1 2022-09-24 00:23:03.262783 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 97 Encrypted Alert 2 2022-09-24 00:23:03.262783 xx.xx.xx.xx → 11.0.0.110 TCP 66 443 → 38132 [FIN, ACK] Seq=32 Ack=1 Win=505 Len=0 TSval=2721668290 TSecr=3477326908 3 2022-09-24 00:23:03.262830 11.0.0.110 → xx.xx.xx.xx TCP 66 38132 → 443 [ACK] Seq=1 Ack=32 Win=488 Len=0 TSval=3477386972 TSecr=2721668290 4 2022-09-24 00:23:03.263619 11.0.0.110 → xx.xx.xx.xx TLSv1.2 97 Encrypted Alert 5 2022-09-24 00:23:03.263934 11.0.0.110 → xx.xx.xx.xx TCP 66 38132 → 443 [FIN, ACK] Seq=32 Ack=33 Win=488 Len=0 TSval=3477386973 TSecr=2721668290 6 2022-09-24 00:23:03.264028 xx.xx.xx.xx → 11.0.0.110 TCP 54 443 → 38132 [RST] Seq=33 Win=0 Len=0 7 2022-09-24 00:23:03.264278 xx.xx.xx.xx → 11.0.0.110 TCP 54 443 → 38132 [RST] Seq=33 Win=0 Len=0 8 2022-09-26 11:00:55.851774 11.0.0.110 → xx.xx.xx.xx TCP 74 48702 → 443 [SYN] Seq=0 Win=62727 Len=0 MSS=8961 SACK_PERM=1 TSval=3688459561 TSecr=0 WS=128 9 2022-09-26 11:00:55.852404 xx.xx.xx.xx → 11.0.0.110 TCP 74 443 → 48702 [SYN, ACK] Seq=0 Ack=1 Win=65160 Len=0 MSS=1460 SACK_PERM=1 TSval=2932740879 TSecr=3688459561 WS=128 10 2022-09-26 11:00:55.852440 11.0.0.110 → xx.xx.xx.xx TCP 66 48702 → 443 [ACK] Seq=1 Ack=1 Win=62848 Len=0 TSval=3688459562 TSecr=2932740879 11 2022-09-26 11:00:55.853879 11.0.0.110 → xx.xx.xx.xx TLSv1.2 285 Client Hello 12 2022-09-26 11:00:55.854281 xx.xx.xx.xx → 11.0.0.110 TCP 66 443 → 48702 [ACK] Seq=1 Ack=220 Win=65024 Len=0 TSval=2932740881 TSecr=3688459563 13 2022-09-26 11:00:55.860927 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 4427 Server Hello, Certificate, Server Key Exchange, Server Hello Done 14 2022-09-26 11:00:55.860941 11.0.0.110 → xx.xx.xx.xx TCP 66 48702 → 443 [ACK] Seq=220 Ack=4362 Win=58496 Len=0 TSval=3688459570 TSecr=2932740888 15 2022-09-26 11:00:55.871745 11.0.0.110 → xx.xx.xx.xx TLSv1.2 192 Client Key Exchange, Change Cipher Spec, Encrypted Handshake Message 16 2022-09-26 11:00:55.872134 xx.xx.xx.xx → 11.0.0.110 TCP 66 443 → 48702 [ACK] Seq=4362 Ack=346 Win=65024 Len=0 TSval=2932740899 TSecr=3688459581 17 2022-09-26 11:00:55.875074 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 72 Change Cipher Spec 18 2022-09-26 11:00:55.875084 11.0.0.110 → xx.xx.xx.xx TCP 66 48702 → 443 [ACK] Seq=346 Ack=4368 Win=58496 Len=0 TSval=3688459585 TSecr=2932740902 19 2022-09-26 11:00:55.875178 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 111 Encrypted Handshake Message 20 2022-09-26 11:00:55.875183 11.0.0.110 → xx.xx.xx.xx TCP 66 48702 → 443 [ACK] Seq=346 Ack=4413 Win=58496 Len=0 TSval=3688459585 TSecr=2932740902 21 