Hello,
This is a continuance of a previous message for which apple software
updates failed to be retrieved when using squid and succeed when not
using squid. Below is a tcpdump with squid in place as a transparent
proxy on port 3128. Squid version is 2.6.STABLE1. The same problem
exists for STABLE9 Recall that the update just hangs after making the
initial connection to swscan.apple.com. In the case below, I believe
the dump shows a repeated requestion by the apple mac. The apple MAC has
ip 66.4.56.53. Can anyone identify the problem from this dump? I have
a successful connection tcpdump capture when squid is not used that I
can post as well.
thanks,
al cripps
root@ns1:/tmp# tcpdump -nnvvvqxXe -s 96 -i any host 66.4.56.53
tcpdump: WARNING: Promiscuous mode not supported on the "any" device
tcpdump: listening on any, link-type LINUX_SLL (Linux cooked), capture size 96 bytes
09:28:50.159783 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6420, offset 0, flags [DF], proto: TCP (6), length: 64) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0040 1914 4000 3f06 9e11 4204 3835 E..@..@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 81b6 0000 0000 ..._...P........
0x0020: b002 ffff a5c6 0000 0204 05b4 0103 0300 ................
0x0030: 0101 080a 1063 e245 0000 0000 0402 0000 .....c.E........
09:28:50.159830 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto: TCP (6), length: 60) 17.250.248.95.80 > 66.4.56.53.49157: tcp 0
0x0000: 4500 003c 0000 4000 4006 b629 11fa f85f E..<..@.@..)..._
0x0010: 4204 3835 0050 c005 98ea f661 d7f3 81b7 B.85.P.....a....
0x0020: a012 16a0 6e98 0000 0204 05b4 0402 080a ....n...........
0x0030: 4135 60f9 1063 e245 0103 0307 A5`..c.E....
09:28:50.159977 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6421, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1915 4000 3f06 9e1c 4204 3835 E..4..@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 81b7 98ea f662 ..._...P.......b
0x0020: 8010 ffff b404 0000 0101 080a 1063 e245 .............c.E
0x0030: 4135 60f9 A5`.
09:28:50.160489 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6422, offset 0, flags [DF], proto: TCP (6), length: 346) 66.4.56.53.49157 > 17.250.248.95.80: tcp 294
0x0000: 4500 015a 1916 4000 3f06 9cf5 4204 3835 E..Z..@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 81b7 98ea f662 ..._...P.......b
0x0020: 8018 ffff 5e23 0000 0101 080a 1063 e245 ....^#.......c.E
0x0030: 4135 60f9 4745 5420 2f63 6f6e 7465 6e74 A5`.GET./content
0x0040: 2f63 6174 616c 6f67 732f 696e 6465 782d /catalogs/index-
09:28:50.160532 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38555, offset 0, flags [DF], proto: TCP (6), length: 52) 17.250.248.95.80 > 66.4.56.53.49157: tcp 0
0x0000: 4500 0034 969b 4000 4006 1f96 11fa f85f E..4..@.@......_
0x0010: 4204 3835 0050 c005 98ea f662 d7f3 82dd B.85.P.....b....
0x0020: 8010 0036 b2a8 0000 0101 080a 4135 60f9 ...6........A5`.
0x0030: 1063 e245 .c.E
09:28:50.320681 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38556, offset 0, flags [DF], proto: TCP (6), length: 480) 17.250.248.95.80 > 66.4.56.53.49157: tcp 428
0x0000: 4500 01e0 969c 4000 4006 1de9 11fa f85f E.....@.@......_
0x0010: 4204 3835 0050 c005 98ea f662 d7f3 82dd B.85.P.....b....
0x0020: 8018 0036 aca2 0000 0101 080a 4135 6121 ...6........A5a!
0x0030: 1063 e245 4854 5450 2f31 2e30 2032 3030 .c.EHTTP/1.0.200
0x0040: 204f 4b0d 0a41 6363 6570 742d 5261 6e67 .OK..Accept-Rang
09:28:50.320820 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6432, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1920 4000 3f06 9e11 4204 3835 E..4..@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98ea f80e ..._...P........
0x0020: 8010 ffff b109 0000 0101 080a 1063 e246 .............c.F
0x0030: 4135 6121 A5a!
09:28:50.321587 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38557, offset 0, flags [DF], proto: TCP (6), length: 1217) 17.250.248.95.80 > 66.4.56.53.49157: tcp 1165
0x0000: 4500 04c1 969d 4000 4006 1b07 11fa f85f E.....@.@......_
0x0010: 4204 3835 0050 c005 98ea f80e d7f3 82dd B.85.P..........
0x0020: 8018 0036 5eaf 0000 0101 080a 4135 6121 ...6^.......A5a!
0x0030: 1063 e246 3c3f 786d 6c20 7665 7273 696f .c.F<?xml.versio
0x0040: 6e3d 2231 2e30 2220 656e 636f 6469 6e67 n="1.0".encoding
09:28:50.321805 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6433, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1921 4000 3f06 9e10 4204 3835 E..4.!@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98ea fc9b ..._...P........
