 192.168.68.53 TLSv1.2 1011 Application Data
31859 2942.393661500 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=3677 Ack=9875 Win=65280 Len=0
31860 2942.531224500 192.168.1.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 62504 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
31861 2942.531263000 192.168.68.53 192.168.1.1 TCP 66 [TCP Dup ACK 31814#2] 62504 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
31862 2943.095995100 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 62504 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
31863 2943.470316400 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
31864 2944.299328400 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 62504 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
31865 2944.440993200 192.168.68.53 239.255.255.250 SSDP 179 M-SEARCH * HTTP/1.1
31866 2944.453182600 192.168.68.1 192.168.68.53 SSDP 461 HTTP/1.1 200 OK
31867 2945.067516900 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
31868 2945.103115600 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
31869 2945.145383300 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=3867 Ack=9995 Win=65280 Len=0
31870 2945.825421100 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.71.249? Tell 192.168.68.1
31871 2946.531239000 192.168.1.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 62504 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
31872 2946.531279400 192.168.68.53 192.168.1.1 TCP 66 [TCP Dup ACK 31814#3] 62504 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
31873 2946.710282100 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 62504 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
31874 2947.566682000 192.168.68.51 239.255.255.250 SSDP 167 M-SEARCH * HTTP/1.1
31875 2947.566682400 192.168.68.51 224.0.0.251 MDNS 87 Standard query 0x0000 PTR _spotify-connect._tcp.local, "QM" question
31876 2947.566682700 fe80::1415:5b0e:57ea:7b97 ff02::fb MDNS 107 Standard query 0x0000 PTR _spotify-connect._tcp.local, "QM" question
31877 2948.104816700 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
31878 2948.143102700 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
31879 2948.197982000 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=3991 Ack=10115 Win=65280 Len=0
31880 2949.134270800 149.154.167.99 192.168.68.53 TLSv1.2 1027 Application Data
31881 2949.182105200 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=3991 Ack=11088 Win=64256 Len=0
31882 2949.545397300 192.168.68.53 192.168.1.1 TCP 54 62504 → 53 [RST, ACK] Seq=37 Ack=1 Win=0 Len=0
31883 2949.545826800 192.168.68.53 192.168.68.1 TCP 66 52947 → 53 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
31884 2949.551135100 192.168.68.1 192.168.68.53 TCP 66 53 → 52947 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
31885 2949.551291400 192.168.68.53 192.168.68.1 TCP 54 52947 → 53 [ACK] Seq=1 Ack=1 Win=65280 Len=0
31886 2949.551420400 192.168.68.53 192.168.68.1 DNS 90 Standard query 0x0001 A dns.msftncsi.com
31887 2949.764923800 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 52947 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
31888 2950.078264400 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 52947 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
31889 2950.541026700 192.168.68.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 52947 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
31890 2950.541064800 192.168.68.53 192.168.68.1 TCP 66 [TCP Dup ACK 31885#1] 52947 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
31891 2950.689634700 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 52947 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
31892 2951.156601500 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
31893 2951.193687600 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
31894 2951.250824500 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=4181 Ack=11208 Win=65280 Len=0
31895 2951.894174700 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 52947 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
31896 2952.020073100 fe80::bf7f:2782:66ba:e9ef ff02::1:ff18:a40 ICMPv6 86 Neighbor Solicitation for fe80::be07:1dff:fe18:a40 from e8:bf:e1:52:06:f2
31897 2952.020388000 Intel_52:06:f2 Broadcast ARP 42 Who has 192.168.68.1? Tell 192.168.68.53
31898 2952.023639700 fe80::be07:1dff:fe18:a40 fe80::bf7f:2782:66ba:e9ef ICMPv6 86 Neighbor Advertisement fe80::be07:1dff:fe18:a40 (rtr, sol, ovr) is at bc:07:1d:18:0a:40
31899 2952.023640400 TPLink_18:0a:40 Intel_52:06:f2 ARP 42 192.168.68.1 is at bc:07:1d:18:0a:40
31900 2952.043506200 192.168.68.53 192.168.1.1 DNS 76 Standard query 0xe43a A dns.msftncsi.com
31901 2952.043713900 192.168.68.53 192.168.1.1 DNS 76 Standard query 0x02bc AAAA dns.msftncsi.com
31902 2952.053333700 192.168.1.1 192.168.68.53 DNS 92 Standard query response 0xe43a A dns.msftncsi.com A 131.107.255.255
31903 2952.063103900 192.168.1.1 192.168.68.53 DNS 104 Standard query response 0x02bc AAAA dns.msftncsi.com AAAA fd3e:4f5a:5b81::1
31904 2952.378921100 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
31905 2952.540984000 192.168.68.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 52947 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
31906 2952.541064000 192.168.68.53 192.168.68.1 TCP 66 [TCP Dup ACK 31885#2] 52947 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
31907 2952.570244400 192.168.68.53 192.168.1.1 DNS 84 Standard query 0x11e7 A ipv6.msftconnecttest.com
31908 2952.572153300 192.168.68.53 192.168.1.1 DNS 84 Standard query 0x3e14 A ipv6.msftconnecttest.com
31909 2952.582630500 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.53? Tell 192.168.68.1
31910 2952.582631200 192.168.68.51 192.168.71.255 UDP 86 57621 → 57621 Len=44
31911 2952.582631500 192.168.1.1 192.168.68.53 DNS 229 Standard query response 0x11e7 A ipv6.msftconnecttest.com CNAME ipv6.msftconnecttest.com.edgesuite.net CNAME a1968.i6g1.akamai.net SOA n0i6g1.akamai.net
31912 2952.582631700 192.168.1.1 192.168.68.53 DNS 229 Standard query response 0x3e14 A ipv6.msftconnecttest.com CNAME ipv6.msftconnecttest.com.edgesuite.net CNAME a1968.i6g1.akamai.net SOA n0i6g1.akamai.net
31913 2952.582646900 Intel_52:06:f2 TPLink_18:0a:40 ARP 42 192.168.68.53 is at e8:bf:e1:52:06:f2
31914 2952.583447500 192.168.68.53 192.168.1.1 DNS 84 Standard query 0x91a5 A ipv6.msftconnecttest.com
31915 2952.593189600 192.168.1.1 192.168.68.53 DNS 171 Standard query response 0x91a5 A ipv6.msftconnecttest.com CNAME ipv6.msftconnecttest.com.edgesuite.net CNAME a1968.i6g1.akamai.net
31916 2953.099523700 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 52947 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
31917 2954.202534400 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
31918 2954.243006100 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
31919 2954.294931900 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=4305 Ack=11328 Win=65280 Len=0
31920 2954.310496300 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 52947 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
31921 2956.541061800 192.168.68.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 52947 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
31922 2956.541096100 192.168.68.53 192.168.68.1 TCP 66 [TCP Dup ACK 31885#3] 52947 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
31923 2956.721274700 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 52947 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
31924 2957.252883300 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
31925 2957.293150900 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
31926 2957.346333700 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=4429 Ack=11448 Win=65280 Len=0
31927 2957.601329400 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
31928 2957.614113100 fe80::bf7f:2782:66ba:e9ef ff02::1:2 DHCPv6 159 Solicit XID: 0xb3c0b3 CID: 0001010031e455f7e8bfe15206f2
31929 2959.559191800 192.168.68.53 192.168.68.1 TCP 54 52947 → 53 [RST, ACK] Seq=37 Ack=1 Win=0 Len=0
31930 2960.296271800 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
31931 2960.333344800 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
31932 2960.366004600 TPLink_18:0a:40 Broadcast ARP 42 Who has 192.168.68.52? Tell 192.168.68.1
31933 2960.374429300 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=4553 Ack=11568 Win=65024 Len=0
31934 2961.390029400 TPLink_18:0a:40 Broadcast ARP 42 Who has 192.168.68.52? Tell 192.168.68.1
31935 2963.338981800 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
31936 2963.372946300 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
31937 2963.415607400 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=4677 Ack=11688 Win=65024 Len=0
31938 2966.378163700 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
31939 2966.413301600 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
31940 2966.469032200 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=4801 Ack=11808 Win=64768 Len=0
31941 2966.702944100 149.154.167.99 192.168.68.53 TLSv1.2 1027 Application Data
31942 2966.750857700 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=4801 Ack=12781 Win=65280 Len=0
31943 2967.124680700 5.75.2 5.75.0 TIPC 74 Ngbr Disc Request
31944 2967.124681200 5.75.2 5.75.0 TIPC 74 Ngbr Disc Request
31945 2967.226856900 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
31946 2967.534080600 5.75.1 5.75.0 TIPC 74 Ngbr Disc Request
31947 2968.660831800 192.168.68.52 224.0.0.251 MDNS 154 Standard query 0x0000 PTR _companion-link._tcp.local, "QU" question PTR _homekit._tcp.local, "QU" question PTR _sleep-proxy._udp.local, "QU" question OPT
31948 2968.660832400 fe80::1c44:ea14:ce4b:d203 ff02::fb MDNS 174 Standard query 0x0000 PTR _companion-link._tcp.local, "QU" question PTR _homekit._tcp.local, "QU" question PTR _sleep-proxy._udp.local, "QU" question OPT
31949 2969.175738700 192.168.68.1 239.255.255.250 SSDP 431 NOTIFY * HTTP/1.1
31950 2969.175739100 192.168.68.1 239.255.255.250 SSDP 440 NOTIFY * HTTP/1.1
31951 2969.175740300 192.168.68.1 239.255.255.250 SSDP 503 NOTIFY * HTTP/1.1
31952 2969.175741700 192.168.68.1 239.255.255.250 SSDP 499 NOTIFY * HTTP/1.1
31953 2969.175742300 192.168.68.1 239.255.255.250 SSDP 479 NOTIFY * HTTP/1.1
31954 2969.175743000 192.168.68.1 239.255.255.250 SSDP 511 NOTIFY * HTTP/1.1
31955 2969.178711000 192.168.68.1 239.255.255.250 SSDP 493 NOTIFY * HTTP/1.1
31956 2969.178712200 192.168.68.1 239.255.255.250 SSDP 495 NOTIFY * HTTP/1.1
31957 2969.178713800 192.168.68.1 239.255.255.250 SSDP 495 NOTIFY * HTTP/1.1
31958 2969.178714600 fe80::be07:1dff:fe18:a40 ff02::c SSDP 455 NOTIFY * HTTP/1.1
31959 2969.181026100 fe80::be07:1dff:fe18:a40 ff02::c SSDP 464 NOTIFY * HTTP/1.1
31960 2969.181026900 fe80::be07:1dff:fe18:a40 ff02::c SSDP 527 NOTIFY * HTTP/1.1
31961 2969.181029400 fe80::be07:1dff:fe18:a40 ff02::c SSDP 523 NOTIFY * HTTP/1.1
31962 2969.183415400 fe80::be07:1dff:fe18:a40 ff02::c SSDP 503 NOTIFY * HTTP/1.1
31963 2969.183415900 fe80::be07:1dff:fe18:a40 ff02::c SSDP 535 NOTIFY * HTTP/1.1
31964 2969.183417200 fe80::be07:1dff:fe18:a40 ff02::c SSDP 517 NOTIFY * HTTP/1.1
31965 2969.184986800 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
31966 2969.184988300 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
31967 2969.418026000 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
31968 2969.453107100 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
31969 2969.494582200 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=4991 Ack=12901 Win=65280 Len=0
31970 2969.683499400 192.168.68.52 224.0.0.251 MDNS 190 Standard query 0x0000 PTR _companion-link._tcp.local, "QM" question PTR _homekit._tcp.local, "QM" question PTR _sleep-proxy._udp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local OPT
31971 2969.683499900 fe80::1c44:ea14:ce4b:d203 ff02::fb MDNS 210 Standard query 0x0000 PTR _companion-link._tcp.local, "QM" question PTR _homekit._tcp.local, "QM" question PTR _sleep-proxy._udp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local OPT
31972 2969.683500200 192.168.68.1 224.0.0.1 IGMPv3 50 Membership Query, general
31973 2970.274443100 192.168.68.53 224.0.0.22 IGMPv3 54 Membership Report / Join group 224.0.0.251 for any sources
31974 2970.759950600 192.168.68.53 224.0.0.22 IGMPv3 54 Membership Report / Join group 239.255.255.250 for any sources
31975 2971.192943800 149.154.167.99 192.168.68.53 TLSv1.2 979 Application Data
31976 2971.246276900 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=4991 Ack=13826 Win=64256 Len=0
31977 2972.467570700 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
31978 2972.502157200 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
31979 2972.544213100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=5181 Ack=13946 Win=64256 Len=0
31980 2972.652949300 192.168.68.52 224.0.0.251 MDNS 154 Standard query 0x0000 PTR _companion-link._tcp.local, "QU" question PTR _homekit._tcp.local, "QU" question PTR _sleep-proxy._udp.local, "QU" question OPT
31981 2972.652950500 fe80::1c44:ea14:ce4b:d203 ff02::fb MDNS 174 Standard query 0x0000 PTR _companion-link._tcp.local, "QU" question PTR _homekit._tcp.local, "QU" question PTR _sleep-proxy._udp.local, "QU" question OPT
31982 2973.263005300 192.168.68.53 224.0.0.22 IGMPv3 54 Membership Report / Join group 224.0.0.252 for any sources
31983 2973.985882000 192.168.68.52 224.0.0.251 MDNS 154 Standard query 0x0000 PTR _companion-link._tcp.local, "QU" question PTR _homekit._tcp.local, "QU" question PTR _sleep-proxy._udp.local, "QU" question OPT
31984 2973.985883100 fe80::1c44:ea14:ce4b:d203 ff02::fb MDNS 174 Standard query 0x0000 PTR _companion-link._tcp.local, "QU" question PTR _homekit._tcp.local, "QU" question PTR _sleep-proxy._udp.local, "QU" question OPT
31985 2975.519370000 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
