This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi everyone

We are having random connection hungs on all our users (IE, Chrome, Firefox). We captured the traffic on client side and can see every time when hung happens an [RST,ACK] after about 300sec, this would be an timeout...

The http-server is IBM IHS 8.5.5 based on Apache 2.2 with following parameters:

Timeout 300
ServerLimit        30
ThreadLimit        250
ThreadsPerChild    200
MaxClients        6000
StartServers         2
MinSpareThreads      2
MaxSpareThreads      5
MaxRequestsPerChild  0
ListenBacklog      300
SendBufferSize   32768

Thera are no firewalls beetween our test client and http server. Data flow looks normal for a while but suddenly it stops until a timeout (about 300s) and then it sends [RST,ACK].

can anyonone helps ?

Here is the tcp-ip flow when this happens:

    |Time     | 10.134.18.122                         |
|         |                   | 131.102.3.167     |                   
|2014-06-04 14:59:48.674182000|         SYN       |                   |Seq = 0
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:48.675385000|         SYN, ACK  |                   |Seq = 0 Ack = 1
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:48.675388000|         ACK       |                   |Seq = 1 Ack = 1
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:48.675509000|         PSH, ACK - Len: 257           |Seq = 1 Ack = 1
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:48.680932000|         PSH, ACK - Len: 86            |Seq = 1 Ack = 258
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:48.680935000|         PSH, ACK - Len: 6             |Seq = 87 Ack = 258
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:48.680938000|         PSH, ACK - Len: 53            |Seq = 93 Ack = 258
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:48.681042000|         ACK       |                   |Seq = 258 Ack = 93
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:48.681253000|         PSH, ACK - Len: 59            |Seq = 258 Ack = 146
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:48.892692000|         PSH, ACK  |                   |Seq = 146 Ack = 317
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:48.892696000|         PSH, ACK - Len: 554           |Seq = 317 Ack = 146
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:48.936374000|         ACK - Len: 1448               |Seq = 146 Ack = 871
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:48.936378000|         ACK - Len: 1448               |Seq = 1594 Ack = 871
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:48.936382000|         PSH, ACK - Len: 1301          |Seq = 3042 Ack = 871
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:48.936385000|         ACK       |                   |Seq = 871 Ack = 3042
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.147806000|         ACK       |                   |Seq = 871 Ack = 4343
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.677407000|         PSH, ACK - Len: 1290          |Seq = 871 Ack = 4343
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.691919000|         PSH, ACK - Len: 357           |Seq = 4343 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693032000|         ACK - Len: 1448               |Seq = 4700 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693039000|         ACK - Len: 1448               |Seq = 6148 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693049000|         ACK - Len: 1448               |Seq = 7596 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693055000|         ACK - Len: 1448               |Seq = 9044 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693065000|         ACK - Len: 1448               |Seq = 10492 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693072000|         ACK - Len: 1448               |Seq = 11940 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693075000|         ACK       |                   |Seq = 2161 Ack = 6148
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.693190000|         ACK - Len: 1448               |Seq = 13388 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693196000|         ACK - Len: 1448               |Seq = 14836 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693209000|         ACK       |                   |Seq = 2161 Ack = 9044
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.693211000|         PSH, ACK - Len: 1448          |Seq = 16284 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693243000|         ACK       |                   |Seq = 2161 Ack = 11940
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.693349000|         ACK       |                   |Seq = 2161 Ack = 14836
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.693354000|         ACK       |                   |Seq = 2161 Ack = 17732
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.694642000|         ACK - Len: 1448               |Seq = 17732 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694650000|         ACK - Len: 1448               |Seq = 19180 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694657000|         ACK - Len: 1448               |Seq = 20628 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694733000|         ACK - Len: 1448               |Seq = 22076 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694741000|         ACK - Len: 1448               |Seq = 23524 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694748000|         ACK - Len: 1448               |Seq = 24972 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694756000|         ACK - Len: 1448               |Seq = 26420 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694834000|         ACK - Len: 1448               |Seq = 27868 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694841000|         ACK       |                   |Seq = 2161 Ack = 20628
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.694844000|         ACK - Len: 1448               |Seq = 29316 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694856000|         ACK - Len: 1448               |Seq = 30764 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694859000|         ACK       |                   |Seq = 2161 Ack = 23524
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.694865000|         ACK - Len: 1448               |Seq = 32212 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.695039000|         ACK - Len: 1448               |Seq = 33660 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.695046000|         ACK - Len: 1448               |Seq = 35108 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.695050000|         PSH, ACK - Len: 986           |Seq = 36556 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.695067000|         ACK       |                   |Seq = 2161 Ack = 26420
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.695072000|         ACK       |                   |Seq = 2161 Ack = 29316
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.695190000|         ACK       |                   |Seq = 2161 Ack = 32212
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.695195000|         ACK       |                   |Seq = 2161 Ack = 35108
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.695198000|         ACK       |                   |Seq = 2161 Ack = 37542
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696023000|         ACK - Len: 1448               |Seq = 37542 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696027000|         ACK - Len: 1448               |Seq = 38990 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696030000|         ACK - Len: 1448               |Seq = 40438 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696074000|         ACK - Len: 1448               |Seq = 41886 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696078000|         ACK - Len: 1448               |Seq = 43334 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696081000|         ACK - Len: 1448               |Seq = 44782 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696084000|         ACK - Len: 1448               |Seq = 46230 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696181000|         ACK - Len: 1448               |Seq = 47678 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696185000|         ACK - Len: 1448               |Seq = 49126 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696188000|         ACK       |                   |Seq = 2161 Ack = 40438
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696191000|         ACK - Len: 1448               |Seq = 50574 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696194000|         ACK - Len: 1448               |Seq = 52022 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696198000|         ACK       |                   |Seq = 2161 Ack = 43334
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696200000|         PSH, ACK - Len: 493           |Seq = 53470 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696203000|         ACK       |                   |Seq = 2161 Ack = 46230
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696325000|         ACK       |                   |Seq = 2161 Ack = 49126
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696328000|         ACK       |                   |Seq = 2161 Ack = 52022
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696330000|         ACK       |                   |Seq = 2161 Ack = 53963