0x0020: 8010 ffa3 acd8 0000 0101 080a 1063 e246 .............c.F
0x0030: 4135 6121 A5a!
09:28:50.322674 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38558, offset 0, flags [DF], proto: TCP (6), length: 1500) 17.250.248.95.80 > 66.4.56.53.49157: tcp 1448
0x0000: 4500 05dc 969e 4000 4006 19eb 11fa f85f E.....@.@......_
0x0010: 4204 3835 0050 c005 98ea fc9b d7f3 82dd B.85.P..........
0x0020: 8018 0036 f409 0000 0101 080a 4135 6122 ...6........A5a"
0x0030: 1063 e246 6765 723e 0a09 0909 0909 3c6b .c.Fger>......<k
0x0040: 6579 3e55 524c 3c2f 6b65 793e 0a09 0909 ey>URL</key>....
09:28:50.323008 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6434, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1922 4000 3f06 9e0f 4204 3835 E..4."@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 0243 ..._...P.......C
0x0020: 8010 fe88 a84a 0000 0101 080a 1063 e246 .....J.......c.F
0x0030: 4135 6122 A5a"
09:28:50.323399 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38559, offset 0, flags [DF], proto: TCP (6), length: 1500) 17.250.248.95.80 > 66.4.56.53.49157: tcp 1448
0x0000: 4500 05dc 969f 4000 4006 19ea 11fa f85f E.....@.@......_
0x0010: 4204 3835 0050 c005 98eb 0243 d7f3 82dd B.85.P.....C....
0x0020: 8018 0036 f7cc 0000 0101 080a 4135 6122 ...6........A5a"
0x0030: 1063 e246 4a43 6642 3232 6472 4b54 3543 .c.FJCfB22drKT5C
0x0040: 4d76 7843 2f30 3232 2d33 3237 312e 4974 MvxC/022-3271.It
09:28:50.323433 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38560, offset 0, flags [DF], proto: TCP (6), length: 1500) 17.250.248.95.80 > 66.4.56.53.49157: tcp 1448
0x0000: 4500 05dc 96a0 4000 4006 19e9 11fa f85f E.....@.@......_
0x0010: 4204 3835 0050 c005 98eb 07eb d7f3 82dd B.85.P..........
0x0020: 8018 0036 cb7d 0000 0101 080a 4135 6122 ...6.}......A5a"
0x0030: 1063 e246 6c65 2e63 6f6d 2f63 6f6e 7465 .c.Fle.com/conte
0x0040: 6e74 2f64 6f77 6e6c 6f61 6473 2f34 362f nt/downloads/46/
09:28:50.323660 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6435, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1923 4000 3f06 9e0e 4204 3835 E..4.#@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 07eb ..._...P........
0x0020: 8010 f8e0 a84a 0000 0101 080a 1063 e246 .....J.......c.F
0x0030: 4135 6122 A5a"
09:28:50.328878 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6436, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1924 4000 3f06 9e0d 4204 3835 E..4.$@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 0d93 ..._...P........
0x0020: 8010 ffff 9b83 0000 0101 080a 1063 e246 .............c.F
0x0030: 4135 6122 A5a"
09:28:55.181350 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38561, offset 0, flags [DF], proto: TCP (6), length: 193) 17.250.248.95.80 > 66.4.56.53.49157: tcp 141
0x0000: 4500 00c1 96a1 4000 4006 1f03 11fa f85f E.....@.@......_
0x0010: 4204 3835 0050 c005 98eb 0d93 d7f3 82dd B.85.P..........
0x0020: 8018 0036 7f06 0000 0101 080a 4135 65e0 ...6........A5e.
0x0030: 1063 e246 0a09 0909 093c 2f64 6963 743e .c.F.....</dict>
0x0040: 0a09 0909 3c2f 6172 7261 793e 0a09 0909 ....</array>....
09:28:55.181532 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6465, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1941 4000 3f06 9df0 4204 3835 E..4.A@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 0e20 ..._...P........
0x0020: 8010 ffff 962e 0000 0101 080a 1063 e250 .............c.P
0x0030: 4135 65e0 A5e.
09:29:00.186299 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38562, offset 0, flags [DF], proto: TCP (6), length: 215) 17.250.248.95.80 > 66.4.56.53.49157: tcp 163
0x0000: 4500 00d7 96a2 4000 4006 1eec 11fa f85f E.....@.@......_
0x0010: 4204 3835 0050 c005 98eb 0e20 d7f3 82dd B.85.P..........
0x0020: 8018 0036 cd74 0000 0101 080a 4135 6ac4 ...6.t......A5j.
0x0030: 1063 e250 7574 696f 6e73 3c2f 6b65 793e .c.Putions</key>
0x0040: 0a09 0909 3c64 6963 743e 0a09 0909 093c ....<dict>.....<
09:29:00.186469 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6467, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1943 4000 3f06 9dee 4204 3835 E..4.C@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 0ec3 ..._...P........
