ARP Flooding und HTTP 1.1 im Wireshark
Hallo liebes Forum,
unsere PCs weisen alle die gleichen ARP Anfragen und HTTP 1.1 ist zu sehen. Kann man das bitte überprüfen bzw. was genau soll ich noch hier reinschreiben, dass man schauen kann was los ist?
Liebe Grüße
Koolman Code:
21037 557.853911 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.155? Tell 192.168.2.1
21038 557.853911 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.156? Tell 192.168.2.1
21039 557.853911 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.157? Tell 192.168.2.1
21040 557.853911 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.158? Tell 192.168.2.1
21041 557.853911 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.159? Tell 192.168.2.1
21042 557.853911 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.160? Tell 192.168.2.1
21043 557.853911 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.161? Tell 192.168.2.1
21044 557.853911 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.162? Tell 192.168.2.1
21045 557.853911 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.163? Tell 192.168.2.1
21046 557.853911 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.164? Tell 192.168.2.1
21047 557.853911 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.165? Tell 192.168.2.1
21048 557.853911 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.166? Tell 192.168.2.1
21049 557.854177 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.167? Tell 192.168.2.1
21050 557.865116 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.168? Tell 192.168.2.1
21051 557.865116 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.169? Tell 192.168.2.1
21052 557.865116 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.170? Tell 192.168.2.1
21053 557.865116 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.171? Tell 192.168.2.1
21054 557.865116 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.172? Tell 192.168.2.1
21055 557.865116 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.173? Tell 192.168.2.1
21056 557.865116 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.174? Tell 192.168.2.1
21057 557.865116 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.175? Tell 192.168.2.1
21058 557.865116 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.176? Tell 192.168.2.1
21059 557.865116 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.177? Tell 192.168.2.1
21060 557.865116 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.178? Tell 192.168.2.1
21061 557.865116 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.179? Tell 192.168.2.1
21062 557.865116 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.180? Tell 192.168.2.1
21063 557.865116 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.181? Tell 192.168.2.1
21064 557.865116 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.182? Tell 192.168.2.1
21065 557.865116 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.183? Tell 192.168.2.1
21066 557.865182 46:8e:cc:78:7e:72 Sercomm_79:79:ca ARP 42 192.168.2.180 is at 46:8e:cc:78:7e:72
21067 557.867288 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.185? Tell 192.168.2.1
21068 557.869517 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.186? Tell 192.168.2.1
21069 557.881427 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.187? Tell 192.168.2.1
21070 557.881427 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.188? Tell 192.168.2.1
21071 557.881427 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.189? Tell 192.168.2.1
21072 557.881427 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.190? Tell 192.168.2.1
21073 557.881427 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.191? Tell 192.168.2.1
21074 557.881427 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.192? Tell 192.168.2.1
21075 557.881427 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.193? Tell 192.168.2.1
21076 557.881427 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.194? Tell 192.168.2.1
21077 557.881427 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.195? Tell 192.168.2.1
21078 557.881427 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.196? Tell 192.168.2.1
21079 557.881427 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.197? Tell 192.168.2.1
21080 557.881427 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.198? Tell 192.168.2.1
21081 557.881427 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.199? Tell 192.168.2.1
21082 558.854279 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21083 559.512885 34.203.175.187 192.168.2.180 TCP 54 [TCP Dup ACK 42#37] 443 → 49863 [ACK] Seq=1 Ack=1 Win=8 Len=0
21084 559.512937 192.168.2.180 34.203.175.187 TCP 54 [TCP Dup ACK 43#37] 49863 → 443 [ACK] Seq=1 Ack=2 Win=260 Len=0
21085 560.075351 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21086 560.805495 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21087 560.998528 192.168.2.105 192.168.2.255 NBNS 92 Name query NB BRW30C9AB0B4EA3<00>
21088 560.998528 192.168.2.105 224.0.0.251 MDNS 81 Standard query 0x0000 A BRW30C9AB0B4EA3.local, "QM" question
21089 560.998528 fe80::1a14:397b:c0ff:2890 ff02::fb MDNS 101 Standard query 0x0000 A BRW30C9AB0B4EA3.local, "QM" question
21090 560.998528 192.168.2.105 224.0.0.251 MDNS 81 Standard query 0x0000 AAAA BRW30C9AB0B4EA3.local, "QM" question
21091 560.998528 fe80::1a14:397b:c0ff:2890 ff02::fb MDNS 101 Standard query 0x0000 AAAA BRW30C9AB0B4EA3.local, "QM" question
21092 560.998528 fe80::1a14:397b:c0ff:2890 ff02::1:3 LLMNR 95 Standard query 0xb830 A BRW30C9AB0B4EA3
21093 560.998528 192.168.2.105 224.0.0.252 LLMNR 75 Standard query 0xb830 A BRW30C9AB0B4EA3
21094 560.998528 fe80::1a14:397b:c0ff:2890 ff02::1:3 LLMNR 95 Standard query 0x63be AAAA BRW30C9AB0B4EA3
21095 560.998528 192.168.2.105 224.0.0.252 LLMNR 75 Standard query 0x63be AAAA BRW30C9AB0B4EA3
21096 561.611843 fe80::1a14:397b:c0ff:2890 ff02::1:3 LLMNR 95 Standard query 0xb830 A BRW30C9AB0B4EA3
21097 561.611843 fe80::1a14:397b:c0ff:2890 ff02::1:3 LLMNR 95 Standard query 0x63be AAAA BRW30C9AB0B4EA3