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696540000|         ACK - Len: 1448               |Seq = 53963 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696544000|         ACK - Len: 1448               |Seq = 55411 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696547000|         ACK - Len: 1448               |Seq = 56859 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696551000|         ACK - Len: 1448               |Seq = 58307 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696554000|         ACK - Len: 1448               |Seq = 59755 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696558000|         ACK - Len: 1448               |Seq = 61203 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696561000|         ACK - Len: 1448               |Seq = 62651 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696643000|         ACK - Len: 1448               |Seq = 64099 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696647000|         ACK - Len: 1448               |Seq = 65547 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696650000|         ACK       |                   |Seq = 2161 Ack = 56859
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696653000|         ACK - Len: 1448               |Seq = 66995 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696656000|         ACK - Len: 1448               |Seq = 68443 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696660000|         ACK       |                   |Seq = 2161 Ack = 59755
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696662000|         PSH, ACK - Len: 493           |Seq = 69891 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696783000|         ACK       |                   |Seq = 2161 Ack = 62651
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696786000|         ACK       |                   |Seq = 2161 Ack = 65547
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696788000|         ACK       |                   |Seq = 2161 Ack = 68443
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696790000|         ACK       |                   |Seq = 2161 Ack = 70384
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.698016000|         ACK - Len: 1448               |Seq = 70384 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.698020000|         ACK - Len: 1448               |Seq = 71832 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.698024000|         ACK - Len: 1448               |Seq = 73280 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.698027000|         ACK - Len: 1448               |Seq = 74728 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.698031000|         ACK - Len: 1448               |Seq = 76176 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.698035000|         ACK - Len: 1448               |Seq = 77624 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.698083000|         ACK - Len: 1448               |Seq = 79072 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.698087000|         PSH, ACK - Len: 445           |Seq = 80520 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.698090000|         ACK       |                   |Seq = 2161 Ack = 73280
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.698092000|         ACK       |                   |Seq = 2161 Ack = 76176
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.698207000|         ACK       |                   |Seq = 2161 Ack = 79072
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.698210000|         ACK       |                   |Seq = 2161 Ack = 80965
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.698665000|         PSH, ACK - Len: 1306          |Seq = 2161 Ack = 80965
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.713818000|         PSH, ACK - Len: 373           |Seq = 80965 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714013000|         ACK - Len: 1448               |Seq = 81338 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714016000|         ACK - Len: 1448               |Seq = 82786 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714020000|         ACK - Len: 1448               |Seq = 84234 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714024000|         ACK - Len: 1448               |Seq = 85682 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714029000|         ACK - Len: 1448               |Seq = 87130 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714033000|         ACK - Len: 1448               |Seq = 88578 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714089000|         ACK - Len: 1448               |Seq = 90026 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714092000|         ACK - Len: 1448               |Seq = 91474 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714096000|         ACK - Len: 1448               |Seq = 92922 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714100000|         ACK - Len: 1448               |Seq = 94370 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714103000|         ACK - Len: 1448               |Seq = 95818 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714107000|         PSH, ACK - Len: 493           |Seq = 97266 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714110000|         ACK       |                   |Seq = 3467 Ack = 82786
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714199000|         ACK - Len: 1448               |Seq = 97759 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714202000|         ACK - Len: 1448               |Seq = 99207 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714206000|         ACK       |                   |Seq = 3467 Ack = 85682
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714208000|         ACK - Len: 1448               |Seq = 100655 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714212000|         ACK - Len: 1448               |Seq = 102103 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714216000|         ACK       |                   |Seq = 3467 Ack = 88578
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714218000|         ACK - Len: 1448               |Seq = 103551 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714222000|         ACK       |                   |Seq = 3467 Ack = 91474
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714225000|         ACK - Len: 1448               |Seq = 104999 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714228000|         ACK - Len: 1448               |Seq = 106447 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714318000|         ACK - Len: 1448               |Seq = 107895 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714322000|         ACK - Len: 1448               |Seq = 109343 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714325000|         ACK - Len: 1448               |Seq = 110791 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714328000|         ACK       |                   |Seq = 3467 Ack = 94370
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714331000|         ACK - Len: 1448               |Seq = 112239 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714334000|         PSH, ACK - Len: 493           |Seq = 113687 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714337000|         ACK       |                   |Seq = 3467 Ack = 97266
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714339000|         ACK       |                   |Seq = 3467 Ack = 99207
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714342000|         ACK       |                   |Seq = 3467 Ack = 102103
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714470000|         ACK       |                   |Seq = 3467 Ack = 104999
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714473000|         ACK       |                   |Seq = 3467 Ack = 107895
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714476000|         ACK       |                   |Seq = 3467 Ack = 109343
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714478000|         ACK       |                   |Seq = 3467 Ack = 112239
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714593000|         ACK       |                   |Seq = 3467 Ack = 114180
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.715577000|         ACK - Len: 1448               |Seq = 114180 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715650000|         ACK - Len: 1448               |Seq = 115628 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715654000|         ACK - Len: 1448               |Seq = 117076 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715658000|         ACK - Len: 1448               |Seq = 118524 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715661000|         ACK - Len: 1448               |Seq = 119972 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715664000|         ACK - Len: 1448               |Seq = 121420 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715668000|         ACK - Len: 1448               |Seq = 122868 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715755000|         ACK - Len: 1448               |Seq = 124316 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715759000|         ACK - Len: 1448               |Seq = 125764 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715763000|         ACK       |                   |Seq = 3467 Ack = 117076
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.715765000|         ACK - Len: 1448               |Seq = 127212 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715769000|         ACK - Len: 1448               |Seq = 128660 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715772000|         ACK       |                   |Seq = 3467 Ack = 119972
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.715775000|         PSH, ACK - Len: 493           |Seq = 130108 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715778000|         ACK       |                   |Seq = 3467 Ack = 122868
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.715780000|         ACK - Len: 1448               |Seq = 130601 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715865000|         ACK - Len: 1448               |Seq = 132049 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715869000|         ACK - Len: 1448               |Seq = 133497 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715873000|         ACK       |                   |Seq = 3467 Ack = 125764
