This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

random connection hungs

0

Hi everyone

We are having random connection hungs on all our users (IE, Chrome, Firefox). We captured the traffic on client side and can see every time when hung happens an [RST,ACK] after about 300sec, this would be an timeout...

The http-server is IBM IHS 8.5.5 based on Apache 2.2 with following parameters:

Timeout 300
ServerLimit        30
ThreadLimit        250
ThreadsPerChild    200
MaxClients        6000
StartServers         2
MinSpareThreads      2
MaxSpareThreads      5
MaxRequestsPerChild  0
ListenBacklog      300
SendBufferSize   32768

Thera are no firewalls beetween our test client and http server. Data flow looks normal for a while but suddenly it stops until a timeout (about 300s) and then it sends [RST,ACK].

can anyonone helps ?

Here is the tcp-ip flow when this happens:

    |Time     | 10.134.18.122                         |
|         |                   | 131.102.3.167     |                   
|2014-06-04 14:59:48.674182000|         SYN       |                   |Seq = 0
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:48.675385000|         SYN, ACK  |                   |Seq = 0 Ack = 1
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:48.675388000|         ACK       |                   |Seq = 1 Ack = 1
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:48.675509000|         PSH, ACK - Len: 257           |Seq = 1 Ack = 1
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:48.680932000|         PSH, ACK - Len: 86            |Seq = 1 Ack = 258
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:48.680935000|         PSH, ACK - Len: 6             |Seq = 87 Ack = 258
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:48.680938000|         PSH, ACK - Len: 53            |Seq = 93 Ack = 258
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:48.681042000|         ACK       |                   |Seq = 258 Ack = 93
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:48.681253000|         PSH, ACK - Len: 59            |Seq = 258 Ack = 146
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:48.892692000|         PSH, ACK  |                   |Seq = 146 Ack = 317
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:48.892696000|         PSH, ACK - Len: 554           |Seq = 317 Ack = 146
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:48.936374000|         ACK - Len: 1448               |Seq = 146 Ack = 871
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:48.936378000|         ACK - Len: 1448               |Seq = 1594 Ack = 871
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:48.936382000|         PSH, ACK - Len: 1301          |Seq = 3042 Ack = 871
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:48.936385000|         ACK       |                   |Seq = 871 Ack = 3042
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.147806000|         ACK       |                   |Seq = 871 Ack = 4343
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.677407000|         PSH, ACK - Len: 1290          |Seq = 871 Ack = 4343
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.691919000|         PSH, ACK - Len: 357           |Seq = 4343 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693032000|         ACK - Len: 1448               |Seq = 4700 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693039000|         ACK - Len: 1448               |Seq = 6148 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693049000|         ACK - Len: 1448               |Seq = 7596 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693055000|         ACK - Len: 1448               |Seq = 9044 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693065000|         ACK - Len: 1448               |Seq = 10492 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693072000|         ACK - Len: 1448               |Seq = 11940 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693075000|         ACK       |                   |Seq = 2161 Ack = 6148
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.693190000|         ACK - Len: 1448               |Seq = 13388 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693196000|         ACK - Len: 1448               |Seq = 14836 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693209000|         ACK       |                   |Seq = 2161 Ack = 9044
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.693211000|         PSH, ACK - Len: 1448          |Seq = 16284 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.693243000|         ACK       |                   |Seq = 2161 Ack = 11940
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.693349000|         ACK       |                   |Seq = 2161 Ack = 14836
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.693354000|         ACK       |                   |Seq = 2161 Ack = 17732
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.694642000|         ACK - Len: 1448               |Seq = 17732 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694650000|         ACK - Len: 1448               |Seq = 19180 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694657000|         ACK - Len: 1448               |Seq = 20628 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694733000|         ACK - Len: 1448               |Seq = 22076 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694741000|         ACK - Len: 1448               |Seq = 23524 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694748000|         ACK - Len: 1448               |Seq = 24972 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694756000|         ACK - Len: 1448               |Seq = 26420 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694834000|         ACK - Len: 1448               |Seq = 27868 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694841000|         ACK       |                   |Seq = 2161 Ack = 20628
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.694844000|         ACK - Len: 1448               |Seq = 29316 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694856000|         ACK - Len: 1448               |Seq = 30764 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.694859000|         ACK       |                   |Seq = 2161 Ack = 23524
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.694865000|         ACK - Len: 1448               |Seq = 32212 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.695039000|         ACK - Len: 1448               |Seq = 33660 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.695046000|         ACK - Len: 1448               |Seq = 35108 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.695050000|         PSH, ACK - Len: 986           |Seq = 36556 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.695067000|         ACK       |                   |Seq = 2161 Ack = 26420
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.695072000|         ACK       |                   |Seq = 2161 Ack = 29316
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.695190000|         ACK       |                   |Seq = 2161 Ack = 32212
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.695195000|         ACK       |                   |Seq = 2161 Ack = 35108
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.695198000|         ACK       |                   |Seq = 2161 Ack = 37542
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696023000|         ACK - Len: 1448               |Seq = 37542 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696027000|         ACK - Len: 1448               |Seq = 38990 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696030000|         ACK - Len: 1448               |Seq = 40438 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696074000|         ACK - Len: 1448               |Seq = 41886 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696078000|         ACK - Len: 1448               |Seq = 43334 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696081000|         ACK - Len: 1448               |Seq = 44782 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696084000|         ACK - Len: 1448               |Seq = 46230 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696181000|         ACK - Len: 1448               |Seq = 47678 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696185000|         ACK - Len: 1448               |Seq = 49126 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696188000|         ACK       |                   |Seq = 2161 Ack = 40438
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696191000|         ACK - Len: 1448               |Seq = 50574 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696194000|         ACK - Len: 1448               |Seq = 52022 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696198000|         ACK       |                   |Seq = 2161 Ack = 43334
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696200000|         PSH, ACK - Len: 493           |Seq = 53470 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696203000|         ACK       |                   |Seq = 2161 Ack = 46230
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696325000|         ACK       |                   |Seq = 2161 Ack = 49126
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696328000|         ACK       |                   |Seq = 2161 Ack = 52022
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696330000|         ACK       |                   |Seq = 2161 Ack = 53963