21098 561.611843 192.168.2.105 224.0.0.252 LLMNR 75 Standard query 0x63be AAAA BRW30C9AB0B4EA3
21099 561.611843 192.168.2.105 224.0.0.252 LLMNR 75 Standard query 0xb830 A BRW30C9AB0B4EA3
21100 561.918821 192.168.2.105 192.168.2.255 NBNS 92 Name query NB BRW30C9AB0B4EA3<00>
21101 561.918821 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21102 562.226266 192.168.2.105 224.0.0.251 MDNS 81 Standard query 0x0000 AAAA BRW30C9AB0B4EA3.local, "QM" question
21103 562.226266 fe80::1a14:397b:c0ff:2890 ff02::fb MDNS 101 Standard query 0x0000 AAAA BRW30C9AB0B4EA3.local, "QM" question
21104 562.226266 192.168.2.105 224.0.0.251 MDNS 81 Standard query 0x0000 A BRW30C9AB0B4EA3.local, "QM" question
21105 562.226266 fe80::1a14:397b:c0ff:2890 ff02::fb MDNS 101 Standard query 0x0000 A BRW30C9AB0B4EA3.local, "QM" question
21106 562.532731 192.168.2.105 192.168.2.255 NBNS 92 Name query NB BRW30C9AB0B4EA3<00>
21107 563.147523 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21108 563.881975 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21109 564.990650 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21110 572.064478 fe80::162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fe80::2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21111 572.064557 fe80::2314:508f:2d41:9410 fe80::162e:5eff:fe79:79ca ICMPv6 86 Neighbor Advertisement fe80::2314:508f:2d41:9410 (sol, ovr) is at 46:8e:cc:78:7e:72
21112 572.068883 fe80::162e:5eff:fe79:79ca fe80::2314:508f:2d41:9410 ICMPv6 128 Echo (ping) request id=0xeb35, seq=1, hop limit=64 (reply in 21113)
21113 572.069039 fe80::2314:508f:2d41:9410 fe80::162e:5eff:fe79:79ca ICMPv6 128 Echo (ping) reply id=0xeb35, seq=1, hop limit=64 (request in 21112)
21114 574.617260 34.203.175.187 192.168.2.180 TCP 54 [TCP Dup ACK 42#38] 443 → 49863 [ACK] Seq=1 Ack=1 Win=8 Len=0
21115 574.617281 192.168.2.180 34.203.175.187 TCP 54 [TCP Dup ACK 43#38] 49863 → 443 [ACK] Seq=1 Ack=2 Win=260 Len=0
21116 576.873434 fe80::2314:508f:2d41:9410 fe80::162e:5eff:fe79:79ca ICMPv6 86 Neighbor Solicitation for fe80::162e:5eff:fe79:79ca from 46:8e:cc:78:7e:72
21117 576.876830 fe80::162e:5eff:fe79:79ca fe80::2314:508f:2d41:9410 ICMPv6 78 Neighbor Advertisement fe80::162e:5eff:fe79:79ca (rtr, sol)
21118 577.821326 fe80::2314:508f:2d41:9410 ff02::c UDP 718 51228 → 3702 Len=656
21119 577.821958 192.168.2.180 239.255.255.250 UDP 698 51227 → 3702 Len=656
21120 577.992044 192.168.2.180 239.255.255.250 UDP 698 51227 → 3702 Len=656
21121 578.070601 fe80::2314:508f:2d41:9410 ff02::c UDP 718 51228 → 3702 Len=656
21122 578.321579 192.168.2.180 239.255.255.250 UDP 698 51227 → 3702 Len=656
21123 578.568432 fe80::2314:508f:2d41:9410 ff02::c UDP 718 51228 → 3702 Len=656
21124 578.986875 192.168.2.180 239.255.255.250 UDP 698 51227 → 3702 Len=656
21125 579.560755 fe80::2314:508f:2d41:9410 ff02::c UDP 718 51228 → 3702 Len=656
21126 580.307822 192.168.2.180 239.255.255.250 UDP 698 51227 → 3702 Len=656
21127 581.541362 fe80::2314:508f:2d41:9410 ff02::c UDP 718 51228 → 3702 Len=656
21128 582.312688 192.168.2.180 239.255.255.250 UDP 698 51227 → 3702 Len=656
21129 582.502799 192.168.2.182 192.168.2.255 BROWSER 255 Local Master Announcement HPB7243D, Workstation, Server, Print Queue Server, Xenix Server, NT Workstation, NT Server, Master Browser, DFS server
21130 582.502799 192.168.2.182 192.168.2.255 BROWSER 251 Domain/Workgroup Announcement WORKGROUP, NT Workstation, Domain Enum
21131 583.549771 fe80::2314:508f:2d41:9410 ff02::c UDP 718 51228 → 3702 Len=656
21132 583.985621 192.168.2.180 23.35.238.131 TCP 55 [TCP Keep-Alive] 50201 → 443 [ACK] Seq=1054 Ack=7109 Win=66560 Len=1
21133 583.998655 23.35.238.131 192.168.2.180 TCP 66 [TCP Keep-Alive ACK] 443 → 50201 [ACK] Seq=7109 Ack=1055 Win=64128 Len=0 SLE=1054 SRE=1055
21134 584.196891 13.107.21.239 192.168.2.180 TCP 54 443 → 50262 [RST, ACK] Seq=7053 Ack=1531 Win=0 Len=0
21135 584.313720 192.168.2.180 239.255.255.250 UDP 698 51227 → 3702 Len=656
21136 585.556416 fe80::2314:508f:2d41:9410 ff02::c UDP 718 51228 → 3702 Len=656
21137 587.117055 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21138 587.819894 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.100? Tell 192.168.2.1
21139 587.819894 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.101? Tell 192.168.2.1
21140 587.819894 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.102? Tell 192.168.2.1
21141 587.819894 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.103? Tell 192.168.2.1
21142 587.819894 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.104? Tell 192.168.2.1
21143 587.819894 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.105? Tell 192.168.2.1
21144 587.819894 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.106? Tell 192.168.2.1
21145 587.819894 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.107? Tell 192.168.2.1
21146 587.819894 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.108? Tell 192.168.2.1
21147 587.819894 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.109? Tell 192.168.2.1
21148 587.819894 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.110? Tell 192.168.2.1
21149 587.819894 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.111? Tell 192.168.2.1
21150 587.819894 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.112? Tell 192.168.2.1
21151 587.819894 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.113? Tell 192.168.2.1
21152 587.819894 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.114? Tell 192.168.2.1
21153 587.830103 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.115? Tell 192.168.2.1
21154 587.830103 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.116? Tell 192.168.2.1
21155 587.830103 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.117? Tell 192.168.2.1
21156 587.830103 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.118? Tell 192.168.2.1
21157 587.830103 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.119? Tell 192.168.2.1
21158 587.830103 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.120? Tell 192.168.2.1