31986 2975.552784800 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
31987 2975.596042800 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=5305 Ack=14066 Win=65280 Len=0
31988 2975.623781100 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
31989 2975.829045500 192.168.68.52 224.0.0.251 MDNS 154 Standard query 0x0000 PTR _companion-link._tcp.local, "QU" question PTR _homekit._tcp.local, "QU" question PTR _sleep-proxy._udp.local, "QU" question OPT
31990 2975.829046100 fe80::1c44:ea14:ce4b:d203 ff02::fb MDNS 174 Standard query 0x0000 PTR _companion-link._tcp.local, "QU" question PTR _homekit._tcp.local, "QU" question PTR _sleep-proxy._udp.local, "QU" question OPT
31991 2976.284185400 149.154.167.99 192.168.68.53 TLSv1.2 995 Application Data
31992 2976.329949300 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=5305 Ack=15007 Win=64512 Len=0
31993 2978.561876600 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
31994 2978.602883200 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
31995 2978.655186600 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=5495 Ack=15127 Win=64256 Len=0
31996 2980.360255900 192.168.68.53 142.250.147.188 TCP 55 [TCP Keep-Alive] 55711 → 5228 [ACK] Seq=2220 Ack=6860 Win=64768 Len=1
31997 2980.400846900 142.250.147.188 192.168.68.53 TCP 54 5228 → 55711 [RST] Seq=6860 Win=0 Len=0
31998 2980.939000900 192.168.68.53 142.250.147.188 TCP 55 [TCP Keep-Alive] 51336 → 5228 [ACK] Seq=2075 Ack=6860 Win=64768 Len=1
31999 2980.970808500 142.250.147.188 192.168.68.53 TCP 66 [TCP Keep-Alive ACK] 5228 → 51336 [ACK] Seq=6860 Ack=2076 Win=267776 Len=0 SLE=2075 SRE=2076
32000 2981.610043100 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32001 2981.642908000 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32002 2981.688650200 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=5619 Ack=15247 Win=64256 Len=0
32003 2982.586812400 192.168.68.51 192.168.71.255 UDP 86 57621 → 57621 Len=44
32004 2983.504593000 149.154.167.99 192.168.68.53 TLSv1.2 1027 Application Data
32005 2983.546153100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=5619 Ack=16220 Win=65280 Len=0
32006 2984.429960900 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32007 2984.654569700 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32008 2984.692760900 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32009 2984.746855100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=5809 Ack=16340 Win=65280 Len=0
32010 2985.761172200 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.52? Tell 192.168.68.1
32011 2987.700193400 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32012 2987.742780700 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32013 2987.792441600 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=5933 Ack=16460 Win=65280 Len=0
32014 2988.098848100 192.168.68.53 192.168.1.1 DNS 84 Standard query 0x048c A ipv6.msftconnecttest.com
32015 2988.098848200 192.168.68.53 192.168.1.1 DNS 84 Standard query 0xe456 A ipv6.msftconnecttest.com
32016 2988.112995800 192.168.1.1 192.168.68.53 DNS 171 Standard query response 0x048c A ipv6.msftconnecttest.com CNAME ipv6.msftconnecttest.com.edgesuite.net CNAME a1968.i6g1.akamai.net
32017 2988.112996700 192.168.1.1 192.168.68.53 DNS 171 Standard query response 0xe456 A ipv6.msftconnecttest.com CNAME ipv6.msftconnecttest.com.edgesuite.net CNAME a1968.i6g1.akamai.net
32018 2988.114359000 192.168.68.53 192.168.1.1 DNS 84 Standard query 0xbadb A ipv6.msftconnecttest.com
32019 2988.122827200 192.168.1.1 192.168.68.53 DNS 171 Standard query response 0xbadb A ipv6.msftconnecttest.com CNAME ipv6.msftconnecttest.com.edgesuite.net CNAME a1968.i6g1.akamai.net
32020 2989.621971000 fe80::bf7f:2782:66ba:e9ef ff02::1:2 DHCPv6 159 Solicit XID: 0xb3c0b3 CID: 0001010031e455f7e8bfe15206f2
32021 2990.746376800 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32022 2990.783063400 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32023 2990.824390800 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=6057 Ack=16580 Win=65024 Len=0
32024 2991.493542900 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32025 2993.111198700 TPLink_18:0a:40 Intel_52:06:f2 ARP 42 Who has 192.168.68.53? Tell 192.168.68.1
32026 2993.111229400 Intel_52:06:f2 TPLink_18:0a:40 ARP 42 192.168.68.53 is at e8:bf:e1:52:06:f2
32027 2993.543527000 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.51? Tell 192.168.68.1
32028 2993.800256100 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32029 2993.840784100 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32030 2993.894059900 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=6181 Ack=16700 Win=65024 Len=0
32031 2996.857737500 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32032 2996.892808200 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32033 2996.935776300 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=6305 Ack=16820 Win=64768 Len=0
32034 2997.127639000 192.168.68.50 224.0.0.251 MDNS 78 Standard query 0x0000 PTR _rdlink._tcp.local, "QM" question
32035 2997.127640000 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 98 Standard query 0x0000 PTR _rdlink._tcp.local, "QM" question
32036 2999.176566300 192.168.68.1 239.255.255.250 SSDP 431 NOTIFY * HTTP/1.1
32037 2999.176567300 192.168.68.1 239.255.255.250 SSDP 440 NOTIFY * HTTP/1.1
32038 2999.176572700 192.168.68.1 239.255.255.250 SSDP 503 NOTIFY * HTTP/1.1
32039 2999.178714100 192.168.68.1 239.255.255.250 SSDP 499 NOTIFY * HTTP/1.1
32040 2999.178715000 192.168.68.1 239.255.255.250 SSDP 479 NOTIFY * HTTP/1.1
32041 2999.178716000 192.168.68.1 239.255.255.250 SSDP 511 NOTIFY * HTTP/1.1
32042 2999.181051800 192.168.68.1 239.255.255.250 SSDP 493 NOTIFY * HTTP/1.1
32043 2999.181054400 192.168.68.1 239.255.255.250 SSDP 495 NOTIFY * HTTP/1.1
32044 2999.181055600 192.168.68.1 239.255.255.250 SSDP 495 NOTIFY * HTTP/1.1
32045 2999.184022100 fe80::be07:1dff:fe18:a40 ff02::c SSDP 455 NOTIFY * HTTP/1.1
32046 2999.184023000 fe80::be07:1dff:fe18:a40 ff02::c SSDP 464 NOTIFY * HTTP/1.1
32047 2999.184023300 fe80::be07:1dff:fe18:a40 ff02::c SSDP 527 NOTIFY * HTTP/1.1
32048 2999.184026300 fe80::be07:1dff:fe18:a40 ff02::c SSDP 523 NOTIFY * HTTP/1.1
32049 2999.188044700 fe80::be07:1dff:fe18:a40 ff02::c SSDP 503 NOTIFY * HTTP/1.1
32050 2999.188045200 fe80::be07:1dff:fe18:a40 ff02::c SSDP 535 NOTIFY * HTTP/1.1
32051 2999.188046800 fe80::be07:1dff:fe18:a40 ff02::c SSDP 517 NOTIFY * HTTP/1.1
32052 2999.188048000 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
32053 2999.188048500 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
32054 2999.188048800 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32055 2999.906425300 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32056 2999.942558600 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32057 2999.983960600 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=6429 Ack=16940 Win=64768 Len=0
32058 3000.932854500 149.154.167.99 192.168.68.53 TLSv1.2 1027 Application Data
32059 3000.984902600 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=6429 Ack=17913 Win=65280 Len=0
32060 3001.325754900 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.50? Tell 192.168.68.1
32061 3002.955216600 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32062 3002.992728800 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32063 3003.046192300 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=6619 Ack=18033 Win=65280 Len=0
32064 3004.397844900 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32065 3005.622989600 149.154.167.99 192.168.68.53 TLSv1.2 995 Application Data
32066 3005.668863800 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=6619 Ack=18974 Win=64256 Len=0
32067 3005.823721600 192.168.68.53 192.168.1.1 DNS 83 Standard query 0xd01a A ctldl.windowsupdate.com
32068 3005.842674700 192.168.1.1 192.168.68.53 DNS 235 Standard query response 0xd01a A ctldl.windowsupdate.com CNAME ctldl.windowsupdate.com.delivery.microsoft.com CNAME wu-b-net.trafficmanager.net CNAME bg.microsoft.map.fastly.net A 199.232.18.172
32069 3005.848365800 192.168.68.53 199.232.18.172 TCP 66 52948 → 80 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
32070 3005.880510000 199.232.18.172 192.168.68.53 TCP 66 80 → 52948 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1418 SACK_PERM WS=512
32071 3005.880622200 192.168.68.53 199.232.18.172 TCP 54 52948 → 80 [ACK] Seq=1 Ack=1 Win=65280 Len=0
32072 3005.880964900 192.168.68.53 199.232.18.172 HTTP 335 GET /msdownload/update/v3/static/trustedr/en/authrootstl.cab?67ae160dc9728283 HTTP/1.1
32073 3005.913912300 199.232.18.172 192.168.68.53 TCP 60 80 → 52948 [ACK] Seq=1 Ack=282 Win=143360 Len=0
32074 3005.913913200 199.232.18.172 192.168.68.53 HTTP 256 HTTP/1.1 304 Not Modified
32075 3005.926407900 192.168.68.53 199.232.18.172 HTTP 342 GET /msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?c359432e4254762d HTTP/1.1
32076 3005.952751800 199.232.18.172 192.168.68.53 TCP 60 80 → 52948 [ACK] Seq=203 Ack=570 Win=144384 Len=0
32077 3005.952752700 199.232.18.172 192.168.68.53 HTTP 256 HTTP/1.1 304 Not Modified
32078 3005.960937100 192.168.68.53 192.168.1.1 DNS 74 Standard query 0x214a A ye.c.lencr.org
32079 3005.972531100 192.168.1.1 192.168.68.53 DNS 184 Standard query response 0x214a A ye.c.lencr.org CNAME e5.i.lencr.org.edgekey.net CNAME e192961.dscx.akamaiedge.net A 95.101.23.104 A 95.101.23.65
32080 3005.973044700 192.168.68.53 95.101.23.104 TCP 66 52949 → 80 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
32081 3005.990699400 95.101.23.104 192.168.68.53 TCP 66 80 → 52949 [SYN, ACK] Seq=0 Ack=1 Win=64240 Len=0 MSS=1384 SACK_PERM WS=128
32082 3005.990889100 192.168.68.53 95.101.23.104 TCP 54 52949 → 80 [ACK] Seq=1 Ack=1 Win=65280 Len=0
32083 3005.991144000 192.168.68.53 95.101.23.104 HTTP 281 GET / HTTP/1.1
32084 3005.998911600 192.168.68.53 199.232.18.172 TCP 54 52948 → 80 [ACK] Seq=570 Ack=405 Win=65024 Len=0
32085 3005.999900200 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32086 3006.012645700 95.101.23.104 192.168.68.53 HTTP 317 HTTP/1.1 304 Not Modified
32087 3006.021741100 192.168.68.53 192.168.1.1 DNS 70 Standard query 0x7a27 A c.pki.goog
32088 3006.031760300 192.168.1.1 192.168.68.53 DNS 121 Standard query response 0x7a27 A c.pki.goog CNAME pki-goog.l.google.com A 142.250.109.94
32089 3006.032303200 192.168.68.53 142.250.109.94 TCP 66 52950 → 80 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
32090 3006.042576700 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32091 3006.060501600 142.250.109.94 192.168.68.53 TCP 66 80 → 52950 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1412 SACK_PERM WS=256
32092 3006.060656900 192.168.68.53 95.101.23.104 TCP 54 52949 → 80 [ACK] Seq=228 Ack=264 Win=65024 Len=0
32093 3006.060712400 192.168.68.53 142.250.109.94 TCP 54 52950 → 80 [ACK] Seq=1 Ack=1 Win=65280 Len=0
32094 3006.060913200 192.168.68.53 142.250.109.94 HTTP 256 GET /r/gsr1.crl HTTP/1.1
32095 3006.091990900 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=6809 Ack=19094 Win=64256 Len=0
32096 3006.092544500 142.250.109.94 192.168.68.53 TCP 60 80 → 52950 [ACK] Seq=1 Ack=203 Win=269568 Len=0
32097 3006.092545900 142.250.109.94 192.168.68.53 HTTP 276 HTTP/1.1 304 Not Modified
32098 3006.103195100 192.168.68.53 142.250.109.94 HTTP 254 GET /r/r4.crl HTTP/1.1
32099 3006.133563500 142.250.109.94 192.168.68.53 HTTP 277 HTTP/1.1 304 Not Modified
32100 3006.137241000 5.75.2 0.0.0 TIPC 123 Payld:Low McastMsg type:10111 inst:100-100
32101 3006.137241600 5.75.2 0.0.0 TIPC 123 Payld:Low McastMsg type:10111 inst:100-100
32102 3006.141634000 192.168.68.53 192.168.1.1 DNS 74 Standard query 0x3dfc A yr.c.lencr.org
32103 3006.152502400 192.168.1.1 192.168.68.53 DNS 184 Standard query response 0x3dfc A yr.c.lencr.org CNAME e5.i.lencr.org.edgekey.net CNAME e192961.dscx.akamaiedge.net A 95.101.23.65 A 95.101.23.104
32104 3006.153013700 192.168.68.53 95.101.23.65 TCP 66 52951 → 80 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
32105 3006.170642800 95.101.23.65 192.168.68.53 TCP 66 80 → 52951 [SYN, ACK] Seq=0 Ack=1 Win=64240 Len=0 MSS=1384 SACK_PERM WS=128
32106 3006.170830000 192.168.68.53 95.101.23.65 TCP 54 52951 → 80 [ACK] Seq=1 Ack=1 Win=65280 Len=0
32107 3006.171070300 192.168.68.53 95.101.23.65 HTTP 281 GET / HTTP/1.1
32108 3006.185766800 192.168.68.53 142.250.109.94 TCP 54 52950 → 80 [ACK] Seq=403 Ack=446 Win=65024 Len=0
32109 3006.192501000 95.101.23.65 192.168.68.53 TCP 60 80 → 52951 [ACK] Seq=1 Ack=228 Win=64128 Len=0
32110 3006.192502100 95.101.23.65 192.168.68.53 HTTP 317 HTTP/1.1 304 Not Modified
32111 3006.199242700 192.168.68.53 192.168.1.1 DNS 73 Standard query 0xa33b A crl.harica.gr
32112 3006.212513300 192.168.1.1 192.168.68.53 DNS 123 Standard query response 0xa33b A crl.harica.gr CNAME crl-harica.b-cdn.net A 138.199.36.10
32113 3006.213040700 192.168.68.53 138.199.36.10 TCP 66 52952 → 80 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
32114 3006.240658500 138.199.36.10 192.168.68.53 TCP 66 80 → 52952 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1460 SACK_PERM WS=2048
32115 3006.240855000 192.168.68.53 138.199.36.10 TCP 54 52952 → 80 [ACK] Seq=1 Ack=1 Win=65280 Len=0
32116 3006.241146300 192.168.68.53 138.199.36.10 HTTP 305 GET /HaricaRootCA2015.crl HTTP/1.1
32117 3006.246876100 192.168.68.53 95.101.23.65 TCP 54 52951 → 80 [ACK] Seq=228 Ack=264 Win=65024 Len=0
32118 3006.273009800 138.199.36.10 192.168.68.53 TCP 60 80 → 52952 [ACK] Seq=1 Ack=252 Win=67584 Len=0
32119 3006.273017900 138.199.36.10 192.168.68.53 HTTP 606 HTTP/1.1 304 Not Modified
32120 3006.283148400 192.168.68.53 138.199.36.10 HTTP 313 GET /HARICA-TLS-Root-2021-RSA.crl HTTP/1.1
32121 3006.312470400 138.199.36.10 192.168.68.53 HTTP 606 HTTP/1.1 304 Not Modified
32122 3006.321093800 192.168.68.53 142.250.109.94 HTTP 254 GET /r/r1.crl HTTP/1.1
32123 3006.352560900 142.250.109.94 192.168.68.53 HTTP 277 HTTP/1.1 304 Not Modified
