tcp 0 0 10.19.8.160:32998 192.168.6.84:443 CLOSE_WAIT 706 17367005 6299/httpd/bin/http tcp 0 0 10.19.8.160:8088 10.144.18.82:38247 FIN_WAIT2 706 17363860 6299/httpd/bin/http 13:37:29.514709 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [S], seq 2479829752, win 64240, options [mss 1460,sackOK,TS val 734631142 ecr 0,nop,wscale 7], length 0 13:37:29.514786 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [S.], seq 2783393266, ack 2479829753, win 65160, options [mss 1460,sackOK,TS val 3015131763 ecr 734631142,nop,wscale 7], length 0 13:37:29.515047 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [.], ack 1, win 502, options [nop,nop,TS val 734631142 ecr 3015131763], length 0 13:37:29.515079 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [P.], seq 1:111, ack 1, win 502, options [nop,nop,TS val 734631142 ecr 3015131763], length 110 13:37:29.515111 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [.], ack 111, win 509, options [nop,nop,TS val 3015131763 ecr 734631142], length 0 13:37:29.516268 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [S], seq 3628204158, win 64240, options [mss 1460,sackOK,TS val 1936729228 ecr 0,nop,wscale 7], length 0 13:37:29.532098 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [S.], seq 3698964790, ack 3628204159, win 13800, options [mss 1380,nop,wscale 0,sackOK,TS val 2815077303 ecr 1936729228], length 0 13:37:29.532133 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [.], ack 1, win 502, options [nop,nop,TS val 1936729243 ecr 2815077303], length 0 13:37:29.532202 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [P.], seq 1:61, ack 111, win 509, options [nop,nop,TS val 3015131781 ecr 734631142], length 60 13:37:29.532416 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [.], ack 61, win 502, options [nop,nop,TS val 734631160 ecr 3015131781], length 0 13:37:29.534154 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [P.], seq 111:398, ack 61, win 502, options [nop,nop,TS val 734631161 ecr 3015131781], length 287 13:37:29.534174 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [.], ack 398, win 507, options [nop,nop,TS val 3015131783 ecr 734631161], length 0 13:37:29.534227 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [P.], seq 1:288, ack 1, win 502, options [nop,nop,TS val 1936729246 ecr 2815077303], length 287 13:37:29.549914 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [.], ack 288, win 14087, options [nop,nop,TS val 2815077321 ecr 1936729246], length 0 13:37:29.550813 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [.], seq 1:1369, ack 288, win 14087, options [nop,nop,TS val 2815077322 ecr 1936729246], length 1368 13:37:29.550837 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [.], ack 1369, win 492, options [nop,nop,TS val 1936729262 ecr 2815077322], length 0 13:37:29.550877 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [P.], seq 1369:3429, ack 288, win 14087, options [nop,nop,TS val 2815077322 ecr 1936729246], length 2060 13:37:29.550888 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [.], ack 3429, win 476, options [nop,nop,TS val 1936729262 ecr 2815077322], length 0 13:37:29.550963 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [.], seq 61:1509, ack 398, win 507, options [nop,nop,TS val 3015131799 ecr 734631161], length 1448 13:37:29.550972 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [.], seq 1509:2957, ack 398, win 507, options [nop,nop,TS val 3015131799 ecr 734631161], length 1448 13:37:29.550973 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [P.], seq 2957:3489, ack 398, win 507, options [nop,nop,TS val 3015131799 ecr 734631161], length 532 13:37:29.551240 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [.], ack 3489, win 491, options [nop,nop,TS val 734631179 ecr 3015131799], length 0 13:37:29.554770 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [P.], seq 398:473, ack 3489, win 501, options [nop,nop,TS val 734631182 ecr 3015131799], length 75 13:37:29.554795 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [.], ack 473, win 507, options [nop,nop,TS val 3015131803 ecr 734631182], length 0 13:37:29.554850 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [P.], seq 288:363, ack 3429, win 501, options [nop,nop,TS val 1936729266 ecr 2815077322], length 75 13:37:29.557108 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [P.], seq 