21159 587.830103 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.121? Tell 192.168.2.1
21160 587.830103 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.122? Tell 192.168.2.1
21161 587.830103 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.123? Tell 192.168.2.1
21162 587.830103 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.124? Tell 192.168.2.1
21163 587.830103 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.125? Tell 192.168.2.1
21164 587.830103 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.126? Tell 192.168.2.1
21165 587.830103 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.127? Tell 192.168.2.1
21166 587.830103 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.128? Tell 192.168.2.1
21167 587.830103 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.129? Tell 192.168.2.1
21168 587.833525 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.130? Tell 192.168.2.1
21169 587.833525 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.131? Tell 192.168.2.1
21170 587.833525 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.132? Tell 192.168.2.1
21171 587.833525 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.133? Tell 192.168.2.1
21172 587.833525 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.134? Tell 192.168.2.1
21173 587.833525 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.135? Tell 192.168.2.1
21174 587.833525 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.136? Tell 192.168.2.1
21175 587.844312 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.137? Tell 192.168.2.1
21176 587.844312 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.138? Tell 192.168.2.1
21177 587.844312 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.139? Tell 192.168.2.1
21178 587.844312 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.140? Tell 192.168.2.1
21179 587.844312 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.141? Tell 192.168.2.1
21180 587.844312 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.142? Tell 192.168.2.1
21181 587.844312 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.143? Tell 192.168.2.1
21182 587.844312 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.144? Tell 192.168.2.1
21183 587.844312 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.145? Tell 192.168.2.1
21184 587.844312 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.146? Tell 192.168.2.1
21185 587.844312 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.147? Tell 192.168.2.1
21186 587.844312 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.148? Tell 192.168.2.1
21187 587.844312 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.149? Tell 192.168.2.1
21188 587.844312 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.150? Tell 192.168.2.1
21189 587.855114 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.151? Tell 192.168.2.1
21190 587.855114 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.152? Tell 192.168.2.1
21191 587.855114 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.153? Tell 192.168.2.1
21192 587.855114 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.154? Tell 192.168.2.1
21193 587.855114 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.155? Tell 192.168.2.1
21194 587.855114 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.156? Tell 192.168.2.1
21195 587.855114 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.157? Tell 192.168.2.1
21196 587.855114 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.158? Tell 192.168.2.1
21197 587.855114 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.159? Tell 192.168.2.1
21198 587.855114 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.160? Tell 192.168.2.1
21199 587.855114 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.161? Tell 192.168.2.1
21200 587.855114 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.162? Tell 192.168.2.1
21201 587.855114 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.163? Tell 192.168.2.1
21202 587.855114 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.164? Tell 192.168.2.1
21203 587.855114 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.165? Tell 192.168.2.1
21204 587.865551 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.166? Tell 192.168.2.1
21205 587.865551 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.167? Tell 192.168.2.1
21206 587.865551 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.168? Tell 192.168.2.1
21207 587.865551 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.169? Tell 192.168.2.1
21208 587.865551 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.170? Tell 192.168.2.1
21209 587.865551 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.171? Tell 192.168.2.1
21210 587.865551 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.172? Tell 192.168.2.1
21211 587.865551 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.173? Tell 192.168.2.1
21212 587.865551 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.174? Tell 192.168.2.1
21213 587.865551 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.175? Tell 192.168.2.1
21214 587.865551 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.176? Tell 192.168.2.1
21215 587.865551 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.177? Tell 192.168.2.1
21216 587.865551 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.178? Tell 192.168.2.1
21217 587.865551 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.179? Tell 192.168.2.1
21218 587.876203 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.180? Tell 192.168.2.1
21219 587.876203 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.181? Tell 192.168.2.1
21220 587.876203 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.182? Tell 192.168.2.1
21221 587.876203 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21222 587.876203 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.183? Tell 192.168.2.1
21223 587.876203 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.184? Tell 192.168.2.1
21224 587.876203 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.185? Tell 192.168.2.1