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.715875000|         ACK - Len: 1448               |Seq = 134945 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715879000|         ACK - Len: 1448               |Seq = 136393 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715882000|         ACK       |                   |Seq = 3467 Ack = 128660
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.715885000|         ACK - Len: 1448               |Seq = 137841 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715888000|         ACK - Len: 1448               |Seq = 139289 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715892000|         ACK       |                   |Seq = 3467 Ack = 130601
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.715894000|         ACK - Len: 1448               |Seq = 140737 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.716002000|         ACK - Len: 1448               |Seq = 142185 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.716006000|         ACK - Len: 1448               |Seq = 143633 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.716009000|         PSH, ACK - Len: 149           |Seq = 145081 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.716012000|         ACK       |                   |Seq = 3467 Ack = 133497
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.716015000|         ACK       |                   |Seq = 3467 Ack = 136393
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.716017000|         ACK       |                   |Seq = 3467 Ack = 139289
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.716020000|         ACK       |                   |Seq = 3467 Ack = 142185
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.716130000|         ACK       |                   |Seq = 3467 Ack = 145081
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.716133000|         ACK       |                   |Seq = 3467 Ack = 145081
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.716508000|         PSH, ACK - Len: 1306          |Seq = 3467 Ack = 145230
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.723437000|         ACK - Len: 1448               |Seq = 145230 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723441000|         ACK - Len: 1448               |Seq = 146678 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723444000|         ACK - Len: 1448               |Seq = 148126 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723448000|         ACK - Len: 1448               |Seq = 149574 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723451000|         ACK - Len: 1448               |Seq = 151022 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723457000|         ACK - Len: 1448               |Seq = 152470 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723461000|         ACK - Len: 1448               |Seq = 153918 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723464000|         ACK - Len: 1448               |Seq = 155366 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723530000|         ACK - Len: 1448               |Seq = 156814 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723534000|         ACK - Len: 1448               |Seq = 158262 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723538000|         ACK - Len: 1448               |Seq = 159710 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723541000|         PSH, ACK - Len: 221           |Seq = 161158 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723544000|         ACK       |                   |Seq = 4773 Ack = 148126
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.723662000|         ACK       |                   |Seq = 4773 Ack = 151022
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.723664000|         ACK       |                   |Seq = 4773 Ack = 153918
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.723667000|         ACK       |                   |Seq = 4773 Ack = 156814
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.723669000|         ACK       |                   |Seq = 4773 Ack = 159710
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.723784000|         ACK       |                   |Seq = 4773 Ack = 161379
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.724120000|         PSH, ACK - Len: 1306          |Seq = 4773 Ack = 161379
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736325000|         PSH, ACK - Len: 373           |Seq = 161379 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736592000|         ACK - Len: 1448               |Seq = 161752 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736596000|         ACK - Len: 1448               |Seq = 163200 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736600000|         ACK - Len: 1448               |Seq = 164648 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736604000|         ACK - Len: 1448               |Seq = 166096 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736608000|         ACK - Len: 1448               |Seq = 167544 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736615000|         ACK - Len: 1448               |Seq = 168992 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736618000|         ACK       |                   |Seq = 6079 Ack = 163200
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736621000|         ACK - Len: 1448               |Seq = 170440 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736625000|         ACK - Len: 1448               |Seq = 171888 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736628000|         ACK - Len: 1448               |Seq = 173336 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736704000|         ACK - Len: 1448               |Seq = 174784 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736708000|         ACK       |                   |Seq = 6079 Ack = 166096
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736711000|         ACK - Len: 1448               |Seq = 176232 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736714000|         PSH, ACK - Len: 493           |Seq = 177680 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736717000|         ACK       |                   |Seq = 6079 Ack = 168992
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736719000|         ACK - Len: 1448               |Seq = 178173 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736722000|         ACK - Len: 1448               |Seq = 179621 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736726000|         ACK - Len: 1448               |Seq = 181069 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736730000|         ACK       |                   |Seq = 6079 Ack = 171888
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736732000|         ACK - Len: 1448               |Seq = 182517 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736808000|         ACK - Len: 1448               |Seq = 183965 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736812000|         ACK       |                   |Seq = 6079 Ack = 174784
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736814000|         ACK - Len: 1448               |Seq = 185413 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736818000|         ACK - Len: 1448               |Seq = 186861 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736822000|         ACK       |                   |Seq = 6079 Ack = 177680
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736824000|         ACK - Len: 1448               |Seq = 188309 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736828000|         ACK - Len: 1448               |Seq = 189757 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736832000|         ACK - Len: 1448               |Seq = 191205 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736835000|         ACK - Len: 1448               |Seq = 192653 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736839000|         ACK       |                   |Seq = 6079 Ack = 179621
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736841000|         PSH, ACK - Len: 493           |Seq = 194101 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736844000|         ACK       |                   |Seq = 6079 Ack = 182517
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736986000|         ACK       |                   |Seq = 6079 Ack = 185413
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736989000|         ACK       |                   |Seq = 6079 Ack = 188309
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736991000|         ACK       |                   |Seq = 6079 Ack = 191205
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736994000|         ACK       |                   |Seq = 6079 Ack = 192653
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736996000|         ACK       |                   |Seq = 6079 Ack = 194594
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738314000|         ACK - Len: 1448               |Seq = 194594 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738318000|         ACK - Len: 1448               |Seq = 196042 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738321000|         ACK - Len: 1448               |Seq = 197490 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738325000|         ACK - Len: 1448               |Seq = 198938 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738328000|         ACK - Len: 1448               |Seq = 200386 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738333000|         ACK - Len: 1448               |Seq = 201834 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738337000|         ACK - Len: 1448               |Seq = 203282 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738440000|         ACK - Len: 1448               |Seq = 204730 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738443000|         ACK - Len: 1448               |Seq = 206178 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738446000|         ACK - Len: 1448               |Seq = 207626 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738450000|         ACK       |                   |Seq = 6079 Ack = 197490