473:479, ack 3489, win 501, options [nop,nop,TS val 734631184 ecr 3015131803], length 6 13:37:29.557127 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [.], ack 479, win 507, options [nop,nop,TS val 3015131805 ecr 734631184], length 0 13:37:29.557181 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [P.], seq 363:369, ack 3429, win 501, options [nop,nop,TS val 1936729269 ecr 2815077322], length 6 13:37:29.557215 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [P.], seq 479:524, ack 3489, win 501, options [nop,nop,TS val 734631185 ecr 3015131803], length 45 13:37:29.557227 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [.], ack 524, win 507, options [nop,nop,TS val 3015131806 ecr 734631185], length 0 13:37:29.557261 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [P.], seq 369:414, ack 3429, win 501, options [nop,nop,TS val 1936729269 ecr 2815077322], length 45 13:37:29.570563 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [.], ack 363, win 14162, options [nop,nop,TS val 2815077342 ecr 1936729266], length 0 13:37:29.572893 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [.], ack 414, win 14213, options [nop,nop,TS val 2815077344 ecr 1936729269], length 0 13:37:29.572893 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [P.], seq 3429:3480, ack 414, win 14213, options [nop,nop,TS val 2815077344 ecr 1936729269], length 51 13:37:29.572932 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [.], ack 3480, win 501, options [nop,nop,TS val 1936729284 ecr 2815077344], length 0 13:37:29.573002 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [P.], seq 3489:3540, ack 524, win 507, options [nop,nop,TS val 3015131821 ecr 734631185], length 51 13:37:29.573218 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [.], ack 3540, win 501, options [nop,nop,TS val 734631201 ecr 3015131821], length 0 13:37:29.574146 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [P.], seq 524:869, ack 3540, win 501, options [nop,nop,TS val 734631201 ecr 3015131821], length 345 13:37:29.574167 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [.], ack 869, win 505, options [nop,nop,TS val 3015131822 ecr 734631201], length 0 13:37:29.574228 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [P.], seq 414:759, ack 3480, win 501, options [nop,nop,TS val 1936729286 ecr 2815077344], length 345 13:37:29.590016 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [.], ack 759, win 14558, options [nop,nop,TS val 2815077361 ecr 1936729286], length 0 13:37:30.264042 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [P.], seq 3480:4069, ack 759, win 14558, options [nop,nop,TS val 2815078035 ecr 1936729286], length 589 13:37:30.264042 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [P.], seq 4069:4288, ack 759, win 14558, options [nop,nop,TS val 2815078035 ecr 1936729286], length 219 13:37:30.264042 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [P.], seq 4288:4325, ack 759, win 14558, options [nop,nop,TS val 2815078035 ecr 1936729286], length 37 13:37:30.264103 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [.], ack 4069, win 497, options [nop,nop,TS val 1936729975 ecr 2815078035], length 0 13:37:30.264121 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [.], ack 4288, win 496, options [nop,nop,TS val 1936729975 ecr 2815078035], length 0 13:37:30.264127 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [.], ack 4325, win 496, options [nop,nop,TS val 1936729975 ecr 2815078035], length 0 13:37:30.264219 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [P.], seq 3540:4385, ack 869, win 505, options [nop,nop,TS val 3015132513 ecr 734631201], length 845 13:37:30.304940 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [.], ack 4385, win 501, options [nop,nop,TS val 734631932 ecr 3015132513], length 0 13:37:35.268129 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [F.], seq 4325, ack 759, win 14558, options [nop,nop,TS val 2815083039 ecr 1936729975], length 0 13:37:35.268234 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [F.], seq 4385, ack 869, win 505, options [nop,nop,TS val 3015137517 ecr 734631932], length 0 13:37:35.308773 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [.], ack 4326, win 501, options [nop,nop,TS val 1936735020 ecr 2815083039], length 0 13:37:35.309014 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [.], ack 