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696540000|         ACK - Len: 1448               |Seq = 53963 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696544000|         ACK - Len: 1448               |Seq = 55411 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696547000|         ACK - Len: 1448               |Seq = 56859 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696551000|         ACK - Len: 1448               |Seq = 58307 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696554000|         ACK - Len: 1448               |Seq = 59755 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696558000|         ACK - Len: 1448               |Seq = 61203 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696561000|         ACK - Len: 1448               |Seq = 62651 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696643000|         ACK - Len: 1448               |Seq = 64099 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696647000|         ACK - Len: 1448               |Seq = 65547 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696650000|         ACK       |                   |Seq = 2161 Ack = 56859
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696653000|         ACK - Len: 1448               |Seq = 66995 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696656000|         ACK - Len: 1448               |Seq = 68443 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696660000|         ACK       |                   |Seq = 2161 Ack = 59755
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696662000|         PSH, ACK - Len: 493           |Seq = 69891 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.696783000|         ACK       |                   |Seq = 2161 Ack = 62651
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696786000|         ACK       |                   |Seq = 2161 Ack = 65547
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696788000|         ACK       |                   |Seq = 2161 Ack = 68443
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.696790000|         ACK       |                   |Seq = 2161 Ack = 70384
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.698016000|         ACK - Len: 1448               |Seq = 70384 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.698020000|         ACK - Len: 1448               |Seq = 71832 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.698024000|         ACK - Len: 1448               |Seq = 73280 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.698027000|         ACK - Len: 1448               |Seq = 74728 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.698031000|         ACK - Len: 1448               |Seq = 76176 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.698035000|         ACK - Len: 1448               |Seq = 77624 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.698083000|         ACK - Len: 1448               |Seq = 79072 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.698087000|         PSH, ACK - Len: 445           |Seq = 80520 Ack = 2161
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.698090000|         ACK       |                   |Seq = 2161 Ack = 73280
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.698092000|         ACK       |                   |Seq = 2161 Ack = 76176
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.698207000|         ACK       |                   |Seq = 2161 Ack = 79072
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.698210000|         ACK       |                   |Seq = 2161 Ack = 80965
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.698665000|         PSH, ACK - Len: 1306          |Seq = 2161 Ack = 80965
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.713818000|         PSH, ACK - Len: 373           |Seq = 80965 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714013000|         ACK - Len: 1448               |Seq = 81338 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714016000|         ACK - Len: 1448               |Seq = 82786 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714020000|         ACK - Len: 1448               |Seq = 84234 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714024000|         ACK - Len: 1448               |Seq = 85682 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714029000|         ACK - Len: 1448               |Seq = 87130 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714033000|         ACK - Len: 1448               |Seq = 88578 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714089000|         ACK - Len: 1448               |Seq = 90026 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714092000|         ACK - Len: 1448               |Seq = 91474 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714096000|         ACK - Len: 1448               |Seq = 92922 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714100000|         ACK - Len: 1448               |Seq = 94370 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714103000|         ACK - Len: 1448               |Seq = 95818 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714107000|         PSH, ACK - Len: 493           |Seq = 97266 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714110000|         ACK       |                   |Seq = 3467 Ack = 82786
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714199000|         ACK - Len: 1448               |Seq = 97759 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714202000|         ACK - Len: 1448               |Seq = 99207 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714206000|         ACK       |                   |Seq = 3467 Ack = 85682
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714208000|         ACK - Len: 1448               |Seq = 100655 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714212000|         ACK - Len: 1448               |Seq = 102103 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714216000|         ACK       |                   |Seq = 3467 Ack = 88578
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714218000|         ACK - Len: 1448               |Seq = 103551 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714222000|         ACK       |                   |Seq = 3467 Ack = 91474
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714225000|         ACK - Len: 1448               |Seq = 104999 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714228000|         ACK - Len: 1448               |Seq = 106447 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714318000|         ACK - Len: 1448               |Seq = 107895 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714322000|         ACK - Len: 1448               |Seq = 109343 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714325000|         ACK - Len: 1448               |Seq = 110791 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714328000|         ACK       |                   |Seq = 3467 Ack = 94370
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714331000|         ACK - Len: 1448               |Seq = 112239 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714334000|         PSH, ACK - Len: 493           |Seq = 113687 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.714337000|         ACK       |                   |Seq = 3467 Ack = 97266
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714339000|         ACK       |                   |Seq = 3467 Ack = 99207
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714342000|         ACK       |                   |Seq = 3467 Ack = 102103
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714470000|         ACK       |                   |Seq = 3467 Ack = 104999
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714473000|         ACK       |                   |Seq = 3467 Ack = 107895
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714476000|         ACK       |                   |Seq = 3467 Ack = 109343
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714478000|         ACK       |                   |Seq = 3467 Ack = 112239
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.714593000|         ACK       |                   |Seq = 3467 Ack = 114180
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.715577000|         ACK - Len: 1448               |Seq = 114180 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715650000|         ACK - Len: 1448               |Seq = 115628 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715654000|         ACK - Len: 1448               |Seq = 117076 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715658000|         ACK - Len: 1448               |Seq = 118524 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715661000|         ACK - Len: 1448               |Seq = 119972 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715664000|         ACK - Len: 1448               |Seq = 121420 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715668000|         ACK - Len: 1448               |Seq = 122868 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715755000|         ACK - Len: 1448               |Seq = 124316 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715759000|         ACK - Len: 1448               |Seq = 125764 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715763000|         ACK       |                   |Seq = 3467 Ack = 117076
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.715765000|         ACK - Len: 1448               |Seq = 127212 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715769000|         ACK - Len: 1448               |Seq = 128660 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715772000|         ACK       |                   |Seq = 3467 Ack = 119972
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.715775000|         PSH, ACK - Len: 493           |Seq = 130108 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715778000|         ACK       |                   |Seq = 3467 Ack = 122868
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.715780000|         ACK - Len: 1448               |Seq = 130601 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715865000|         ACK - Len: 1448               |Seq = 132049 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715869000|         ACK - Len: 1448               |Seq = 133497 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715873000|         ACK       |                   |Seq = 3467 Ack = 125764