0x0020: 8010 ffff 909d 0000 0101 080a 1063 e25a .............c.Z
0x0030: 4135 6ac4 A5j.
09:29:05.188720 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38563, offset 0, flags [DF], proto: TCP (6), length: 238) 17.250.248.95.80 > 66.4.56.53.49157: tcp 186
0x0000: 4500 00ee 96a3 4000 4006 1ed4 11fa f85f E.....@.@......_
0x0010: 4204 3835 0050 c005 98eb 0ec3 d7f3 82dd B.85.P..........
0x0020: 8018 0036 3b3b 0000 0101 080a 4135 6fa6 ...6;;......A5o.
0x0030: 1063 e25a 7368 2e64 6973 743c 2f73 7472 .c.Zsh.dist</str
0x0040: 696e 673e 0a09 0909 093c 6b65 793e 4672 ing>.....<key>Fr
09:29:05.188903 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6469, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1945 4000 3f06 9dec 4204 3835 E..4.E@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 0f7d ..._...P.......}
0x0020: 8010 ffff 8af7 0000 0101 080a 1063 e264 .............c.d
0x0030: 4135 6fa6 A5o.
09:29:10.191038 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38564, offset 0, flags [DF], proto: TCP (6), length: 260) 17.250.248.95.80 > 66.4.56.53.49157: tcp 208
0x0000: 4500 0104 96a4 4000 4006 1ebd 11fa f85f E.....@.@......_
0x0010: 4204 3835 0050 c005 98eb 0f7d d7f3 82dd B.85.P.....}....
0x0020: 8018 0036 6f25 0000 0101 080a 4135 7489 ...6o%......A5t.
0x0030: 1063 e264 6e3c 2f6b 6579 3e0a 0909 0909 .c.dn</key>.....
0x0040: 3c73 7472 696e 673e 6874 7470 3a2f 2f73 <string>http://s
09:29:10.191203 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6471, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1947 4000 3f06 9dea 4204 3835 E..4.G@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 104d ..._...P.......M
0x0020: 8010 ffff 853a 0000 0101 080a 1063 e26e .....:.......c.n
0x0030: 4135 7489 A5t.
09:29:15.193645 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38565, offset 0, flags [DF], proto: TCP (6), length: 283) 17.250.248.95.80 > 66.4.56.53.49157: tcp 231
0x0000: 4500 011b 96a5 4000 4006 1ea5 11fa f85f E.....@.@......_
0x0010: 4204 3835 0050 c005 98eb 104d d7f3 82dd B.85.P.....M....
0x0020: 8018 0036 65fd 0000 0101 080a 4135 796b ...6e.......A5yk
0x0030: 1063 e26e 646f 776e 6c6f 6164 732f 3631 .c.ndownloads/61
0x0040: 2f33 352f 3036 312d 3136 3033 2f56 6d5a /35/061-1603/VmZ
09:29:15.193816 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6473, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1949 4000 3f06 9de8 4204 3835 E..4.I@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 1134 ..._...P.......4
0x0020: 8010 ffff 7f67 0000 0101 080a 1063 e278 .....g.......c.x
0x0030: 4135 796b A5yk
09:29:20.198350 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38566, offset 0, flags [DF], proto: TCP (6), length: 306) 17.250.248.95.80 > 66.4.56.53.49157: tcp 254
0x0000: 4500 0132 96a6 4000 4006 1e8d 11fa f85f E..2..@.@......_
0x0010: 4204 3835 0050 c005 98eb 1134 d7f3 82dd B.85.P.....4....
0x0020: 8018 0036 dc68 0000 0101 080a 4135 7e4e ...6.h......A5~N
0x0030: 1063 e278 312f 3335 2f30 3631 2d31 3630 .c.x1/35/061-160
0x0040: 332f 566d 5a39 3432 7459 786d 5273 425a 3/VmZ942tYxmRsBZ
09:29:20.198531 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6477, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 194d 4000 3f06 9de4 4204 3835 E..4.M@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 1232 ..._...P.......2
0x0020: 8010 ffff 797c 0000 0101 080a 1063 e282 ....y|.......c..
0x0030: 4135 7e4e A5~N
09:29:25.202464 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38567, offset 0, flags [DF], proto: TCP (6), length: 328) 17.250.248.95.80 > 66.4.56.53.49157: tcp 276
0x0000: 4500 0148 96a7 4000 4006 1e76 11fa f85f E..H..@.@..v..._
0x0010: 4204 3835 0050 c005 98eb 1232 d7f3 82dd B.85.P.....2....
0x0020: 8018 0036 cca4 0000 0101 080a 4135 8331 ...6........A5.1
0x0030: 1063 e282 6234 664a 5952 742f 5265 6d6f .c..b4fJYRt/Remo
0x0040: 7465 4465 736b 746f 7043 6c69 656e 7432 teDesktopClient2
09:29:25.202659 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6479, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 194f 4000 3f06 9de2 4204 3835 E..4.O@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 1346 ..._...P.......F
0x0020: 8010 ffff 737b 0000 0101 080a 1063 e28c ....s{.......c..