4386, win 501, options [nop,nop,TS val 734636936 ecr 3015137517], length 0 Splited by connection: IN: 13:37:29.514709 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [S], seq 2479829752, win 64240, options [mss 1460,sackOK,TS val 734631142 ecr 0,nop,wscale 7], length 0 13:37:29.514786 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [S.], seq 2783393266, ack 2479829753, win 65160, options [mss 1460,sackOK,TS val 3015131763 ecr 734631142,nop,wscale 7], length 0 13:37:29.515047 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [.], ack 1, win 502, options [nop,nop,TS val 734631142 ecr 3015131763], length 0 13:37:29.515079 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [P.], seq 1:111, ack 1, win 502, options [nop,nop,TS val 734631142 ecr 3015131763], length 110 13:37:29.515111 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [.], ack 111, win 509, options [nop,nop,TS val 3015131763 ecr 734631142], length 0 13:37:29.532202 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [P.], seq 1:61, ack 111, win 509, options [nop,nop,TS val 3015131781 ecr 734631142], length 60 13:37:29.532416 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [.], ack 61, win 502, options [nop,nop,TS val 734631160 ecr 3015131781], length 0 13:37:29.534154 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [P.], seq 111:398, ack 61, win 502, options [nop,nop,TS val 734631161 ecr 3015131781], length 287 13:37:29.534174 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [.], ack 398, win 507, options [nop,nop,TS val 3015131783 ecr 734631161], length 0 13:37:29.550963 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [.], seq 61:1509, ack 398, win 507, options [nop,nop,TS val 3015131799 ecr 734631161], length 1448 13:37:29.550972 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [.], seq 1509:2957, ack 398, win 507, options [nop,nop,TS val 3015131799 ecr 734631161], length 1448 13:37:29.550973 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [P.], seq 2957:3489, ack 398, win 507, options [nop,nop,TS val 3015131799 ecr 734631161], length 532 13:37:29.551240 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [.], ack 3489, win 491, options [nop,nop,TS val 734631179 ecr 3015131799], length 0 13:37:29.554770 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [P.], seq 398:473, ack 3489, win 501, options [nop,nop,TS val 734631182 ecr 3015131799], length 75 13:37:29.554795 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [.], ack 473, win 507, options [nop,nop,TS val 3015131803 ecr 734631182], length 0 13:37:29.557108 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [P.], seq 473:479, ack 3489, win 501, options [nop,nop,TS val 734631184 ecr 3015131803], length 6 13:37:29.557127 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [.], ack 479, win 507, options [nop,nop,TS val 3015131805 ecr 734631184], length 0 13:37:29.557215 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [P.], seq 479:524, ack 3489, win 501, options [nop,nop,TS val 734631185 ecr 3015131803], length 45 13:37:29.557227 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [.], ack 524, win 507, options [nop,nop,TS val 3015131806 ecr 734631185], length 0 13:37:29.573002 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [P.], seq 3489:3540, ack 524, win 507, options [nop,nop,TS val 3015131821 ecr 734631185], length 51 13:37:29.573218 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [.], ack 3540, win 501, options [nop,nop,TS val 734631201 ecr 3015131821], length 0 13:37:29.574146 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [P.], seq 524:869, ack 3540, win 501, options [nop,nop,TS val 734631201 ecr 3015131821], length 345 13:37:29.574167 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [.], ack 869, win 505, options [nop,nop,TS val 3015131822 ecr 734631201], length 0 13:37:30.264219 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [P.], seq 3540:4385, ack 869, win 505, options [nop,nop,TS val 3015132513 ecr 734631201], length 845 13:37:30.304940 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [.], ack 4385, win 501, options [nop,nop,TS val 734631932 ecr 3015132513], length 0 13:37:35.268234 IP 10.19.8.160.8088 > 10.144.18.82.38247: Flags [F.], seq 4385, ack 869, win 505, options [nop,nop,TS val 3015137517 ecr 734631932], length 0 13:37:35.309014 IP 10.144.18.82.38247 > 