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.715875000|         ACK - Len: 1448               |Seq = 134945 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715879000|         ACK - Len: 1448               |Seq = 136393 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715882000|         ACK       |                   |Seq = 3467 Ack = 128660
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.715885000|         ACK - Len: 1448               |Seq = 137841 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715888000|         ACK - Len: 1448               |Seq = 139289 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.715892000|         ACK       |                   |Seq = 3467 Ack = 130601
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.715894000|         ACK - Len: 1448               |Seq = 140737 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.716002000|         ACK - Len: 1448               |Seq = 142185 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.716006000|         ACK - Len: 1448               |Seq = 143633 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.716009000|         PSH, ACK - Len: 149           |Seq = 145081 Ack = 3467
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.716012000|         ACK       |                   |Seq = 3467 Ack = 133497
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.716015000|         ACK       |                   |Seq = 3467 Ack = 136393
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.716017000|         ACK       |                   |Seq = 3467 Ack = 139289
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.716020000|         ACK       |                   |Seq = 3467 Ack = 142185
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.716130000|         ACK       |                   |Seq = 3467 Ack = 145081
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.716133000|         ACK       |                   |Seq = 3467 Ack = 145081
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.716508000|         PSH, ACK - Len: 1306          |Seq = 3467 Ack = 145230
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.723437000|         ACK - Len: 1448               |Seq = 145230 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723441000|         ACK - Len: 1448               |Seq = 146678 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723444000|         ACK - Len: 1448               |Seq = 148126 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723448000|         ACK - Len: 1448               |Seq = 149574 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723451000|         ACK - Len: 1448               |Seq = 151022 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723457000|         ACK - Len: 1448               |Seq = 152470 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723461000|         ACK - Len: 1448               |Seq = 153918 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723464000|         ACK - Len: 1448               |Seq = 155366 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723530000|         ACK - Len: 1448               |Seq = 156814 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723534000|         ACK - Len: 1448               |Seq = 158262 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723538000|         ACK - Len: 1448               |Seq = 159710 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723541000|         PSH, ACK - Len: 221           |Seq = 161158 Ack = 4773
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.723544000|         ACK       |                   |Seq = 4773 Ack = 148126
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.723662000|         ACK       |                   |Seq = 4773 Ack = 151022
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.723664000|         ACK       |                   |Seq = 4773 Ack = 153918
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.723667000|         ACK       |                   |Seq = 4773 Ack = 156814
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.723669000|         ACK       |                   |Seq = 4773 Ack = 159710
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.723784000|         ACK       |                   |Seq = 4773 Ack = 161379
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.724120000|         PSH, ACK - Len: 1306          |Seq = 4773 Ack = 161379
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736325000|         PSH, ACK - Len: 373           |Seq = 161379 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736592000|         ACK - Len: 1448               |Seq = 161752 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736596000|         ACK - Len: 1448               |Seq = 163200 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736600000|         ACK - Len: 1448               |Seq = 164648 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736604000|         ACK - Len: 1448               |Seq = 166096 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736608000|         ACK - Len: 1448               |Seq = 167544 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736615000|         ACK - Len: 1448               |Seq = 168992 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736618000|         ACK       |                   |Seq = 6079 Ack = 163200
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736621000|         ACK - Len: 1448               |Seq = 170440 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736625000|         ACK - Len: 1448               |Seq = 171888 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736628000|         ACK - Len: 1448               |Seq = 173336 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736704000|         ACK - Len: 1448               |Seq = 174784 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736708000|         ACK       |                   |Seq = 6079 Ack = 166096
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736711000|         ACK - Len: 1448               |Seq = 176232 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736714000|         PSH, ACK - Len: 493           |Seq = 177680 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736717000|         ACK       |                   |Seq = 6079 Ack = 168992
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736719000|         ACK - Len: 1448               |Seq = 178173 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736722000|         ACK - Len: 1448               |Seq = 179621 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736726000|         ACK - Len: 1448               |Seq = 181069 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736730000|         ACK       |                   |Seq = 6079 Ack = 171888
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736732000|         ACK - Len: 1448               |Seq = 182517 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736808000|         ACK - Len: 1448               |Seq = 183965 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736812000|         ACK       |                   |Seq = 6079 Ack = 174784
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736814000|         ACK - Len: 1448               |Seq = 185413 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736818000|         ACK - Len: 1448               |Seq = 186861 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736822000|         ACK       |                   |Seq = 6079 Ack = 177680
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736824000|         ACK - Len: 1448               |Seq = 188309 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736828000|         ACK - Len: 1448               |Seq = 189757 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736832000|         ACK - Len: 1448               |Seq = 191205 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736835000|         ACK - Len: 1448               |Seq = 192653 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736839000|         ACK       |                   |Seq = 6079 Ack = 179621
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736841000|         PSH, ACK - Len: 493           |Seq = 194101 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.736844000|         ACK       |                   |Seq = 6079 Ack = 182517
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736986000|         ACK       |                   |Seq = 6079 Ack = 185413
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736989000|         ACK       |                   |Seq = 6079 Ack = 188309
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736991000|         ACK       |                   |Seq = 6079 Ack = 191205
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736994000|         ACK       |                   |Seq = 6079 Ack = 192653
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.736996000|         ACK       |                   |Seq = 6079 Ack = 194594
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738314000|         ACK - Len: 1448               |Seq = 194594 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738318000|         ACK - Len: 1448               |Seq = 196042 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738321000|         ACK - Len: 1448               |Seq = 197490 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738325000|         ACK - Len: 1448               |Seq = 198938 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738328000|         ACK - Len: 1448               |Seq = 200386 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738333000|         ACK - Len: 1448               |Seq = 201834 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738337000|         ACK - Len: 1448               |Seq = 203282 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738440000|         ACK - Len: 1448               |Seq = 204730 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738443000|         ACK - Len: 1448               |Seq = 206178 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738446000|         ACK - Len: 1448               |Seq = 207626 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738450000|         ACK       |                   |Seq = 6079 Ack = 197490