32124 3006.356376700 192.168.68.53 138.199.36.10 TCP 54 52952 → 80 [ACK] Seq=511 Ack=1105 Win=64256 Len=0
32125 3006.361272300 192.168.68.53 192.168.1.1 DNS 74 Standard query 0x74cb A x1.c.lencr.org
32126 3006.372477200 192.168.1.1 192.168.68.53 DNS 179 Standard query response 0x74cb A x1.c.lencr.org CNAME crl.root-x1.letsencrypt.org.edgekey.net CNAME e8652.dscx.akamaiedge.net A 2.18.69.180
32127 3006.373321700 192.168.68.53 2.18.69.180 TCP 66 52953 → 80 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
32128 3006.390635700 2.18.69.180 192.168.68.53 TCP 66 80 → 52953 [SYN, ACK] Seq=0 Ack=1 Win=64240 Len=0 MSS=1460 SACK_PERM WS=128
32129 3006.390834400 192.168.68.53 2.18.69.180 TCP 54 52953 → 80 [ACK] Seq=1 Ack=1 Win=65280 Len=0
32130 3006.391078500 192.168.68.53 2.18.69.180 HTTP 281 GET / HTTP/1.1
32131 3006.402507300 192.168.68.53 142.250.109.94 TCP 54 52950 → 80 [ACK] Seq=603 Ack=669 Win=64768 Len=0
32132 3006.412566700 2.18.69.180 192.168.68.53 TCP 60 80 → 52953 [ACK] Seq=1 Ack=228 Win=64128 Len=0
32133 3006.412567800 2.18.69.180 192.168.68.53 HTTP 317 HTTP/1.1 304 Not Modified
32134 3006.422796900 192.168.68.53 192.168.1.1 DNS 74 Standard query 0x930d A x2.c.lencr.org
32135 3006.432514100 192.168.1.1 192.168.68.53 DNS 179 Standard query response 0x930d A x2.c.lencr.org CNAME crl.root-x1.letsencrypt.org.edgekey.net CNAME e8652.dscx.akamaiedge.net A 2.18.69.180
32136 3006.433138200 192.168.68.53 2.18.69.180 TCP 66 52954 → 80 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
32137 3006.450450200 2.18.69.180 192.168.68.53 TCP 66 80 → 52954 [SYN, ACK] Seq=0 Ack=1 Win=64240 Len=0 MSS=1460 SACK_PERM WS=128
32138 3006.450590300 192.168.68.53 2.18.69.180 TCP 54 52954 → 80 [ACK] Seq=1 Ack=1 Win=65280 Len=0
32139 3006.450733800 192.168.68.53 2.18.69.180 HTTP 281 GET / HTTP/1.1
32140 3006.464843900 192.168.68.53 2.18.69.180 TCP 54 52953 → 80 [ACK] Seq=228 Ack=264 Win=65024 Len=0
32141 3006.472673400 2.18.69.180 192.168.68.53 TCP 60 80 → 52954 [ACK] Seq=1 Ack=228 Win=64128 Len=0
32142 3006.472675300 2.18.69.180 192.168.68.53 HTTP 317 HTTP/1.1 304 Not Modified
32143 3006.526811400 192.168.68.53 2.18.69.180 TCP 54 52954 → 80 [ACK] Seq=228 Ack=264 Win=65024 Len=0
32144 3009.005774800 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.71.249? Tell 192.168.68.1
32145 3009.044990700 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32146 3009.082563500 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32147 3009.122760100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=6933 Ack=19214 Win=65280 Len=0
32148 3010.882578300 149.154.167.99 192.168.68.53 TLSv1.2 995 Application Data
32149 3010.933075400 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=6933 Ack=20155 Win=64512 Len=0
32150 3012.098631300 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32151 3012.142629900 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32152 3012.192701100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=7123 Ack=20275 Win=64256 Len=0
32153 3012.589753400 192.168.68.51 192.168.71.255 UDP 86 57621 → 57621 Len=44
32154 3014.330439000 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32155 3015.157347500 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32156 3015.192461100 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32157 3015.234261800 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=7247 Ack=20395 Win=64256 Len=0
32158 3016.788147700 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.53? Tell 192.168.68.1
32159 3016.788180100 Intel_52:06:f2 TPLink_18:0a:40 ARP 42 192.168.68.53 is at e8:bf:e1:52:06:f2
32160 3016.890618900 192.168.68.51 239.255.255.250 SSDP 213 M-SEARCH * HTTP/1.1
32161 3017.232381500 149.154.167.99 192.168.68.53 TLSv1.2 1027 Application Data
32162 3017.283070000 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=7247 Ack=21368 Win=65280 Len=0
32163 3017.913979400 192.168.68.51 239.255.255.250 SSDP 213 M-SEARCH * HTTP/1.1
32164 3018.196270300 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32165 3018.232542600 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32166 3018.272996100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=7437 Ack=21488 Win=65280 Len=0
32167 3018.938773800 192.168.68.51 239.255.255.250 SSDP 213 M-SEARCH * HTTP/1.1
32168 3019.962589900 192.168.68.51 239.255.255.250 SSDP 213 M-SEARCH * HTTP/1.1
32169 3021.240009800 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32170 3021.272484900 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32171 3021.318191000 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=7561 Ack=21608 Win=65280 Len=0
32172 3022.010487900 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32173 3023.106738700 192.168.68.53 192.168.1.1 DNS 76 Standard query 0x45ad AAAA dns.msftncsi.com
32174 3023.112509800 192.168.1.1 192.168.68.53 DNS 104 Standard query response 0x45ad AAAA dns.msftncsi.com AAAA fd3e:4f5a:5b81::1
32175 3023.113684200 192.168.68.53 192.168.1.1 TCP 66 56899 → 53 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
32176 3023.118578300 192.168.68.53 192.168.1.1 DNS 77 Standard query 0x6c1e A ipv6.msftncsi.com
32177 3023.120402500 192.168.1.1 192.168.68.53 TCP 66 53 → 56899 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
32178 3023.120511800 192.168.68.53 192.168.1.1 TCP 54 56899 → 53 [ACK] Seq=1 Ack=1 Win=65280 Len=0
32179 3023.120556500 192.168.68.53 192.168.1.1 DNS 90 Standard query 0x0001 AAAA dns.msftncsi.com
32180 3023.132326600 192.168.1.1 192.168.68.53 DNS 214 Standard query response 0x6c1e A ipv6.msftncsi.com CNAME ipv6.msftncsi.com.edgesuite.net CNAME a978.i6g1.akamai.net SOA n0i6g1.akamai.net
32181 3023.133300600 192.168.68.53 192.168.1.1 DNS 77 Standard query 0x8103 A ipv6.msftncsi.com
32182 3023.142520900 192.168.1.1 192.168.68.53 DNS 156 Standard query response 0x8103 A ipv6.msftncsi.com CNAME ipv6.msftncsi.com.edgesuite.net CNAME a978.i6g1.akamai.net
32183 3023.344273500 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 56899 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32184 3023.655583600 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 56899 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32185 3024.110405000 192.168.1.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 56899 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
32186 3024.110446700 192.168.68.53 192.168.1.1 TCP 66 [TCP Dup ACK 32178#1] 56899 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
32187 3024.268787500 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 56899 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32188 3024.285659200 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32189 3024.322474500 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32190 3024.377199500 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=7685 Ack=21728 Win=65024 Len=0
32191 3025.470377300 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 56899 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32192 3025.974522900 192.168.68.53 142.250.147.188 TCP 55 [TCP Keep-Alive] 51336 → 5228 [ACK] Seq=2075 Ack=6860 Win=64768 Len=1
32193 3026.010358200 142.250.147.188 192.168.68.53 TCP 66 [TCP Keep-Alive ACK] 5228 → 51336 [ACK] Seq=6860 Ack=2076 Win=267776 Len=0 SLE=2075 SRE=2076
32194 3026.110361100 192.168.1.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 56899 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
32195 3026.110400900 192.168.68.53 192.168.1.1 TCP 66 [TCP Dup ACK 32178#2] 56899 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
32196 3027.334519500 5.75.2 5.75.0 TIPC 74 Ngbr Disc Request
32197 3027.334520200 5.75.2 5.75.0 TIPC 74 Ngbr Disc Request
32198 3027.338809600 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32199 3027.372415800 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32200 3027.414980600 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=7809 Ack=21848 Win=65024 Len=0
32201 3027.744993800 5.75.1 5.75.0 TIPC 74 Ngbr Disc Request
32202 3027.885250000 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 56899 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32203 3029.181075500 192.168.68.1 239.255.255.250 SSDP 431 NOTIFY * HTTP/1.1
32204 3029.181076400 192.168.68.1 239.255.255.250 SSDP 440 NOTIFY * HTTP/1.1
32205 3029.181080600 192.168.68.1 239.255.255.250 SSDP 503 NOTIFY * HTTP/1.1
32206 3029.181081400 192.168.68.1 239.255.255.250 SSDP 499 NOTIFY * HTTP/1.1
32207 3029.181082600 192.168.68.1 239.255.255.250 SSDP 479 NOTIFY * HTTP/1.1
32208 3029.183945000 192.168.68.1 239.255.255.250 SSDP 511 NOTIFY * HTTP/1.1
32209 3029.183947200 192.168.68.1 239.255.255.250 SSDP 493 NOTIFY * HTTP/1.1
32210 3029.183948600 192.168.68.1 239.255.255.250 SSDP 495 NOTIFY * HTTP/1.1
32211 3029.183950700 192.168.68.1 239.255.255.250 SSDP 495 NOTIFY * HTTP/1.1
32212 3029.187953700 fe80::be07:1dff:fe18:a40 ff02::c SSDP 455 NOTIFY * HTTP/1.1
32213 3029.187954500 fe80::be07:1dff:fe18:a40 ff02::c SSDP 464 NOTIFY * HTTP/1.1
32214 3029.187955000 fe80::be07:1dff:fe18:a40 ff02::c SSDP 527 NOTIFY * HTTP/1.1
32215 3029.187956700 fe80::be07:1dff:fe18:a40 ff02::c SSDP 523 NOTIFY * HTTP/1.1
32216 3029.187957700 fe80::be07:1dff:fe18:a40 ff02::c SSDP 503 NOTIFY * HTTP/1.1
32217 3029.190628500 fe80::be07:1dff:fe18:a40 ff02::c SSDP 535 NOTIFY * HTTP/1.1
32218 3029.190629700 fe80::be07:1dff:fe18:a40 ff02::c SSDP 517 NOTIFY * HTTP/1.1
32219 3029.190630400 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
32220 3029.190631100 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
32221 3030.110444200 192.168.1.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 56899 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
32222 3030.110488500 192.168.68.53 192.168.1.1 TCP 66 [TCP Dup ACK 32178#3] 56899 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
32223 3030.382414100 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32224 3030.414916100 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32225 3030.457968200 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=7933 Ack=21968 Win=64768 Len=0
32226 3030.612014500 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32227 3031.247976100 192.168.68.53 192.168.1.1 DNS 92 Standard query 0x6e34 HTTPS gc.kis.v2.scr.kaspersky-labs.com
32228 3031.248245900 192.168.68.53 192.168.1.1 DNS 92 Standard query 0x6e45 A gc.kis.v2.scr.kaspersky-labs.com
32229 3031.262347300 192.168.1.1 192.168.68.53 DNS 174 Standard query response 0x6e34 HTTPS gc.kis.v2.scr.kaspersky-labs.com SOA dnsmaster.kasperskylabs.net
32230 3031.262347800 192.168.1.1 192.168.68.53 DNS 108 Standard query response 0x6e45 A gc.kis.v2.scr.kaspersky-labs.com A 185.85.13.155
32231 3032.699906500 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 56899 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32232 3033.123703500 192.168.68.53 192.168.1.1 TCP 54 56899 → 53 [RST, ACK] Seq=37 Ack=1 Win=0 Len=0
32233 3033.124404400 192.168.68.53 192.168.68.1 TCP 66 52955 → 53 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
32234 3033.130412600 192.168.68.1 192.168.68.53 TCP 66 53 → 52955 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
32235 3033.130542400 192.168.68.53 192.168.68.1 TCP 54 52955 → 53 [ACK] Seq=1 Ack=1 Win=65280 Len=0
32236 3033.130687500 192.168.68.53 192.168.68.1 DNS 90 Standard query 0x0001 AAAA dns.msftncsi.com
32237 3033.342628100 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 52955 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32238 3033.421420200 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32239 3033.462871700 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32240 3033.515745200 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=8057 Ack=22088 Win=64768 Len=0
32241 3033.656284600 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 52955 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32242 3034.120284000 192.168.68.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 52955 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
32243 3034.120320400 192.168.68.53 192.168.68.1 TCP 66 [TCP Dup ACK 32235#1] 52955 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
32244 3034.266368200 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 52955 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32245 3035.153934300 149.154.167.99 192.168.68.53 TLSv1.2 1027 Application Data
32246 3035.208592000 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=8057 Ack=23061 Win=65280 Len=0
32247 3035.474180600 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 52955 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32248 3036.120189100 192.168.68.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 52955 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
32249 3036.120227800 192.168.68.53 192.168.68.1 TCP 66 [TCP Dup ACK 32235#2] 52955 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
32250 3036.260534500 TPLink_18:0a:40 Intel_52:06:f2 ARP 42 Who has 192.168.68.53? Tell 192.168.68.1
32251 3036.260572800 Intel_52:06:f2 TPLink_18:0a:40 ARP 42 192.168.68.53 is at e8:bf:e1:52:06:f2
32252 3036.465971900 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32253 3036.502405900 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32254 3036.542856000 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=8247 Ack=23181 Win=65280 Len=0
32255 3036.551146300 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32256 3037.877127200 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 52955 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32257 3039.518999900 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32258 3039.552171600 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32259 3039.596127300 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=8371 Ack=23301 Win=65280 Len=0
32260 3039.642481800 149.154.167.99 192.168.68.53 TLSv1.2 995 Application Data
