No. Time Source Destination Protocol Length Info 95 4.700675 192.168.1.25 23.227.38.74 TCP 78 60474 → 443 [SYN] Seq=0 Win=65535 Len=0 MSS=1460 WS=64 TSval=3745487919 TSecr=0 SACK_PERM Frame 95: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:39.586273000 GMT UTC Arrival Time: Mar 26, 2024 14:38:39.586273000 UTC Epoch Arrival Time: 1711463919.586273000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.002907000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 4.700675000 seconds] Frame Number: 95 Frame Length: 78 bytes (624 bits) Capture Length: 78 bytes (624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 64 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3aca [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 0, Len: 0 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 0] Sequence Number: 0 (relative sequence number) Sequence Number (raw): 1529031468 [Next Sequence Number: 1 (relative sequence number)] Acknowledgment Number: 0 Acknowledgment number (raw): 0 1011 .... = Header Length: 44 bytes (11) Flags: 0x002 (SYN) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...0 .... = Acknowledgment: Not set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..1. = Syn: Set .... .... ...0 = Fin: Not set [TCP Flags: ··········S·] Window: 65535 [Calculated window size: 65535] Checksum: 0x4759 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (24 bytes), Maximum segment size, No-Operation (NOP), Window scale, No-Operation (NOP), No-Operation (NOP), Timestamps, SACK permitted, End of Option List (EOL), End of Option List (EOL) TCP Option - Maximum segment size: 1460 bytes TCP Option - No-Operation (NOP) TCP Option - Window scale: 6 (multiply by 64) TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745487919, TSecr 0 TCP Option - SACK permitted TCP Option - End of Option List (EOL) TCP Option - End of Option List (EOL) [Timestamps] No. Time Source Destination Protocol Length Info 99 4.709443 192.168.1.25 23.227.38.74 TCP 66 60474 → 443 [ACK] Seq=1 Ack=1 Win=132480 Len=0 TSval=3745487928 TSecr=454241334 Frame 99: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:39.595041000 GMT UTC Arrival Time: Mar 26, 2024 14:38:39.595041000 UTC Epoch Arrival Time: 1711463919.595041000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000106000 seconds] [Time delta from previous displayed frame: 0.008768000 seconds] [Time since reference or first frame: 4.709443000 seconds] Frame Number: 99 Frame Length: 66 bytes (528 bits) Capture Length: 66 bytes (528 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 52 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3ad6 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 1, Ack: 1, Len: 0 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 0] Sequence Number: 1 (relative sequence number) Sequence Number (raw): 1529031469 [Next Sequence Number: 1 (relative sequence number)] Acknowledgment Number: 1 (relative ack number) Acknowledgment number (raw): 1542159598 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 2070 [Calculated window size: 132480] [Window size scaling factor: 64] Checksum: 0x5ed7 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745487928, TSecr 454241334 [Timestamps] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 98] [The RTT to ACK the segment was: 0.000106000 seconds] [iRTT: 0.008768000 seconds] No. Time Source Destination Protocol Length Info 100 4.710353 192.168.1.25 23.227.38.74 TLSv1.3 358 Client Hello (SNI=wob-glb-production.myshopify.com) Frame 100: 358 bytes on wire (2864 bits), 358 bytes captured (2864 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:39.595951000 GMT UTC Arrival Time: Mar 26, 2024 14:38:39.595951000 UTC Epoch Arrival Time: 1711463919.595951000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000910000 seconds] [Time delta from previous displayed frame: 0.000910000 seconds] [Time since reference or first frame: 4.710353000 seconds] Frame Number: 100 Frame Length: 358 bytes (2864 bits) Capture Length: 358 bytes (2864 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:tls] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 344 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x39b2 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 1, Ack: 1, Len: 292 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 292] Sequence Number: 1 (relative sequence number) Sequence Number (raw): 1529031469 [Next Sequence Number: 293 (relative sequence number)] Acknowledgment Number: 1 (relative ack number) Acknowledgment number (raw): 1542159598 1000 .... = Header Length: 32 bytes (8) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 2070 [Calculated window size: 132480] [Window size scaling factor: 64] Checksum: 0x77ca [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745487928, TSecr 454241334 [Timestamps] [SEQ/ACK analysis] [iRTT: 0.008768000 seconds] [Bytes in flight: 292] [Bytes sent since last PSH flag: 292] TCP payload (292 bytes) Transport Layer Security TLSv1.3 Record Layer: Handshake Protocol: Client Hello Content Type: Handshake (22) Version: TLS 1.0 (0x0301) Length: 287 Handshake Protocol: Client Hello Handshake Type: Client Hello (1) Length: 283 Version: TLS 1.2 (0x0303) Random: 7f7b84eaf74ac559e3afae7e9d3f02c6f625ea443a1ad6c3580982fba9e7485a Session ID Length: 32 Session ID: 1b01378a72a0acf2d30e81e5ed89999a735b892de84d139942c3f67d8b90ef12 Cipher Suites Length: 28 Cipher Suites (14 suites) Compression Methods Length: 1 Compression Methods (1 method) Extensions Length: 182 Extension: server_name (len=37) name=wob-glb-production.myshopify.com Type: server_name (0) Length: 37 Server Name Indication extension Server Name list length: 35 Server Name Type: host_name (0) Server Name length: 32 Server Name: wob-glb-production.myshopify.com Extension: status_request (len=5) Type: status_request (5) Length: 5 Certificate Status Type: OCSP (1) Responder ID list Length: 0 Request Extensions Length: 0 Extension: supported_groups (len=10) Type: supported_groups (10) Length: 10 Supported Groups List Length: 8 Supported Groups (4 groups) Extension: ec_point_formats (len=2) Type: ec_point_formats (11) Length: 2 EC point formats Length: 1 Elliptic curves point formats (1) Extension: signature_algorithms (len=26) Type: signature_algorithms (13) Length: 26 Signature Hash Algorithms Length: 24 Signature Hash Algorithms (12 algorithms) Extension: renegotiation_info (len=1) Type: renegotiation_info (65281) Length: 1 Renegotiation Info extension Extension: extended_master_secret (len=0) Type: extended_master_secret (23) Length: 0 Extension: application_layer_protocol_negotiation (len=14) Type: application_layer_protocol_negotiation (16) Length: 14 ALPN Extension Length: 12 ALPN Protocol Extension: signed_certificate_timestamp (len=0) Type: signed_certificate_timestamp (18) Length: 0 Extension: supported_versions (len=5) TLS 1.3, TLS 1.2 Type: supported_versions (43) Length: 5 Supported Versions length: 4 Supported Version: TLS 1.3 (0x0304) Supported Version: TLS 1.2 (0x0303) Extension: key_share (len=38) x25519 Type: key_share (51) Length: 38 Key Share extension [JA4: t13d1411h2_cbb2034c60b8_e7c285222651] [JA4_r: t13d1411h2_1301,1302,1303,c009,c00a,c012,c013,c014,c02b,c02c,c02f,c030,cca8,cca9_0005,000a,000b,000d,0012,0017,002b,0033,ff01_0804,0403,0807,0805,0806,0401,0501,0601,0503,0603,0201,0203] [JA3 Fullstring: 771,49195-49199-49196-49200-52393-52392-49161-49171-49162-49172-49170-4865-4866-4867,0-5-10-11-13-65281-23-16-18-43-51,29-23-24-25,0] [JA3: fd75aaca18604d62f2bc8b02b345140f] No. Time Source Destination Protocol Length Info 106 4.722863 192.168.1.25 23.227.38.74 TCP 66 60474 → 443 [ACK] Seq=293 Ack=4802 Win=127616 Len=0 TSval=3745487941 TSecr=454241346 Frame 106: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:39.608461000 GMT UTC Arrival Time: Mar 26, 2024 14:38:39.608461000 UTC Epoch Arrival Time: 1711463919.608461000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000154000 seconds] [Time delta from previous displayed frame: 0.012510000 seconds] [Time since reference or first frame: 4.722863000 seconds] Frame Number: 106 Frame Length: 66 bytes (528 bits) Capture Length: 66 bytes (528 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 52 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3ad6 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 293, Ack: 4802, Len: 0 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 0] Sequence Number: 293 (relative sequence number) Sequence Number (raw): 1529031761 [Next Sequence Number: 293 (relative sequence number)] Acknowledgment Number: 4802 (relative ack number) Acknowledgment number (raw): 1542164399 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 1994 [Calculated window size: 127616] [Window size scaling factor: 64] Checksum: 0x4b25 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745487941, TSecr 454241346 [Timestamps] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 105] [The RTT to ACK the segment was: 0.000154000 seconds] [iRTT: 0.008768000 seconds] No. Time Source Destination Protocol Length Info 107 4.728768 192.168.1.25 23.227.38.74 TCP 66 [TCP Window Update] 60474 → 443 [ACK] Seq=293 Ack=4802 Win=131072 Len=0 TSval=3745487947 TSecr=454241346 Frame 107: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:39.614366000 GMT UTC Arrival Time: Mar 26, 2024 14:38:39.614366000 UTC Epoch Arrival Time: 1711463919.614366000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.005905000 seconds] [Time delta from previous displayed frame: 0.005905000 seconds] [Time since reference or first frame: 4.728768000 seconds] Frame Number: 107 Frame Length: 66 bytes (528 bits) Capture Length: 66 bytes (528 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 52 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3ad6 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 293, Ack: 4802, Len: 0 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 0] Sequence Number: 293 (relative sequence number) Sequence Number (raw): 1529031761 [Next Sequence Number: 293 (relative sequence number)] Acknowledgment Number: 4802 (relative ack number) Acknowledgment number (raw): 1542164399 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 2048 [Calculated window size: 131072] [Window size scaling factor: 64] Checksum: 0x4ae9 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745487947, TSecr 454241346 [Timestamps] [SEQ/ACK analysis] [iRTT: 0.008768000 seconds] [TCP Analysis Flags] No. Time Source Destination Protocol Length Info 108 4.740594 192.168.1.25 23.227.38.74 TLSv1.3 130 Change Cipher Spec, Application Data Frame 108: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:39.626192000 GMT UTC Arrival Time: Mar 26, 2024 14:38:39.626192000 UTC Epoch Arrival Time: 1711463919.626192000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.011826000 seconds] [Time delta from previous displayed frame: 0.011826000 seconds] [Time since reference or first frame: 4.740594000 seconds] Frame Number: 108 Frame Length: 130 bytes (1040 bits) Capture Length: 130 bytes (1040 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:tls] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 116 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3a96 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 293, Ack: 4802, Len: 64 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 64] Sequence Number: 293 (relative sequence number) Sequence Number (raw): 1529031761 [Next Sequence Number: 357 (relative sequence number)] Acknowledgment Number: 4802 (relative ack number) Acknowledgment number (raw): 1542164399 1000 .... = Header Length: 32 bytes (8) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 2048 [Calculated window size: 131072] [Window size scaling factor: 64] Checksum: 0x8e40 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745487959, TSecr 454241346 [Timestamps] [SEQ/ACK analysis] [iRTT: 0.008768000 seconds] [Bytes in flight: 64] [Bytes sent since last PSH flag: 64] TCP payload (64 bytes) Transport Layer Security TLSv1.3 Record Layer: Change Cipher Spec Protocol: Change Cipher Spec Content Type: Change Cipher Spec (20) Version: TLS 1.2 (0x0303) Length: 1 Change Cipher Spec Message TLSv1.3 Record Layer: Application Data Protocol: Hypertext Transfer Protocol Opaque Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 53 Encrypted Application Data: 2dfa2b50509e37c34d0af4bd165fdad530da5221f42cf3c5445270f543c6971751777ce9e0a54abe64e1ffc17212db173cb7954dc0 [Application Data Protocol: Hypertext Transfer Protocol] No. Time Source Destination Protocol Length Info 109 4.741872 192.168.1.25 23.227.38.74 TLSv1.3 152 Application Data Frame 109: 152 bytes on wire (1216 bits), 152 bytes captured (1216 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:39.627470000 GMT UTC Arrival Time: Mar 26, 2024 14:38:39.627470000 UTC Epoch Arrival Time: 1711463919.627470000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.001278000 seconds] [Time delta from previous displayed frame: 0.001278000 seconds] [Time since reference or first frame: 4.741872000 seconds] Frame Number: 109 Frame Length: 152 bytes (1216 bits) Capture Length: 152 bytes (1216 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:tls] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 138 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3a80 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 357, Ack: 4802, Len: 86 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 86] Sequence Number: 357 (relative sequence number) Sequence Number (raw): 1529031825 [Next Sequence Number: 443 (relative sequence number)] Acknowledgment Number: 4802 (relative ack number) Acknowledgment number (raw): 1542164399 1000 .... = Header Length: 32 bytes (8) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 2048 [Calculated window size: 131072] [Window size scaling factor: 64] Checksum: 0xa29a [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745487960, TSecr 454241346 [Timestamps] [SEQ/ACK analysis] [iRTT: 0.008768000 seconds] [Bytes in flight: 150] [Bytes sent since last PSH flag: 86] TCP payload (86 bytes) Transport Layer Security TLSv1.3 Record Layer: Application Data Protocol: Hypertext Transfer Protocol Opaque Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 81 Encrypted Application Data: f2ec9201c0e245381d0d02b7ef2e3df8cae40d0234cb49285ad392e0731846ab98e31e673b8c3a37ef95e4f2ba5aa4484799c6a40e9becc135e0fedcd9a3d13913240f8bc8d7deff5bfacfee8d330de1f0 [Application Data Protocol: Hypertext Transfer Protocol] No. Time Source Destination Protocol Length Info 110 4.746183 192.168.1.25 23.227.38.74 TLSv1.3 238 Application Data Frame 110: 238 bytes on wire (1904 bits), 238 bytes captured (1904 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:39.631781000 GMT UTC Arrival Time: Mar 26, 2024 14:38:39.631781000 UTC Epoch Arrival Time: 1711463919.631781000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.004311000 seconds] [Time delta from previous displayed frame: 0.004311000 seconds] [Time since reference or first frame: 4.746183000 seconds] Frame Number: 110 Frame Length: 238 bytes (1904 bits) Capture Length: 238 bytes (1904 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:tls] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 224 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3a2a [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 443, Ack: 4802, Len: 172 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 172] Sequence Number: 443 (relative sequence number) Sequence Number (raw): 1529031911 [Next Sequence Number: 615 (relative sequence number)] Acknowledgment Number: 4802 (relative ack number) Acknowledgment number (raw): 1542164399 1000 .... = Header Length: 32 bytes (8) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 2048 [Calculated window size: 131072] [Window size scaling factor: 64] Checksum: 0xac83 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745487964, TSecr 454241346 [Timestamps] [SEQ/ACK analysis] [iRTT: 0.008768000 seconds] [Bytes in flight: 322] [Bytes sent since last PSH flag: 172] TCP payload (172 bytes) Transport Layer Security TLSv1.3 Record Layer: Application Data Protocol: Hypertext Transfer Protocol Opaque Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 167 Encrypted Application Data [truncated]: 895743994064558b59029fc545306e83964c630eda7b45aa71a5c8fc6f1790c467441dc28aaaf4c033883a2eca5c8349bccbe93722b9502e1a15d90b2df37a1c0411cf9f3bc379dae51c033a25a28d9547f44b92a45a10425db87ddd04784704afbd802 [Application Data Protocol: Hypertext Transfer Protocol] No. Time Source Destination Protocol Length Info 113 4.748513 192.168.1.25 23.227.38.74 TCP 66 60474 → 443 [ACK] Seq=615 Ack=4873 Win=130944 Len=0 TSval=3745487967 TSecr=454241374 Frame 113: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:39.634111000 GMT UTC Arrival Time: Mar 26, 2024 14:38:39.634111000 UTC Epoch Arrival Time: 1711463919.634111000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000137000 seconds] [Time delta from previous displayed frame: 0.002330000 seconds] [Time since reference or first frame: 4.748513000 seconds] Frame Number: 113 Frame Length: 66 bytes (528 bits) Capture Length: 66 bytes (528 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 52 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3ad6 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 615, Ack: 4873, Len: 0 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 0] Sequence Number: 615 (relative sequence number) Sequence Number (raw): 1529032083 [Next Sequence Number: 615 (relative sequence number)] Acknowledgment Number: 4873 (relative ack number) Acknowledgment number (raw): 1542164470 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 2046 [Calculated window size: 130944] [Window size scaling factor: 64] Checksum: 0x4932 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745487967, TSecr 454241374 [Timestamps] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 112] [The RTT to ACK the segment was: 0.000137000 seconds] [iRTT: 0.008768000 seconds] No. Time Source Destination Protocol Length Info 114 4.749225 192.168.1.25 23.227.38.74 TLSv1.3 97 Application Data Frame 114: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:39.634823000 GMT UTC Arrival Time: Mar 26, 2024 14:38:39.634823000 UTC Epoch Arrival Time: 1711463919.634823000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000712000 seconds] [Time delta from previous displayed frame: 0.000712000 seconds] [Time since reference or first frame: 4.749225000 seconds] Frame Number: 114 Frame Length: 97 bytes (776 bits) Capture Length: 97 bytes (776 