21225 587.876203 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.186? Tell 192.168.2.1
21226 587.876203 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.187? Tell 192.168.2.1
21227 587.876203 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.188? Tell 192.168.2.1
21228 587.876203 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.189? Tell 192.168.2.1
21229 587.876203 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.190? Tell 192.168.2.1
21230 587.876203 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.191? Tell 192.168.2.1
21231 587.876269 46:8e:cc:78:7e:72 Sercomm_79:79:ca ARP 42 192.168.2.180 is at 46:8e:cc:78:7e:72
21232 587.876642 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.192? Tell 192.168.2.1
21233 587.877011 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.193? Tell 192.168.2.1
21234 587.882728 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.194? Tell 192.168.2.1
21235 587.882728 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.195? Tell 192.168.2.1
21236 587.882728 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.196? Tell 192.168.2.1
21237 587.882728 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.197? Tell 192.168.2.1
21238 587.882728 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.198? Tell 192.168.2.1
21239 587.882728 Sercomm_79:79:ca Broadcast ARP 60 Who has 192.168.2.199? Tell 192.168.2.1
21240 588.952787 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21241 589.717300 34.203.175.187 192.168.2.180 TCP 54 [TCP Dup ACK 42#39] 443 → 49863 [ACK] Seq=1 Ack=1 Win=8 Len=0
21242 589.717370 192.168.2.180 34.203.175.187 TCP 54 [TCP Dup ACK 43#39] 49863 → 443 [ACK] Seq=1 Ack=2 Win=260 Len=0
21243 590.181733 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21244 590.892820 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21245 590.996779 13.107.21.239 192.168.2.180 TCP 54 443 → 50263 [RST, ACK] Seq=6358 Ack=1037 Win=0 Len=0
21246 592.024877 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21247 592.946603 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21248 593.911949 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21249 594.094659 192.168.2.180 192.168.2.1 DNS 70 Standard query 0xcb0e A wpad.local
21250 594.094692 192.168.2.180 192.168.2.1 DNS 70 Standard query 0xcbbc A wpad.local
21251 594.094811 192.168.2.180 192.168.2.1 DNS 70 Standard query 0x4048 AAAA wpad.local
21252 594.094821 192.168.2.180 192.168.2.1 DNS 70 Standard query 0x7126 AAAA wpad.local
21253 594.097815 192.168.2.1 192.168.2.180 DNS 70 Standard query response 0xcb0e No such name A wpad.local
21254 594.098844 192.168.2.1 192.168.2.180 DNS 70 Standard query response 0xcbbc No such name A wpad.local
21255 594.100867 192.168.2.1 192.168.2.180 DNS 70 Standard query response 0x4048 No such name AAAA wpad.local
21256 594.101790 192.168.2.1 192.168.2.180 DNS 70 Standard query response 0x7126 No such name AAAA wpad.local
21257 594.179684 192.168.2.183 239.255.255.250 SSDP 775 NOTIFY * HTTP/1.1
21258 594.179684 192.168.2.183 255.255.255.255 SSDP 775 NOTIFY * HTTP/1.1
21259 594.486740 192.168.2.183 239.255.255.250 SSDP 828 NOTIFY * HTTP/1.1
21260 594.486740 192.168.2.183 255.255.255.255 SSDP 828 NOTIFY * HTTP/1.1
21261 594.791554 192.168.2.183 239.255.255.250 SSDP 778 NOTIFY * HTTP/1.1
21262 594.791554 192.168.2.183 255.255.255.255 SSDP 778 NOTIFY * HTTP/1.1
21263 595.098102 192.168.2.183 239.255.255.250 SSDP 781 NOTIFY * HTTP/1.1
21264 595.098102 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21265 595.407940 192.168.2.183 239.255.255.250 SSDP 833 NOTIFY * HTTP/1.1
21266 595.407940 192.168.2.183 239.255.255.250 SSDP 781 NOTIFY * HTTP/1.1
21267 595.712092 192.168.2.183 239.255.255.250 SSDP 837 NOTIFY * HTTP/1.1
21268 596.019323 192.168.2.183 239.255.255.250 SSDP 830 NOTIFY * HTTP/1.1
21269 596.326974 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21270 596.326974 192.168.2.183 239.255.255.250 SSDP 836 NOTIFY * HTTP/1.1
21271 596.634884 192.168.2.183 239.255.255.250 SSDP 842 NOTIFY * HTTP/1.1
21272 596.634884 192.168.2.183 239.255.255.250 SSDP 842 NOTIFY * HTTP/1.1
21273 596.943310 192.168.2.183 239.255.255.250 SSDP 844 NOTIFY * HTTP/1.1
21274 596.943310 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21275 597.118811 192.168.2.183 239.255.255.250 SSDP 840 NOTIFY * HTTP/1.1
21276 597.555283 192.168.2.183 239.255.255.250 SSDP 826 NOTIFY * HTTP/1.1
21277 597.862543 192.168.2.183 239.255.255.250 SSDP 845 NOTIFY * HTTP/1.1
21278 598.171477 192.168.2.183 239.255.255.250 SSDP 847 NOTIFY * HTTP/1.1
21279 598.171477 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ff41:9410 ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:2314:508f:2d41:9410 from 14:2e:5e:79:79:ca
21280 598.171477 192.168.2.183 239.255.255.250 SSDP 845 NOTIFY * HTTP/1.1
21281 598.476909 192.168.2.183 239.255.255.250 SSDP 847 NOTIFY * HTTP/1.1
21282 598.784131 192.168.2.183 239.255.255.250 SSDP 835 NOTIFY * HTTP/1.1
21283 599.091306 192.168.2.183 239.255.255.250 SSDP 825 NOTIFY * HTTP/1.1
21284 599.399784 192.168.2.183 239.255.255.250 SSDP 855 NOTIFY * HTTP/1.1
21285 599.399784 192.168.2.183 239.255.255.250 SSDP 839 NOTIFY * HTTP/1.1
21286 602.163507 fdee:569e:153:1:162e:5eff:fe79:79ca ff02::1:ffef:103e ICMPv6 86 Neighbor Solicitation for fdee:569e:153:1:b0a2:3501:bfef:103e from 14:2e:5e:79:79:ca
21287 602.163689 fdee:569e:153:1:b0a2:3501:bfef:103e fdee:569e:153:1:162e:5eff:fe79:79ca ICMPv6 86 Neighbor Advertisement fdee:569e:153:1:b0a2:3501:bfef:103e (sol, ovr) is at 46:8e:cc:78:7e:72
21288 602.167861 fdee:569e:153:1:162e:5eff:fe79:79ca fdee:569e:153:1:b0a2:3501:bfef:103e ICMPv6 128 Echo (ping) request id=0xf27b, seq=1, hop limit=64 (reply in 21289)
21289 602.168047 fdee:569e:153:1:b0a2:3501:bfef:103e fdee:569e:153:1:162e:5eff:fe79:79ca ICMPv6 128 Echo (ping) reply id=0xf27b, seq=1, hop limit=64 (request in 21288)
21290 602.393078 192.168.2.180 40.113.110.67 TLSv1.2 154 Application Data
21291 602.409655 40.113.110.67 192.168.2.180 TLSv1.2 225 Application Data