32261 3039.689232000 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=8371 Ack=24242 Win=64256 Len=0
32262 3040.120203100 192.168.68.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 52955 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
32263 3040.120242100 192.168.68.53 192.168.68.1 TCP 66 [TCP Dup ACK 32235#3] 52955 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
32264 3040.647709400 5.75.2 0.0.0 TIPC 208 Payld:Low McastMsg type:10121 inst:100-100
32265 3040.647710200 5.75.2 0.0.0 TIPC 208 Payld:Low McastMsg type:10121 inst:100-100
32266 3042.557872200 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32267 3042.591215300 192.168.68.51 192.168.71.255 UDP 86 57621 → 57621 Len=44
32268 3042.591216200 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32269 3042.634934500 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=8561 Ack=24362 Win=65280 Len=0
32270 3042.681317500 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 52955 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32271 3043.134078900 192.168.68.53 192.168.68.1 TCP 54 52955 → 53 [RST, ACK] Seq=37 Ack=1 Win=0 Len=0
32272 3043.514361500 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32273 3044.893737000 149.154.167.99 192.168.68.53 TLSv1.2 995 Application Data
32274 3044.947260000 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=8561 Ack=25303 Win=64512 Len=0
32275 3045.604160100 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32276 3045.642235200 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32277 3045.695960600 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=8751 Ack=25423 Win=64256 Len=0
32278 3045.767028100 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.52? Tell 192.168.68.1
32279 3048.654749900 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32280 3048.692262200 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32281 3048.747625700 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=8875 Ack=25543 Win=64256 Len=0
32282 3049.965353300 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32283 3051.442256000 149.154.167.99 192.168.68.53 TLSv1.2 1027 Application Data
32284 3051.482746800 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=8875 Ack=26516 Win=65280 Len=0
32285 3051.700281400 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32286 3051.732614000 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32287 3051.778266900 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=9065 Ack=26636 Win=65280 Len=0
32288 3053.549311100 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.51? Tell 192.168.68.1
32289 3054.749870500 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32290 3054.790870200 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32291 3054.843197300 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=9189 Ack=26756 Win=65280 Len=0
32292 3057.805521900 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32293 3057.842117000 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32294 3057.881979200 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=9313 Ack=26876 Win=65024 Len=0
32295 3058.117673400 fe80::bf7f:2782:66ba:e9ef ff02::1:ff18:a40 ICMPv6 86 Neighbor Solicitation for fe80::be07:1dff:fe18:a40 from e8:bf:e1:52:06:f2
32296 3058.121578900 fe80::be07:1dff:fe18:a40 fe80::bf7f:2782:66ba:e9ef ICMPv6 86 Neighbor Advertisement fe80::be07:1dff:fe18:a40 (rtr, sol, ovr) is at bc:07:1d:18:0a:40
32297 3058.131514400 Intel_52:06:f2 Broadcast ARP 42 Who has 192.168.68.1? Tell 192.168.68.53
32298 3058.133385000 TPLink_18:0a:40 Intel_52:06:f2 ARP 42 192.168.68.1 is at bc:07:1d:18:0a:40
32299 3058.156731300 192.168.68.53 192.168.1.1 DNS 76 Standard query 0x97cb AAAA dns.msftncsi.com
32300 3058.162139900 192.168.1.1 192.168.68.53 DNS 104 Standard query response 0x97cb AAAA dns.msftncsi.com AAAA fd3e:4f5a:5b81::1
32301 3058.566955600 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32302 3058.670575700 192.168.68.53 192.168.1.1 DNS 77 Standard query 0xa871 A ipv6.msftncsi.com
32303 3058.670733600 192.168.68.53 192.168.1.1 DNS 77 Standard query 0x6a0a A ipv6.msftncsi.com
32304 3058.682641600 192.168.1.1 192.168.68.53 DNS 156 Standard query response 0xa871 A ipv6.msftncsi.com CNAME ipv6.msftncsi.com.edgesuite.net CNAME a978.i6g1.akamai.net
32305 3058.682642100 192.168.1.1 192.168.68.53 DNS 156 Standard query response 0x6a0a A ipv6.msftncsi.com CNAME ipv6.msftncsi.com.edgesuite.net CNAME a978.i6g1.akamai.net
32306 3058.683306100 192.168.68.53 192.168.1.1 DNS 77 Standard query 0x1e4a A ipv6.msftncsi.com
32307 3058.692069400 192.168.1.1 192.168.68.53 DNS 156 Standard query response 0x1e4a A ipv6.msftncsi.com CNAME ipv6.msftncsi.com.edgesuite.net CNAME a978.i6g1.akamai.net
32308 3059.182577400 192.168.68.1 239.255.255.250 SSDP 431 NOTIFY * HTTP/1.1
32309 3059.182578300 192.168.68.1 239.255.255.250 SSDP 440 NOTIFY * HTTP/1.1
32310 3059.182582800 192.168.68.1 239.255.255.250 SSDP 503 NOTIFY * HTTP/1.1
32311 3059.185389700 192.168.68.1 239.255.255.250 SSDP 499 NOTIFY * HTTP/1.1
32312 3059.185390600 192.168.68.1 239.255.255.250 SSDP 479 NOTIFY * HTTP/1.1
32313 3059.185391900 192.168.68.1 239.255.255.250 SSDP 511 NOTIFY * HTTP/1.1
32314 3059.185394300 192.168.68.1 239.255.255.250 SSDP 493 NOTIFY * HTTP/1.1
32315 3059.188517200 192.168.68.1 239.255.255.250 SSDP 495 NOTIFY * HTTP/1.1
32316 3059.188518100 fe80::be07:1dff:fe18:a40 ff02::c SSDP 455 NOTIFY * HTTP/1.1
32317 3059.188519400 fe80::be07:1dff:fe18:a40 ff02::c SSDP 464 NOTIFY * HTTP/1.1
32318 3059.191121400 fe80::be07:1dff:fe18:a40 ff02::c SSDP 527 NOTIFY * HTTP/1.1
32319 3059.191124100 fe80::be07:1dff:fe18:a40 ff02::c SSDP 523 NOTIFY * HTTP/1.1
32320 3059.191125300 fe80::be07:1dff:fe18:a40 ff02::c SSDP 503 NOTIFY * HTTP/1.1
32321 3059.193419300 fe80::be07:1dff:fe18:a40 ff02::c SSDP 535 NOTIFY * HTTP/1.1
32322 3059.193421500 fe80::be07:1dff:fe18:a40 ff02::c SSDP 517 NOTIFY * HTTP/1.1
32323 3059.193422100 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
32324 3059.195739600 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
32325 3060.855613900 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32326 3060.892151600 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32327 3060.946401100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=9437 Ack=26996 Win=65024 Len=0
32328 3061.331672400 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.50? Tell 192.168.68.1
32329 3063.122385500 fe80::be07:1dff:fe18:a40 fe80::bf7f:2782:66ba:e9ef ICMPv6 86 Neighbor Solicitation for fe80::bf7f:2782:66ba:e9ef from bc:07:1d:18:0a:40
32330 3063.122624800 fe80::bf7f:2782:66ba:e9ef fe80::be07:1dff:fe18:a40 ICMPv6 86 Neighbor Advertisement fe80::bf7f:2782:66ba:e9ef (sol, ovr) is at e8:bf:e1:52:06:f2
32331 3063.160623400 TPLink_18:0a:40 Intel_52:06:f2 ARP 42 Who has 192.168.68.53? Tell 192.168.68.1
32332 3063.160638400 Intel_52:06:f2 TPLink_18:0a:40 ARP 42 192.168.68.53 is at e8:bf:e1:52:06:f2
32333 3063.903576000 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32334 3063.942492800 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32335 3063.995222700 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=9561 Ack=27116 Win=64768 Len=0
32336 3066.479910800 192.168.68.53 95.101.23.104 TCP 54 52949 → 80 [FIN, ACK] Seq=228 Ack=264 Win=65024 Len=0
32337 3066.480008900 192.168.68.53 2.18.69.180 TCP 54 52953 → 80 [FIN, ACK] Seq=228 Ack=264 Win=65024 Len=0
32338 3066.480112000 192.168.68.53 138.199.36.10 TCP 54 52952 → 80 [FIN, ACK] Seq=511 Ack=1105 Win=64256 Len=0
32339 3066.480169200 192.168.68.53 142.250.109.94 TCP 54 52950 → 80 [FIN, ACK] Seq=603 Ack=669 Win=64768 Len=0
32340 3066.480211900 192.168.68.53 95.101.23.65 TCP 54 52951 → 80 [FIN, ACK] Seq=228 Ack=264 Win=65024 Len=0
32341 3066.480252100 192.168.68.53 199.232.18.172 TCP 54 52948 → 80 [FIN, ACK] Seq=570 Ack=405 Win=65024 Len=0
32342 3066.480295800 192.168.68.53 2.18.69.180 TCP 54 52954 → 80 [FIN, ACK] Seq=228 Ack=264 Win=65024 Len=0
32343 3066.502102300 95.101.23.104 192.168.68.53 TCP 54 80 → 52949 [FIN, ACK] Seq=264 Ack=229 Win=64128 Len=0
32344 3066.502102900 2.18.69.180 192.168.68.53 TCP 54 80 → 52953 [FIN, ACK] Seq=264 Ack=229 Win=64128 Len=0
32345 3066.502103000 2.18.69.180 192.168.68.53 TCP 54 80 → 52954 [FIN, ACK] Seq=264 Ack=229 Win=64128 Len=0
32346 3066.502103200 95.101.23.65 192.168.68.53 TCP 54 80 → 52951 [FIN, ACK] Seq=264 Ack=229 Win=64128 Len=0
32347 3066.502183600 192.168.68.53 95.101.23.104 TCP 54 52949 → 80 [ACK] Seq=229 Ack=265 Win=65024 Len=0
32348 3066.502231400 192.168.68.53 2.18.69.180 TCP 54 52953 → 80 [ACK] Seq=229 Ack=265 Win=65024 Len=0
32349 3066.502248500 192.168.68.53 2.18.69.180 TCP 54 52954 → 80 [ACK] Seq=229 Ack=265 Win=65024 Len=0
32350 3066.502264700 192.168.68.53 95.101.23.65 TCP 54 52951 → 80 [ACK] Seq=229 Ack=265 Win=65024 Len=0
32351 3066.512060400 142.250.109.94 192.168.68.53 TCP 54 80 → 52950 [FIN, ACK] Seq=669 Ack=604 Win=269568 Len=0
32352 3066.512061100 199.232.18.172 192.168.68.53 TCP 60 80 → 52948 [ACK] Seq=405 Ack=571 Win=144384 Len=0
32353 3066.512061300 199.232.18.172 192.168.68.53 TCP 54 80 → 52948 [FIN, ACK] Seq=405 Ack=571 Win=144384 Len=0
32354 3066.512061500 138.199.36.10 192.168.68.53 TCP 54 80 → 52952 [FIN, ACK] Seq=1105 Ack=512 Win=69632 Len=0
32355 3066.512247800 192.168.68.53 142.250.109.94 TCP 54 52950 → 80 [ACK] Seq=604 Ack=670 Win=64768 Len=0
32356 3066.512406200 192.168.68.53 199.232.18.172 TCP 54 52948 → 80 [ACK] Seq=571 Ack=406 Win=65024 Len=0
32357 3066.512451900 192.168.68.53 138.199.36.10 TCP 54 52952 → 80 [ACK] Seq=512 Ack=1106 Win=64256 Len=0
32358 3066.951491600 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32359 3066.992029600 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32360 3067.044955900 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=9685 Ack=27236 Win=64768 Len=0
32361 3067.576990800 192.168.68.51 239.255.255.250 SSDP 167 M-SEARCH * HTTP/1.1
32362 3067.576991700 192.168.68.51 224.0.0.251 MDNS 87 Standard query 0x0000 PTR _spotify-connect._tcp.local, "QM" question
32363 3067.576992000 fe80::1415:5b0e:57ea:7b97 ff02::fb MDNS 107 Standard query 0x0000 PTR _spotify-connect._tcp.local, "QM" question
32364 3067.885364500 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32365 3069.011749400 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.71.249? Tell 192.168.68.1
32366 3069.272079300 149.154.167.99 192.168.68.53 TLSv1.2 1027 Application Data
32367 3069.325824500 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=9685 Ack=28209 Win=65280 Len=0
32368 3070.002780600 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32369 3070.042312900 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32370 3070.095489600 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=9875 Ack=28329 Win=65280 Len=0
32371 3071.015317300 192.168.68.53 142.250.147.188 TCP 55 [TCP Keep-Alive] 51336 → 5228 [ACK] Seq=2075 Ack=6860 Win=64768 Len=1
32372 3071.049980900 142.250.147.188 192.168.68.53 TCP 66 [TCP Keep-Alive ACK] 5228 → 51336 [ACK] Seq=6860 Ack=2076 Win=267776 Len=0 SLE=2075 SRE=2076
32373 3072.595763600 192.168.68.51 192.168.71.255 UDP 86 57621 → 57621 Len=44
32374 3073.047785000 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32375 3073.082050100 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32376 3073.123143200 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=9999 Ack=28449 Win=65280 Len=0
32377 3074.072024200 149.154.167.99 192.168.68.53 TLSv1.2 995 Application Data
32378 3074.122226100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=9999 Ack=29390 Win=64256 Len=0
32379 3076.095809600 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32380 3076.132312000 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32381 3076.172671500 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=10189 Ack=29510 Win=65280 Len=0
32382 3076.793940200 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.53? Tell 192.168.68.1
32383 3076.793956100 Intel_52:06:f2 TPLink_18:0a:40 ARP 42 192.168.68.53 is at e8:bf:e1:52:06:f2
32384 3077.613283900 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32385 3078.739067400 192.168.68.51 224.0.0.251 MDNS 392 Standard query 0x0000 PTR lb._dns-sd._udp.local, "QM" question PTR _airport._tcp.local, "QM" question PTR _uscan._tcp.local, "QM" question PTR _uscans._tcp.local, "QM" question PTR _printer._tcp.local, "QM" question PTR _ippusb._tcp.local, "QM" question PTR _ptp._tcp.local, "QM" question PTR _ipps._tcp.local, "QM" question PTR _ipp._tcp.local, "QM" question PTR _pdl-datastream._tcp.local, "QM" question PTR _scanner._tcp.local, "QM" question PTR _ipp-tls._tcp.local, "QM" question PTR _riousbprint._tcp.local, "QM" question PTR _afpovertcp._tcp.local, "QM" question PTR _smb._tcp.local, "QM" question PTR _rfb._tcp.local, "QM" question PTR _adisk._tcp.local, "QM" question PTR _apple-mobdev._tcp.local, "QM" question PTR 950e07f1._sub._apple-mobdev2._tcp.local, "QM" question PTR _apple-pairable._tcp.local, "QM" question
32386 3078.739068800 fe80::1415:5b0e:57ea:7b97 ff02::fb MDNS 412 Standard query 0x0000 PTR lb._dns-sd._udp.local, "QM" question PTR _airport._tcp.local, "QM" question PTR _uscan._tcp.local, "QM" question PTR _uscans._tcp.local, "QM" question PTR _printer._tcp.local, "QM" question PTR _ippusb._tcp.local, "QM" question PTR _ptp._tcp.local, "QM" question PTR _ipps._tcp.local, "QM" question PTR _ipp._tcp.local, "QM" question PTR _pdl-datastream._tcp.local, "QM" question PTR _scanner._tcp.local, "QM" question PTR _ipp-tls._tcp.local, "QM" question PTR _riousbprint._tcp.local, "QM" question PTR _afpovertcp._tcp.local, "QM" question PTR _smb._tcp.local, "QM" question PTR _rfb._tcp.local, "QM" question PTR _adisk._tcp.local, "QM" question PTR _apple-mobdev._tcp.local, "QM" question PTR 950e07f1._sub._apple-mobdev2._tcp.local, "QM" question PTR _apple-pairable._tcp.local, "QM" question
32387 3078.991980600 149.154.167.99 192.168.68.53 TLSv1.2 979 Application Data