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:tls] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 83 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3ab7 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 615, Ack: 4873, Len: 31 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 31] Sequence Number: 615 (relative sequence number) Sequence Number (raw): 1529032083 [Next Sequence Number: 646 (relative sequence number)] Acknowledgment Number: 4873 (relative ack number) Acknowledgment number (raw): 1542164470 1000 .... = Header Length: 32 bytes (8) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 2048 [Calculated window size: 131072] [Window size scaling factor: 64] Checksum: 0x2764 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745487967, TSecr 454241374 [Timestamps] [SEQ/ACK analysis] [iRTT: 0.008768000 seconds] [Bytes in flight: 203] [Bytes sent since last PSH flag: 31] TCP payload (31 bytes) Transport Layer Security TLSv1.3 Record Layer: Application Data Protocol: Hypertext Transfer Protocol Opaque Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 26 Encrypted Application Data: 1014888ec4227231df8d21e1c768285624f66f4afb3cbd159535 [Application Data Protocol: Hypertext Transfer Protocol] No. Time Source Destination Protocol Length Info 152 6.955514 192.168.1.25 23.227.38.74 TCP 66 60474 → 443 [ACK] Seq=646 Ack=5992 Win=129920 Len=0 TSval=3745490174 TSecr=454243579 Frame 152: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:41.841112000 GMT UTC Arrival Time: Mar 26, 2024 14:38:41.841112000 UTC Epoch Arrival Time: 1711463921.841112000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000272000 seconds] [Time delta from previous displayed frame: 2.206289000 seconds] [Time since reference or first frame: 6.955514000 seconds] Frame Number: 152 Frame Length: 66 bytes (528 bits) Capture Length: 66 bytes (528 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 52 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3ad6 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 646, Ack: 5992, Len: 0 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 0] Sequence Number: 646 (relative sequence number) Sequence Number (raw): 1529032114 [Next Sequence Number: 646 (relative sequence number)] Acknowledgment Number: 5992 (relative ack number) Acknowledgment number (raw): 1542165589 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 2030 [Calculated window size: 129920] [Window size scaling factor: 64] Checksum: 0x3388 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745490174, TSecr 454243579 [Timestamps] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 151] [The RTT to ACK the segment was: 0.000272000 seconds] [iRTT: 0.008768000 seconds] No. Time Source Destination Protocol Length Info 153 6.970090 192.168.1.25 23.227.38.74 TLSv1.3 106 Application Data Frame 153: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:41.855688000 GMT UTC Arrival Time: Mar 26, 2024 14:38:41.855688000 UTC Epoch Arrival Time: 1711463921.855688000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.014576000 seconds] [Time delta from previous displayed frame: 0.014576000 seconds] [Time since reference or first frame: 6.970090000 seconds] Frame Number: 153 Frame Length: 106 bytes (848 bits) Capture Length: 106 bytes (848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:tls] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 92 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3aae [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 646, Ack: 5992, Len: 40 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 40] Sequence Number: 646 (relative sequence number) Sequence Number (raw): 1529032114 [Next Sequence Number: 686 (relative sequence number)] Acknowledgment Number: 5992 (relative ack number) Acknowledgment number (raw): 1542165589 1000 .... = Header Length: 32 bytes (8) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 2048 [Calculated window size: 131072] [Window size scaling factor: 64] Checksum: 0x0b50 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745490188, TSecr 454243579 [Timestamps] [SEQ/ACK analysis] [iRTT: 0.008768000 seconds] [Bytes in flight: 40] [Bytes sent since last PSH flag: 40] TCP payload (40 bytes) Transport Layer Security TLSv1.3 Record Layer: Application Data Protocol: Hypertext Transfer Protocol Opaque Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 35 Encrypted Application Data: a8412b6714e601947f75d805e9be4a747726e9c0a1082ce0792f7a402a11cd7e6848ed [Application Data Protocol: Hypertext Transfer Protocol] No. Time Source Destination Protocol Length Info 185 9.233914 192.168.1.25 23.227.38.74 TCP 66 60474 → 443 [ACK] Seq=686 Ack=6526 Win=130496 Len=0 TSval=3745492452 TSecr=454245782 Frame 185: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:44.119512000 GMT UTC Arrival Time: Mar 26, 2024 14:38:44.119512000 UTC Epoch Arrival Time: 1711463924.119512000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000138000 seconds] [Time delta from previous displayed frame: 2.263824000 seconds] [Time since reference or first frame: 9.233914000 seconds] Frame Number: 185 Frame Length: 66 bytes (528 bits) Capture Length: 66 bytes (528 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 52 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3ad6 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 686, Ack: 6526, Len: 0 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 0] Sequence Number: 686 (relative sequence number) Sequence Number (raw): 1529032154 [Next Sequence Number: 686 (relative sequence number)] Acknowledgment Number: 6526 (relative ack number) Acknowledgment number (raw): 1542166123 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 2039 [Calculated window size: 130496] [Window size scaling factor: 64] Checksum: 0x1fc0 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745492452, TSecr 454245782 [Timestamps] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 184] [The RTT to ACK the segment was: 0.000138000 seconds] [iRTT: 0.008768000 seconds] No. Time Source Destination Protocol Length Info 188 9.234372 192.168.1.25 23.227.38.74 TCP 66 60474 → 443 [ACK] Seq=686 Ack=6557 Win=131008 Len=0 TSval=3745492452 TSecr=454245782 Frame 