21292 602.454304 192.168.2.180 40.113.110.67 TCP 54 49732 → 443 [ACK] Seq=1653 Ack=2565 Win=516 Len=0
21293 603.835216 192.168.2.180 192.168.2.1 DNS 87 Standard query 0x6bce AAAA api.edgeoffer.microsoft.com
21294 603.835367 192.168.2.180 192.168.2.1 DNS 87 Standard query 0x2099 A api.edgeoffer.microsoft.com
21295 603.835443 192.168.2.180 192.168.2.1 DNS 87 Standard query 0x4c8b HTTPS api.edgeoffer.microsoft.com
21296 603.849181 192.168.2.1 192.168.2.180 DNS 285 Standard query response 0x6bce AAAA api.edgeoffer.microsoft.com CNAME bingadsedgeextension-prod.trafficmanager.net CNAME bingadsedgeextension-prod-europe.azurewebsites.net CNAME ssl.bingadsedgeextension-prod-europe.azurewebsites.net SOA ns1-224.azure-dns.com
21297 603.849181 192.168.2.1 192.168.2.180 DNS 240 Standard query response 0x2099 A api.edgeoffer.microsoft.com CNAME bingadsedgeextension-prod.trafficmanager.net CNAME bingadsedgeextension-prod-europe.azurewebsites.net CNAME ssl.bingadsedgeextension-prod-europe.azurewebsites.net A 94.245.104.56
21298 603.850917 192.168.2.1 192.168.2.180 DNS 285 Standard query response 0x4c8b HTTPS api.edgeoffer.microsoft.com CNAME bingadsedgeextension-prod.trafficmanager.net CNAME bingadsedgeextension-prod-europe.azurewebsites.net CNAME ssl.bingadsedgeextension-prod-europe.azurewebsites.net SOA ns1-224.azure-dns.com
21299 603.851160 192.168.2.180 23.35.238.131 TCP 54 50201 → 443 [FIN, ACK] Seq=1055 Ack=7109 Win=66560 Len=0
21300 603.851358 192.168.2.180 94.245.104.56 TCP 66 50277 → 443 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
21301 603.856112 192.168.2.180 192.168.2.1 DNS 69 Standard query 0x7090 AAAA google.de
21302 603.856305 192.168.2.180 192.168.2.1 DNS 69 Standard query 0x7313 A google.de
21303 603.866780 23.35.238.131 192.168.2.180 TLSv1.3 78 Application Data
21304 603.866780 23.35.238.131 192.168.2.180 TCP 54 443 → 50201 [FIN, ACK] Seq=7133 Ack=1056 Win=64128 Len=0
21305 603.866818 192.168.2.180 23.35.238.131 TCP 54 50201 → 443 [RST, ACK] Seq=1056 Ack=7133 Win=0 Len=0
21306 603.869404 192.168.2.1 192.168.2.180 DNS 97 Standard query response 0x7090 AAAA google.de AAAA 2a00:1450:4001:812::2003
21307 603.870798 192.168.2.1 192.168.2.180 DNS 85 Standard query response 0x7313 A google.de A 142.250.185.195
21308 603.881581 94.245.104.56 192.168.2.180 TCP 66 443 → 50277 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1440 WS=256 SACK_PERM
21309 603.881653 192.168.2.180 94.245.104.56 TCP 54 50277 → 443 [ACK] Seq=1 Ack=1 Win=66048 Len=0
21310 603.881865 192.168.2.180 94.245.104.56 TLSv1.3 665 Client Hello (SNI=api.edgeoffer.microsoft.com)
21311 603.899750 192.168.2.180 192.168.2.1 DNS 77 Standard query 0x1140 AAAA business.bing.com
21312 603.899898 192.168.2.180 192.168.2.1 DNS 77 Standard query 0x5362 A business.bing.com
21313 603.899975 192.168.2.180 192.168.2.1 DNS 77 Standard query 0x991f HTTPS business.bing.com
21314 603.904412 192.168.2.180 192.168.2.1 DNS 69 Standard query 0xc7dd AAAA google.de
21315 603.904594 192.168.2.180 192.168.2.1 DNS 69 Standard query 0xeaef A google.de
21316 603.904682 192.168.2.180 192.168.2.1 DNS 69 Standard query 0xfa5b HTTPS google.de
21317 603.907446 192.168.2.1 192.168.2.180 DNS 97 Standard query response 0xc7dd AAAA google.de AAAA 2a00:1450:4001:812::2003
21318 603.907612 192.168.2.1 192.168.2.180 DNS 85 Standard query response 0xeaef A google.de A 142.250.185.195
21319 603.911989 94.245.104.56 192.168.2.180 TLSv1.3 153 Hello Retry Request, Change Cipher Spec
21320 603.912818 192.168.2.180 94.245.104.56 TLSv1.3 731 Change Cipher Spec, Client Hello (SNI=api.edgeoffer.microsoft.com)
21321 603.914791 192.168.2.1 192.168.2.180 DNS 185 Standard query response 0x991f HTTPS business.bing.com CNAME business-bing-com.b-0005.b-msedge.net SOA ns1.b-msedge.net
21322 603.915278 fdee:569e:153:1:b0a2:3501:bfef:103e 2a00:1450:4001:812::2003 TCP 86 50278 → 80 [SYN] Seq=0 Win=64800 Len=0 MSS=1440 WS=256 SACK_PERM
21323 603.915430 fdee:569e:153:1:b0a2:3501:bfef:103e 2a00:1450:4001:812::2003 TCP 86 50279 → 80 [SYN] Seq=0 Win=64800 Len=0 MSS=1440 WS=256 SACK_PERM
21324 603.918159 fdee:569e:153:1:162e:5eff:fe79:79ca fdee:569e:153:1:b0a2:3501:bfef:103e ICMPv6 134 Destination Unreachable (no route to destination)
21325 603.919146 fdee:569e:153:1:162e:5eff:fe79:79ca fdee:569e:153:1:b0a2:3501:bfef:103e ICMPv6 134 Destination Unreachable (no route to destination)
21326 603.919907 192.168.2.1 192.168.2.180 DNS 199 Standard query response 0x1140 AAAA business.bing.com CNAME business-bing-com.b-0005.b-msedge.net CNAME b-0005.b-msedge.net SOA ns1.b-msedge.net
21327 603.921420 192.168.2.1 192.168.2.180 DNS 158 Standard query response 0x5362 A business.bing.com CNAME business-bing-com.b-0005.b-msedge.net CNAME b-0005.b-msedge.net A 13.107.6.158
21328 603.921801 192.168.2.180 13.107.6.158 TCP 66 50280 → 443 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
21329 603.921806 192.168.2.1 192.168.2.180 DNS 129 Standard query response 0xfa5b HTTPS google.de SOA ns1.google.com
21330 603.936711 13.107.6.158 192.168.2.180 TCP 66 443 → 50280 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1440 WS=256 SACK_PERM
21331 603.936773 192.168.2.180 13.107.6.158 TCP 54 50280 → 443 [ACK] Seq=1 Ack=1 Win=66048 Len=0
21332 603.936968 192.168.2.180 13.107.6.158 TLSv1.2 591 Client Hello (SNI=business.bing.com)
21333 603.947446 192.168.2.180 192.168.2.1 DNS 73 Standard query 0xeba5 AAAA www.google.de
21334 603.947629 192.168.2.180 192.168.2.1 DNS 73 Standard query 0x8aea A www.google.de
21335 603.947940 94.245.104.56 192.168.2.180 TLSv1.3 1506 Server Hello
21336 603.948734 94.245.104.56 192.168.2.180 TCP 1506 443 → 50277 [ACK] Seq=1552 Ack=1289 Win=4193536 Len=1452 [TCP segment of a reassembled PDU]
21337 603.948766 192.168.2.180 94.245.104.56 TCP 54 50277 → 443 [ACK] Seq=1289 Ack=3004 Win=66048 Len=0
21338 603.949659 94.245.104.56 192.168.2.180 TCP 1506 443 → 50277 [ACK] Seq=3004 Ack=1289 Win=4193536 Len=1452 [TCP segment of a reassembled PDU]
21339 603.950308 94.245.104.56 192.168.2.180 TCP 1506 443 → 50277 [ACK] Seq=4456 Ack=1289 Win=4193536 Len=1452 [TCP segment of a reassembled PDU]