0x0030: 4135 8331 A5.1
09:29:30.205881 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38568, offset 0, flags [DF], proto: TCP (6), length: 351) 17.250.248.95.80 > 66.4.56.53.49157: tcp 299
0x0000: 4500 015f 96a8 4000 4006 1e5e 11fa f85f E.._..@.@..^..._
0x0010: 4204 3835 0050 c005 98eb 1346 d7f3 82dd B.85.P.....F....
0x0020: 8018 0036 2e46 0000 0101 080a 4135 8814 ...6.F......A5..
0x0030: 1063 e28c 6e6c 6f61 6473 2f31 372f 3039 .c..nloads/17/09
0x0040: 2f30 3631 2d31 3630 352f 724e 4350 3874 /061-1605/rNCP8t
09:29:30.206026 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6481, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1951 4000 3f06 9de0 4204 3835 E..4.Q@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 1471 ..._...P.......q
0x0020: 8010 ffff 6d63 0000 0101 080a 1063 e296 ....mc.......c..
0x0030: 4135 8814 A5..
09:29:35.209180 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38569, offset 0, flags [DF], proto: TCP (6), length: 374) 17.250.248.95.80 > 66.4.56.53.49157: tcp 322
0x0000: 4500 0176 96a9 4000 4006 1e46 11fa f85f E..v..@.@..F..._
0x0010: 4204 3835 0050 c005 98eb 1471 d7f3 82dd B.85.P.....q....
0x0020: 8018 0036 b598 0000 0101 080a 4135 8cf7 ...6........A5..
0x0030: 1063 e296 2f63 6f6e 7465 6e74 2f64 6f77 .c../content/dow
0x0040: 6e6c 6f61 6473 2f31 372f 3039 2f30 3631 nloads/17/09/061
09:29:35.209376 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6483, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1953 4000 3f06 9dde 4204 3835 E..4.S@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 15b3 ..._...P........
0x0020: 8010 ffff 6734 0000 0101 080a 1063 e2a0 ....g4.......c..
0x0030: 4135 8cf7 A5..
09:29:40.264280 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38570, offset 0, flags [DF], proto: TCP (6), length: 396) 17.250.248.95.80 > 66.4.56.53.49157: tcp 344
0x0000: 4500 018c 96aa 4000 4006 1e2f 11fa f85f E.....@.@../..._
0x0010: 4204 3835 0050 c005 98eb 15b3 d7f3 82dd B.85.P..........
0x0020: 8018 0036 97f7 0000 0101 080a 4135 91e7 ...6........A5..
0x0030: 1063 e2a0 793e 4d65 7461 6461 7461 5552 .c..y>MetadataUR
0x0040: 4c3c 2f6b 6579 3e0a 0909 0909 093c 7374 L</key>......<st
09:29:40.264466 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6485, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1955 4000 3f06 9ddc 4204 3835 E..4.U@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 170b ..._...P........
0x0020: 8010 ffff 60e2 0000 0101 080a 1063 e2aa ....`........c..
0x0030: 4135 91e7 A5..
09:29:45.289466 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38571, offset 0, flags [DF], proto: TCP (6), length: 419) 17.250.248.95.80 > 66.4.56.53.49157: tcp 367
0x0000: 4500 01a3 96ab 4000 4006 1e17 11fa f85f E.....@.@......_
0x0010: 4204 3835 0050 c005 98eb 170b d7f3 82dd B.85.P..........
0x0020: 8018 0036 d9f4 0000 0101 080a 4135 96cf ...6........A5..
0x0030: 1063 e2aa 6f74 6544 6573 6b74 6f70 4164 .c..oteDesktopAd
0x0040: 6d69 6e32 3230 2e74 6172 3c2f 7374 7269 min220.tar</stri
09:29:45.289661 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6487, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1957 4000 3f06 9dda 4204 3835 E..4.W@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 187a ..._...P.......z
0x0020: 8010 ffff 5a81 0000 0101 080a 1063 e2b4 ....Z........c..
0x0030: 4135 96cf A5..
09:29:50.218431 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38572, offset 0, flags [DF], proto: TCP (6), length: 441) 17.250.248.95.80 > 66.4.56.53.49157: tcp 389
0x0000: 4500 01b9 96ac 4000 4006 1e00 11fa f85f E.....@.@......_
0x0010: 4204 3835 0050 c005 98eb 187a d7f3 82dd B.85.P.....z....
0x0020: 8018 0036 3c06 0000 0101 080a 4135 9b9f ...6<.......A5..
0x0030: 1063 e2b4 6579 3e0a 0909 0909 3c73 7472 .c..ey>.....<str
0x0040: 696e 673e 6874 7470 3a2f 2f73 7763 646e ing>http://swcdn
09:29:50.218611 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6489, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1959 4000 3f06 9dd8 4204 3835 E..4.Y@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 19ff ..._...P........
