# tcpdump -ennvvr tcpdump.ens4f0 port 42129 reading from file tcpdump.ens4f0, link-type EN10MB (Ethernet) 23:53:24.235827 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 74: (tos 0x0, ttl 62, id 28536, offset 0, flags [none], proto TCP (6), length 60) 10.0.1.13.42129 > 176.32.112.172.443: Flags [S], cksum 0xb091 (correct), seq 3614865513, win 42340, options [mss 1460,sackOK,TS val 1219725132 ecr 0,nop,wscale 11], length 0 23:53:24.237836 1c:34:da:23:8e:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 234, id 1514, offset 0, flags [DF], proto TCP (6), length 52) 176.32.112.172.443 > 10.0.1.13.42129: Flags [S.], cksum 0x14db (correct), seq 2615442493, ack 3614865514, win 8190, options [mss 1460,nop,wscale 6,nop,nop,sackOK], length 0 23:53:24.238114 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 62, id 28539, offset 0, flags [none], proto TCP (6), length 40) 10.0.1.13.42129 > 176.32.112.172.443: Flags [.], cksum 0x2bf4 (incorrect -> 0x7595), seq 1, ack 1, win 21, length 0 23:53:24.238484 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 291: (tos 0x0, ttl 62, id 28540, offset 0, flags [none], proto TCP (6), length 277) 10.0.1.13.42129 > 176.32.112.172.443: Flags [P.], cksum 0x2ce1 (incorrect -> 0x40f0), seq 1:238, ack 1, win 21, length 237 23:53:24.240523 1c:34:da:23:8e:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 224, id 5813, offset 0, flags [DF], proto TCP (6), length 40) 176.32.112.172.443 > 10.0.1.13.42129: Flags [.], cksum 0x7402 (correct), seq 1, ack 1, win 424, length 0 23:53:24.240602 1c:34:da:23:8e:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 224, id 5814, offset 0, flags [DF], proto TCP (6), length 40) 176.32.112.172.443 > 10.0.1.13.42129: Flags [.], cksum 0x7305 (correct), seq 1, ack 238, win 440, length 0 23:53:24.240720 1c:34:da:23:8e:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 150: (tos 0x0, ttl 224, id 5815, offset 0, flags [DF], proto TCP (6), length 136) 176.32.112.172.443 > 10.0.1.13.42129: Flags [P.], cksum 0xb080 (correct), seq 1:97, ack 238, win 440, length 96 23:53:24.240759 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 62, id 28541, offset 0, flags [none], proto TCP (6), length 40) 10.0.1.13.42129 > 176.32.112.172.443: Flags [.], cksum 0x2bf4 (incorrect -> 0x7448), seq 238, ack 97, win 21, length 0 23:53:24.240802 1c:34:da:23:8e:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 1514: (tos 0x0, ttl 224, id 5816, offset 0, flags [DF], proto TCP (6), length 1500) 176.32.112.172.443 > 10.0.1.13.42129: Flags [.], cksum 0x13b6 (correct), seq 97:1557, ack 238, win 440, length 1460 23:53:24.240840 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 62, id 28542, offset 0, flags [none], proto TCP (6), length 40) 10.0.1.13.42129 > 176.32.112.172.443: Flags [.], cksum 0x2bf4 (incorrect -> 0x6e92), seq 238, ack 1557, win 23, length 0 23:53:24.240883 1c:34:da:23:8e:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 3533: (tos 0x0, ttl 224, id 5817, offset 0, flags [DF], proto TCP (6), length 3519) 176.32.112.172.443 > 10.0.1.13.42129: Flags [P.], cksum 0x398b (incorrect -> 0x4f0b), seq 1557:5036, ack 238, win 440, length 3479 23:53:24.240920 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 62, id 28543, offset 0, flags [none], proto TCP (6), length 40) 10.0.1.13.42129 > 176.32.112.172.443: Flags [.], cksum 0x2bf4 (incorrect -> 0x60f8), seq 238, ack 5036, win 26, length 0 23:53:24.242257 1c:34:da:23:8e:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 392: (tos 0x0, ttl 224, id 5820, offset 0, flags [DF], proto TCP (6), length 378) 176.32.112.172.443 > 10.0.1.13.42129: Flags [P.], cksum 0x0397 (correct), seq 5036:5374, ack 238, win 440, length 338 23:53:24.242303 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 62, id 28544, offset 0, flags [none], proto TCP (6), length 40) 10.0.1.13.42129 > 176.32.112.172.443: Flags [.], cksum 0x2bf4 (incorrect -> 0x5fa5), seq 238, ack 5374, win 27, length 0 23:53:24.242320 1c:34:da:23:8e:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 63: (tos 0x0, ttl 224, id 5821, offset 0, flags [DF], proto TCP (6), length 49) 176.32.112.172.443 > 10.0.1.13.42129: Flags [P.], cksum 0x40e6 (correct), seq 5374:5383, ack 238, win 440, length 9 23:53:24.242352 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 62, id 28545, offset 0, flags [none], proto TCP (6), length 40) 10.0.1.13.42129 > 176.32.112.172.443: Flags [.], cksum 0x2bf4 (incorrect -> 0x5f9c), seq 238, ack 5383, win 27, length 0 23:53:24.242734 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 204: (tos 0x0, ttl 62, id 28546, offset 0, flags [none], proto TCP (6), length 190) 10.0.1.13.42129 > 176.32.112.172.443: Flags [P.], cksum 0x2c8a (incorrect -> 0x494a), seq 238:388, ack 5383, win 27, length 150 23:53:24.245220 1c:34:da:23:8e:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 224, id 5822, offset 0, flags [DF], proto TCP (6), length 40) 176.32.112.172.443 > 10.0.1.13.42129: Flags [.], cksum 0x5d59 (correct), seq 5383, ack 388, win 456, length 0 23:53:24.245342 1c:34:da:23:8e:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 224, id 5823, offset 0, flags [DF], proto TCP (6), length 46) 176.32.112.172.443 > 10.0.1.13.42129: Flags [P.], cksum 0x4547 (correct), seq 5383:5389, ack 388, win 456, length 6 23:53:24.245352 1c:34:da:23:8e:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 123: (tos 0x0, ttl 224, id 5824, offset 0, flags [DF], proto TCP (6), length 109) 176.32.112.172.443 > 10.0.1.13.42129: Flags [P.], cksum 0x7a2a (correct), seq 5389:5458, ack 388, win 456, length 69 23:53:24.245411 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 62, id 28549, offset 0, flags [none], proto TCP (6), length 40) 10.0.1.13.42129 > 176.32.112.172.443: Flags [.], cksum 0x2bf4 (incorrect -> 0x5ebb), seq 388, ack 5458, win 27, length 0 23:53:24.245777 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 875: (tos 0x0, ttl 62, id 28550, offset 0, flags [none], proto TCP (6), length 861) 10.0.1.13.42129 > 176.32.112.172.443: Flags [P.], cksum 0x2f29 (incorrect -> 0x9daa), seq 388:1209, ack 5458, win 27, length 821 23:53:24.297353 1c:34:da:23:8e:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 224, id 5825, offset 0, flags [DF], proto TCP (6), length 40) 176.32.112.172.443 > 10.0.1.13.42129: Flags [.], cksum 0x59c1 (correct), seq 5458, ack 1209, win 480, length 0 23:53:24.297399 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 203: (tos 0x0, ttl 62, id 28564, offset 0, flags [none], proto TCP (6), length 189) 10.0.1.13.42129 > 176.32.112.172.443: Flags [P.], cksum 0x2c89 (incorrect -> 0xeabb), seq 1209:1358, ack 5458, win 27, length 149 23:53:24.299585 1c:34:da:23:8e:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 224, id 5826, offset 0, flags [DF], proto TCP (6), length 40) 176.32.112.172.443 > 10.0.1.13.42129: Flags [.], cksum 0x5910 (correct), seq 5458, ack 1358, win 508, length 0 23:54:09.690949 1c:34:da:23:92:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 283: (tos 0x0, ttl 224, id 5827, offset 0, flags [DF], proto TCP (6), length 269) 176.32.112.172.443 > 10.0.1.13.42129: Flags [P.], cksum 0x026f (correct), seq 5458:5687, ack 1358, win 508, length 229 23:54:09.691030 1c:34:da:23:92:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 107: (tos 0x0, ttl 224, id 5828, offset 0, flags [DF], proto TCP (6), length 93) 176.32.112.172.443 > 10.0.1.13.42129: Flags [P.], cksum 0xaf6f (correct), seq 5687:5740, ack 1358, win 508, length 53 23:54:09.691844 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 62, id 7080, offset 0, flags [none], proto TCP (6), length 40) 10.0.1.13.42129 > 176.32.112.172.443: Flags [.], cksum 0x59d4 (correct), seq 1358, ack 5740, win 30, length 0 23:54:09.691859 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 62, id 7079, offset 0, flags [none], proto TCP (6), length 52) 10.0.1.13.42129 > 176.32.112.172.443: Flags [.], cksum 0xc7f0 (correct), seq 1358, ack 5458, win 29, options [nop,nop,sack 1 {5687:5740}], length 0 23:54:10.692979 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 107: (tos 0x0, ttl 62, id 7930, offset 0, flags [none], proto TCP (6), length 93) 10.0.1.13.42129 > 176.32.112.172.443: Flags [P.], cksum 0x2c29 (incorrect -> 0x72da), seq 1358:1411, ack 5740, win 30, length 53 23:54:10.693110 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 62, id 7931, offset 0, flags [none], proto TCP (6), length 40) 10.0.1.13.42129 > 176.32.112.172.443: Flags [F.], cksum 0x599e (correct), seq 1411, ack 5740, win 30, length 0 23:54:10.695155 1c:34:da:23:92:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 224, id 5829, offset 0, flags [DF], proto TCP (6), length 40) 176.32.112.172.443 > 10.0.1.13.42129: Flags [.], cksum 0x57c1 (correct), seq 5740, ack 1411, win 508, length 0 23:54:10.695224 1c:34:da:23:92:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 107: (tos 0x0, ttl 224, id 5830, offset 0, flags [DF], proto TCP (6), length 93) 176.32.112.172.443 > 10.0.1.13.42129: Flags [P.], cksum 0xdd5b (correct), seq 5740:5793, ack 1411, win 508, length 53 23:54:10.695261 1c:34:da:23:92:00 > 1c:34:da:6a:5f:02, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 224, id 5831, offset 0, flags [DF], proto TCP (6), length 40) 176.32.112.172.443 > 10.0.1.13.42129: Flags [F.], cksum 0x578a (correct), seq 5793, ack 1412, win 508, length 0 23:54:10.695342 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 62, id 7933, offset 0, flags [DF], proto TCP (6), length 40) 10.192.8.24.42129 > 176.32.112.172.443: Flags [R], cksum 0x808c (correct), seq 3614866924, win 0, length 0 23:54:10.695500 1c:34:da:6a:5f:02 > 00:00:5e:00:01:1f, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 62, id 7934, offset 0, flags [DF], proto TCP (6), length 40) 10.0.1.13.42129 > 176.32.112.172.443: Flags [R], cksum 0x8856 (correct), seq 3614866925, win 0, length 0