21340 603.950331 192.168.2.180 94.245.104.56 TCP 54 50277 → 443 [ACK] Seq=1289 Ack=5908 Win=66048 Len=0
21341 603.951684 94.245.104.56 192.168.2.180 TLSv1.3 287 Application Data
21342 603.952557 13.107.6.158 192.168.2.180 TCP 54 443 → 50280 [ACK] Seq=1 Ack=538 Win=4194048 Len=0
21343 603.954507 13.107.6.158 192.168.2.180 TCP 1506 443 → 50280 [ACK] Seq=1 Ack=538 Win=4194048 Len=1452 [TCP segment of a reassembled PDU]
21344 603.954507 13.107.6.158 192.168.2.180 TCP 1506 [TCP Previous segment not captured] 443 → 50280 [ACK] Seq=2905 Ack=538 Win=4194048 Len=1452 [TCP segment of a reassembled PDU]
21345 603.954543 192.168.2.180 13.107.6.158 TCP 66 50280 → 443 [ACK] Seq=538 Ack=1453 Win=66048 Len=0 SLE=2905 SRE=4357
21346 603.955755 13.107.6.158 192.168.2.180 TCP 1506 [TCP Out-Of-Order] 443 → 50280 [ACK] Seq=1453 Ack=538 Win=4194048 Len=1452 [TCP segment of a reassembled PDU]
21347 603.955755 13.107.6.158 192.168.2.180 TCP 2958 443 → 50280 [ACK] Seq=4357 Ack=538 Win=4194048 Len=2904 [TCP segment of a reassembled PDU]
21348 603.955793 192.168.2.180 13.107.6.158 TCP 54 50280 → 443 [ACK] Seq=538 Ack=4357 Win=66048 Len=0
21349 603.955829 192.168.2.180 13.107.6.158 TCP 54 50280 → 443 [ACK] Seq=538 Ack=7261 Win=66048 Len=0
21350 603.956607 13.107.6.158 192.168.2.180 TLSv1.2 57 Server Hello, Certificate, Certificate Status, Server Key Exchange, Server Hello Done
21351 603.956648 192.168.2.180 13.107.6.158 TCP 54 50280 → 443 [ACK] Seq=538 Ack=7264 Win=66048 Len=0
21352 603.959490 192.168.2.180 192.168.2.1 DNS 73 Standard query 0xfebd AAAA www.google.de
21353 603.959605 192.168.2.180 192.168.2.1 DNS 73 Standard query 0x03d5 A www.google.de
21354 603.959685 192.168.2.180 192.168.2.1 DNS 73 Standard query 0x5857 HTTPS www.google.de
21355 603.962313 192.168.2.1 192.168.2.180 DNS 101 Standard query response 0xeba5 AAAA www.google.de AAAA 2a00:1450:4001:809::2003
21356 603.963286 192.168.2.1 192.168.2.180 DNS 101 Standard query response 0xfebd AAAA www.google.de AAAA 2a00:1450:4001:809::2003
21357 603.965480 192.168.2.1 192.168.2.180 DNS 89 Standard query response 0x8aea A www.google.de A 172.217.18.99
21358 603.965789 192.168.2.1 192.168.2.180 DNS 89 Standard query response 0x03d5 A www.google.de A 172.217.18.99
21359 603.974652 192.168.2.1 192.168.2.180 DNS 142 Standard query response 0x5857 HTTPS www.google.de HTTPS A 172.217.18.99 AAAA 2a00:1450:4001:809::2003
21360 603.975676 192.168.2.180 172.217.18.99 QUIC 1292 Initial, DCID=f00c94dba977c66f, PKN: 1, PING, CRYPTO, CRYPTO, PADDING, PING, PADDING, CRYPTO, PING, PING, CRYPTO, PADDING, PING, PING, PADDING, PING, PADDING, CRYPTO, PADDING, PING, PADDING, CRYPTO, PADDING, CRYPTO
21361 603.984527 192.168.2.180 94.245.104.56 TLSv1.3 128 Application Data
21362 603.984805 192.168.2.180 94.245.104.56 TLSv1.3 521 Application Data
21363 603.987052 192.168.2.180 13.107.6.158 TLSv1.2 212 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message
21364 603.987656 192.168.2.180 192.168.2.1 DNS 73 Standard query 0xe7a1 AAAA www.google.de
21365 603.987783 192.168.2.180 192.168.2.1 DNS 73 Standard query 0xaa7b A www.google.de
21366 603.987849 192.168.2.180 13.107.6.158 TLSv1.2 153 Application Data
21367 603.987988 192.168.2.180 13.107.6.158 TLSv1.2 978 Application Data
21368 603.988012 192.168.2.180 13.107.6.158 TLSv1.2 160 Application Data
21369 603.990445 192.168.2.1 192.168.2.180 DNS 101 Standard query response 0xe7a1 AAAA www.google.de AAAA 2a00:1450:4001:809::2003
21370 603.991465 192.168.2.1 192.168.2.180 DNS 89 Standard query response 0xaa7b A www.google.de A 172.217.18.99
21371 603.993771 172.217.18.99 192.168.2.180 QUIC 1292 Initial, SCID=f00c94dba977c66f, PKN: 1, ACK, CRYPTO, PADDING
21372 604.000694 172.217.18.99 192.168.2.180 QUIC 1292 Handshake, SCID=f00c94dba977c66f
21373 604.000825 192.168.2.180 172.217.18.99 QUIC 1292 Initial, DCID=f00c94dba977c66f, PKN: 2, ACK, PADDING
21374 604.001021 fdee:569e:153:1:b0a2:3501:bfef:103e 2a00:1450:4001:809::2003 TCP 86 50281 → 443 [SYN] Seq=0 Win=64800 Len=0 MSS=1440 WS=256 SACK_PERM
21375 604.001149 172.217.18.99 192.168.2.180 QUIC 1292 Handshake, SCID=f00c94dba977c66f
21376 604.001211 192.168.2.180 172.217.18.99 QUIC 81 Handshake, DCID=f00c94dba977c66f
21377 604.001483 13.107.6.158 192.168.2.180 TCP 54 443 → 50280 [ACK] Seq=7264 Ack=696 Win=4194048 Len=0
21378 604.002271 13.107.6.158 192.168.2.180 TLSv1.2 396 New Session Ticket, Change Cipher Spec, Encrypted Handshake Message
21379 604.002512 13.107.6.158 192.168.2.180 TLSv1.2 123 Application Data
21380 604.002521 192.168.2.180 13.107.6.158 TCP 54 50280 → 443 [ACK] Seq=1825 Ack=7675 Win=65792 Len=0
21381 604.002576 192.168.2.180 13.107.6.158 TLSv1.2 92 Application Data
21382 604.002991 13.107.6.158 192.168.2.180 TCP 54 443 → 50280 [ACK] Seq=7675 Ack=795 Win=4193792 Len=0
21383 604.003752 13.107.6.158 192.168.2.180 TLSv1.2 92 Application Data
21384 604.006623 fdee:569e:153:1:162e:5eff:fe79:79ca fdee:569e:153:1:b0a2:3501:bfef:103e ICMPv6 134 Destination Unreachable (no route to destination)
21385 604.012625 94.245.104.56 192.168.2.180 TLSv1.3 157 Application Data
21386 604.013815 94.245.104.56 192.168.2.180 TCP 54 443 → 50277 [ACK] Seq=6244 Ack=1830 Win=4194816 Len=0
21387 604.013815 13.107.6.158 192.168.2.180 TLSv1.2 1110 Application Data
21388 604.013863 192.168.2.180 13.107.6.158 TCP 54 50280 → 443 [ACK] Seq=1863 Ack=8769 Win=66048 Len=0
21389 604.014572 13.107.6.158 192.168.2.180 TLSv1.2 93 Application Data
21390 604.014572 13.107.6.158 192.168.2.180 TLSv1.2 92 Application Data
21391 604.014621 192.168.2.180 13.107.6.158 TCP 54 50280 → 443 [ACK] Seq=1863 Ack=8846 Win=66048 Len=0
21392 604.015538 94.245.104.56 192.168.2.180 TLSv1.3 715 Application Data
21393 604.015538 94.245.104.56 192.168.2.180 TLSv1.3 81 Application Data
21394 604.015549 192.168.2.180 192.168.2.1 DNS 79 Standard query 0x46d6 AAAA bzib.nelreports.net
21395 604.015572 192.168.2.180 94.245.104.56 TCP 54 50277 → 443 [ACK] Seq=1830 Ack=6932 Win=65024 Len=0
21396 604.015717 192.168.2.180 192.168.2.1 DNS 79 Standard query 0x13f4 A bzib.nelreports.net