32388 3079.043033200 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=10189 Ack=30435 Win=64512 Len=0
32389 3079.138822600 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32390 3079.171829900 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32391 3079.215769800 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=10379 Ack=30555 Win=64256 Len=0
32392 3082.180042700 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32393 3082.211819700 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32394 3082.255851300 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=10503 Ack=30675 Win=64256 Len=0
32395 3085.223135200 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32396 3085.262178900 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32397 3085.316973600 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=10627 Ack=30795 Win=65280 Len=0
32398 3085.651854800 149.154.167.99 192.168.68.53 TLSv1.2 1027 Application Data
32399 3085.703623100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=10627 Ack=31768 Win=64512 Len=0
32400 3085.905586200 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32401 3087.443751000 5.75.2 5.75.0 TIPC 74 Ngbr Disc Request
32402 3087.443751400 5.75.2 5.75.0 TIPC 74 Ngbr Disc Request
32403 3087.853204100 5.75.1 5.75.0 TIPC 74 Ngbr Disc Request
32404 3088.270046800 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32405 3088.301823000 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32406 3088.345724200 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=10817 Ack=31888 Win=64256 Len=0
32407 3089.186298500 192.168.68.1 239.255.255.250 SSDP 431 NOTIFY * HTTP/1.1
32408 3089.186299700 192.168.68.1 239.255.255.250 SSDP 440 NOTIFY * HTTP/1.1
32409 3089.186306700 192.168.68.1 239.255.255.250 SSDP 503 NOTIFY * HTTP/1.1
32410 3089.186316400 192.168.68.1 239.255.255.250 SSDP 499 NOTIFY * HTTP/1.1
32411 3089.188427600 192.168.68.1 239.255.255.250 SSDP 479 NOTIFY * HTTP/1.1
32412 3089.188428600 192.168.68.1 239.255.255.250 SSDP 511 NOTIFY * HTTP/1.1
32413 3089.188430000 192.168.68.1 239.255.255.250 SSDP 493 NOTIFY * HTTP/1.1
32414 3089.190799400 192.168.68.1 239.255.255.250 SSDP 495 NOTIFY * HTTP/1.1
32415 3089.190800900 192.168.68.1 239.255.255.250 SSDP 495 NOTIFY * HTTP/1.1
32416 3089.190803100 fe80::be07:1dff:fe18:a40 ff02::c SSDP 455 NOTIFY * HTTP/1.1
32417 3089.193018100 fe80::be07:1dff:fe18:a40 ff02::c SSDP 464 NOTIFY * HTTP/1.1
32418 3089.193018700 fe80::be07:1dff:fe18:a40 ff02::c SSDP 527 NOTIFY * HTTP/1.1
32419 3089.193020700 fe80::be07:1dff:fe18:a40 ff02::c SSDP 523 NOTIFY * HTTP/1.1
32420 3089.195384900 fe80::be07:1dff:fe18:a40 ff02::c SSDP 503 NOTIFY * HTTP/1.1
32421 3089.195385400 fe80::be07:1dff:fe18:a40 ff02::c SSDP 535 NOTIFY * HTTP/1.1
32422 3089.195386700 fe80::be07:1dff:fe18:a40 ff02::c SSDP 517 NOTIFY * HTTP/1.1
32423 3089.196997300 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
32424 3089.196998000 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
32425 3091.314297900 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32426 3091.351852700 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32427 3091.406669400 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=10941 Ack=32008 Win=64256 Len=0
32428 3091.538504000 192.168.68.51 224.0.0.251 MDNS 262 Standard query response 0x0000 TXT, cache flush NSEC, cache flush MacBook Pro — Ihor._companion-link._tcp.local
32429 3091.538511500 fe80::1415:5b0e:57ea:7b97 ff02::fb MDNS 282 Standard query response 0x0000 TXT, cache flush NSEC, cache flush MacBook Pro — Ihor._companion-link._tcp.local
32430 3092.564241700 192.168.68.51 224.0.0.251 MDNS 262 Standard query response 0x0000 TXT, cache flush NSEC, cache flush MacBook Pro — Ihor._companion-link._tcp.local
32431 3092.564242500 fe80::1415:5b0e:57ea:7b97 ff02::fb MDNS 282 Standard query response 0x0000 TXT, cache flush NSEC, cache flush MacBook Pro — Ihor._companion-link._tcp.local
32432 3093.894746700 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32433 3094.209339800 192.168.68.53 192.168.1.1 DNS 77 Standard query 0x1af7 A ipv6.msftncsi.com
32434 3094.209343100 192.168.68.53 192.168.1.1 DNS 77 Standard query 0x940f A ipv6.msftncsi.com
32435 3094.222219400 192.168.1.1 192.168.68.53 DNS 156 Standard query response 0x1af7 A ipv6.msftncsi.com CNAME ipv6.msftncsi.com.edgesuite.net CNAME a978.i6g1.akamai.net
32436 3094.222220500 192.168.1.1 192.168.68.53 DNS 156 Standard query response 0x940f A ipv6.msftncsi.com CNAME ipv6.msftncsi.com.edgesuite.net CNAME a978.i6g1.akamai.net
32437 3094.223310700 192.168.68.53 192.168.1.1 DNS 77 Standard query 0x283f A ipv6.msftncsi.com
32438 3094.231687000 192.168.1.1 192.168.68.53 DNS 156 Standard query response 0x283f A ipv6.msftncsi.com CNAME ipv6.msftncsi.com.edgesuite.net CNAME a978.i6g1.akamai.net
32439 3094.355630300 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32440 3094.391741800 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32441 3094.432884600 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=11065 Ack=32128 Win=65280 Len=0
32442 3094.508176000 192.168.68.51 224.0.0.251 MDNS 262 Standard query response 0x0000 TXT, cache flush NSEC, cache flush MacBook Pro — Ihor._companion-link._tcp.local
32443 3094.508176700 fe80::1415:5b0e:57ea:7b97 ff02::fb MDNS 282 Standard query response 0x0000 TXT, cache flush NSEC, cache flush MacBook Pro — Ihor._companion-link._tcp.local
32444 3094.714011300 192.168.68.1 224.0.0.1 IGMPv3 50 Membership Query, general
32445 3096.769741600 192.168.68.53 224.0.0.22 IGMPv3 54 Membership Report / Join group 224.0.0.251 for any sources
32446 3097.274110900 192.168.68.53 224.0.0.22 IGMPv3 54 Membership Report / Join group 239.255.255.250 for any sources
32447 3097.401213000 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32448 3097.441744900 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32449 3097.493408100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=11189 Ack=32248 Win=65280 Len=0
32450 3098.503419000 192.168.68.51 224.0.0.251 MDNS 262 Standard query response 0x0000 TXT, cache flush NSEC, cache flush MacBook Pro — Ihor._companion-link._tcp.local
32451 3098.503419700 fe80::1415:5b0e:57ea:7b97 ff02::fb MDNS 282 Standard query response 0x0000 TXT, cache flush NSEC, cache flush MacBook Pro — Ihor._companion-link._tcp.local
32452 3099.220398300 TPLink_18:0a:40 Intel_52:06:f2 ARP 42 Who has 192.168.68.53? Tell 192.168.68.1
32453 3099.220416000 Intel_52:06:f2 TPLink_18:0a:40 ARP 42 192.168.68.53 is at e8:bf:e1:52:06:f2
32454 3099.274302500 192.168.68.53 224.0.0.22 IGMPv3 54 Membership Report / Join group 224.0.0.252 for any sources
32455 3100.446783300 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32456 3100.447360400 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32457 3100.482278700 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32458 3100.523772300 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=11313 Ack=32368 Win=65280 Len=0
32459 3102.598673300 192.168.68.51 192.168.71.255 UDP 86 57621 → 57621 Len=44
32460 3103.493487500 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32461 3103.511566300 149.154.167.99 192.168.68.53 TLSv1.2 1027 Application Data
32462 3103.529860500 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32463 3103.529934800 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=11437 Ack=33461 Win=65280 Len=0
32464 3105.771162200 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.52? Tell 192.168.68.1
32465 3106.539548900 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32466 3106.576475500 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32467 3106.632951900 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=11627 Ack=33581 Win=65280 Len=0
32468 3108.136526600 149.154.167.99 192.168.68.53 TLSv1.2 995 Application Data
32469 3108.177052800 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=11627 Ack=34522 Win=64256 Len=0
32470 3109.588741600 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32471 3109.631941900 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32472 3109.681523600 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=11817 Ack=34642 Win=64256 Len=0
32473 3109.766556600 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32474 3112.644324600 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32475 3112.681592800 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32476 3112.734890500 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=11941 Ack=34762 Win=65280 Len=0
32477 3113.001583300 149.154.167.99 192.168.68.53 TLSv1.2 979 Application Data
32478 3113.047526600 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=11941 Ack=35687 Win=64512 Len=0
32479 3113.555312300 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.51? Tell 192.168.68.1
32480 3114.989016600 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32481 3115.687754500 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32482 3115.731797900 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32483 3115.779706900 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=12131 Ack=35807 Win=64256 Len=0
32484 3116.060035500 192.168.68.53 142.250.147.188 TCP 55 [TCP Keep-Alive] 51336 → 5228 [ACK] Seq=2075 Ack=6860 Win=64768 Len=1
32485 3116.100174200 142.250.147.188 192.168.68.53 TCP 66 [TCP Keep-Alive ACK] 5228 → 51336 [ACK] Seq=6860 Ack=2076 Win=267776 Len=0 SLE=2075 SRE=2076
32486 3118.738889300 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32487 3118.771520400 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32488 3118.815293000 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=12255 Ack=35927 Win=64256 Len=0
32489 3119.188484200 192.168.68.1 239.255.255.250 SSDP 431 NOTIFY * HTTP/1.1
32490 3119.188485100 192.168.68.1 239.255.255.250 SSDP 440 NOTIFY * HTTP/1.1
32491 3119.188490700 192.168.68.1 239.255.255.250 SSDP 503 NOTIFY * HTTP/1.1
32492 3119.190390400 192.168.68.1 239.255.255.250 SSDP 499 NOTIFY * HTTP/1.1
32493 3119.190391800 192.168.68.1 239.255.255.250 SSDP 479 NOTIFY * HTTP/1.1
32494 3119.190393100 192.168.68.1 239.255.255.250 SSDP 511 NOTIFY * HTTP/1.1
32495 3119.196123000 192.168.68.1 239.255.255.250 SSDP 493 NOTIFY * HTTP/1.1
32496 3119.196125100 192.168.68.1 239.255.255.250 SSDP 495 NOTIFY * HTTP/1.1
32497 3119.196128300 192.168.68.1 239.255.255.250 SSDP 495 NOTIFY * HTTP/1.1
32498 3119.196131900 fe80::be07:1dff:fe18:a40 ff02::c SSDP 455 NOTIFY * HTTP/1.1
32499 3119.196133800 fe80::be07:1dff:fe18:a40 ff02::c SSDP 464 NOTIFY * HTTP/1.1
32500 3119.196134700 fe80::be07:1dff:fe18:a40 ff02::c SSDP 527 NOTIFY * HTTP/1.1
32501 3119.196136800 fe80::be07:1dff:fe18:a40 ff02::c SSDP 523 NOTIFY * HTTP/1.1
32502 3119.200054200 fe80::be07:1dff:fe18:a40 ff02::c SSDP 503 NOTIFY * HTTP/1.1
32503 3119.200054900 fe80::be07:1dff:fe18:a40 ff02::c SSDP 535 NOTIFY * HTTP/1.1
32504 3119.200056300 fe80::be07:1dff:fe18:a40 ff02::c SSDP 517 NOTIFY * HTTP/1.1
32505 3119.200057200 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
32506 3119.200057900 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
32507 3120.211318900 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32508 3120.231494600 149.154.167.99 192.168.68.53 TLSv1.2 1027 Application Data
32509 3120.282570900 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=12255 Ack=36900 Win=65280 Len=0
32510 3121.232739300 192.168.68.53 192.168.1.1 DNS 76 Standard query 0xe4a9 HTTPS web.telegram.org
32511 3121.232996300 192.168.68.53 192.168.1.1 DNS 76 Standard query 0xdfab A web.telegram.org
32512 3121.251460700 192.168.1.1 192.168.68.53 DNS 155 Standard query response 0xe4a9 HTTPS web.telegram.org SOA ns-cloud-b1.googledomains.com
32513 3121.251461600 192.168.1.1 192.168.68.53 DNS 92 Standard query response 0xdfab A web.telegram.org A 149.154.167.99
32514 3121.252069500 192.168.68.53 149.154.167.99 TCP 66 62915 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
32515 3121.289666700 149.154.167.99 192.168.68.53 TCP 66 443 → 62915 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1240 SACK_PERM WS=1024
32516 3121.289868200 192.168.68.53 149.154.167.99 TCP 54 62915 → 443 [ACK] Seq=1 Ack=1 Win=65280 Len=0
32517 3121.290361200 192.168.68.53 149.154.167.99 TLSv1.3 1882 Client Hello (SNI=web.telegram.org)
32518 3121.321985700 149.154.167.99 192.168.68.53 TCP 60 443 → 62915 [ACK] Seq=1 Ack=1241 Win=68608 Len=0
32519 3121.321986400 149.154.167.99 192.168.68.53 TCP 60 443 → 62915 [ACK] Seq=1 Ack=1829 Win=70656 Len=0
32520 3121.321990800 149.154.167.99 192.168.68.53 TLSv1.3 3774 Server Hello, Change Cipher Spec, Application Data
32521 3121.321991500 149.154.167.99 192.168.68.53 TCP 430 443 → 62915 [PSH, ACK] Seq=3721 Ack=1829 Win=70656 Len=376 [TCP PDU reassembled in 32522]
32522 3121.321993100 149.154.167.99 192.168.68.53 TLSv1.3 1294 Application Data
32523 3121.321993700 149.154.167.99 192.168.68.53 TLSv1.3 285 Application Data, Application Data
32524 3121.322108600 192.168.68.53 149.154.167.99 TCP 54 62915 → 443 [ACK] Seq=1829 Ack=5568 Win=65280 Len=0
32525 3121.323376600 192.168.68.53 149.154.167.99 TLSv1.3 134 Change Cipher Spec, Application Data
32526 3121.323530100 192.168.68.53 149.154.167.99 TLSv1.3 146 Application Data
32527 3121.323702600 192.168.68.53 149.154.167.99 TLSv1.3 450 Application Data
32528 3121.337684200 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.50? Tell 192.168.68.1
32529 3121.361459700 149.154.167.99 192.168.68.53 TLSv1.3 660 Application Data, Application Data
32530 3121.361460700 149.154.167.99 192.168.68.53 TLSv1.3 327 Application Data
32531 3121.361461100 149.154.167.99 192.168.68.53 TLSv1.3 93 Application Data
32532 3121.361551100 192.168.68.53 149.154.167.99 TCP 54 62915 → 443 [ACK] Seq=2397 Ack=6486 Win=64512 Len=0
32533 3121.361896300 192.168.68.53 149.154.167.99 TLSv1.3 85 Application Data
32534 3121.439557600 149.154.167.99 192.168.68.53 TCP 60 443 → 62915 [ACK] Seq=6486 Ack=2428 Win=73728 Len=0