188: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:44.119970000 GMT UTC Arrival Time: Mar 26, 2024 14:38:44.119970000 UTC Epoch Arrival Time: 1711463924.119970000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000097000 seconds] [Time delta from previous displayed frame: 0.000458000 seconds] [Time since reference or first frame: 9.234372000 seconds] Frame Number: 188 Frame Length: 66 bytes (528 bits) Capture Length: 66 bytes (528 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 52 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3ad6 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 686, Ack: 6557, Len: 0 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 0] Sequence Number: 686 (relative sequence number) Sequence Number (raw): 1529032154 [Next Sequence Number: 686 (relative sequence number)] Acknowledgment Number: 6557 (relative ack number) Acknowledgment number (raw): 1542166154 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 2047 [Calculated window size: 131008] [Window size scaling factor: 64] Checksum: 0x1f99 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745492452, TSecr 454245782 [Timestamps] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 186] [The RTT to ACK the segment was: 0.000099000 seconds] [iRTT: 0.008768000 seconds] No. Time Source Destination Protocol Length Info 189 9.234424 192.168.1.25 23.227.38.74 TCP 78 [TCP Dup ACK 188#1] 60474 → 443 [ACK] Seq=686 Ack=6557 Win=131008 Len=0 TSval=3745492452 TSecr=454245803 SLE=6526 SRE=6557 Frame 189: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:44.120022000 GMT UTC Arrival Time: Mar 26, 2024 14:38:44.120022000 UTC Epoch Arrival Time: 1711463924.120022000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000052000 seconds] [Time delta from previous displayed frame: 0.000052000 seconds] [Time since reference or first frame: 9.234424000 seconds] Frame Number: 189 Frame Length: 78 bytes (624 bits) Capture Length: 78 bytes (624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: Bad TCP] [Coloring Rule String: tcp.analysis.flags && !tcp.analysis.window_update && !tcp.analysis.keep_alive && !tcp.analysis.keep_alive_ack] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 64 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3aca [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 686, Ack: 6557, Len: 0 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 0] Sequence Number: 686 (relative sequence number) Sequence Number (raw): 1529032154 [Next Sequence Number: 686 (relative sequence number)] Acknowledgment Number: 6557 (relative ack number) Acknowledgment number (raw): 1542166154 1011 .... = Header Length: 44 bytes (11) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 2047 [Calculated window size: 131008] [Window size scaling factor: 64] Checksum: 0x04a0 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (24 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps, No-Operation (NOP), No-Operation (NOP), SACK TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745492452, TSecr 454245803 TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - SACK 6526-6557 [Timestamps] [SEQ/ACK analysis] [iRTT: 0.008768000 seconds] [TCP Analysis Flags] [This is a TCP duplicate ack] [Duplicate ACK #: 1] [Duplicate to the ACK in frame: 188] No. Time Source Destination Protocol Length Info 199 10.236650 192.168.1.25 23.227.38.74 TLSv1.3 106 Application Data Frame 199: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:45.122248000 GMT UTC Arrival Time: Mar 26, 2024 14:38:45.122248000 UTC Epoch Arrival Time: 1711463925.122248000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.080097000 seconds] [Time delta from previous displayed frame: 1.002226000 seconds] [Time since reference or first frame: 10.236650000 seconds] Frame Number: 199 Frame Length: 106 bytes (848 bits) Capture Length: 106 bytes (848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:tls] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 92 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3aae [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 686, Ack: 6557, Len: 40 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 40] Sequence Number: 686 (relative sequence number) Sequence Number (raw): 1529032154 [Next Sequence Number: 726 (relative sequence number)] Acknowledgment Number: 6557 (relative ack number) Acknowledgment number (raw): 1542166154 1000 .... = Header Length: 32 bytes (8) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 2048 [Calculated window size: 131072] [Window size scaling factor: 64] Checksum: 0xcd3e [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745493455, TSecr 454245803 [Timestamps] [SEQ/ACK analysis] [iRTT: 0.008768000 seconds] [Bytes in flight: 40] [Bytes sent since last PSH flag: 40] TCP payload (40 bytes) Transport Layer Security TLSv1.3 Record Layer: Application Data Protocol: Hypertext Transfer Protocol Opaque Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 35 Encrypted Application Data: 0adf53e759151377b0d3f2299f19361d1e7856fa338718cfa75f6a15927f32db94f0b5 [Application Data Protocol: Hypertext Transfer Protocol] No. Time Source Destination Protocol Length Info 221 12.457116 192.168.1.25 23.227.38.74 TCP 66 60474 → 443 [ACK] Seq=726 Ack=7127 Win=130496 Len=0 TSval=3745495675 TSecr=454249057 Frame 221: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:47.342714000 GMT UTC Arrival Time: Mar 26, 2024 14:38:47.342714000 UTC Epoch Arrival Time: 1711463927.342714000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000173000 seconds] [Time delta from previous displayed frame: 2.220466000 seconds] [Time since reference or first frame: 12.457116000 seconds] Frame Number: 221 Frame Length: 66 bytes (528 bits) Capture Length: 66 bytes (528 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 52 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3ad6 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 726, Ack: 7127, Len: 0 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 0] Sequence Number: 726 (relative sequence number) Sequence Number (raw): 1529032194 [Next Sequence Number: 726 (relative sequence number)] Acknowledgment Number: 7127 (relative ack number) Acknowledgment number (raw): 1542166724 