21397 604.015806 192.168.2.180 192.168.2.1 DNS 79 Standard query 0xb166 HTTPS bzib.nelreports.net
21398 604.020136 13.107.6.158 192.168.2.180 TCP 54 443 → 50280 [ACK] Seq=8846 Ack=1863 Win=4194560 Len=0
21399 604.021350 172.217.18.99 192.168.2.180 QUIC 1285 Protected Payload (KP0)
21400 604.023687 192.168.2.180 172.217.18.99 QUIC 82 Handshake, DCID=f00c94dba977c66f
21401 604.024020 192.168.2.180 172.217.18.99 QUIC 125 Handshake, DCID=f00c94dba977c66f
21402 604.024117 192.168.2.180 172.217.18.99 QUIC 113 Protected Payload (KP0), DCID=f00c94dba977c66f
21403 604.024386 192.168.2.180 172.217.18.99 QUIC 1288 Protected Payload (KP0), DCID=f00c94dba977c66f
21404 604.024404 192.168.2.180 172.217.18.99 QUIC 591 Protected Payload (KP0), DCID=f00c94dba977c66f
21405 604.027645 192.168.2.1 192.168.2.180 DNS 210 Standard query response 0x46d6 AAAA bzib.nelreports.net CNAME bzib.nelreports.net.akamaized.net CNAME a416.dscd.akamai.net AAAA 2a02:26f0:e600::687c:b13 AAAA 2a02:26f0:e600::687c:b20
21406 604.029376 192.168.2.1 192.168.2.180 DNS 186 Standard query response 0x13f4 A bzib.nelreports.net CNAME bzib.nelreports.net.akamaized.net CNAME a416.dscd.akamai.net A 23.48.23.26 A 23.48.23.51
21407 604.031076 192.168.2.1 192.168.2.180 DNS 218 Standard query response 0xb166 HTTPS bzib.nelreports.net CNAME bzib.nelreports.net.akamaized.net CNAME a416.dscd.akamai.net SOA n0dscd.akamai.net
21408 604.031449 fdee:569e:153:1:b0a2:3501:bfef:103e 2a02:26f0:e600::687c:b13 TCP 86 50282 → 443 [SYN] Seq=0 Win=64800 Len=0 MSS=1440 WS=256 SACK_PERM
21409 604.033554 fdee:569e:153:1:162e:5eff:fe79:79ca fdee:569e:153:1:b0a2:3501:bfef:103e ICMPv6 134 Destination Unreachable (no route to destination)
21410 604.039367 172.217.18.99 192.168.2.180 QUIC 980 Protected Payload (KP0)
21411 604.039511 172.217.18.99 192.168.2.180 QUIC 163 Protected Payload (KP0)
21412 604.039564 192.168.2.180 172.217.18.99 QUIC 74 Protected Payload (KP0), DCID=f00c94dba977c66f
21413 604.041012 172.217.18.99 192.168.2.180 QUIC 65 Protected Payload (KP0)
21414 604.043006 172.217.18.99 192.168.2.180 QUIC 69 Protected Payload (KP0)
21415 604.072432 192.168.2.180 172.217.18.99 QUIC 74 Protected Payload (KP0), DCID=f00c94dba977c66f
21416 604.089948 13.107.6.158 192.168.2.180 TLSv1.2 213 Application Data
21417 604.133516 192.168.2.180 13.107.6.158 TCP 54 50280 → 443 [ACK] Seq=1863 Ack=9005 Win=65792 Len=0
21418 604.191123 172.217.18.99 192.168.2.180 QUIC 1288 Protected Payload (KP0)
21419 604.191254 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21420 604.191323 192.168.2.180 172.217.18.99 QUIC 77 Protected Payload (KP0), DCID=f00c94dba977c66f
21421 604.191696 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21422 604.191785 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21423 604.192189 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21424 604.192352 172.217.18.99 192.168.2.180 QUIC 78 Protected Payload (KP0)
21425 604.192352 172.217.18.99 192.168.2.180 QUIC 175 Protected Payload (KP0)
21426 604.192426 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21427 604.198007 172.217.18.99 192.168.2.180 QUIC 1287 Protected Payload (KP0)
21428 604.198152 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21429 604.198411 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21430 604.199159 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21431 604.199212 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21432 604.199678 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21433 604.199959 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21434 604.200042 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21435 604.200836 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21436 604.201158 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21437 604.201223 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21438 604.202072 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21439 604.202072 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21440 604.202072 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21441 604.202175 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21442 604.203500 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21443 604.203633 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21444 604.204510 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21445 604.204984 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21446 604.205069 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21447 604.205284 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21448 604.205748 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21449 604.205805 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21450 604.206071 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21451 604.206897 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21452 604.206974 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21453 604.207213 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21454 604.207693 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21455 604.207743 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21456 604.209982 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21457 604.210934 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21458 604.210991 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21459 604.211250 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21460 604.212106 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21461 604.212159 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21462 604.212423 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21463 604.212938 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21464 604.213016 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21465 604.213542 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21466 604.213846 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21467 604.213884 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21468 604.215456 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21469 604.215651 192.168.2.180 142.250.185.195 TCP 66 50283 → 80 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