0x0020: 8010 ffff 5422 0000 0101 080a 1063 e2be ....T".......c..
0x0030: 4135 9b9f A5..
09:29:55.221074 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38573, offset 0, flags [DF], proto: TCP (6), length: 464) 17.250.248.95.80 > 66.4.56.53.49157: tcp 412
0x0000: 4500 01d0 96ad 4000 4006 1de8 11fa f85f E.....@.@......_
0x0010: 4204 3835 0050 c005 98eb 19ff d7f3 82dd B.85.P..........
0x0020: 8018 0036 8018 0000 0101 080a 4135 a082 ...6........A5..
0x0030: 1063 e2be 6b73 584d 6876 5966 484c 6258 .c..ksXMhvYfHLbX
0x0040: 7453 3667 5679 5054 7835 6a74 395a 4739 tS6gVyPTx5jt9ZG9
09:29:55.221284 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6491, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 195b 4000 3f06 9dd6 4204 3835 E..4.[@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 1b9b ..._...P........
0x0020: 8010 ffff 4d99 0000 0101 080a 1063 e2c8 ....M........c..
0x0030: 4135 a082 A5..
09:30:00.225192 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38574, offset 0, flags [DF], proto: TCP (6), length: 487) 17.250.248.95.80 > 66.4.56.53.49157: tcp 435
0x0000: 4500 01e7 96ae 4000 4006 1dd0 11fa f85f E.....@.@......_
0x0010: 4204 3835 0050 c005 98eb 1b9b d7f3 82dd B.85.P..........
0x0020: 8018 0036 b679 0000 0101 080a 4135 a565 ...6.y......A5.e
0x0030: 1063 e2c8 7470 3a2f 2f73 7763 646e 2e61 .c..tp://swcdn.a
0x0040: 7070 6c65 2e63 6f6d 2f63 6f6e 7465 6e74 pple.com/content
09:30:00.225387 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6493, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 195d 4000 3f06 9dd4 4204 3835 E..4.]@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 1d4e ..._...P.......N
0x0020: 8010 ffff 46f9 0000 0101 080a 1063 e2d2 ....F........c..
0x0030: 4135 a565 A5.e
09:30:05.225788 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38575, offset 0, flags [DF], proto: TCP (6), length: 509) 17.250.248.95.80 > 66.4.56.53.49157: tcp 457
0x0000: 4500 01fd 96af 4000 4006 1db9 11fa f85f E.....@.@......_
0x0010: 4204 3835 0050 c005 98eb 1d4e d7f3 82dd B.85.P.....N....
0x0020: 8018 0036 bd7e 0000 0101 080a 4135 aa47 ...6.~......A5.G
0x0030: 1063 e2d2 093c 7374 7269 6e67 3e68 7474 .c...<string>htt
0x0040: 703a 2f2f 7377 6364 6e2e 6170 706c 652e p://swcdn.apple.
09:30:05.225977 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6495, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 195f 4000 3f06 9dd2 4204 3835 E..4._@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 1f17 ..._...P........
0x0020: 8010 ffff 4044 0000 0101 080a 1063 e2dc ....@xxxxxxxxxxx
0x0030: 4135 aa47 A5.G
09:30:10.229756 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38576, offset 0, flags [DF], proto: TCP (6), length: 532) 17.250.248.95.80 > 66.4.56.53.49157: tcp 480
0x0000: 4500 0214 96b0 4000 4006 1da1 11fa f85f E.....@.@......_
0x0010: 4204 3835 0050 c005 98eb 1f17 d7f3 82dd B.85.P..........
0x0020: 8018 0036 6ede 0000 0101 080a 4135 af2a ...6n.......A5.*
0x0030: 1063 e2dc 3a2f 2f73 7763 646e 2e61 7070 .c..://swcdn.app
0x0040: 6c65 2e63 6f6d 2f63 6f6e 7465 6e74 2f64 le.com/content/d
09:30:10.229935 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6497, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1961 4000 3f06 9dd0 4204 3835 E..4.a@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 20f7 ..._...P........
0x0020: 8010 ffff 3977 0000 0101 080a 1063 e2e6 ....9w.......c..
0x0030: 4135 af2a A5.*
09:30:15.232339 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38577, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96b1 4000 4006 1d8b 11fa f85f E..)..@.@......_
0x0010: 4204 3835 0050 c005 98eb 20f7 d7f3 82dd B.85.P..........
0x0020: 8018 0036 aed7 0000 0101 080a 4135 b40c ...6........A5..
0x0030: 1063 e2e6 6648 4c62 5874 5336 6756 7950 .c..fHLbXtS6gVyP
0x0040: 5478 356a 7439 5a47 392f 6950 686f 746f Tx5jt9ZG9/iPhoto
09:30:15.232521 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6499, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1963 4000 3f06 9dce 4204 3835 E..4.c@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 22ec ..._...P......".
0x0020: 8010 ffff 3296 0000 0101 080a 1063 e2f0 ....2........c..
0x0030: 4135 b40c A5..