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 2039 [Calculated window size: 130496] [Window size scaling factor: 64] Checksum: 0x03dd [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745495675, TSecr 454249057 [Timestamps] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 220] [The RTT to ACK the segment was: 0.000173000 seconds] [iRTT: 0.008768000 seconds] No. Time Source Destination Protocol Length Info 254 14.459467 192.168.1.25 23.227.38.74 TLSv1.3 106 Application Data Frame 254: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:49.345065000 GMT UTC Arrival Time: Mar 26, 2024 14:38:49.345065000 UTC Epoch Arrival Time: 1711463929.345065000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.004156000 seconds] [Time delta from previous displayed frame: 2.002351000 seconds] [Time since reference or first frame: 14.459467000 seconds] Frame Number: 254 Frame Length: 106 bytes (848 bits) Capture Length: 106 bytes (848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:tls] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 92 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3aae [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 726, Ack: 7127, Len: 40 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 40] Sequence Number: 726 (relative sequence number) Sequence Number (raw): 1529032194 [Next Sequence Number: 766 (relative sequence number)] Acknowledgment Number: 7127 (relative ack number) Acknowledgment number (raw): 1542166724 1000 .... = Header Length: 32 bytes (8) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 2048 [Calculated window size: 131072] [Window size scaling factor: 64] Checksum: 0x2ec6 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745497678, TSecr 454249057 [Timestamps] [SEQ/ACK analysis] [iRTT: 0.008768000 seconds] [Bytes in flight: 40] [Bytes sent since last PSH flag: 40] TCP payload (40 bytes) Transport Layer Security TLSv1.3 Record Layer: Application Data Protocol: Hypertext Transfer Protocol Opaque Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 35 Encrypted Application Data: 345a777cbb61fe201aa39dabb82fe75d8ffcede5be233bd48d455f74d20d67c008f7a3 [Application Data Protocol: Hypertext Transfer Protocol] No. Time Source Destination Protocol Length Info 274 16.710052 192.168.1.25 23.227.38.74 TCP 66 60474 → 443 [ACK] Seq=766 Ack=7682 Win=130496 Len=0 TSval=3745499928 TSecr=454253257 Frame 274: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:51.595650000 GMT UTC Arrival Time: Mar 26, 2024 14:38:51.595650000 UTC Epoch Arrival Time: 1711463931.595650000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000139000 seconds] [Time delta from previous displayed frame: 2.250585000 seconds] [Time since reference or first frame: 16.710052000 seconds] Frame Number: 274 Frame Length: 66 bytes (528 bits) Capture Length: 66 bytes (528 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 52 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3ad6 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 766, Ack: 7682, Len: 0 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 0] Sequence Number: 766 (relative sequence number) Sequence Number (raw): 1529032234 [Next Sequence Number: 766 (relative sequence number)] Acknowledgment Number: 7682 (relative ack number) Acknowledgment number (raw): 1542167279 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 2039 [Calculated window size: 130496] [Window size scaling factor: 64] Checksum: 0xe084 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745499928, TSecr 454253257 [Timestamps] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 272] [The RTT to ACK the segment was: 0.000139000 seconds] [iRTT: 0.008768000 seconds] No. Time Source Destination Protocol Length Info 275 16.710120 192.168.1.25 23.227.38.74 TCP 78 [TCP Dup ACK 274#1] 60474 → 443 [ACK] Seq=766 Ack=7682 Win=130496 Len=0 TSval=3745499928 TSecr=454253316 SLE=7651 SRE=7682 Frame 275: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:51.595718000 GMT UTC Arrival Time: Mar 26, 2024 14:38:51.595718000 UTC Epoch Arrival Time: 1711463931.595718000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000068000 seconds] [Time delta from previous displayed frame: 0.000068000 seconds] [Time since reference or first frame: 16.710120000 seconds] Frame Number: 275 Frame Length: 78 bytes (624 bits) Capture Length: 78 bytes (624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: Bad TCP] [Coloring Rule String: tcp.analysis.flags && !tcp.analysis.window_update && !tcp.analysis.keep_alive && !tcp.analysis.keep_alive_ack] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 64 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3aca [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 766, Ack: 7682, Len: 0 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 0] Sequence Number: 766 (relative sequence number) Sequence Number (raw): 1529032234 [Next Sequence Number: 766 (relative sequence number)] Acknowledgment Number: 7682 (relative ack number) Acknowledgment number (raw): 1542167279 1011 .... = Header Length: 44 bytes (11) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 2039 [Calculated window size: 130496] [Window size scaling factor: 64] Checksum: 0xbc9b [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (24 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps, No-Operation (NOP), No-Operation (NOP), SACK TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745499928, TSecr 454253316 TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - SACK 7651-7682 [Timestamps] [SEQ/ACK analysis] [iRTT: 0.008768000 seconds] [TCP Analysis Flags] [This is a TCP duplicate ack] [Duplicate ACK #: 1] [Duplicate to the ACK in frame: 274] No. Time Source Destination Protocol Length Info 307 19.712807 192.168.1.25 23.227.38.74 TLSv1.3 106 Application Data Frame 307: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:54.598405000 GMT UTC Arrival Time: Mar 26, 2024 14:38:54.598405000 UTC Epoch Arrival Time: 1711463934.598405000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.113837000 seconds] [Time delta from previous displayed frame: 3.002687000 seconds] [Time since reference or first frame: 19.712807000 seconds] Frame Number: 