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738452000|         ACK - Len: 1448               |Seq = 209074 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738456000|         PSH, ACK - Len: 493           |Seq = 210522 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738458000|         ACK       |                   |Seq = 6079 Ack = 200386
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738461000|         ACK       |                   |Seq = 6079 Ack = 203282
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738463000|         ACK - Len: 1448               |Seq = 211015 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738467000|         ACK - Len: 1448               |Seq = 212463 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738528000|         ACK - Len: 1448               |Seq = 213911 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738532000|         ACK - Len: 1448               |Seq = 215359 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738535000|         ACK - Len: 1448               |Seq = 216807 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738539000|         ACK - Len: 1448               |Seq = 218255 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738542000|         ACK - Len: 1448               |Seq = 219703 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738545000|         ACK       |                   |Seq = 6079 Ack = 206178
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738548000|         ACK - Len: 1448               |Seq = 221151 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738551000|         ACK - Len: 1448               |Seq = 222599 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738555000|         ACK       |                   |Seq = 6079 Ack = 209074
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738652000|         ACK - Len: 1448               |Seq = 224047 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738656000|         ACK - Len: 1448               |Seq = 225495 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738659000|         PSH, ACK - Len: 493           |Seq = 226943 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738663000|         ACK       |                   |Seq = 6079 Ack = 211015
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738665000|         ACK       |                   |Seq = 6079 Ack = 213911
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738667000|         ACK       |                   |Seq = 6079 Ack = 216807
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738781000|         ACK       |                   |Seq = 6079 Ack = 219703
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738784000|         ACK       |                   |Seq = 6079 Ack = 222599
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738786000|         ACK       |                   |Seq = 6079 Ack = 225495
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738788000|         ACK       |                   |Seq = 6079 Ack = 227436
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.739884000|         ACK - Len: 1448               |Seq = 227436 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739888000|         ACK - Len: 1448               |Seq = 228884 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739891000|         ACK - Len: 1448               |Seq = 230332 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739894000|         ACK - Len: 1448               |Seq = 231780 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739897000|         ACK - Len: 1448               |Seq = 233228 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739901000|         ACK - Len: 1448               |Seq = 234676 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739905000|         ACK - Len: 1448               |Seq = 236124 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739987000|         ACK - Len: 1448               |Seq = 237572 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739991000|         ACK - Len: 1448               |Seq = 239020 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739995000|         ACK - Len: 1448               |Seq = 240468 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739999000|         ACK       |                   |Seq = 6079 Ack = 230332
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740001000|         ACK - Len: 1448               |Seq = 241916 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740005000|         PSH, ACK - Len: 493           |Seq = 243364 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740008000|         ACK       |                   |Seq = 6079 Ack = 233228
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740010000|         ACK       |                   |Seq = 6079 Ack = 236124
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740111000|         ACK - Len: 1448               |Seq = 243857 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740115000|         ACK       |                   |Seq = 6079 Ack = 239020
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740117000|         ACK - Len: 1448               |Seq = 245305 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740120000|         ACK - Len: 1448               |Seq = 246753 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740124000|         ACK - Len: 1448               |Seq = 248201 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740127000|         ACK       |                   |Seq = 6079 Ack = 241916
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740130000|         ACK - Len: 1448               |Seq = 249649 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740134000|         ACK - Len: 1448               |Seq = 251097 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740137000|         ACK       |                   |Seq = 6079 Ack = 243857
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740139000|         ACK - Len: 1448               |Seq = 252545 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740143000|         ACK - Len: 1448               |Seq = 253993 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740251000|         ACK       |                   |Seq = 6079 Ack = 246753
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740254000|         PSH, ACK - Len: 1365          |Seq = 255441 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740258000|         ACK       |                   |Seq = 6079 Ack = 249649
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740260000|         ACK       |                   |Seq = 6079 Ack = 252545
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740263000|         ACK       |                   |Seq = 6079 Ack = 255441
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740265000|         ACK       |                   |Seq = 6079 Ack = 255441
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740934000|         PSH, ACK - Len: 1322          |Seq = 6079 Ack = 256806
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771329000|         PSH, ACK - Len: 373           |Seq = 256806 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771449000|         ACK - Len: 1448               |Seq = 257179 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771452000|         ACK - Len: 1448               |Seq = 258627 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771455000|         ACK - Len: 1448               |Seq = 260075 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771460000|         ACK - Len: 1448               |Seq = 261523 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771469000|         ACK - Len: 1448               |Seq = 262971 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771472000|         ACK - Len: 1448               |Seq = 264419 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771475000|         ACK - Len: 1448               |Seq = 265867 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771479000|         ACK - Len: 1448               |Seq = 267315 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771483000|         ACK       |                   |Seq = 7401 Ack = 258627
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771582000|         ACK - Len: 1448               |Seq = 268763 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771585000|         ACK - Len: 1448               |Seq = 270211 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771589000|         ACK       |                   |Seq = 7401 Ack = 261523
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771591000|         ACK - Len: 1448               |Seq = 271659 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771594000|         PSH, ACK - Len: 493           |Seq = 273107 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771598000|         ACK - Len: 1448               |Seq = 273600 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771601000|         ACK - Len: 1448               |Seq = 275048 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771604000|         ACK       |                   |Seq = 7401 Ack = 264419
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771607000|         ACK - Len: 1448               |Seq = 276496 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771611000|         ACK - Len: 1448               |Seq = 277944 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771680000|         ACK - Len: 1448               |Seq = 279392 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771683000|         ACK       |                   |Seq = 7401 Ack = 267315