09:30:20.237244 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38578, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96b2 4000 4006 1d8a 11fa f85f E..)..@.@......_
0x0010: 4204 3835 0050 c005 98eb 22ec d7f3 82dd B.85.P....".....
0x0020: 8018 0036 9f96 0000 0101 080a 4135 b8f0 ...6........A5..
0x0030: 1063 e2f0 2e45 6e67 6c69 7368 2e64 6973 .c...English.dis
0x0040: 743c 2f73 7472 696e 673e 0a09 0909 093c t</string>.....<
09:30:20.237439 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6503, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1967 4000 3f06 9dca 4204 3835 E..4.g@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 24e1 ..._...P......$.
0x0020: 8010 ffff 2bb3 0000 0101 080a 1063 e2fa ....+........c..
0x0030: 4135 b8f0 A5..
09:30:25.240113 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38579, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96b3 4000 4006 1d89 11fa f85f E..)..@.@......_
0x0010: 4204 3835 0050 c005 98eb 24e1 d7f3 82dd B.85.P....$.....
0x0020: 8018 0036 ce5d 0000 0101 080a 4135 bdd2 ...6.]......A5..
0x0030: 1063 e2fa 7061 6e65 7365 3c2f 6b65 793e .c..panese</key>
0x0040: 0a09 0909 093c 7374 7269 6e67 3e68 7474 .....<string>htt
09:30:25.240332 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6505, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1969 4000 3f06 9dc8 4204 3835 E..4.i@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 26d6 ..._...P......&.
0x0020: 8010 ffff 24d2 0000 0101 080a 1063 e304 ....$........c..
0x0030: 4135 bdd2 A5..
09:30:30.243945 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38580, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96b4 4000 4006 1d88 11fa f85f E..)..@.@......_
0x0010: 4204 3835 0050 c005 98eb 26d6 d7f3 82dd B.85.P....&.....
0x0020: 8018 0036 b3bb 0000 0101 080a 4135 c2b5 ...6........A5..
0x0030: 1063 e304 3833 2f34 5470 477a 7964 6376 .c..83/4TpGzydcv
0x0040: 3773 3578 5762 5133 566d 4a57 6338 6d39 7s5xWbQ3VmJWc8m9
09:30:30.244107 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6507, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 196b 4000 3f06 9dc6 4204 3835 E..4.k@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 28cb ..._...P......(.
0x0020: 8010 ffff 1df0 0000 0101 080a 1063 e30e .............c..
0x0030: 4135 c2b5 A5..
09:30:35.246216 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38581, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96b5 4000 4006 1d87 11fa f85f E..)..@.@......_
0x0010: 4204 3835 0050 c005 98eb 28cb d7f3 82dd B.85.P....(.....
0x0020: 8018 0036 86c8 0000 0101 080a 4135 c798 ...6........A5..
0x0030: 1063 e30e 664e 7659 5856 7067 726b 352f .c..fNvYXVpgrk5/
0x0040: 3036 312d 3136 3834 2e46 7265 6e63 682e 061-1684.French.
09:30:35.246426 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6509, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 196d 4000 3f06 9dc4 4204 3835 E..4.m@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 2ac0 ..._...P......*.
0x0020: 8010 ffff 170e 0000 0101 080a 1063 e318 .............c..
0x0030: 4135 c798 A5..
09:30:40.249319 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38582, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96b6 4000 4006 1d86 11fa f85f E..)..@.@......_
0x0010: 4204 3835 0050 c005 98eb 2ac0 d7f3 82dd B.85.P....*.....
0x0020: 8018 0036 5a5b 0000 0101 080a 4135 cc7a ...6Z[......A5.z
0x0030: 1063 e318 3a2f 2f73 7763 646e 2e61 7070 .c..://swcdn.app
0x0040: 6c65 2e63 6f6d 2f63 6f6e 7465 6e74 2f64 le.com/content/d
09:30:40.249517 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6511, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 196f 4000 3f06 9dc2 4204 3835 E..4.o@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 2cb5 ..._...P......,.
0x0020: 8010 ffff 102d 0000 0101 080a 1063 e322 .....-.......c."
0x0030: 4135 cc7a A5.z
09:30:45.252928 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38583, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96b7 4000 4006 1d85 11fa f85f E..)..@.@......_
0x0010: 4204 3835 0050 c005 98eb 2cb5 d7f3 82dd B.85.P....,.....
0x0020: 8018 0036 1dd4 0000 0101 080a 4135 d15d ...6........A5.]
0x0030: 1063 e322 6f77 6e6c 6f61 6473 2f35 392f .c."ownloads/59/
0x0040: 3433 2f30 3631 2d31 3638 352f 7858 7a50 43/061-1685/xXzP
09:30:45.253126 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6513, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1971 4000 3f06 9dc0 4204 3835 E..4.q@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 2eaa ..._...P........
0x0020: 8010 ffff 094b 0000 0101 080a 1063 e32c .....K.......c.,
0x0030: 4135 d15d A5.]