307 Frame Length: 106 bytes (848 bits) Capture Length: 106 bytes (848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:tls] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 92 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3aae [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 766, Ack: 7682, Len: 40 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 40] Sequence Number: 766 (relative sequence number) Sequence Number (raw): 1529032234 [Next Sequence Number: 806 (relative sequence number)] Acknowledgment Number: 7682 (relative ack number) Acknowledgment number (raw): 1542167279 1000 .... = Header Length: 32 bytes (8) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 2048 [Calculated window size: 131072] [Window size scaling factor: 64] Checksum: 0x986c [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745502931, TSecr 454253316 [Timestamps] [SEQ/ACK analysis] [iRTT: 0.008768000 seconds] [Bytes in flight: 40] [Bytes sent since last PSH flag: 40] TCP payload (40 bytes) Transport Layer Security TLSv1.3 Record Layer: Application Data Protocol: Hypertext Transfer Protocol Opaque Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 35 Encrypted Application Data: c9ea7b7a350203f99745ce607ee24eb3fd1ba1939fbb83c55f936c859f60fb69fc4d0f [Application Data Protocol: Hypertext Transfer Protocol] No. Time Source Destination Protocol Length Info 329 22.034565 192.168.1.25 23.227.38.74 TCP 66 60474 → 443 [ACK] Seq=806 Ack=8755 Win=129984 Len=0 TSval=3745505253 TSecr=454258562 Frame 329: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:56.920163000 GMT UTC Arrival Time: Mar 26, 2024 14:38:56.920163000 UTC Epoch Arrival Time: 1711463936.920163000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000301000 seconds] [Time delta from previous displayed frame: 2.321758000 seconds] [Time since reference or first frame: 22.034565000 seconds] Frame Number: 329 Frame Length: 66 bytes (528 bits) Capture Length: 66 bytes (528 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 52 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3ad6 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 806, Ack: 8755, Len: 0 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 0] Sequence Number: 806 (relative sequence number) Sequence Number (raw): 1529032274 [Next Sequence Number: 806 (relative sequence number)] Acknowledgment Number: 8755 (relative ack number) Acknowledgment number (raw): 1542168352 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 2031 [Calculated window size: 129984] [Window size scaling factor: 64] Checksum: 0xb2ad [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745505253, TSecr 454258562 [Timestamps] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 327] [The RTT to ACK the segment was: 0.000302000 seconds] [iRTT: 0.008768000 seconds] No. Time Source Destination Protocol Length Info 330 22.034658 192.168.1.25 23.227.38.74 TCP 78 [TCP Dup ACK 329#1] 60474 → 443 [ACK] Seq=806 Ack=8755 Win=129984 Len=0 TSval=3745505253 TSecr=454258640 SLE=8724 SRE=8755 Frame 330: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:38:56.920256000 GMT UTC Arrival Time: Mar 26, 2024 14:38:56.920256000 UTC Epoch Arrival Time: 1711463936.920256000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000093000 seconds] [Time delta from previous displayed frame: 0.000093000 seconds] [Time since reference or first frame: 22.034658000 seconds] Frame Number: 330 Frame Length: 78 bytes (624 bits) Capture Length: 78 bytes (624 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: Bad TCP] [Coloring Rule String: tcp.analysis.flags && !tcp.analysis.window_update && !tcp.analysis.keep_alive && !tcp.analysis.keep_alive_ack] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 64 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3aca [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 806, Ack: 8755, Len: 0 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 0] Sequence Number: 806 (relative sequence number) Sequence Number (raw): 1529032274 [Next Sequence Number: 806 (relative sequence number)] Acknowledgment Number: 8755 (relative ack number) Acknowledgment number (raw): 1542168352 1011 .... = Header Length: 44 bytes (11) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 2031 [Calculated window size: 129984] [Window size scaling factor: 64] Checksum: 0x864f [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (24 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps, No-Operation (NOP), No-Operation (NOP), SACK TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745505253, TSecr 454258640 TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - SACK 8724-8755 [Timestamps] [SEQ/ACK analysis] [iRTT: 0.008768000 seconds] [TCP Analysis Flags] [This is a TCP duplicate ack] [Duplicate ACK #: 1] [Duplicate to the ACK in frame: 329] No. Time Source Destination Protocol Length Info 383 26.035763 192.168.1.25 23.227.38.74 TLSv1.3 106 Application Data Frame 383: 106 bytes on wire (848 bits), 106 bytes captured (848 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:39:00.921361000 GMT UTC Arrival Time: Mar 26, 2024 14:39:00.921361000 UTC Epoch Arrival Time: 1711463940.921361000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.004514000 seconds] [Time delta from previous displayed frame: 4.001105000 seconds] [Time since reference or first frame: 26.035763000 seconds] Frame Number: 383 Frame Length: 106 bytes (848 bits) Capture Length: 106 bytes (848 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:tls] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 92 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3aae [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 806, Ack: 8755, Len: 40 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 40] Sequence Number: 806 (relative sequence number) Sequence Number (raw): 1529032274 [Next Sequence Number: 846 (relative sequence number)] Acknowledgment Number: 8755 (relative ack number) Acknowledgment number (raw): 1542168352 1000 .... = Header Length: 32 bytes (8) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 2048 [Calculated window size: 131072] [Window size scaling factor: 64] Checksum: 0xccb7 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745509254, TSecr 