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738452000|         ACK - Len: 1448               |Seq = 209074 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738456000|         PSH, ACK - Len: 493           |Seq = 210522 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738458000|         ACK       |                   |Seq = 6079 Ack = 200386
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738461000|         ACK       |                   |Seq = 6079 Ack = 203282
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738463000|         ACK - Len: 1448               |Seq = 211015 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738467000|         ACK - Len: 1448               |Seq = 212463 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738528000|         ACK - Len: 1448               |Seq = 213911 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738532000|         ACK - Len: 1448               |Seq = 215359 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738535000|         ACK - Len: 1448               |Seq = 216807 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738539000|         ACK - Len: 1448               |Seq = 218255 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738542000|         ACK - Len: 1448               |Seq = 219703 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738545000|         ACK       |                   |Seq = 6079 Ack = 206178
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738548000|         ACK - Len: 1448               |Seq = 221151 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738551000|         ACK - Len: 1448               |Seq = 222599 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738555000|         ACK       |                   |Seq = 6079 Ack = 209074
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738652000|         ACK - Len: 1448               |Seq = 224047 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738656000|         ACK - Len: 1448               |Seq = 225495 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738659000|         PSH, ACK - Len: 493           |Seq = 226943 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.738663000|         ACK       |                   |Seq = 6079 Ack = 211015
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738665000|         ACK       |                   |Seq = 6079 Ack = 213911
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738667000|         ACK       |                   |Seq = 6079 Ack = 216807
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738781000|         ACK       |                   |Seq = 6079 Ack = 219703
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738784000|         ACK       |                   |Seq = 6079 Ack = 222599
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738786000|         ACK       |                   |Seq = 6079 Ack = 225495
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.738788000|         ACK       |                   |Seq = 6079 Ack = 227436
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.739884000|         ACK - Len: 1448               |Seq = 227436 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739888000|         ACK - Len: 1448               |Seq = 228884 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739891000|         ACK - Len: 1448               |Seq = 230332 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739894000|         ACK - Len: 1448               |Seq = 231780 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739897000|         ACK - Len: 1448               |Seq = 233228 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739901000|         ACK - Len: 1448               |Seq = 234676 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739905000|         ACK - Len: 1448               |Seq = 236124 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739987000|         ACK - Len: 1448               |Seq = 237572 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739991000|         ACK - Len: 1448               |Seq = 239020 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739995000|         ACK - Len: 1448               |Seq = 240468 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.739999000|         ACK       |                   |Seq = 6079 Ack = 230332
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740001000|         ACK - Len: 1448               |Seq = 241916 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740005000|         PSH, ACK - Len: 493           |Seq = 243364 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740008000|         ACK       |                   |Seq = 6079 Ack = 233228
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740010000|         ACK       |                   |Seq = 6079 Ack = 236124
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740111000|         ACK - Len: 1448               |Seq = 243857 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740115000|         ACK       |                   |Seq = 6079 Ack = 239020
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740117000|         ACK - Len: 1448               |Seq = 245305 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740120000|         ACK - Len: 1448               |Seq = 246753 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740124000|         ACK - Len: 1448               |Seq = 248201 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740127000|         ACK       |                   |Seq = 6079 Ack = 241916
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740130000|         ACK - Len: 1448               |Seq = 249649 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740134000|         ACK - Len: 1448               |Seq = 251097 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740137000|         ACK       |                   |Seq = 6079 Ack = 243857
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740139000|         ACK - Len: 1448               |Seq = 252545 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740143000|         ACK - Len: 1448               |Seq = 253993 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740251000|         ACK       |                   |Seq = 6079 Ack = 246753
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740254000|         PSH, ACK - Len: 1365          |Seq = 255441 Ack = 6079
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.740258000|         ACK       |                   |Seq = 6079 Ack = 249649
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740260000|         ACK       |                   |Seq = 6079 Ack = 252545
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740263000|         ACK       |                   |Seq = 6079 Ack = 255441
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740265000|         ACK       |                   |Seq = 6079 Ack = 255441
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.740934000|         PSH, ACK - Len: 1322          |Seq = 6079 Ack = 256806
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771329000|         PSH, ACK - Len: 373           |Seq = 256806 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771449000|         ACK - Len: 1448               |Seq = 257179 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771452000|         ACK - Len: 1448               |Seq = 258627 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771455000|         ACK - Len: 1448               |Seq = 260075 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771460000|         ACK - Len: 1448               |Seq = 261523 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771469000|         ACK - Len: 1448               |Seq = 262971 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771472000|         ACK - Len: 1448               |Seq = 264419 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771475000|         ACK - Len: 1448               |Seq = 265867 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771479000|         ACK - Len: 1448               |Seq = 267315 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771483000|         ACK       |                   |Seq = 7401 Ack = 258627
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771582000|         ACK - Len: 1448               |Seq = 268763 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771585000|         ACK - Len: 1448               |Seq = 270211 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771589000|         ACK       |                   |Seq = 7401 Ack = 261523
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771591000|         ACK - Len: 1448               |Seq = 271659 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771594000|         PSH, ACK - Len: 493           |Seq = 273107 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771598000|         ACK - Len: 1448               |Seq = 273600 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771601000|         ACK - Len: 1448               |Seq = 275048 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771604000|         ACK       |                   |Seq = 7401 Ack = 264419
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771607000|         ACK - Len: 1448               |Seq = 276496 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771611000|         ACK - Len: 1448               |Seq = 277944 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771680000|         ACK - Len: 1448               |Seq = 279392 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771683000|         ACK       |                   |Seq = 7401 Ack = 267315