09:30:50.256329 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38584, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96b8 4000 4006 1d84 11fa f85f E..)..@.@......_
0x0010: 4204 3835 0050 c005 98eb 2eaa d7f3 82dd B.85.P..........
0x0020: 8018 0036 7d07 0000 0101 080a 4135 d640 ...6}.......A5.@
0x0030: 1063 e32c 7962 7942 4d73 7435 4336 6b59 .c.,ybyBMst5C6kY
0x0040: 7a4a 3756 376e 4d72 724a 4e71 2f30 3631 zJ7V7nMrrJNq/061
09:30:50.256525 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6515, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1973 4000 3f06 9dbe 4204 3835 E..4.s@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 309f ..._...P......0.
0x0020: 8010 ffff 0269 0000 0101 080a 1063 e336 .....i.......c.6
0x0030: 4135 d640 A5.@
09:30:55.279050 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38585, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96b9 4000 4006 1d83 11fa f85f E..)..@.@......_
0x0010: 4204 3835 0050 c005 98eb 309f d7f3 82dd B.85.P....0.....
0x0020: 8018 0036 c0e8 0000 0101 080a 4135 db28 ...6........A5.(
0x0030: 1063 e336 2e64 612e 6469 7374 3c2f 7374 .c.6.da.dist</st
0x0040: 7269 6e67 3e0a 0909 0909 3c6b 6579 3e66 ring>.....<key>f
09:30:55.279270 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6517, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1975 4000 3f06 9dbc 4204 3835 E..4.u@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 3294 ..._...P......2.
0x0020: 8010 ffff fb81 0000 0101 080a 1063 e340 .............c.@
0x0030: 4135 db28 A5.(
09:31:00.262660 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38586, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96ba 4000 4006 1d82 11fa f85f E..)..@.@......_
0x0010: 4204 3835 0050 c005 98eb 3294 d7f3 82dd B.85.P....2.....
0x0020: 8018 0036 6dd5 0000 0101 080a 4135 e006 ...6m.......A5..
0x0030: 1063 e340 2e61 7070 6c65 2e63 6f6d 2f63 .c.@.apple.com/c
0x0040: 6f6e 7465 6e74 2f64 6f77 6e6c 6f61 6473 ontent/downloads
09:31:00.262856 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6519, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1977 4000 3f06 9dba 4204 3835 E..4.w@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 3489 ..._...P......4.
0x0020: 8010 ffff f4a4 0000 0101 080a 1063 e34a .............c.J
0x0030: 4135 e006 A5..
09:31:05.274826 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38587, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96bb 4000 4006 1d81 11fa f85f E..)..@.@......_
0x0010: 4204 3835 0050 c005 98eb 3489 d7f3 82dd B.85.P....4.....
0x0020: 8018 0036 1cdf 0000 0101 080a 4135 e4eb ...6........A5..
0x0030: 1063 e34a 3e31 3838 3431 3630 3c2f 696e .c.J>1884160</in
0x0040: 7465 6765 723e 0a09 0909 0909 3c6b 6579 teger>......<key
09:31:05.275032 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6521, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1979 4000 3f06 9db8 4204 3835 E..4.y@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 367e ..._...P......6~
0x0020: 8010 ffff edc0 0000 0101 080a 1063 e354 .............c.T
0x0030: 4135 e4eb A5..
09:31:10.268483 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38588, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96bc 4000 4006 1d80 11fa f85f E..)..@.@......_
0x0010: 4204 3835 0050 c005 98eb 367e d7f3 82dd B.85.P....6~....
0x0020: 8018 0036 d59c 0000 0101 080a 4135 e9cb ...6........A5..
0x0030: 1063 e354 6e67 6c69 7368 3c2f 6b65 793e .c.Tnglish</key>
0x0040: 0a09 0909 093c 7374 7269 6e67 3e68 7474 .....<string>htt
09:31:10.268671 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6523, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 197b 4000 3f06 9db6 4204 3835 E..4.{@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 3873 ..._...P......8s
0x0020: 8010 ffff e6e1 0000 0101 080a 1063 e35e .............c.^
0x0030: 4135 e9cb A5..
09:31:15.272257 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38589, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96bd 4000 4006 1d7f 11fa f85f E..)..@.@......_
0x0010: 4204 3835 0050 c005 98eb 3873 d7f3 82dd B.85.P....8s....
0x0020: 8018 0036 562b 0000 0101 080a 4135 eeae ...6V+......A5..
0x0030: 1063 e35e 6364 6e2e 6170 706c 652e 636f .c.^cdn.apple.co
0x0040: 6d2f 636f 6e74 656e 742f 646f 776e 6c6f m/content/downlo
09:31:15.272456 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6525, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 197d 4000 3f06 9db4 4204 3835 E..4.}@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 3a68 ..._...P......:h
0x0020: 8010 ffff dfff 0000 0101 080a 1063 e368 .............c.h
0x0030: 4135 eeae A5..