2022-09-26 11:00:55.878836 11.0.0.110 → xx.xx.xx.xx TLSv1.2 468 Application Data 22 2022-09-26 11:00:55.879299 xx.xx.xx.xx → 11.0.0.110 TCP 66 443 → 48702 [ACK] Seq=4413 Ack=748 Win=64640 Len=0 TSval=2932740906 TSecr=3688459588 23 2022-09-26 11:00:55.958727 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 508 Application Data 24 2022-09-26 11:00:55.958753 11.0.0.110 → xx.xx.xx.xx TCP 66 48702 → 443 [ACK] Seq=748 Ack=4855 Win=58112 Len=0 TSval=3688459668 TSecr=2932740985 25 2022-09-26 11:00:55.959227 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 100 Application Data 26 2022-09-26 11:00:55.959236 11.0.0.110 → xx.xx.xx.xx TCP 66 48702 → 443 [ACK] Seq=748 Ack=4889 Win=58112 Len=0 TSval=3688459669 TSecr=2932740986 27 2022-09-26 11:01:04.010781 11.0.0.110 → xx.xx.xx.xx TLSv1.2 467 Application Data 28 2022-09-26 11:01:04.011313 xx.xx.xx.xx → 11.0.0.110 TCP 66 443 → 48702 [ACK] Seq=4889 Ack=1149 Win=64256 Len=0 TSval=2932749038 TSecr=3688467720 29 2022-09-26 11:01:04.016011 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 508 Application Data 30 2022-09-26 11:01:04.016025 11.0.0.110 → xx.xx.xx.xx TCP 66 48702 → 443 [ACK] Seq=1149 Ack=5331 Win=57728 Len=0 TSval=3688467726 TSecr=2932749043 31 2022-09-26 11:01:04.018073 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 100 Application Data 32 2022-09-26 11:01:04.018082 11.0.0.110 → xx.xx.xx.xx TCP 66 48702 → 443 [ACK] Seq=1149 Ack=5365 Win=57728 Len=0 TSval=3688467728 TSecr=2932749045 33 2022-09-26 11:01:27.502242 11.0.0.110 → xx.xx.xx.xx TLSv1.2 468 Application Data 34 2022-09-26 11:01:27.502711 xx.xx.xx.xx → 11.0.0.110 TCP 66 443 → 48702 [ACK] Seq=5365 Ack=1551 Win=63872 Len=0 TSval=2932772530 TSecr=3688491212 35 2022-09-26 11:01:27.505292 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 508 Application Data 36 2022-09-26 11:01:27.505321 11.0.0.110 → xx.xx.xx.xx TCP 66 48702 → 443 [ACK] Seq=1551 Ack=5807 Win=57344 Len=0 TSval=3688491215 TSecr=2932772532 37 2022-09-26 11:01:27.505785 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 100 Application Data 38 2022-09-26 11:01:27.505793 11.0.0.110 → xx.xx.xx.xx TCP 66 48702 → 443 [ACK] Seq=1551 Ack=5841 Win=57344 Len=0 TSval=3688491215 TSecr=2932772533 39 2022-09-26 11:01:29.749523 11.0.0.110 → xx.xx.xx.xx TLSv1.2 470 Application Data 40 2022-09-26 11:01:29.754914 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 508 Application Data 41 2022-09-26 11:01:29.754930 11.0.0.110 → xx.xx.xx.xx TCP 66 48702 → 443 [ACK] Seq=1955 Ack=6283 Win=56960 Len=0 TSval=3688493464 TSecr=2932774781 42 2022-09-26 11:01:29.755141 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 