10.19.8.160.8088: Flags [.], ack 4386, win 501, options [nop,nop,TS val 734636936 ecr 3015137517], length 0 OUT: 13:37:29.516268 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [S], seq 3628204158, win 64240, options [mss 1460,sackOK,TS val 1936729228 ecr 0,nop,wscale 7], length 0 13:37:29.532098 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [S.], seq 3698964790, ack 3628204159, win 13800, options [mss 1380,nop,wscale 0,sackOK,TS val 2815077303 ecr 1936729228], length 0 13:37:29.532133 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [.], ack 1, win 502, options [nop,nop,TS val 1936729243 ecr 2815077303], length 0 13:37:29.534227 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [P.], seq 1:288, ack 1, win 502, options [nop,nop,TS val 1936729246 ecr 2815077303], length 287 13:37:29.549914 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [.], ack 288, win 14087, options [nop,nop,TS val 2815077321 ecr 1936729246], length 0 13:37:29.550813 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [.], seq 1:1369, ack 288, win 14087, options [nop,nop,TS val 2815077322 ecr 1936729246], length 1368 13:37:29.550837 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [.], ack 1369, win 492, options [nop,nop,TS val 1936729262 ecr 2815077322], length 0 13:37:29.550877 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [P.], seq 1369:3429, ack 288, win 14087, options [nop,nop,TS val 2815077322 ecr 1936729246], length 2060 13:37:29.550888 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [.], ack 3429, win 476, options [nop,nop,TS val 1936729262 ecr 2815077322], length 0 13:37:29.554850 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [P.], seq 288:363, ack 3429, win 501, options [nop,nop,TS val 1936729266 ecr 2815077322], length 75 13:37:29.557181 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [P.], seq 363:369, ack 3429, win 501, options [nop,nop,TS val 1936729269 ecr 2815077322], length 6 13:37:29.557261 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [P.], seq 369:414, ack 3429, win 501, options [nop,nop,TS val 1936729269 ecr 2815077322], length 45 13:37:29.570563 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [.], ack 363, win 14162, options [nop,nop,TS val 2815077342 ecr 1936729266], length 0 13:37:29.572893 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [.], ack 414, win 14213, options [nop,nop,TS val 2815077344 ecr 1936729269], length 0 13:37:29.572893 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [P.], seq 3429:3480, ack 414, win 14213, options [nop,nop,TS val 2815077344 ecr 1936729269], length 51 13:37:29.572932 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [.], ack 3480, win 501, options [nop,nop,TS val 1936729284 ecr 2815077344], length 0 13:37:29.574228 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [P.], seq 414:759, ack 3480, win 501, options [nop,nop,TS val 1936729286 ecr 2815077344], length 345 13:37:29.590016 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [.], ack 759, win 14558, options [nop,nop,TS val 2815077361 ecr 1936729286], length 0 13:37:30.264042 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [P.], seq 3480:4069, ack 759, win 14558, options [nop,nop,TS val 2815078035 ecr 1936729286], length 589 13:37:30.264042 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [P.], seq 4069:4288, ack 759, win 14558, options [nop,nop,TS val 2815078035 ecr 1936729286], length 219 13:37:30.264042 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [P.], seq 4288:4325, ack 759, win 14558, options [nop,nop,TS val 2815078035 ecr 1936729286], length 37 13:37:30.264103 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [.], ack 4069, win 497, options [nop,nop,TS val 1936729975 ecr 2815078035], length 0 13:37:30.264121 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [.], ack 4288, win 496, options [nop,nop,TS val 1936729975 ecr 2815078035], length 0 13:37:30.264127 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [.], ack 4325, win 496, options [nop,nop,TS val 1936729975 ecr 2815078035], length 0 13:37:35.268129 IP 192.168.6.84.443 > 10.19.8.160.32998: Flags [F.], seq 4325, ack 759, win 14558, options [nop,nop,TS val 2815083039 ecr 1936729975], length 0 13:37:35.308773 IP 10.19.8.160.32998 > 192.168.6.84.443: Flags [.], ack 4326, win 501, options [nop,nop,TS val 1936735020 ecr 2815083039], length 0