09:31:20.296665 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38590, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96be 4000 4006 1d7e 11fa f85f E..)..@.@..~..._
0x0010: 4204 3835 0050 c005 98eb 3a68 d7f3 82dd B.85.P....:h....
0x0020: 8018 0036 3091 0000 0101 080a 4135 f396 ...60.......A5..
0x0030: 1063 e368 392f 3132 2f30 3631 2d31 3638 .c.h9/12/061-168
0x0040: 362f 6851 6636 635a 7262 4270 6e58 6767 6/hQf6cZrbBpnXgg
09:31:20.296861 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6529, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1981 4000 3f06 9db0 4204 3835 E..4..@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 3c5d ..._...P......<]
0x0020: 8010 ffff d918 0000 0101 080a 1063 e372 .............c.r
0x0030: 4135 f396 A5..
09:31:25.281737 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38591, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96bf 4000 4006 1d7d 11fa f85f E..)..@.@..}..._
0x0010: 4204 3835 0050 c005 98eb 3c5d d7f3 82dd B.85.P....<]....
0x0020: 8018 0036 e1e0 0000 0101 080a 4135 f874 ...6........A5.t
0x0030: 1063 e372 2e64 6973 743c 2f73 7472 696e .c.r.dist</strin
0x0040: 673e 0a09 0909 093c 6b65 793e 7376 3c2f g>.....<key>sv</
09:31:25.281954 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6531, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1983 4000 3f06 9dae 4204 3835 E..4..@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 3e52 ..._...P......>R
0x0020: 8010 ffff d23b 0000 0101 080a 1063 e37c .....;.......c.|
0x0030: 4135 f874 A5.t
09:31:30.284835 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38592, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96c0 4000 4006 1d7c 11fa f85f E..)..@.@..|..._
0x0010: 4204 3835 0050 c005 98eb 3e52 d7f3 82dd B.85.P....>R....
0x0020: 8018 0036 2a67 0000 0101 080a 4135 fd57 ...6*g......A5.W
0x0030: 1063 e37c 0a09 0909 3c61 7272 6179 3e0a .c.|....<array>.
0x0040: 0909 0909 3c64 6963 743e 0a09 0909 0909 ....<dict>......
09:31:30.284998 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6533, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1985 4000 3f06 9dac 4204 3835 E..4..@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 4047 ..._...P......@G
0x0020: 8010 ffff cb59 0000 0101 080a 1063 e386 .....Y.......c..
0x0030: 4135 fd57 A5.W
09:31:35.289276 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38593, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96c1 4000 4006 1d7b 11fa f85f E..)..@.@..{..._
0x0010: 4204 3835 0050 c005 98eb 4047 d7f3 82dd B.85.P....@xxxxx
0x0020: 8018 0036 8015 0000 0101 080a 4136 023a ...6........A6.:
0x0030: 1063 e386 5046 5734 5051 3551 3257 3568 .c..PFW4PQ5Q2W5h
0x0040: 634b 2f30 3631 2d31 3638 372e 4475 7463 cK/061-1687.Dutc
09:31:35.289483 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6535, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1987 4000 3f06 9daa 4204 3835 E..4..@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 423c ..._...P......B<
0x0020: 8010 ffff c477 0000 0101 080a 1063 e390 .....w.......c..
0x0030: 4136 023a A6.:
09:31:40.273083 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6544, offset 0, flags [DF], proto: TCP (6), length: 52) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0034 1990 4000 3f06 9da1 4204 3835 E..4..@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82dd 98eb 423c ..._...P......B<
0x0020: 8011 ffff c46c 0000 0101 080a 1063 e39a .....l.......c..
0x0030: 4136 023a A6.:
09:31:40.292624 Out 00:0b:db:93:82:ed (tos 0x0, ttl 64, id 38594, offset 0, flags [DF], proto: TCP (6), length: 553) 17.250.248.95.80 > 66.4.56.53.49157: tcp 501
0x0000: 4500 0229 96c2 4000 4006 1d7a 11fa f85f E..)..@.@..z..._
0x0010: 4204 3835 0050 c005 98eb 423c d7f3 82de B.85.P....B<....
0x0020: 8018 0036 56bb 0000 0101 080a 4136 071d ...6V.......A6..
0x0030: 1063 e39a 3c2f 7374 7269 6e67 3e0a 0909 .c..</string>...
0x0040: 0909 3c6b 6579 3e49 7461 6c69 616e 3c2f ..<key>Italian</
09:31:40.292877 In 00:12:43:5a:29:41 (tos 0x0, ttl 63, id 6545, offset 0, flags [DF], proto: TCP (6), length: 40) 66.4.56.53.49157 > 17.250.248.95.80: tcp 0
0x0000: 4500 0028 1991 4000 3f06 9dac 4204 3835 E..(..@.?...B.85
0x0010: 11fa f85f c005 0050 d7f3 82de 0000 0000 ..._...P........
0x0020: 5004 0000 1026 0000 5555 5555 5555 P....&..UUUUUU
84 packets captured
170 packets received by filter
0 packets dropped by kernel
root@ns1:/tmp# exit