32535 3121.784771000 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32536 3121.821460900 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32537 3121.876008900 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=12445 Ack=37020 Win=65280 Len=0
32538 3122.360357000 192.168.68.50 224.0.0.251 MDNS 123 Standard query response 0x0000 PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local
32539 3122.360357700 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 143 Standard query response 0x0000 PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local
32540 3122.989342700 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32541 3123.041405300 149.154.167.99 192.168.68.53 TLSv1.2 206 Application Data
32542 3123.082772100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=12569 Ack=37172 Win=65024 Len=0
32543 3123.162714700 192.168.68.53 149.154.167.99 TLSv1.2 228 Application Data
32544 3123.239473600 149.154.167.99 192.168.68.53 TCP 54 443 → 52757 [ACK] Seq=37172 Ack=12743 Win=130048 Len=0
32545 3123.259720600 149.154.167.99 192.168.68.53 TCP 9974 443 → 52757 [PSH, ACK] Seq=37172 Ack=12743 Win=130048 Len=9920 [TCP PDU reassembled in 32549]
32546 3123.259782700 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=12743 Ack=47092 Win=65280 Len=0
32547 3123.268964500 149.154.167.99 192.168.68.53 TCP 6254 443 → 52757 [PSH, ACK] Seq=47092 Ack=12743 Win=130048 Len=6200 [TCP PDU reassembled in 32549]
32548 3123.269028000 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=12743 Ack=53292 Win=65280 Len=0
32549 3123.269817200 149.154.167.99 192.168.68.53 TLSv1.2 6254 Application Data
32550 3123.269880100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=12743 Ack=59492 Win=65280 Len=0
32551 3123.281541000 149.154.167.99 192.168.68.53 TCP 6254 443 → 52757 [PSH, ACK] Seq=59492 Ack=12743 Win=130048 Len=6200 [TCP PDU reassembled in 32553]
32552 3123.281637600 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=12743 Ack=65692 Win=65280 Len=0
32553 3123.291447500 149.154.167.99 192.168.68.53 TLSv1.2 6254 Application Data
32554 3123.291516600 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=12743 Ack=71892 Win=65280 Len=0
32555 3123.298345800 149.154.167.99 192.168.68.53 TCP 6254 443 → 52757 [PSH, ACK] Seq=71892 Ack=12743 Win=130048 Len=6200 [TCP PDU reassembled in 32559]
32556 3123.298399200 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=12743 Ack=78092 Win=65280 Len=0
32557 3123.301587400 149.154.167.99 192.168.68.53 TCP 6254 443 → 52757 [PSH, ACK] Seq=78092 Ack=12743 Win=130048 Len=6200 [TCP PDU reassembled in 32559]
32558 3123.301630500 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=12743 Ack=84292 Win=65280 Len=0
32559 3123.307687000 149.154.167.99 192.168.68.53 TLSv1.2 6254 Application Data
32560 3123.307742300 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=12743 Ack=90492 Win=65280 Len=0
32561 3123.311460700 149.154.167.99 192.168.68.53 TCP 2534 443 → 52757 [PSH, ACK] Seq=90492 Ack=12743 Win=130048 Len=2480 [TCP PDU reassembled in 32562]
32562 3123.311461300 149.154.167.99 192.168.68.53 TLSv1.2 242 Application Data
32563 3123.311505600 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=12743 Ack=93160 Win=65280 Len=0
32564 3124.614582700 192.168.68.50 224.0.0.251 MDNS 229 Standard query response 0x0000 PTR, cache flush iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local NSEC, cache flush 3.8.3.6.6.A.8.5.A.7.E.6.3.5.8.1.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush 50.68.168.192.in-addr.arpa
32565 3124.614583400 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 249 Standard query response 0x0000 PTR, cache flush iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local NSEC, cache flush 3.8.3.6.6.A.8.5.A.7.E.6.3.5.8.1.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush 50.68.168.192.in-addr.arpa
32566 3124.614583600 192.168.68.50 224.0.0.251 IGMPv2 46 Membership Report group 224.0.0.251
32567 3124.614584000 192.168.68.50 224.0.0.251 MDNS 127 Standard query 0x0000 PTR _rdlink._tcp.local, "QU" question PTR _companion-link._tcp.local, "QU" question PTR _airplay._tcp.local, "QU" question PTR _raop._tcp.local, "QU" question
32568 3124.614584300 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 147 Standard query 0x0000 PTR _rdlink._tcp.local, "QU" question PTR _companion-link._tcp.local, "QU" question PTR _airplay._tcp.local, "QU" question PTR _raop._tcp.local, "QU" question
32569 3124.833250000 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32570 3124.871485300 149.154.167.99 192.168.68.53 TCP 54 443 → 52757 [ACK] Seq=93160 Ack=12933 Win=130048 Len=0
32571 3124.871486600 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32572 3124.922051300 192.168.68.50 224.0.0.251 MDNS 122 Standard query 0x0000 PTR _companion-link._tcp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local
32573 3124.922052400 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 142 Standard query 0x0000 PTR _companion-link._tcp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local
32574 3124.925750400 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=12933 Ack=93280 Win=65280 Len=0
32575 3125.024624000 192.168.68.50 224.0.0.251 MDNS 197 Standard query 0x0000 ANY 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local, "QU" question ANY iPhone-Ihor.local, "QU" question SRV 0 0 56513 iPhone-Ihor.local AAAA fe80::1853:6e7a:58a6:6383 A 192.168.68.50
32576 3125.024624700 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 217 Standard query 0x0000 ANY 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local, "QU" question ANY iPhone-Ihor.local, "QU" question SRV 0 0 56513 iPhone-Ihor.local AAAA fe80::1853:6e7a:58a6:6383 A 192.168.68.50
32577 3125.330042400 192.168.68.50 224.0.0.251 MDNS 197 Standard query 0x0000 ANY 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local, "QM" question ANY iPhone-Ihor.local, "QM" question SRV 0 0 56513 iPhone-Ihor.local AAAA fe80::1853:6e7a:58a6:6383 A 192.168.68.50
32578 3125.330043200 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 217 Standard query 0x0000 ANY 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local, "QM" question ANY iPhone-Ihor.local, "QM" question SRV 0 0 56513 iPhone-Ihor.local AAAA fe80::1853:6e7a:58a6:6383 A 192.168.68.50
32579 3125.434384200 192.168.68.50 224.0.0.251 MDNS 229 Standard query response 0x0000 PTR, cache flush iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local NSEC, cache flush 3.8.3.6.6.A.8.5.A.7.E.6.3.5.8.1.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush 50.68.168.192.in-addr.arpa
32580 3125.434384900 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 249 Standard query response 0x0000 PTR, cache flush iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local NSEC, cache flush 3.8.3.6.6.A.8.5.A.7.E.6.3.5.8.1.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush 50.68.168.192.in-addr.arpa
32581 3125.536710200 192.168.68.50 224.0.0.251 MDNS 197 Standard query 0x0000 ANY 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local, "QM" question ANY iPhone-Ihor.local, "QM" question SRV 0 0 56513 iPhone-Ihor.local AAAA fe80::1853:6e7a:58a6:6383 A 192.168.68.50
32582 3125.536711300 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 217 Standard query 0x0000 ANY 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local, "QM" question ANY iPhone-Ihor.local, "QM" question SRV 0 0 56513 iPhone-Ihor.local AAAA fe80::1853:6e7a:58a6:6383 A 192.168.68.50
32583 3125.599710100 192.168.68.53 149.154.167.99 TLSv1.2 162 Application Data
32584 3125.638887000 192.168.68.50 224.0.0.251 MDNS 136 Standard query 0x0000 PTR _rdlink._tcp.local, "QM" question PTR _companion-link._tcp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local
32585 3125.638888400 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 156 Standard query 0x0000 PTR _rdlink._tcp.local, "QM" question PTR _companion-link._tcp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local
32586 3125.661412500 149.154.167.99 192.168.68.53 TLSv1.2 240 Application Data
32587 3125.707545200 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=13041 Ack=93466 Win=65024 Len=0
32588 3125.842450400 192.168.68.50 224.0.0.251 MDNS 285 Standard query response 0x0000 TXT, cache flush PTR _asquic._udp.local PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local SRV, cache flush 0 0 56513 iPhone-Ihor.local AAAA, cache flush fe80::1853:6e7a:58a6:6383 A, cache flush 192.168.68.50 NSEC, cache flush 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local NSEC, cache flush iPhone-Ihor.local
32589 3125.842451400 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 305 Standard query response 0x0000 TXT, cache flush PTR _asquic._udp.local PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local SRV, cache flush 0 0 56513 iPhone-Ihor.local AAAA, cache flush fe80::1853:6e7a:58a6:6383 A, cache flush 192.168.68.50 NSEC, cache flush 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local NSEC, cache flush iPhone-Ihor.local
32590 3126.249987000 TPLink_18:0a:40 Intel_52:06:f2 ARP 42 Who has 192.168.68.53? Tell 192.168.68.1
32591 3126.250001400 Intel_52:06:f2 TPLink_18:0a:40 ARP 42 192.168.68.53 is at e8:bf:e1:52:06:f2
32592 3126.763911700 192.168.68.50 224.0.0.251 MDNS 285 Standard query response 0x0000 TXT, cache flush PTR _asquic._udp.local PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local SRV, cache flush 0 0 56513 iPhone-Ihor.local AAAA, cache flush fe80::1853:6e7a:58a6:6383 A, cache flush 192.168.68.50 NSEC, cache flush 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local NSEC, cache flush iPhone-Ihor.local
32593 3126.763912500 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 305 Standard query response 0x0000 TXT, cache flush PTR _asquic._udp.local PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local SRV, cache flush 0 0 56513 iPhone-Ihor.local AAAA, cache flush fe80::1853:6e7a:58a6:6383 A, cache flush 192.168.68.50 NSEC, cache flush 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local NSEC, cache flush iPhone-Ihor.local
32594 3127.482303600 192.168.68.50 224.0.0.251 MDNS 229 Standard query response 0x0000 PTR, cache flush iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local NSEC, cache flush 3.8.3.6.6.A.8.5.A.7.E.6.3.5.8.1.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush 50.68.168.192.in-addr.arpa
32595 3127.482304300 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 249 Standard query response 0x0000 PTR, cache flush iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local NSEC, cache flush 3.8.3.6.6.A.8.5.A.7.E.6.3.5.8.1.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush 50.68.168.192.in-addr.arpa
32596 3127.879180000 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32597 3127.910403700 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32598 3127.956797900 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=13231 Ack=93586 Win=65024 Len=0
32599 3128.608401600 192.168.68.50 224.0.0.251 MDNS 136 Standard query 0x0000 PTR _rdlink._tcp.local, "QM" question PTR _companion-link._tcp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local
32600 3128.608402200 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 156 Standard query 0x0000 PTR _rdlink._tcp.local, "QM" question PTR _companion-link._tcp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local
32601 3128.811952500 192.168.68.50 224.0.0.251 MDNS 285 Standard query response 0x0000 TXT, cache flush PTR _asquic._udp.local PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local SRV, cache flush 0 0 56513 iPhone-Ihor.local AAAA, cache flush fe80::1853:6e7a:58a6:6383 A, cache flush 192.168.68.50 NSEC, cache flush 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local NSEC, cache flush iPhone-Ihor.local
32602 3128.811953200 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 305 Standard query response 0x0000 TXT, cache flush PTR _asquic._udp.local PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local SRV, cache flush 0 0 56513 iPhone-Ihor.local AAAA, cache flush fe80::1853:6e7a:58a6:6383 A, cache flush 192.168.68.50 NSEC, cache flush 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local NSEC, cache flush iPhone-Ihor.local
32603 3129.120072700 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.71.249? Tell 192.168.68.1
32604 3129.207126700 192.168.68.53 192.168.1.1 DNS 76 Standard query 0x3013 AAAA dns.msftncsi.com
32605 3129.221323500 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32606 3129.221324800 192.168.1.1 192.168.68.53 DNS 104 Standard query response 0x3013 AAAA dns.msftncsi.com AAAA fd3e:4f5a:5b81::1
32607 3129.222906200 192.168.68.53 192.168.1.1 TCP 66 65391 → 53 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
32608 3129.229341800 192.168.1.1 192.168.68.53 TCP 66 53 → 65391 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
32609 3129.229449100 192.168.68.53 192.168.1.1 TCP 54 65391 → 53 [ACK] Seq=1 Ack=1 Win=65280 Len=0
32610 3129.229524600 192.168.68.53 192.168.1.1 DNS 90 Standard query 0x0001 AAAA dns.msftncsi.com
32611 3129.452975800 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 65391 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32612 3129.765755900 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 65391 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32613 3130.144304200 5.75.2 0.0.0 TIPC 123 Payld:Low McastMsg type:10111 inst:100-100
32614 3130.144304900 5.75.2 0.0.0 TIPC 123 Payld:Low McastMsg type:10111 inst:100-100
32615 3130.229336300 192.168.1.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 65391 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
32616 3130.229380900 192.168.68.53 192.168.1.1 TCP 66 [TCP Dup ACK 32609#1] 65391 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