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771685000|         ACK - Len: 1448               |Seq = 280840 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771689000|         ACK - Len: 1448               |Seq = 282288 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771693000|         ACK       |                   |Seq = 7401 Ack = 270211
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771695000|         ACK - Len: 1448               |Seq = 283736 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771699000|         ACK - Len: 1448               |Seq = 285184 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771703000|         ACK       |                   |Seq = 7401 Ack = 273107
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771705000|         ACK - Len: 1448               |Seq = 286632 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771709000|         ACK - Len: 1448               |Seq = 288080 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771712000|         PSH, ACK - Len: 493           |Seq = 289528 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771843000|         ACK       |                   |Seq = 7401 Ack = 275048
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771845000|         ACK       |                   |Seq = 7401 Ack = 277944
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771847000|         ACK       |                   |Seq = 7401 Ack = 280840
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771849000|         ACK       |                   |Seq = 7401 Ack = 283736
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771852000|         ACK       |                   |Seq = 7401 Ack = 286632
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771854000|         ACK       |                   |Seq = 7401 Ack = 288080
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771978000|         ACK       |                   |Seq = 7401 Ack = 290021
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773209000|         ACK - Len: 1448               |Seq = 290021 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773316000|         ACK - Len: 1448               |Seq = 291469 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773320000|         ACK - Len: 1448               |Seq = 292917 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773324000|         ACK - Len: 1448               |Seq = 294365 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773329000|         ACK - Len: 1448               |Seq = 295813 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773333000|         ACK - Len: 1448               |Seq = 297261 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773337000|         ACK - Len: 1448               |Seq = 298709 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773341000|         ACK - Len: 1448               |Seq = 300157 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773344000|         ACK - Len: 1448               |Seq = 301605 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773348000|         ACK - Len: 1448               |Seq = 303053 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773384000|         ACK - Len: 1448               |Seq = 304501 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773388000|         PSH, ACK - Len: 493           |Seq = 305949 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773391000|         ACK       |                   |Seq = 7401 Ack = 292917
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773504000|         ACK - Len: 1448               |Seq = 306442 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773507000|         ACK       |                   |Seq = 7401 Ack = 295813
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773510000|         ACK - Len: 1448               |Seq = 307890 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773513000|         ACK - Len: 1448               |Seq = 309338 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773516000|         ACK - Len: 1448               |Seq = 310786 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773521000|         ACK       |                   |Seq = 7401 Ack = 298709
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773523000|         ACK - Len: 1448               |Seq = 312234 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773526000|         ACK - Len: 1448               |Seq = 313682 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773531000|         ACK - Len: 1448               |Seq = 315130 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773534000|         ACK       |                   |Seq = 7401 Ack = 301605
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773536000|         ACK - Len: 1448               |Seq = 316578 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773540000|         ACK - Len: 1448               |Seq = 318026 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773543000|         ACK       |                   |Seq = 7401 Ack = 304501
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773640000|         ACK - Len: 1448               |Seq = 319474 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773644000|         ACK - Len: 1448               |Seq = 320922 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773648000|         PSH, ACK - Len: 493           |Seq = 322370 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773651000|         ACK       |                   |Seq = 7401 Ack = 306442
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773653000|         ACK       |                   |Seq = 7401 Ack = 309338
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773656000|         ACK       |                   |Seq = 7401 Ack = 312234
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773658000|         ACK       |                   |Seq = 7401 Ack = 315130
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773775000|         ACK       |                   |Seq = 7401 Ack = 318026
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773778000|         ACK       |                   |Seq = 7401 Ack = 320922
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773781000|         ACK       |                   |Seq = 7401 Ack = 322863
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773783000|         ACK       |                   |Seq = 7401 Ack = 322863
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775093000|         ACK - Len: 1448               |Seq = 322863 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775097000|         ACK - Len: 1448               |Seq = 324311 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775100000|         ACK - Len: 1448               |Seq = 325759 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775104000|         ACK - Len: 1448               |Seq = 327207 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775107000|         ACK - Len: 1448               |Seq = 328655 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775111000|         ACK - Len: 1448               |Seq = 330103 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775114000|         ACK       |                   |Seq = 7401 Ack = 325759
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775193000|         ACK - Len: 1448               |Seq = 331551 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775197000|         ACK - Len: 1448               |Seq = 332999 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775201000|         ACK - Len: 1448               |Seq = 334447 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775204000|         ACK       |                   |Seq = 7401 Ack = 328655
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775207000|         ACK - Len: 1448               |Seq = 335895 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775210000|         ACK - Len: 1448               |Seq = 337343 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775214000|         PSH, ACK - Len: 493           |Seq = 338791 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775299000|         ACK - Len: 1448               |Seq = 339284 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775304000|         ACK - Len: 1448               |Seq = 340732 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775307000|         ACK - Len: 1448               |Seq = 342180 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775310000|         ACK       |                   |Seq = 7401 Ack = 331551
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775313000|         ACK - Len: 1448               |Seq = 343628 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775316000|         ACK - Len: 1448               |Seq = 345076 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775320000|         ACK       |                   |Seq = 7401 Ack = 334447
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775323000|         ACK - Len: 1448               |Seq = 346524 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775326000|         ACK - Len: 1448               |Seq = 347972 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775329000|         ACK       |                   |Seq = 7401 Ack = 337343
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775417000|         ACK - Len: 1448               |Seq = 349420 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775421000|         ACK - Len: 1448               |Seq = 350868 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775424000|         ACK       |                   |Seq = 7401 Ack = 339284