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771685000|         ACK - Len: 1448               |Seq = 280840 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771689000|         ACK - Len: 1448               |Seq = 282288 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771693000|         ACK       |                   |Seq = 7401 Ack = 270211
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771695000|         ACK - Len: 1448               |Seq = 283736 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771699000|         ACK - Len: 1448               |Seq = 285184 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771703000|         ACK       |                   |Seq = 7401 Ack = 273107
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771705000|         ACK - Len: 1448               |Seq = 286632 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771709000|         ACK - Len: 1448               |Seq = 288080 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771712000|         PSH, ACK - Len: 493           |Seq = 289528 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.771843000|         ACK       |                   |Seq = 7401 Ack = 275048
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771845000|         ACK       |                   |Seq = 7401 Ack = 277944
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771847000|         ACK       |                   |Seq = 7401 Ack = 280840
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771849000|         ACK       |                   |Seq = 7401 Ack = 283736
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771852000|         ACK       |                   |Seq = 7401 Ack = 286632
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771854000|         ACK       |                   |Seq = 7401 Ack = 288080
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.771978000|         ACK       |                   |Seq = 7401 Ack = 290021
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773209000|         ACK - Len: 1448               |Seq = 290021 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773316000|         ACK - Len: 1448               |Seq = 291469 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773320000|         ACK - Len: 1448               |Seq = 292917 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773324000|         ACK - Len: 1448               |Seq = 294365 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773329000|         ACK - Len: 1448               |Seq = 295813 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773333000|         ACK - Len: 1448               |Seq = 297261 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773337000|         ACK - Len: 1448               |Seq = 298709 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773341000|         ACK - Len: 1448               |Seq = 300157 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773344000|         ACK - Len: 1448               |Seq = 301605 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773348000|         ACK - Len: 1448               |Seq = 303053 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773384000|         ACK - Len: 1448               |Seq = 304501 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773388000|         PSH, ACK - Len: 493           |Seq = 305949 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773391000|         ACK       |                   |Seq = 7401 Ack = 292917
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773504000|         ACK - Len: 1448               |Seq = 306442 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773507000|         ACK       |                   |Seq = 7401 Ack = 295813
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773510000|         ACK - Len: 1448               |Seq = 307890 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773513000|         ACK - Len: 1448               |Seq = 309338 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773516000|         ACK - Len: 1448               |Seq = 310786 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773521000|         ACK       |                   |Seq = 7401 Ack = 298709
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773523000|         ACK - Len: 1448               |Seq = 312234 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773526000|         ACK - Len: 1448               |Seq = 313682 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773531000|         ACK - Len: 1448               |Seq = 315130 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773534000|         ACK       |                   |Seq = 7401 Ack = 301605
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773536000|         ACK - Len: 1448               |Seq = 316578 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773540000|         ACK - Len: 1448               |Seq = 318026 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773543000|         ACK       |                   |Seq = 7401 Ack = 304501
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773640000|         ACK - Len: 1448               |Seq = 319474 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773644000|         ACK - Len: 1448               |Seq = 320922 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773648000|         PSH, ACK - Len: 493           |Seq = 322370 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.773651000|         ACK       |                   |Seq = 7401 Ack = 306442
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773653000|         ACK       |                   |Seq = 7401 Ack = 309338
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773656000|         ACK       |                   |Seq = 7401 Ack = 312234
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773658000|         ACK       |                   |Seq = 7401 Ack = 315130
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773775000|         ACK       |                   |Seq = 7401 Ack = 318026
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773778000|         ACK       |                   |Seq = 7401 Ack = 320922
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773781000|         ACK       |                   |Seq = 7401 Ack = 322863
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.773783000|         ACK       |                   |Seq = 7401 Ack = 322863
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775093000|         ACK - Len: 1448               |Seq = 322863 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775097000|         ACK - Len: 1448               |Seq = 324311 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775100000|         ACK - Len: 1448               |Seq = 325759 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775104000|         ACK - Len: 1448               |Seq = 327207 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775107000|         ACK - Len: 1448               |Seq = 328655 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775111000|         ACK - Len: 1448               |Seq = 330103 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775114000|         ACK       |                   |Seq = 7401 Ack = 325759
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775193000|         ACK - Len: 1448               |Seq = 331551 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775197000|         ACK - Len: 1448               |Seq = 332999 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775201000|         ACK - Len: 1448               |Seq = 334447 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775204000|         ACK       |                   |Seq = 7401 Ack = 328655
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775207000|         ACK - Len: 1448               |Seq = 335895 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775210000|         ACK - Len: 1448               |Seq = 337343 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775214000|         PSH, ACK - Len: 493           |Seq = 338791 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775299000|         ACK - Len: 1448               |Seq = 339284 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775304000|         ACK - Len: 1448               |Seq = 340732 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775307000|         ACK - Len: 1448               |Seq = 342180 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775310000|         ACK       |                   |Seq = 7401 Ack = 331551
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775313000|         ACK - Len: 1448               |Seq = 343628 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775316000|         ACK - Len: 1448               |Seq = 345076 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775320000|         ACK       |                   |Seq = 7401 Ack = 334447
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775323000|         ACK - Len: 1448               |Seq = 346524 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775326000|         ACK - Len: 1448               |Seq = 347972 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775329000|         ACK       |                   |Seq = 7401 Ack = 337343
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775417000|         ACK - Len: 1448               |Seq = 349420 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775421000|         ACK - Len: 1448               |Seq = 350868 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775424000|         ACK       |                   |Seq = 7401 Ack = 339284