100 Application Data 43 2022-09-26 11:01:29.755149 11.0.0.110 → xx.xx.xx.xx TCP 66 48702 → 443 [ACK] Seq=1955 Ack=6317 Win=56960 Len=0 TSval=3688493465 TSecr=2932774782 44 2022-09-26 11:02:30.234595 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 97 Encrypted Alert 45 2022-09-26 11:02:30.234632 11.0.0.110 → xx.xx.xx.xx TCP 66 48702 → 443 [ACK] Seq=1955 Ack=6348 Win=56960 Len=0 TSval=3688553944 TSecr=2932835261 46 2022-09-26 11:02:30.235310 11.0.0.110 → xx.xx.xx.xx TLSv1.2 97 Encrypted Alert 47 2022-09-26 11:02:30.276361 xx.xx.xx.xx → 11.0.0.110 TCP 66 443 → 48702 [ACK] Seq=6348 Ack=1986 Win=64128 Len=0 TSval=2932835303 TSecr=3688553945 48 2022-09-26 11:03:49.701184 11.0.0.110 → xx.xx.xx.xx TCP 66 48702 → 443 [FIN, ACK] Seq=1986 Ack=6348 Win=56960 Len=0 TSval=3688633411 TSecr=2932835303 49 2022-09-26 11:03:49.744334 xx.xx.xx.xx → 11.0.0.110 TCP 66 443 → 48702 [ACK] Seq=6348 Ack=1987 Win=64128 Len=0 TSval=2932914771 TSecr=3688633411 50 2022-09-26 11:03:51.192718 11.0.0.110 → xx.xx.xx.xx TCP 74 48752 → 443 [SYN] Seq=0 Win=62727 Len=0 MSS=8961 SACK_PERM=1 TSval=3688634902 TSecr=0 WS=128 51 2022-09-26 11:03:51.193333 xx.xx.xx.xx → 11.0.0.110 TCP 74 443 → 48752 [SYN, ACK] Seq=0 Ack=1 Win=65160 Len=0 MSS=1460 SACK_PERM=1 TSval=2932916220 TSecr=3688634902 WS=128 52 2022-09-26 11:03:51.193352 11.0.0.110 → xx.xx.xx.xx TCP 66 48752 → 443 [ACK] Seq=1 Ack=1 Win=62848 Len=0 TSval=3688634903 TSecr=2932916220 53 2022-09-26 11:03:51.194563 11.0.0.110 → xx.xx.xx.xx TLSv1.2 317 Client Hello 54 2022-09-26 11:03:51.194892 xx.xx.xx.xx → 11.0.0.110 TCP 66 443 → 48752 [ACK] Seq=1 Ack=252 Win=65024 Len=0 TSval=2932916222 TSecr=3688634904 55 2022-09-26 11:03:51.199478 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 156 Server Hello 56 2022-09-26 11:03:51.199478 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 72 Change Cipher Spec 57 2022-09-26 11:03:51.199492 11.0.0.110 → xx.xx.xx.xx TCP 66 48752 → 443 [ACK] Seq=252 Ack=91 Win=62848 Len=0 TSval=3688634909 TSecr=2932916226 58 2022-09-26 11:03:51.199504 11.0.0.110 → xx.xx.xx.xx TCP 66 48752 → 443 [ACK] Seq=252 Ack=97 Win=62848 Len=0 TSval=3688634909 TSecr=2932916226 59 2022-09-26 11:03:51.199676 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 111 Encrypted Handshake Message 60 2022-09-26 11:03:51.199684 11.0.0.110 → xx.xx.xx.xx TCP 66 48752 → 443 [ACK] Seq=252 Ack=142 Win=62848 Len=0 TSval=3688634909 TSecr=2932916227 61 2022-09-26 11:03:51.201928 11.0.0.110 → xx.xx.xx.xx TLSv1.2 524 Change Cipher Spec, Encrypted Handshake Message, Application Data 62 2022-09-26 11:03:51.202245 xx.xx.xx.xx → 11.0.0.110 