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775427000|         ACK - Len: 1448               |Seq = 352316 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775430000|         ACK - Len: 1448               |Seq = 353764 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775434000|         PSH, ACK - Len: 493           |Seq = 355212 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775437000|         ACK       |                   |Seq = 7401 Ack = 342180
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775440000|         ACK       |                   |Seq = 7401 Ack = 345076
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775566000|         ACK       |                   |Seq = 7401 Ack = 347972
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775569000|         ACK       |                   |Seq = 7401 Ack = 350868
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775571000|         ACK       |                   |Seq = 7401 Ack = 352316
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775573000|         ACK       |                   |Seq = 7401 Ack = 355212
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.776916000|         ACK - Len: 1448               |Seq = 355705 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.776920000|         ACK - Len: 1448               |Seq = 357153 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.776924000|         ACK - Len: 1448               |Seq = 358601 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.776927000|         ACK - Len: 1448               |Seq = 360049 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.776930000|         ACK       |                   |Seq = 7401 Ack = 357153
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.776933000|         ACK - Len: 1448               |Seq = 361497 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.776936000|         ACK - Len: 1448               |Seq = 362945 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777017000|         ACK - Len: 1448               |Seq = 364393 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777020000|         ACK - Len: 1448               |Seq = 365841 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777024000|         ACK - Len: 1448               |Seq = 367289 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777028000|         ACK       |                   |Seq = 7401 Ack = 360049
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777030000|         ACK - Len: 1448               |Seq = 368737 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777034000|         ACK - Len: 1448               |Seq = 370185 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777037000|         ACK       |                   |Seq = 7401 Ack = 362945
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777040000|         PSH, ACK - Len: 493           |Seq = 371633 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777160000|         ACK       |                   |Seq = 7401 Ack = 365841
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777162000|         ACK       |                   |Seq = 7401 Ack = 368737
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777164000|         ACK - Len: 1448               |Seq = 372126 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777168000|         ACK - Len: 1448               |Seq = 373574 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777172000|         ACK       |                   |Seq = 7401 Ack = 371633
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777174000|         ACK - Len: 1448               |Seq = 375022 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777179000|         ACK - Len: 1448               |Seq = 376470 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777182000|         ACK - Len: 1448               |Seq = 377918 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777186000|         ACK - Len: 1448               |Seq = 379366 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777261000|         ACK - Len: 1448               |Seq = 380814 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777265000|         ACK       |                   |Seq = 7401 Ack = 373574
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777268000|         ACK - Len: 1448               |Seq = 382262 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777271000|         ACK - Len: 1448               |Seq = 383710 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777275000|         ACK       |                   |Seq = 7401 Ack = 376470
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777277000|         ACK - Len: 1448               |Seq = 385158 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777281000|         ACK - Len: 1448               |Seq = 386606 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777285000|         PSH, ACK - Len: 493           |Seq = 388054 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777406000|         ACK       |                   |Seq = 7401 Ack = 379366
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777408000|         ACK       |                   |Seq = 7401 Ack = 382262
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777411000|         ACK       |                   |Seq = 7401 Ack = 385158
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777413000|         ACK       |                   |Seq = 7401 Ack = 388054
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778418000|         ACK - Len: 1448               |Seq = 388547 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778422000|         ACK - Len: 1448               |Seq = 389995 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778425000|         ACK - Len: 1448               |Seq = 391443 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778428000|         ACK       |                   |Seq = 7401 Ack = 389995
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778431000|         ACK - Len: 1448               |Seq = 392891 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778434000|         ACK - Len: 1448               |Seq = 394339 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778438000|         ACK - Len: 1448               |Seq = 395787 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778521000|         ACK - Len: 1448               |Seq = 397235 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778525000|         ACK - Len: 1448               |Seq = 398683 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778529000|         ACK - Len: 1448               |Seq = 400131 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778533000|         ACK       |                   |Seq = 7401 Ack = 392891
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778535000|         ACK - Len: 1448               |Seq = 401579 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778539000|         ACK - Len: 1448               |Seq = 403027 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778542000|         ACK       |                   |Seq = 7401 Ack = 395787
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778544000|         PSH, ACK - Len: 493           |Seq = 404475 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778670000|         ACK       |                   |Seq = 7401 Ack = 398683
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778672000|         ACK - Len: 1448               |Seq = 404968 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778676000|         ACK       |                   |Seq = 7401 Ack = 401579
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778678000|         ACK - Len: 1448               |Seq = 406416 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778682000|         ACK - Len: 1448               |Seq = 407864 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778685000|         ACK       |                   |Seq = 7401 Ack = 404475
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778688000|         ACK - Len: 1448               |Seq = 409312 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778691000|         ACK - Len: 1448               |Seq = 410760 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778695000|         ACK - Len: 1448               |Seq = 412208 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778771000|         ACK - Len: 1448               |Seq = 413656 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778774000|         ACK       |                   |Seq = 7401 Ack = 406416
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778777000|         ACK - Len: 1448               |Seq = 415104 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778781000|         ACK - Len: 1448               |Seq = 416552 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778784000|         ACK - Len: 1448               |Seq = 418000 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778788000|         ACK       |                   |Seq = 7401 Ack = 409312
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778790000|         ACK - Len: 1448               |Seq = 419448 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778794000|         PSH, ACK - Len: 493           |Seq = 420896 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778914000|         ACK       |                   |Seq = 7401 Ack = 412208
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778917000|         ACK       |                   |Seq = 7401 Ack = 415104
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778919000|         ACK       |                   |Seq = 7401 Ack = 415104
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778922000|         ACK       |                   |Seq = 7401 Ack = 418000
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778924000|         ACK       |                   |Seq = 7401 Ack = 420896