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775427000|         ACK - Len: 1448               |Seq = 352316 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775430000|         ACK - Len: 1448               |Seq = 353764 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775434000|         PSH, ACK - Len: 493           |Seq = 355212 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.775437000|         ACK       |                   |Seq = 7401 Ack = 342180
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775440000|         ACK       |                   |Seq = 7401 Ack = 345076
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775566000|         ACK       |                   |Seq = 7401 Ack = 347972
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775569000|         ACK       |                   |Seq = 7401 Ack = 350868
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775571000|         ACK       |                   |Seq = 7401 Ack = 352316
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.775573000|         ACK       |                   |Seq = 7401 Ack = 355212
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.776916000|         ACK - Len: 1448               |Seq = 355705 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.776920000|         ACK - Len: 1448               |Seq = 357153 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.776924000|         ACK - Len: 1448               |Seq = 358601 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.776927000|         ACK - Len: 1448               |Seq = 360049 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.776930000|         ACK       |                   |Seq = 7401 Ack = 357153
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.776933000|         ACK - Len: 1448               |Seq = 361497 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.776936000|         ACK - Len: 1448               |Seq = 362945 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777017000|         ACK - Len: 1448               |Seq = 364393 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777020000|         ACK - Len: 1448               |Seq = 365841 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777024000|         ACK - Len: 1448               |Seq = 367289 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777028000|         ACK       |                   |Seq = 7401 Ack = 360049
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777030000|         ACK - Len: 1448               |Seq = 368737 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777034000|         ACK - Len: 1448               |Seq = 370185 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777037000|         ACK       |                   |Seq = 7401 Ack = 362945
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777040000|         PSH, ACK - Len: 493           |Seq = 371633 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777160000|         ACK       |                   |Seq = 7401 Ack = 365841
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777162000|         ACK       |                   |Seq = 7401 Ack = 368737
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777164000|         ACK - Len: 1448               |Seq = 372126 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777168000|         ACK - Len: 1448               |Seq = 373574 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777172000|         ACK       |                   |Seq = 7401 Ack = 371633
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777174000|         ACK - Len: 1448               |Seq = 375022 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777179000|         ACK - Len: 1448               |Seq = 376470 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777182000|         ACK - Len: 1448               |Seq = 377918 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777186000|         ACK - Len: 1448               |Seq = 379366 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777261000|         ACK - Len: 1448               |Seq = 380814 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777265000|         ACK       |                   |Seq = 7401 Ack = 373574
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777268000|         ACK - Len: 1448               |Seq = 382262 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777271000|         ACK - Len: 1448               |Seq = 383710 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777275000|         ACK       |                   |Seq = 7401 Ack = 376470
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777277000|         ACK - Len: 1448               |Seq = 385158 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777281000|         ACK - Len: 1448               |Seq = 386606 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777285000|         PSH, ACK - Len: 493           |Seq = 388054 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.777406000|         ACK       |                   |Seq = 7401 Ack = 379366
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777408000|         ACK       |                   |Seq = 7401 Ack = 382262
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777411000|         ACK       |                   |Seq = 7401 Ack = 385158
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.777413000|         ACK       |                   |Seq = 7401 Ack = 388054
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778418000|         ACK - Len: 1448               |Seq = 388547 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778422000|         ACK - Len: 1448               |Seq = 389995 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778425000|         ACK - Len: 1448               |Seq = 391443 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778428000|         ACK       |                   |Seq = 7401 Ack = 389995
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778431000|         ACK - Len: 1448               |Seq = 392891 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778434000|         ACK - Len: 1448               |Seq = 394339 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778438000|         ACK - Len: 1448               |Seq = 395787 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778521000|         ACK - Len: 1448               |Seq = 397235 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778525000|         ACK - Len: 1448               |Seq = 398683 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778529000|         ACK - Len: 1448               |Seq = 400131 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778533000|         ACK       |                   |Seq = 7401 Ack = 392891
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778535000|         ACK - Len: 1448               |Seq = 401579 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778539000|         ACK - Len: 1448               |Seq = 403027 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778542000|         ACK       |                   |Seq = 7401 Ack = 395787
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778544000|         PSH, ACK - Len: 493           |Seq = 404475 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778670000|         ACK       |                   |Seq = 7401 Ack = 398683
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778672000|         ACK - Len: 1448               |Seq = 404968 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778676000|         ACK       |                   |Seq = 7401 Ack = 401579
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778678000|         ACK - Len: 1448               |Seq = 406416 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778682000|         ACK - Len: 1448               |Seq = 407864 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778685000|         ACK       |                   |Seq = 7401 Ack = 404475
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778688000|         ACK - Len: 1448               |Seq = 409312 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778691000|         ACK - Len: 1448               |Seq = 410760 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778695000|         ACK - Len: 1448               |Seq = 412208 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778771000|         ACK - Len: 1448               |Seq = 413656 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778774000|         ACK       |                   |Seq = 7401 Ack = 406416
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778777000|         ACK - Len: 1448               |Seq = 415104 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778781000|         ACK - Len: 1448               |Seq = 416552 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778784000|         ACK - Len: 1448               |Seq = 418000 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778788000|         ACK       |                   |Seq = 7401 Ack = 409312
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778790000|         ACK - Len: 1448               |Seq = 419448 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778794000|         PSH, ACK - Len: 493           |Seq = 420896 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.778914000|         ACK       |                   |Seq = 7401 Ack = 412208
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778917000|         ACK       |                   |Seq = 7401 Ack = 415104
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778919000|         ACK       |                   |Seq = 7401 Ack = 415104
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778922000|         ACK       |                   |Seq = 7401 Ack = 418000
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.778924000|         ACK       |                   |Seq = 7401 Ack = 420896
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.780156000|         ACK - Len: 1448               |Seq = 421389 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.780160000|         ACK - Len: 1448               |Seq = 422837 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.780163000|         PSH, ACK - Len: 565           |Seq = 424285 Ack = 7401