21470 604.215732 192.168.2.180 142.250.185.195 TCP 66 50284 → 80 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
21471 604.215748 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21472 604.216033 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21473 604.218527 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21474 604.218829 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21475 604.218912 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21476 604.219775 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21477 604.220097 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21478 604.220166 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21479 604.221188 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21480 604.221188 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21481 604.221363 192.168.2.180 172.217.18.99 QUIC 78 Protected Payload (KP0), DCID=f00c94dba977c66f
21482 604.222826 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21483 604.222826 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21484 604.222826 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21485 604.222826 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21486 604.223062 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21487 604.223132 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21488 604.224067 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21489 604.224067 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21490 604.224138 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21491 604.225069 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21492 604.225069 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21493 604.225164 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21494 604.226007 172.217.18.99 192.168.2.180 QUIC 1292 Protected Payload (KP0)
21495 604.226007 172.217.18.99 192.168.2.180 QUIC 1066 Protected Payload (KP0)
21496 604.226104 192.168.2.180 172.217.18.99 QUIC 73 Protected Payload (KP0), DCID=f00c94dba977c66f
21497 604.229952 142.250.185.195 192.168.2.180 TCP 66 80 → 50283 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1412 SACK_PERM WS=256
21498 604.230095 192.168.2.180 142.250.185.195 TCP 54 50283 → 80 [ACK] Seq=1 Ack=1 Win=66304 Len=0
21499 604.230474 142.250.185.195 192.168.2.180 TCP 66 80 → 50284 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1412 SACK_PERM WS=256
21500 604.230537 192.168.2.180 142.250.185.195 TCP 54 50284 → 80 [ACK] Seq=1 Ack=1 Win=66304 Len=0
21501 604.260309 172.217.18.99 192.168.2.180 QUIC 67 Protected Payload (KP0)
21502 604.267884 192.168.2.180 172.217.18.99 QUIC 346 Protected Payload (KP0), DCID=f00c94dba977c66f
21503 604.281786 fdee:569e:153:1:b0a2:3501:bfef:103e 2a02:26f0:e600::687c:b13 TCP 86 50285 → 443 [SYN] Seq=0 Win=64800 Len=0 MSS=1440 WS=256 SACK_PERM
21504 604.282156 192.168.2.180 192.168.2.1 DNS 73 Standard query 0xcd7c AAAA aa.google.com
21505 604.282262 192.168.2.180 192.168.2.1 DNS 73 Standard query 0x543b A aa.google.com
21506 604.282337 192.168.2.180 192.168.2.1 DNS 73 Standard query 0x5460 HTTPS aa.google.com
21507 604.283660 172.217.18.99 192.168.2.180 QUIC 70 Protected Payload (KP0)
21508 604.283983 fdee:569e:153:1:162e:5eff:fe79:79ca fdee:569e:153:1:b0a2:3501:bfef:103e ICMPv6 134 Destination Unreachable (no route to destination)
21509 604.295909 192.168.2.1 192.168.2.180 DNS 122 Standard query response 0xcd7c AAAA aa.google.com CNAME www3.l.google.com AAAA 2a00:1450:4001:812::200e
21510 604.297526 192.168.2.1 192.168.2.180 DNS 110 Standard query response 0x543b A aa.google.com CNAME www3.l.google.com A 142.250.185.206
21511 604.298395 192.168.2.1 192.168.2.180 DNS 144 Standard query response 0x5460 HTTPS aa.google.com CNAME www3.l.google.com SOA ns1.google.com
21512 604.298861 192.168.2.180 142.250.185.206 QUIC 1292 Initial, DCID=c1aadbe53ad17040, PKN: 1, CRYPTO, PING, PING, CRYPTO, CRYPTO, PING, PADDING, CRYPTO, PADDING, PING, CRYPTO, PING, CRYPTO, PADDING, PING, CRYPTO, CRYPTO, PADDING, CRYPTO
21513 604.304562 172.217.18.99 192.168.2.180 QUIC 247 Protected Payload (KP0)
21514 604.304744 192.168.2.180 172.217.18.99 TCP 66 50286 → 443 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
21515 604.304896 192.168.2.180 172.217.18.99 QUIC 77 Protected Payload (KP0), DCID=f00c94dba977c66f
21516 604.305471 172.217.18.99 192.168.2.180 QUIC 64 Protected Payload (KP0)
21517 604.316417 142.250.185.206 192.168.2.180 QUIC 1292 Initial, SCID=e1aadbe53ad17040, PKN: 1, ACK, CRYPTO, PADDING
21518 604.319883 192.168.2.180 142.250.185.206 QUIC 1292 Initial, DCID=e1aadbe53ad17040, PKN: 2, ACK, PADDING
21519 604.323538 192.168.2.180 172.217.18.99 QUIC 485 Protected Payload (KP0), DCID=f00c94dba977c66f
21520 604.324009 172.217.18.99 192.168.2.180 TCP 66 443 → 50286 [SYN, ACK] Seq=0 Ack=1 Win=65535 Len=0 MSS=1412 SACK_PERM WS=256
21521 604.324009 142.250.185.206 192.168.2.180 QUIC 1292 Handshake, SCID=e1aadbe53ad17040
21522 604.324065 192.168.2.180 172.217.18.99 TCP 54 50286 → 443 [ACK] Seq=1 Ack=1 Win=66304 Len=0
21523 604.324467 192.168.2.180 172.217.18.99 TLSv1.3 587 Client Hello (SNI=www.google.de)
21524 604.325375 142.250.185.206 192.168.2.180 QUIC 1292 Handshake, SCID=e1aadbe53ad17040
21525 604.325464 192.168.2.180 142.250.185.206 QUIC 81 Handshake, DCID=e1aadbe53ad17040
21526 604.333630 192.168.2.180 23.48.23.26 TCP 66 50287 → 443 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 WS=256 SACK_PERM
21527 604.340112 142.250.185.206 192.168.2.180 QUIC 1292 Handshake, SCID=e1aadbe53ad17040
21528 604.340480 fdee:569e:153:1:b0a2:3501:bfef:103e 2a00:1450:4001:812::200e TCP 86 50288 → 443 [SYN] Seq=0 Win=64800 Len=0 MSS=1440 WS=256 SACK_PERM
21529 604.340519 142.250.185.206 192.168.2.180 QUIC 864 Protected Payload (KP0)
21530 604.340774 192.168.2.180 142.250.185.206 QUIC 81 Handshake, DCID=e1aadbe53ad17040
21531 604.341478 192.168.2.180 142.250.185.206 QUIC 125 Handshake, DCID=e1aadbe53ad17040
21532 604.341504 172.217.18.99 192.168.2.180 TCP 54 443 → 50286 [ACK] Seq=1 Ack=534 Win=66816 Len=0
|