454258640 [Timestamps] [SEQ/ACK analysis] [iRTT: 0.008768000 seconds] [Bytes in flight: 40] [Bytes sent since last PSH flag: 40] TCP payload (40 bytes) Transport Layer Security TLSv1.3 Record Layer: Application Data Protocol: Hypertext Transfer Protocol Opaque Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 35 Encrypted Application Data: 8a45223f5af6378d26744c577ad88c0870e436e6d3f355b91f43d7617d811d9029b57d [Application Data Protocol: Hypertext Transfer Protocol] No. Time Source Destination Protocol Length Info 460 28.232139 192.168.1.25 23.227.38.74 TCP 66 60474 → 443 [ACK] Seq=846 Ack=9319 Win=130496 Len=0 TSval=3745511450 TSecr=454264831 Frame 460: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:39:03.117737000 GMT UTC Arrival Time: Mar 26, 2024 14:39:03.117737000 UTC Epoch Arrival Time: 1711463943.117737000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000081000 seconds] [Time delta from previous displayed frame: 2.196376000 seconds] [Time since reference or first frame: 28.232139000 seconds] Frame Number: 460 Frame Length: 66 bytes (528 bits) Capture Length: 66 bytes (528 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 52 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3ad6 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 846, Ack: 9319, Len: 0 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 0] Sequence Number: 846 (relative sequence number) Sequence Number (raw): 1529032314 [Next Sequence Number: 846 (relative sequence number)] Acknowledgment Number: 9319 (relative ack number) Acknowledgment number (raw): 1542168916 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 2039 [Calculated window size: 130496] [Window size scaling factor: 64] Checksum: 0x7f97 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745511450, TSecr 454264831 [Timestamps] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 459] [The RTT to ACK the segment was: 0.000081000 seconds] [iRTT: 0.008768000 seconds] No. Time Source Destination Protocol Length Info 526 33.246064 192.168.1.25 23.227.38.74 TCP 66 60474 → 443 [FIN, ACK] Seq=846 Ack=9319 Win=131072 Len=0 TSval=3745516464 TSecr=454264831 Frame 526: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:39:08.131662000 GMT UTC Arrival Time: Mar 26, 2024 14:39:08.131662000 UTC Epoch Arrival Time: 1711463948.131662000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.030660000 seconds] [Time delta from previous displayed frame: 5.013925000 seconds] [Time since reference or first frame: 33.246064000 seconds] Frame Number: 526 Frame Length: 66 bytes (528 bits) Capture Length: 66 bytes (528 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP SYN/FIN] [Coloring Rule String: tcp.flags & 0x02 || tcp.flags.fin == 1] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 52 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3ad6 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 846, Ack: 9319, Len: 0 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 0] Sequence Number: 846 (relative sequence number) Sequence Number (raw): 1529032314 [Next Sequence Number: 847 (relative sequence number)] Acknowledgment Number: 9319 (relative ack number) Acknowledgment number (raw): 1542168916 1000 .... = Header Length: 32 bytes (8) Flags: 0x011 (FIN, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...1 = Fin: Set [TCP Flags: ·······A···F] Window: 2048 [Calculated window size: 131072] [Window size scaling factor: 64] Checksum: 0x6bf7 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745516464, TSecr 454264831 [Timestamps] No. Time Source Destination Protocol Length Info 528 33.257863 192.168.1.25 23.227.38.74 TCP 66 60474 → 443 [ACK] Seq=847 Ack=9320 Win=131072 Len=0 TSval=3745516476 TSecr=454269883 Frame 528: 66 bytes on wire (528 bits), 66 bytes captured (528 bits) on interface en0, id 0 Section number: 1 Interface id: 0 (en0) Interface name: en0 Interface description: Wi-Fi Encapsulation type: Ethernet (1) Arrival Time: Mar 26, 2024 14:39:08.143461000 GMT UTC Arrival Time: Mar 26, 2024 14:39:08.143461000 UTC Epoch Arrival Time: 1711463948.143461000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000238000 seconds] [Time delta from previous displayed frame: 0.011799000 seconds] [Time since reference or first frame: 33.257863000 seconds] Frame Number: 528 Frame Length: 66 bytes (528 bits) Capture Length: 66 bytes (528 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: Apple_90:3d:84 (cc:08:fa:90:3d:84), Dst: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Destination: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) Address: TechnicolorD_6d:6a:bd (d4:35:1d:6d:6a:bd) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: Apple_90:3d:84 (cc:08:fa:90:3d:84) Address: Apple_90:3d:84 (cc:08:fa:90:3d:84) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.25, Dst: 23.227.38.74 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 52 Identification: 0x0000 (0) 010. .... = Flags: 0x2, Don't fragment 0... .... = Reserved bit: Not set .1.. .... = Don't fragment: Set ..0. .... = More fragments: Not set ...0 0000 0000 0000 = Fragment Offset: 0 Time to Live: 64 Protocol: TCP (6) Header Checksum: 0x3ad6 [validation disabled] [Header checksum status: Unverified] Source Address: 192.168.1.25 Destination Address: 23.227.38.74 Transmission Control Protocol, Src Port: 60474, Dst Port: 443, Seq: 847, Ack: 9320, Len: 0 Source Port: 60474 Destination Port: 443 [Stream index: 2] [Conversation completeness: Complete, WITH_DATA (31)] [TCP Segment Len: 0] Sequence Number: 847 (relative sequence number) Sequence Number (raw): 1529032315 [Next Sequence Number: 847 (relative sequence number)] Acknowledgment Number: 9320 (relative ack number) Acknowledgment number (raw): 1542168917 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 2048 [Calculated window size: 131072] [Window size scaling factor: 64] Checksum: 0x582e [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) TCP Option - No-Operation (NOP) TCP Option - Timestamps: TSval 3745516476, TSecr 454269883 [Timestamps] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 527] [The RTT to ACK the segment was: 0.000238000 seconds] [iRTT: 0.008768000 seconds]