32617 3130.372489600 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 65391 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32618 3130.921634800 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32619 3130.961407000 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32620 3131.013404500 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=13355 Ack=93706 Win=64768 Len=0
32621 3131.476446200 192.168.68.50 224.0.0.251 MDNS 443 Standard query response 0x0000 TXT, cache flush PTR _asquic._udp.local PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local SRV, cache flush 0 0 56513 iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local AAAA, cache flush fe80::1853:6e7a:58a6:6383 A, cache flush 192.168.68.50 NSEC, cache flush 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local NSEC, cache flush 3.8.3.6.6.A.8.5.A.7.E.6.3.5.8.1.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush 50.68.168.192.in-addr.arpa NSEC, cache flush iPhone-Ihor.local
32622 3131.476447100 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 463 Standard query response 0x0000 TXT, cache flush PTR _asquic._udp.local PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local SRV, cache flush 0 0 56513 iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local AAAA, cache flush fe80::1853:6e7a:58a6:6383 A, cache flush 192.168.68.50 NSEC, cache flush 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local NSEC, cache flush 3.8.3.6.6.A.8.5.A.7.E.6.3.5.8.1.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush 50.68.168.192.in-addr.arpa NSEC, cache flush iPhone-Ihor.local
32623 3131.575170400 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 65391 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32624 3132.229313100 192.168.1.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 65391 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
32625 3132.229350100 192.168.68.53 192.168.1.1 TCP 66 [TCP Dup ACK 32609#2] 65391 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
32626 3132.601581300 192.168.68.51 192.168.71.255 UDP 86 57621 → 57621 Len=44
32627 3133.969760900 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32628 3133.984561100 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 65391 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32629 3134.011327000 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32630 3134.061862400 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=13479 Ack=93826 Win=64768 Len=0
32631 3136.229290100 192.168.1.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 65391 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
32632 3136.229335400 192.168.68.53 192.168.1.1 TCP 66 [TCP Dup ACK 32609#3] 65391 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
32633 3136.800063200 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.53? Tell 192.168.68.1
32634 3136.800101400 Intel_52:06:f2 TPLink_18:0a:40 ARP 42 192.168.68.53 is at e8:bf:e1:52:06:f2
32635 3136.902601800 192.168.68.51 239.255.255.250 SSDP 213 M-SEARCH * HTTP/1.1
32636 3137.021580500 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32637 3137.061530700 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32638 3137.113956000 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=13603 Ack=93946 Win=64512 Len=0
32639 3137.722025500 192.168.68.50 224.0.0.251 MDNS 136 Standard query 0x0000 PTR _rdlink._tcp.local, "QM" question PTR _companion-link._tcp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local
32640 3137.722026000 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 156 Standard query 0x0000 PTR _rdlink._tcp.local, "QM" question PTR _companion-link._tcp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local
32641 3137.731407400 149.154.167.99 192.168.68.53 TLSv1.2 1027 Application Data
32642 3137.743272300 192.168.68.53 149.154.167.99 TLSv1.3 225 Application Data
32643 3137.743371600 192.168.68.53 149.154.167.99 TLSv1.3 93 Application Data
32644 3137.771596800 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=13603 Ack=94919 Win=65280 Len=0
32645 3137.781421900 149.154.167.99 192.168.68.53 TCP 60 443 → 62915 [ACK] Seq=6486 Ack=2599 Win=75776 Len=0
32646 3137.781422300 149.154.167.99 192.168.68.53 TCP 60 443 → 62915 [ACK] Seq=6486 Ack=2638 Win=75776 Len=0
32647 3137.781422700 149.154.167.99 192.168.68.53 TLSv1.3 250 Application Data
32648 3137.781422900 149.154.167.99 192.168.68.53 TLSv1.3 93 Application Data
32649 3137.781501400 192.168.68.53 149.154.167.99 TCP 54 62915 → 443 [ACK] Seq=2638 Ack=6721 Win=64256 Len=0
32650 3137.925621700 192.168.68.51 239.255.255.250 SSDP 213 M-SEARCH * HTTP/1.1
32651 3138.131236000 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32652 3138.787530900 192.168.68.53 192.168.1.1 TCP 90 [TCP Retransmission] 65391 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32653 3138.950632500 192.168.68.51 239.255.255.250 SSDP 213 M-SEARCH * HTTP/1.1
32654 3139.226007700 192.168.68.53 192.168.1.1 TCP 54 65391 → 53 [RST, ACK] Seq=37 Ack=1 Win=0 Len=0
32655 3139.226971700 192.168.68.53 192.168.68.1 TCP 66 63470 → 53 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
32656 3139.229296500 192.168.68.1 192.168.68.53 TCP 66 53 → 63470 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
32657 3139.229376500 192.168.68.53 192.168.68.1 TCP 54 63470 → 53 [ACK] Seq=1 Ack=1 Win=65280 Len=0
32658 3139.229452000 192.168.68.53 192.168.68.1 DNS 90 Standard query 0x0001 AAAA dns.msftncsi.com
32659 3139.443022200 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 63470 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32660 3139.755470300 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 63470 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32661 3139.974514400 192.168.68.51 239.255.255.250 SSDP 213 M-SEARCH * HTTP/1.1
32662 3140.069675600 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32663 3140.111359300 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32664 3140.162608600 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=13793 Ack=95039 Win=65280 Len=0
32665 3140.229401300 192.168.68.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 63470 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
32666 3140.229441200 192.168.68.53 192.168.68.1 TCP 66 [TCP Dup ACK 32657#1] 63470 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
32667 3140.367577900 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 63470 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32668 3141.508980700 192.168.68.50 224.0.0.251 MDNS 123 Standard query response 0x0000 PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local
32669 3141.508981400 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 143 Standard query response 0x0000 PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local
32670 3141.581113500 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 63470 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32671 3142.230600100 192.168.68.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 63470 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
32672 3142.230664200 192.168.68.53 192.168.68.1 TCP 66 [TCP Dup ACK 32657#2] 63470 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
32673 3142.421456000 149.154.167.99 192.168.68.53 TLSv1.2 979 Application Data
32674 3142.455911900 192.168.68.53 149.154.167.99 TLSv1.2 823 Application Data
32675 3142.531290600 149.154.167.99 192.168.68.53 TLSv1.2 224 Application Data
32676 3142.581816800 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=14562 Ack=96134 Win=64256 Len=0
32677 3143.118867700 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32678 3143.151260800 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32679 3143.195162600 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=14752 Ack=96254 Win=65280 Len=0
32680 3143.865618600 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32681 3143.995554600 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 63470 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32682 3144.070277100 192.168.68.50 224.0.0.251 MDNS 229 Standard query response 0x0000 PTR, cache flush iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local NSEC, cache flush 3.8.3.6.6.A.8.5.A.7.E.6.3.5.8.1.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush 50.68.168.192.in-addr.arpa
32683 3144.070278400 192.168.68.50 224.0.0.251 MDNS 127 Standard query 0x0000 PTR _rdlink._tcp.local, "QU" question PTR _companion-link._tcp.local, "QU" question PTR _airplay._tcp.local, "QU" question PTR _raop._tcp.local, "QU" question
32684 3144.070278800 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 249 Standard query response 0x0000 PTR, cache flush iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local NSEC, cache flush 3.8.3.6.6.A.8.5.A.7.E.6.3.5.8.1.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush 50.68.168.192.in-addr.arpa
32685 3144.070279300 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 147 Standard query 0x0000 PTR _rdlink._tcp.local, "QU" question PTR _companion-link._tcp.local, "QU" question PTR _airplay._tcp.local, "QU" question PTR _raop._tcp.local, "QU" question
32686 3144.070279400 192.168.68.50 224.0.0.251 IGMPv2 46 Membership Report group 224.0.0.251
32687 3144.275425100 192.168.68.50 224.0.0.251 MDNS 122 Standard query 0x0000 PTR _companion-link._tcp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local
32688 3144.275425900 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 142 Standard query 0x0000 PTR _companion-link._tcp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local
32689 3144.378038800 192.168.68.50 224.0.0.251 MDNS 197 Standard query 0x0000 ANY 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local, "QU" question ANY iPhone-Ihor.local, "QU" question SRV 0 0 56513 iPhone-Ihor.local AAAA fe80::1853:6e7a:58a6:6383 A 192.168.68.50
32690 3144.378039700 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 217 Standard query 0x0000 ANY 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local, "QU" question ANY iPhone-Ihor.local, "QU" question SRV 0 0 56513 iPhone-Ihor.local AAAA fe80::1853:6e7a:58a6:6383 A 192.168.68.50
32691 3144.682917200 192.168.68.50 224.0.0.251 MDNS 197 Standard query 0x0000 ANY 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local, "QM" question ANY iPhone-Ihor.local, "QM" question SRV 0 0 56513 iPhone-Ihor.local AAAA fe80::1853:6e7a:58a6:6383 A 192.168.68.50
32692 3144.684218600 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 217 Standard query 0x0000 ANY 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local, "QM" question ANY iPhone-Ihor.local, "QM" question SRV 0 0 56513 iPhone-Ihor.local AAAA fe80::1853:6e7a:58a6:6383 A 192.168.68.50
32693 3144.890911400 192.168.68.50 224.0.0.251 MDNS 197 Standard query 0x0000 ANY 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local, "QM" question ANY iPhone-Ihor.local, "QM" question SRV 0 0 56513 iPhone-Ihor.local AAAA fe80::1853:6e7a:58a6:6383 A 192.168.68.50
32694 3144.890912100 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 217 Standard query 0x0000 ANY 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local, "QM" question ANY iPhone-Ihor.local, "QM" question SRV 0 0 56513 iPhone-Ihor.local AAAA fe80::1853:6e7a:58a6:6383 A 192.168.68.50
32695 3144.890912500 192.168.68.50 224.0.0.251 MDNS 229 Standard query response 0x0000 PTR, cache flush iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local NSEC, cache flush 3.8.3.6.6.A.8.5.A.7.E.6.3.5.8.1.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush 50.68.168.192.in-addr.arpa
32696 3144.890912900 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 249 Standard query response 0x0000 PTR, cache flush iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local NSEC, cache flush 3.8.3.6.6.A.8.5.A.7.E.6.3.5.8.1.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush 50.68.168.192.in-addr.arpa
32697 3144.989948200 192.168.68.50 224.0.0.251 MDNS 136 Standard query 0x0000 PTR _rdlink._tcp.local, "QM" question PTR _companion-link._tcp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local
32698 3144.992244400 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 156 Standard query 0x0000 PTR _rdlink._tcp.local, "QM" question PTR _companion-link._tcp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local
32699 3145.197548300 192.168.68.50 224.0.0.251 MDNS 285 Standard query response 0x0000 TXT, cache flush PTR _asquic._udp.local PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local SRV, cache flush 0 0 56513 iPhone-Ihor.local AAAA, cache flush fe80::1853:6e7a:58a6:6383 A, cache flush 192.168.68.50 NSEC, cache flush 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local NSEC, cache flush iPhone-Ihor.local
32700 3145.197549100 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 305 Standard query response 0x0000 TXT, cache flush PTR _asquic._udp.local PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local SRV, cache flush 0 0 56513 iPhone-Ihor.local AAAA, cache flush fe80::1853:6e7a:58a6:6383 A, cache flush 192.168.68.50 NSEC, cache flush 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local NSEC, cache flush iPhone-Ihor.local
32701 3146.119113300 192.168.68.50 224.0.0.251 MDNS 285 Standard query response 0x0000 TXT, cache flush PTR _asquic._udp.local PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local SRV, cache flush 0 0 56513 iPhone-Ihor.local AAAA, cache flush fe80::1853:6e7a:58a6:6383 A, cache flush 192.168.68.50 NSEC, cache flush 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local NSEC, cache flush iPhone-Ihor.local
32702 3146.119114200 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 305 Standard query response 0x0000 TXT, cache flush PTR _asquic._udp.local PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local SRV, cache flush 0 0 56513 iPhone-Ihor.local AAAA, cache flush fe80::1853:6e7a:58a6:6383 A, cache flush 192.168.68.50 NSEC, cache flush 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local NSEC, cache flush iPhone-Ihor.local