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.780166000|         ACK       |                   |Seq = 7401 Ack = 422837
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.780253000|         ACK       |                   |Seq = 7401 Ack = 424850
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.780913000|         PSH, ACK - Len: 1322          |Seq = 7401 Ack = 424850
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.795955000|         ACK - Len: 1448               |Seq = 424850 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795960000|         ACK - Len: 1448               |Seq = 426298 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795964000|         ACK - Len: 1448               |Seq = 427746 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795966000|         ACK - Len: 1448               |Seq = 429194 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795970000|         ACK - Len: 1448               |Seq = 430642 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795974000|         ACK - Len: 1448               |Seq = 432090 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795983000|         ACK - Len: 1448               |Seq = 433538 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795986000|         ACK - Len: 1448               |Seq = 434986 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795990000|         ACK - Len: 1448               |Seq = 436434 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795994000|         ACK - Len: 1448               |Seq = 437882 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.795997000|         ACK       |                   |Seq = 8723 Ack = 427746
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.795999000|         ACK - Len: 1448               |Seq = 439330 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796003000|         PSH, ACK - Len: 493           |Seq = 440778 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796006000|         ACK       |                   |Seq = 8723 Ack = 430642
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796151000|         ACK - Len: 1448               |Seq = 441271 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796155000|         ACK - Len: 1448               |Seq = 442719 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796159000|         ACK       |                   |Seq = 8723 Ack = 433538
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796161000|         ACK - Len: 1448               |Seq = 444167 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796165000|         ACK - Len: 1448               |Seq = 445615 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796168000|         ACK       |                   |Seq = 8723 Ack = 436434
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796171000|         ACK - Len: 1448               |Seq = 447063 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796174000|         ACK - Len: 1448               |Seq = 448511 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796178000|         ACK       |                   |Seq = 8723 Ack = 439330
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796180000|         ACK - Len: 1448               |Seq = 449959 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796184000|         ACK       |                   |Seq = 8723 Ack = 441271
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796186000|         ACK - Len: 1448               |Seq = 451407 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796191000|         ACK - Len: 1448               |Seq = 452855 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796194000|         PSH, ACK - Len: 173           |Seq = 454303 Ack = 8723
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.796196000|         ACK       |                   |Seq = 8723 Ack = 444167
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796199000|         ACK       |                   |Seq = 8723 Ack = 447063
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796361000|         ACK       |                   |Seq = 8723 Ack = 449959
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796363000|         ACK       |                   |Seq = 8723 Ack = 452855
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796366000|         ACK       |                   |Seq = 8723 Ack = 454476
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.796368000|         ACK       |                   |Seq = 8723 Ack = 454476
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.802806000|         PSH, ACK - Len: 1290          |Seq = 8723 Ack = 454476
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.808687000|         ACK - Len: 1448               |Seq = 454476 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808691000|         ACK - Len: 1448               |Seq = 455924 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808694000|         ACK - Len: 1448               |Seq = 457372 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808698000|         ACK - Len: 1448               |Seq = 458820 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808702000|         ACK - Len: 1448               |Seq = 460268 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808709000|         ACK - Len: 1448               |Seq = 461716 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808712000|         ACK - Len: 1448               |Seq = 463164 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808715000|         ACK - Len: 1448               |Seq = 464612 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808719000|         ACK       |                   |Seq = 10013 Ack = 457372
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.808721000|         ACK - Len: 1448               |Seq = 466060 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808834000|         ACK - Len: 1448               |Seq = 467508 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808838000|         ACK - Len: 1448               |Seq = 468956 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808841000|         PSH, ACK - Len: 493           |Seq = 470404 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808844000|         ACK - Len: 1448               |Seq = 470897 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808848000|         ACK       |                   |Seq = 10013 Ack = 460268
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.808850000|         PSH, ACK - Len: 1357          |Seq = 472345 Ack = 10013
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:49.808854000|         ACK       |                   |Seq = 10013 Ack = 463164
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.808856000|         ACK       |                   |Seq = 10013 Ack = 466060
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.808985000|         ACK       |                   |Seq = 10013 Ack = 468956
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.808988000|         ACK       |                   |Seq = 10013 Ack = 470897
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:49.809100000|         ACK       |                   |Seq = 10013 Ack = 473702
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.041478000|         PSH, ACK - Len: 1338          |Seq = 10013 Ack = 473702
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.054831000|         PSH, ACK - Len: 517           |Seq = 473702 Ack = 11351
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:50.054999000|         PSH, ACK - Len: 1338          |Seq = 11351 Ack = 474219
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.061641000|         PSH, ACK - Len: 565           |Seq = 474219 Ack = 12689
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:50.061785000|         PSH, ACK - Len: 1338          |Seq = 12689 Ack = 474784
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.066977000|         PSH, ACK - Len: 517           |Seq = 474784 Ack = 14027
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:50.067187000|         PSH, ACK - Len: 1338          |Seq = 14027 Ack = 475301
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.071012000|         PSH, ACK - Len: 469           |Seq = 475301 Ack = 15365
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:50.306742000|         PSH, ACK - Len: 1322          |Seq = 15365 Ack = 475770
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.313402000|         ACK - Len: 1448               |Seq = 475770 Ack = 16687
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:50.313406000|         PSH, ACK - Len: 493           |Seq = 477218 Ack = 16687
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:50.313593000|         ACK       |                   |Seq = 16687 Ack = 477711
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.313735000|         PSH, ACK - Len: 1322          |Seq = 16687 Ack = 477711
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.317763000|         PSH, ACK - Len: 485           |Seq = 477711 Ack = 18009
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:50.318423000|         PSH, ACK - Len: 1322          |Seq = 18009 Ack = 478196
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.336184000|         PSH, ACK - Len: 485           |Seq = 478196 Ack = 19331
|         |(50768)  <------------------  (443)    |
|2014-06-04 14:59:50.536246000|         ACK       |                   |Seq = 19331 Ack = 478681
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.586026000|         PSH, ACK - Len: 1386          |Seq = 19331 Ack = 478681
|         |(50768)  ------------------>  (443)    |
|2014-06-04 14:59:50.794860000|         PSH, ACK  |                   |Seq = 478681 Ack = 20717
|         |(50768)  <------------------  (443)    |
|2014-06-04 15:04:51.021427000|         RST, ACK  |                   |Seq = 20717 Ack = 478681
|         |(50768)  ------------------>  (443)    |