TCP 66 443 → 48752 [ACK] Seq=142 Ack=710 Win=64640 Len=0 TSval=2932916229 TSecr=3688634911 63 2022-09-26 11:03:51.216604 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 508 Application Data 64 2022-09-26 11:03:51.216616 11.0.0.110 → xx.xx.xx.xx TCP 66 48752 → 443 [ACK] Seq=710 Ack=584 Win=62464 Len=0 TSval=3688634926 TSecr=2932916243 65 2022-09-26 11:03:51.216945 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 100 Application Data 66 2022-09-26 11:03:51.216953 11.0.0.110 → xx.xx.xx.xx TCP 66 48752 → 443 [ACK] Seq=710 Ack=618 Win=62464 Len=0 TSval=3688634926 TSecr=2932916244 67 2022-09-26 11:04:51.730683 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 97 Encrypted Alert 68 2022-09-26 11:04:51.730696 11.0.0.110 → xx.xx.xx.xx TCP 66 48752 → 443 [ACK] Seq=710 Ack=649 Win=62464 Len=0 TSval=3688695440 TSecr=2932976757 69 2022-09-26 11:04:51.730749 xx.xx.xx.xx → 11.0.0.110 TCP 66 443 → 48752 [FIN, ACK] Seq=649 Ack=710 Win=64640 Len=0 TSval=2932976758 TSecr=3688634926 70 2022-09-26 11:04:51.731336 11.0.0.110 → xx.xx.xx.xx TLSv1.2 97 Encrypted Alert 71 2022-09-26 11:04:51.731637 11.0.0.110 → xx.xx.xx.xx TCP 66 48752 → 443 [FIN, ACK] Seq=741 Ack=650 Win=62464 Len=0 TSval=3688695441 TSecr=2932976758 72 2022-09-26 11:04:51.731710 xx.xx.xx.xx → 11.0.0.110 TCP 54 443 → 48752 [RST] Seq=650 Win=0 Len=0 73 2022-09-26 11:04:51.731934 xx.xx.xx.xx → 11.0.0.110 TCP 54 443 → 48752 [RST] Seq=650 Win=0 Len=0 74 2022-09-26 11:09:18.715536 11.0.0.110 → xx.xx.xx.xx TCP 74 48814 → 443 [SYN] Seq=0 Win=62727 Len=0 MSS=8961 SACK_PERM=1 TSval=3688962425 TSecr=0 WS=128 75 2022-09-26 11:09:18.716108 xx.xx.xx.xx → 11.0.0.110 TCP 74 443 → 48814 [SYN, ACK] Seq=0 Ack=1 Win=65160 Len=0 MSS=1460 SACK_PERM=1 TSval=2933243743 TSecr=3688962425 WS=128 76 2022-09-26 11:09:18.716128 11.0.0.110 → xx.xx.xx.xx TCP 66 48814 → 443 [ACK] Seq=1 Ack=1 Win=62848 Len=0 TSval=3688962426 TSecr=2933243743 77 2022-09-26 11:09:18.717366 11.0.0.110 → xx.xx.xx.xx TLSv1.2 317 Client Hello 78 2022-09-26 11:09:18.717778 xx.xx.xx.xx → 11.0.0.110 TCP 66 443 → 48814 [ACK] Seq=1 Ack=252 Win=65024 Len=0 TSval=2933243745 TSecr=3688962427 79 2022-09-26 11:09:18.719028 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 156 Server Hello 80 2022-09-26 11:09:18.719029 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 72 Change Cipher Spec 81 2022-09-26 11:09:18.719043 11.0.0.110 → xx.xx.xx.xx TCP 66 48814 → 443 [ACK] Seq=252 Ack=91 Win=62848 Len=0 TSval=3688962429 TSecr=2933243746 82 2022-09-26 11:09:18.719056 11.0.0.110 → xx.xx.xx.xx TCP 66 48814 → 443 [ACK] Seq=252 Ack=97 Win=62848 Len=0 TSval=3688962429 TSecr=2933243746 