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.780156000|         ACK - Len: 1448               |Seq = 421389 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.780160000|         ACK - Len: 1448               |Seq = 422837 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.780163000|         PSH, ACK - Len: 565           |Seq = 424285 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.780166000|         ACK       |                   |Seq = 7401 Ack = 422837
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.780253000|         ACK       |                   |Seq = 7401 Ack = 424850
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.780913000|         PSH, ACK - Len: 1322          |Seq = 7401 Ack = 424850
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.795955000|         ACK - Len: 1448               |Seq = 424850 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795960000|         ACK - Len: 1448               |Seq = 426298 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795964000|         ACK - Len: 1448               |Seq = 427746 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795966000|         ACK - Len: 1448               |Seq = 429194 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795970000|         ACK - Len: 1448               |Seq = 430642 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795974000|         ACK - Len: 1448               |Seq = 432090 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795983000|         ACK - Len: 1448               |Seq = 433538 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795986000|         ACK - Len: 1448               |Seq = 434986 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795990000|         ACK - Len: 1448               |Seq = 436434 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795994000|         ACK - Len: 1448               |Seq = 437882 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795997000|         ACK       |                   |Seq = 8723 Ack = 427746
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.795999000|         ACK - Len: 1448               |Seq = 439330 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796003000|         PSH, ACK - Len: 493           |Seq = 440778 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796006000|         ACK       |                   |Seq = 8723 Ack = 430642
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796151000|         ACK - Len: 1448               |Seq = 441271 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796155000|         ACK - Len: 1448               |Seq = 442719 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796159000|         ACK       |                   |Seq = 8723 Ack = 433538
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796161000|         ACK - Len: 1448               |Seq = 444167 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796165000|         ACK - Len: 1448               |Seq = 445615 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796168000|         ACK       |                   |Seq = 8723 Ack = 436434
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796171000|         ACK - Len: 1448               |Seq = 447063 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796174000|         ACK - Len: 1448               |Seq = 448511 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796178000|         ACK       |                   |Seq = 8723 Ack = 439330
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796180000|         ACK - Len: 1448               |Seq = 449959 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796184000|         ACK       |                   |Seq = 8723 Ack = 441271
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796186000|         ACK - Len: 1448               |Seq = 451407 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796191000|         ACK - Len: 1448               |Seq = 452855 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796194000|         PSH, ACK - Len: 173           |Seq = 454303 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796196000|         ACK       |                   |Seq = 8723 Ack = 444167
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796199000|         ACK       |                   |Seq = 8723 Ack = 447063
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796361000|         ACK       |                   |Seq = 8723 Ack = 449959
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796363000|         ACK       |                   |Seq = 8723 Ack = 452855
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796366000|         ACK       |                   |Seq = 8723 Ack = 454476
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796368000|         ACK       |                   |Seq = 8723 Ack = 454476
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.802806000|         PSH, ACK - Len: 1290          |Seq = 8723 Ack = 454476
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.808687000|         ACK - Len: 1448               |Seq = 454476 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808691000|         ACK - Len: 1448               |Seq = 455924 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808694000|         ACK - Len: 1448               |Seq = 457372 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808698000|         ACK - Len: 1448               |Seq = 458820 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808702000|         ACK - Len: 1448               |Seq = 460268 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808709000|         ACK - Len: 1448               |Seq = 461716 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808712000|         ACK - Len: 1448               |Seq = 463164 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808715000|         ACK - Len: 1448               |Seq = 464612 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808719000|         ACK       |                   |Seq = 10013 Ack = 457372
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.808721000|         ACK - Len: 1448               |Seq = 466060 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808834000|         ACK - Len: 1448               |Seq = 467508 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808838000|         ACK - Len: 1448               |Seq = 468956 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808841000|         PSH, ACK - Len: 493           |Seq = 470404 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808844000|         ACK - Len: 1448               |Seq = 470897 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808848000|         ACK       |                   |Seq = 10013 Ack = 460268
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.808850000|         PSH, ACK - Len: 1357          |Seq = 472345 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808854000|         ACK       |                   |Seq = 10013 Ack = 463164
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.808856000|         ACK       |                   |Seq = 10013 Ack = 466060
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.808985000|         ACK       |                   |Seq = 10013 Ack = 468956
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.808988000|         ACK       |                   |Seq = 10013 Ack = 470897
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.809100000|         ACK       |                   |Seq = 10013 Ack = 473702
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.041478000|         PSH, ACK - Len: 1338          |Seq = 10013 Ack = 473702
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.054831000|         PSH, ACK - Len: 517           |Seq = 473702 Ack = 11351
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:50.054999000|         PSH, ACK - Len: 1338          |Seq = 11351 Ack = 474219
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.061641000|         PSH, ACK - Len: 565           |Seq = 474219 Ack = 12689
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:50.061785000|         PSH, ACK - Len: 1338          |Seq = 12689 Ack = 474784
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.066977000|         PSH, ACK - Len: 517           |Seq = 474784 Ack = 14027
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:50.067187000|         PSH, ACK - Len: 1338          |Seq = 14027 Ack = 475301
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.071012000|         PSH, ACK - Len: 469           |Seq = 475301 Ack = 15365
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:50.306742000|         PSH, ACK - Len: 1322          |Seq = 15365 Ack = 475770
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.313402000|         ACK - Len: 1448               |Seq = 475770 Ack = 16687
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:50.313406000|         PSH, ACK - Len: 493           |Seq = 477218 Ack = 16687
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:50.313593000|         ACK       |                   |Seq = 16687 Ack = 477711
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.313735000|         PSH, ACK - Len: 1322          |Seq = 16687 Ack = 477711
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.317763000|         PSH, ACK - Len: 485           |Seq = 477711 Ack = 18009
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:50.318423000|         PSH, ACK - Len: 1322          |Seq = 18009 Ack = 478196
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.336184000|         PSH, ACK - Len: 485           |Seq = 478196 Ack = 19331
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:50.536246000|         ACK       |                   |Seq = 19331 Ack = 478681
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.586026000|         PSH, ACK - Len: 1386          |Seq = 19331 Ack = 478681
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.794860000|         PSH, ACK  |                   |Seq = 478681 Ack = 20717
|         |(50768)  <------------------  (443)    |
|2014-06-04 15:04:51.021427000|         RST, ACK  |                   |Seq = 20717 Ack = 478681
|         |(50768)  ------------------>  (443)    |