alt text

asked 05 Jun '14, 04:53

adifr's gravatar image

adifr
11112
accept rate: 0%


One Answer:

0

As far as I can see, there is nothing wrong at TCP level (nothing missing). But honestly, I did not check very thoroughly, as it's a pain in the back to do that with text files and screenshots! So, if possible please post the capture file somewhere (google drive, dropbox, cloudshark.org).

Having said that, I see two possible reasons for that behavior:

  1. the client received all requested data from the server and somehow got hung up while it is processing the data. The client OS then closes the 'stale' TCP connection after a defined timeout.
  2. the client did not receive all requested data at the application level. As it does not get what it expects, it waits for some time, and then either the client software itself or the OS closed the 'stale' TCP connection.

Which of the two options (if any) is correct, can't be told by looking at the encrypted data (even if you post the capture file). So, either you decrypt the HTTPS connection (see the Wiki) or you enable debug logging at the client and/or the server.

Regards
Kurt

answered 05 Jun '14, 13:56

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Hi Kurt

I've posted two captures on cloudshark.

Client sends [RST,PSH]: https://www.cloudshark.org/captures/78315e854ddf
Server sends [RST,PSH]: https://www.cloudshark.org/captures/1b499220fad6

Either the client or the server sends [RST,PSH] after about 5 minutes, which would be a timeout and during this time the browser on the client side freezes. I think the next step is to decrypt the https connection, but i'am still waiting for the private keys.

Do you have any idea?

thanks Adrian

(08 Jun '14, 10:21) adifr

In both cases the https server is not returning any data leading to the timeout conditions. Assuming that it is not static web pages the problem is probably somewhere in the backend systems. You should be able to trace the decrypted requests by increasing the LogLevel in httpd.conf.

(09 Jun '14, 22:07) mrEEde

but i'am still waiting for the private keys.
Do you have any idea?

Instead of waiting to the server keys, you could configure your browser to export the session key (works for Firefox and Chrome) and use those keys to decrypt the session.

http://ask.wireshark.org/questions/4229/follow-ssl-stream-using-master-key-and-session-id
http://stackoverflow.com/questions/9243842/how-to-reach-used-cipher-key-of-current-ssl-connection-under-firefox
http://www.root9.net/2012/11/ssl-decryption-with-wireshark-private.html

Alternatively you can use a SSL proxy that is able to 'intercept' SSL connections, like Fiddler and/or burp proxy, or similar tools in the browser, like Firebug or HTTPWatch.

(12 Jun '14, 06:55) Kurt Knochner ♦