83 2022-09-26 11:09:18.719184 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 111 Encrypted Handshake Message 84 2022-09-26 11:09:18.719191 11.0.0.110 → xx.xx.xx.xx TCP 66 48814 → 443 [ACK] Seq=252 Ack=142 Win=62848 Len=0 TSval=3688962429 TSecr=2933243746 85 2022-09-26 11:09:18.721876 11.0.0.110 → xx.xx.xx.xx TLSv1.2 522 Change Cipher Spec, Encrypted Handshake Message, Application Data 86 2022-09-26 11:09:18.722231 xx.xx.xx.xx → 11.0.0.110 TCP 66 443 → 48814 [ACK] Seq=142 Ack=708 Win=64640 Len=0 TSval=2933243749 TSecr=3688962431 87 2022-09-26 11:09:18.731427 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 508 Application Data 88 2022-09-26 11:09:18.731444 11.0.0.110 → xx.xx.xx.xx TCP 66 48814 → 443 [ACK] Seq=708 Ack=584 Win=62464 Len=0 TSval=3688962441 TSecr=2933243758 89 2022-09-26 11:09:18.732392 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 100 Application Data 90 2022-09-26 11:09:18.732400 11.0.0.110 → xx.xx.xx.xx TCP 66 48814 → 443 [ACK] Seq=708 Ack=618 Win=62464 Len=0 TSval=3688962442 TSecr=2933243759 91 2022-09-26 11:09:20.882864 11.0.0.110 → xx.xx.xx.xx TLSv1.2 468 Application Data 92 2022-09-26 11:09:20.883297 xx.xx.xx.xx → 11.0.0.110 TCP 66 443 → 48814 [ACK] Seq=618 Ack=1110 Win=64256 Len=0 TSval=2933245910 TSecr=3688964592 93 2022-09-26 11:09:20.887498 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 508 Application Data 94 2022-09-26 11:09:20.887512 11.0.0.110 → xx.xx.xx.xx TCP 66 48814 → 443 [ACK] Seq=1110 Ack=1060 Win=62080 Len=0 TSval=3688964597 TSecr=2933245914 95 2022-09-26 11:09:20.887757 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 100 Application Data 96 2022-09-26 11:09:20.887778 11.0.0.110 → xx.xx.xx.xx TCP 66 48814 → 443 [ACK] Seq=1110 Ack=1094 Win=62080 Len=0 TSval=3688964597 TSecr=2933245915 97 2022-09-26 11:10:20.951216 xx.xx.xx.xx → 11.0.0.110 TLSv1.2 97 Encrypted Alert 98 2022-09-26 11:10:20.951216 xx.xx.xx.xx → 11.0.0.110 TCP 66 443 → 48814 [FIN, ACK] Seq=1125 Ack=1110 Win=64256 Len=0 TSval=2933305978 TSecr=3688964597 99 2022-09-26 11:10:20.951255 11.0.0.110 → xx.xx.xx.xx TCP 66 48814 → 443 [ACK] Seq=1110 Ack=1125 Win=62080 Len=0 TSval=3689024661 TSecr=2933305978 100 2022-09-26 11:10:20.951970 11.0.0.110 → xx.xx.xx.xx TLSv1.2 97 Encrypted Alert 101 2022-09-26 11:10:20.952261 11.0.0.110 → xx.xx.xx.xx TCP 66 48814 → 443 [FIN, ACK] Seq=1141 Ack=1126 Win=62080 Len=0 TSval=3689024662 TSecr=2933305978 102 2022-09-26 11:10:20.952286 xx.xx.xx.xx → 11.0.0.110 TCP 54 443 → 48814 [RST] Seq=1126 Win=0 Len=0 103 2022-09-26 11:10:20.952509 xx.xx.xx.xx → 11.0.0.110 TCP 54 443 → 48814 [RST] Seq=1126 Win=0 Len=0