alt text

asked 05 Jun '14, 04:53

adifr's gravatar image

adifr
11112
accept rate: 0%


As far as I can see, there is nothing wrong at TCP level (nothing missing). But honestly, I did not check very thoroughly, as it's a pain in the back to do that with text files and screenshots! So, if possible please post the capture file somewhere (google drive, dropbox, cloudshark.org).

Having said that, I see two possible reasons for that behavior:

  1. the client received all requested data from the server and somehow got hung up while it is processing the data. The client OS then closes the 'stale' TCP connection after a defined timeout.
  2. the client did not receive all requested data at the application level. As it does not get what it expects, it waits for some time, and then either the client software itself or the OS closed the 'stale' TCP connection.

Which of the two options (if any) is correct, can't be told by looking at the encrypted data (even if you post the capture file). So, either you decrypt the HTTPS connection (see the Wiki) or you enable debug logging at the client and/or the server.

Regards
Kurt

permanent link

answered 05 Jun '14, 13:56

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Hi Kurt

I've posted two captures on cloudshark.

Client sends [RST,PSH]: https://www.cloudshark.org/captures/78315e854ddf
Server sends [RST,PSH]: https://www.cloudshark.org/captures/1b499220fad6

Either the client or the server sends [RST,PSH] after about 5 minutes, which would be a timeout and during this time the browser on the client side freezes. I think the next step is to decrypt the https connection, but i'am still waiting for the private keys.

Do you have any idea?

thanks Adrian

(08 Jun '14, 10:21) adifr

In both cases the https server is not returning any data leading to the timeout conditions. Assuming that it is not static web pages the problem is probably somewhere in the backend systems. You should be able to trace the decrypted requests by increasing the LogLevel in httpd.conf.

(09 Jun '14, 22:07) mrEEde

but i'am still waiting for the private keys.
Do you have any idea?

Instead of waiting to the server keys, you could configure your browser to export the session key (works for Firefox and Chrome) and use those keys to decrypt the session.

http://ask.wireshark.org/questions/4229/follow-ssl-stream-using-master-key-and-session-id
http://stackoverflow.com/questions/9243842/how-to-reach-used-cipher-key-of-current-ssl-connection-under-firefox
http://www.root9.net/2012/11/ssl-decryption-with-wireshark-private.html

Alternatively you can use a SSL proxy that is able to 'intercept' SSL connections, like Fiddler and/or burp proxy, or similar tools in the browser, like Firebug or HTTPWatch.

(12 Jun '14, 06:55) Kurt Knochner ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×8

question asked: 05 Jun '14, 04:53

question was seen: 1,167 times

last updated: 12 Jun '14, 06:55

p​o​w​e​r​e​d by O​S​Q​A