32703 3146.162859000 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32704 3146.201565300 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32705 3146.229233200 192.168.68.1 192.168.68.53 TCP 66 [TCP Retransmission] 53 → 63470 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 SACK_PERM WS=64
32706 3146.229271500 192.168.68.53 192.168.68.1 TCP 66 [TCP Dup ACK 32657#3] 63470 → 53 [ACK] Seq=37 Ack=1 Win=65280 Len=0 SLE=0 SRE=1
32707 3146.255252100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=14876 Ack=96374 Win=65280 Len=0
32708 3146.936484500 192.168.68.50 224.0.0.251 MDNS 229 Standard query response 0x0000 PTR, cache flush iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local NSEC, cache flush 3.8.3.6.6.A.8.5.A.7.E.6.3.5.8.1.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush 50.68.168.192.in-addr.arpa
32709 3146.936485100 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 249 Standard query response 0x0000 PTR, cache flush iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local NSEC, cache flush 3.8.3.6.6.A.8.5.A.7.E.6.3.5.8.1.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush 50.68.168.192.in-addr.arpa
32710 3147.433175700 149.154.167.99 192.168.68.53 TLSv1.2 995 Application Data
32711 3147.487466300 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=14876 Ack=97315 Win=64256 Len=0
32712 3147.652834500 5.75.2 5.75.0 TIPC 74 Ngbr Disc Request
32713 3147.652835100 5.75.2 5.75.0 TIPC 74 Ngbr Disc Request
32714 3148.062849300 192.168.68.50 224.0.0.251 MDNS 136 Standard query 0x0000 PTR _rdlink._tcp.local, "QM" question PTR _companion-link._tcp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local
32715 3148.062850300 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 156 Standard query 0x0000 PTR _rdlink._tcp.local, "QM" question PTR _companion-link._tcp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local
32716 3148.062850900 5.75.1 5.75.0 TIPC 74 Ngbr Disc Request
32717 3148.165438200 192.168.68.50 224.0.0.251 MDNS 285 Standard query response 0x0000 TXT, cache flush PTR _asquic._udp.local PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local SRV, cache flush 0 0 56513 iPhone-Ihor.local AAAA, cache flush fe80::1853:6e7a:58a6:6383 A, cache flush 192.168.68.50 NSEC, cache flush 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local NSEC, cache flush iPhone-Ihor.local
32718 3148.165439600 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 305 Standard query response 0x0000 TXT, cache flush PTR _asquic._udp.local PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local SRV, cache flush 0 0 56513 iPhone-Ihor.local AAAA, cache flush fe80::1853:6e7a:58a6:6383 A, cache flush 192.168.68.50 NSEC, cache flush 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local NSEC, cache flush iPhone-Ihor.local
32719 3148.798312300 192.168.68.53 192.168.68.1 TCP 90 [TCP Retransmission] 63470 → 53 [PSH, ACK] Seq=1 Ack=1 Win=65280 Len=36
32720 3149.192274100 192.168.68.1 239.255.255.250 SSDP 431 NOTIFY * HTTP/1.1
32721 3149.192274700 192.168.68.1 239.255.255.250 SSDP 440 NOTIFY * HTTP/1.1
32722 3149.192276100 192.168.68.1 239.255.255.250 SSDP 503 NOTIFY * HTTP/1.1
32723 3149.192276800 192.168.68.1 239.255.255.250 SSDP 499 NOTIFY * HTTP/1.1
32724 3149.192277300 192.168.68.1 239.255.255.250 SSDP 479 NOTIFY * HTTP/1.1
32725 3149.194575500 192.168.68.1 239.255.255.250 SSDP 511 NOTIFY * HTTP/1.1
32726 3149.194577300 192.168.68.1 239.255.255.250 SSDP 493 NOTIFY * HTTP/1.1
32727 3149.194578200 192.168.68.1 239.255.255.250 SSDP 495 NOTIFY * HTTP/1.1
32728 3149.198287300 192.168.68.1 239.255.255.250 SSDP 495 NOTIFY * HTTP/1.1
32729 3149.198288500 fe80::be07:1dff:fe18:a40 ff02::c SSDP 455 NOTIFY * HTTP/1.1
32730 3149.198289400 fe80::be07:1dff:fe18:a40 ff02::c SSDP 464 NOTIFY * HTTP/1.1
32731 3149.198289900 fe80::be07:1dff:fe18:a40 ff02::c SSDP 527 NOTIFY * HTTP/1.1
32732 3149.198291200 fe80::be07:1dff:fe18:a40 ff02::c SSDP 523 NOTIFY * HTTP/1.1
32733 3149.201995100 fe80::be07:1dff:fe18:a40 ff02::c SSDP 503 NOTIFY * HTTP/1.1
32734 3149.201995800 fe80::be07:1dff:fe18:a40 ff02::c SSDP 535 NOTIFY * HTTP/1.1
32735 3149.201997300 fe80::be07:1dff:fe18:a40 ff02::c SSDP 517 NOTIFY * HTTP/1.1
32736 3149.201998000 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
32737 3149.201998700 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
32738 3149.205662100 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32739 3149.235839200 192.168.68.53 192.168.68.1 TCP 54 63470 → 53 [RST, ACK] Seq=37 Ack=1 Win=0 Len=0
32740 3149.241374900 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32741 3149.283200700 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=15066 Ack=97435 Win=64256 Len=0
32742 3149.600043500 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32743 3150.930647000 192.168.68.50 224.0.0.251 MDNS 443 Standard query response 0x0000 TXT, cache flush PTR _asquic._udp.local PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local SRV, cache flush 0 0 56513 iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local AAAA, cache flush fe80::1853:6e7a:58a6:6383 A, cache flush 192.168.68.50 NSEC, cache flush 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local NSEC, cache flush 3.8.3.6.6.A.8.5.A.7.E.6.3.5.8.1.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush 50.68.168.192.in-addr.arpa NSEC, cache flush iPhone-Ihor.local
32744 3150.930648400 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 463 Standard query response 0x0000 TXT, cache flush PTR _asquic._udp.local PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local SRV, cache flush 0 0 56513 iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local PTR, cache flush iPhone-Ihor.local AAAA, cache flush fe80::1853:6e7a:58a6:6383 A, cache flush 192.168.68.50 NSEC, cache flush 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local NSEC, cache flush 3.8.3.6.6.A.8.5.A.7.E.6.3.5.8.1.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa NSEC, cache flush 50.68.168.192.in-addr.arpa NSEC, cache flush iPhone-Ihor.local
32745 3151.229629400 TPLink_18:0a:40 Intel_52:06:f2 ARP 42 Who has 192.168.68.53? Tell 192.168.68.1
32746 3151.229666600 Intel_52:06:f2 TPLink_18:0a:40 ARP 42 192.168.68.53 is at e8:bf:e1:52:06:f2
32747 3152.251527500 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32748 3152.291124300 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32749 3152.345430900 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=15190 Ack=97555 Win=65280 Len=0
32750 3154.490784500 149.154.167.99 192.168.68.53 TLSv1.2 1027 Application Data
32751 3154.542885000 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=15190 Ack=98528 Win=64512 Len=0
32752 3155.294223000 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32753 3155.331560200 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32754 3155.385754100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=15380 Ack=98648 Win=64256 Len=0
32755 3157.075545100 192.168.68.50 224.0.0.251 MDNS 136 Standard query 0x0000 PTR _rdlink._tcp.local, "QM" question PTR _companion-link._tcp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local
32756 3157.075546100 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 156 Standard query 0x0000 PTR _rdlink._tcp.local, "QM" question PTR _companion-link._tcp.local, "QM" question PTR MacBook Pro — Ihor._companion-link._tcp.local
32757 3158.344777000 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32758 3158.383367400 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32759 3158.438271000 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=15504 Ack=98768 Win=64256 Len=0
32760 3159.327129200 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32761 3161.109764000 192.168.68.53 142.250.147.188 TCP 55 [TCP Keep-Alive] 51336 → 5228 [ACK] Seq=2075 Ack=6860 Win=64768 Len=1
32762 3161.149272900 142.250.147.188 192.168.68.53 TCP 66 [TCP Keep-Alive ACK] 5228 → 51336 [ACK] Seq=6860 Ack=2076 Win=267776 Len=0 SLE=2075 SRE=2076
32763 3161.391286100 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32764 3161.431014200 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32765 3161.484185800 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=15628 Ack=98888 Win=65280 Len=0
32766 3162.604663000 192.168.68.51 192.168.71.255 UDP 86 57621 → 57621 Len=44
32767 3164.448668200 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32768 3164.482071600 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32769 3164.525031400 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=15752 Ack=99008 Win=65280 Len=0
32770 3165.778953200 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.52? Tell 192.168.68.1
32771 3167.497202100 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32772 3167.541101700 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32773 3167.589286500 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=15876 Ack=99128 Win=65280 Len=0
32774 3168.236591100 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32775 3170.558337900 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32776 3170.600928100 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32777 3170.652409000 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=16000 Ack=99248 Win=65024 Len=0
32778 3172.081069400 149.154.167.99 192.168.68.53 TLSv1.2 1027 Application Data
32779 3172.134241500 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=16000 Ack=100221 Win=65280 Len=0
32780 3172.639097800 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.51? Tell 192.168.68.1
32781 3173.605935800 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32782 3173.641016700 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32783 3173.682364100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=16190 Ack=100341 Win=65280 Len=0
32784 3175.711668200 fe80::be07:1dff:fe18:a40 ff02::1 ICMPv6 78 Router Advertisement from bc:07:1d:18:0a:40
32785 3176.511012300 149.154.167.99 192.168.68.53 TLSv1.2 979 Application Data
32786 3176.560213200 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=16190 Ack=101266 Win=64256 Len=0
32787 3176.656719900 192.168.68.53 149.154.167.99 TLSv1.2 244 Application Data
32788 3176.690947800 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32789 3176.733255100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=16380 Ack=101386 Win=64256 Len=0
32790 3177.015893000 192.168.68.53 172.211.123.250 TCP 55 [TCP Keep-Alive] 49416 → 443 [ACK] Seq=2866 Ack=7119 Win=64256 Len=1
32791 3177.048849600 172.211.123.250 192.168.68.53 TCP 66 [TCP Keep-Alive ACK] 443 → 49416 [ACK] Seq=7119 Ack=2867 Win=7720 Len=0 SLE=2866 SRE=2867
32792 3179.193848900 192.168.68.1 239.255.255.250 SSDP 431 NOTIFY * HTTP/1.1
32793 3179.193849400 192.168.68.1 239.255.255.250 SSDP 440 NOTIFY * HTTP/1.1
32794 3179.193852200 192.168.68.1 239.255.255.250 SSDP 503 NOTIFY * HTTP/1.1
32795 3179.196730700 192.168.68.1 239.255.255.250 SSDP 499 NOTIFY * HTTP/1.1
32796 3179.196731700 192.168.68.1 239.255.255.250 SSDP 479 NOTIFY * HTTP/1.1
32797 3179.196732500 192.168.68.1 239.255.255.250 SSDP 511 NOTIFY * HTTP/1.1
32798 3179.196734100 192.168.68.1 239.255.255.250 SSDP 493 NOTIFY * HTTP/1.1
32799 3179.199059200 192.168.68.1 239.255.255.250 SSDP 495 NOTIFY * HTTP/1.1
32800 3179.199060800 192.168.68.1 239.255.255.250 SSDP 495 NOTIFY * HTTP/1.1
32801 3179.199061200 fe80::be07:1dff:fe18:a40 ff02::c SSDP 455 NOTIFY * HTTP/1.1
32802 3179.204524800 fe80::be07:1dff:fe18:a40 ff02::c SSDP 464 NOTIFY * HTTP/1.1
32803 3179.204525300 fe80::be07:1dff:fe18:a40 ff02::c SSDP 527 NOTIFY * HTTP/1.1
32804 3179.204526100 fe80::be07:1dff:fe18:a40 ff02::c SSDP 523 NOTIFY * HTTP/1.1
32805 3179.204527400 fe80::be07:1dff:fe18:a40 ff02::c SSDP 503 NOTIFY * HTTP/1.1
32806 3179.204527700 fe80::be07:1dff:fe18:a40 ff02::c SSDP 535 NOTIFY * HTTP/1.1
32807 3179.204528800 fe80::be07:1dff:fe18:a40 ff02::c SSDP 517 NOTIFY * HTTP/1.1
32808 3179.204529400 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
32809 3179.206812700 fe80::be07:1dff:fe18:a40 ff02::c SSDP 519 NOTIFY * HTTP/1.1
32810 3179.398031900 TPLink_18:0a:40 Broadcast ARP 60 Who has 192.168.68.50? Tell 192.168.68.1
32811 3179.705070500 192.168.68.53 149.154.167.99 TLSv1.2 178 Application Data
32812 3179.741865900 149.154.167.99 192.168.68.53 TLSv1.2 174 Application Data
32813 3179.797239100 192.168.68.53 149.154.167.99 TCP 54 52757 → 443 [ACK] Seq=16504 Ack=101506 Win=65280 Len=0
32814 3180.012905200 192.168.68.50 224.0.0.251 MDNS 123 Standard query response 0x0000 PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local
32815 3180.012905800 fe80::1853:6e7a:58a6:6383 ff02::fb MDNS 143 Standard query response 0x0000 PTR 4C5211E6-74D7-43EC-91F4-BADF4B049B44._asquic._udp.local
32816 3180.354711500 192.168.68.53 192.168.1.1 DNS 74 Standard query 0x0b88 A assets.msn.com
32817 3180.373274900 192.168.1.1 192.168.68.53 DNS 262 Standard query response 0x0b88 A assets.msn.com CNAME assets-msn-com-world-atm-default.trafficmanager.net CNAME assets.msn.com-ion.edgesuite.net CNAME a1666.dscr.akamai.net A 104.83.4.107 A 104.83.4.113 A 104.83.4.83
32818 3180.374013700 192.168.68.53 104.83.4.107 TCP 66 56847 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=256 SACK_PERM
32819 3180.388809700 104.83.4.107 192.168.68.53 TCP 66 443 → 56847 [SYN, ACK] Seq=0 Ack=1 Win=64240 Len=0 MSS=1384 SACK_PERM WS=128
32820 3180.388909500 192.168.68.53 104.83.4.107 TCP 54 56847 → 443 [ACK] Seq=1 Ack=1 Win=262144 Len=0
32821 3180.390159900 192.168.68.53 104.83.4.107 TLSv1.3 837 Client Hello (SNI=assets.msn.com)
32822 3180.432429600 104.83.4.107 192.168.68.53 TLSv1.3 318 Server Hello, Change Cipher Spec, Application Data, Application Data
32823 3180.432508000 192.168.68.53 104.83.4.107 TCP 54 56847 → 443 [ACK] Seq=784 Ack=265 Win=261632 Len=0
32824 3180.436368000 192.168.68.53 104.83.4.107 TLSv1.3 134 Change Cipher Spec, Application Data
32825 3180.436575400 192.168.68.53 104.83.4.107 TLSv1.3 134 Application Data
