This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

many NBNS… queries

0

Hello! I'm new here in the world of networking and in wireshark too. I've been seeing so much activity with the protocol NBNS and others related and want to know if it is normal or not. I Think it is not normal. The internet velocity has decreased. Please help!

here a capture of wireshark (in bold what I see):

No.     Time        Source                Destination           Protocol Length Info
      1 0.000000    0.0.0.0               255.255.255.255       DHCP     342    DHCP Discover - Transaction ID 0x116c2541

Frame 1: 342 bytes on wire (2736 bits), 342 bytes captured (2736 bits)
Ethernet II, Src: 48:f8:b3:22:0f:a6 (48:f8:b3:22:0f:a6), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 0.0.0.0 (0.0.0.0), Dst: 255.255.255.255 (255.255.255.255)
User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67)
Bootstrap Protocol


No.     Time        Source                Destination           Protocol Length Info
2 0.236672    fe80::f0a1:beec:ef8e:f67a ff02::c               SSDP     181    M-SEARCH * HTTP/1.1


Frame 2: 181 bytes on wire (1448 bits), 181 bytes captured (1448 bits)
Ethernet II, Src: Elitegro_cf:f9:8c (00:25:11:cf:f9:8c), Dst: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c)
Internet Protocol Version 6, Src: fe80::f0a1:beec:ef8e:f67a (fe80::f0a1:beec:ef8e:f67a), Dst: ff02::c (ff02::c)
User Datagram Protocol, Src Port: 58769 (58769), Dst Port: ssdp (1900)
Hypertext Transfer Protocol


No.     Time        Source                Destination           Protocol Length Info
3 0.236860    192.9.205.101         239.255.255.250       SSDP     167    M-SEARCH * HTTP/1.1


Frame 3: 167 bytes on wire (1336 bits), 167 bytes captured (1336 bits)
Ethernet II, Src: Elitegro_cf:f9:8c (00:25:11:cf:f9:8c), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa)
Internet Protocol Version 4, Src: 192.9.205.101 (192.9.205.101), Dst: 239.255.255.250 (239.255.255.250)
User Datagram Protocol, Src Port: 58771 (58771), Dst Port: ssdp (1900)
Hypertext Transfer Protocol


No.     Time        Source                Destination           Protocol Length Info
4 0.237597    fe80::f0a1:beec:ef8e:f67a ff02::c               SSDP     179    M-SEARCH * HTTP/1.1


Frame 4: 179 bytes on wire (1432 bits), 179 bytes captured (1432 bits)
Ethernet II, Src: Elitegro_cf:f9:8c (00:25:11:cf:f9:8c), Dst: IPv6mcast_00:00:00:0c (33:33:00:00:00:0c)
Internet Protocol Version 6, Src: fe80::f0a1:beec:ef8e:f67a (fe80::f0a1:beec:ef8e:f67a), Dst: ff02::c (ff02::c)
User Datagram Protocol, Src Port: 58769 (58769), Dst Port: ssdp (1900)
Hypertext Transfer Protocol


No.     Time        Source                Destination           Protocol Length Info
5 0.237728    192.9.205.101         239.255.255.250       SSDP     165    M-SEARCH * HTTP/1.1


Frame 5: 165 bytes on wire (1320 bits), 165 bytes captured (1320 bits)
Ethernet II, Src: Elitegro_cf:f9:8c (00:25:11:cf:f9:8c), Dst: IPv4mcast_7f:ff:fa (01:00:5e:7f:ff:fa)
Internet Protocol Version 4, Src: 192.9.205.101 (192.9.205.101), Dst: 239.255.255.250 (239.255.255.250)
User Datagram Protocol, Src Port: 58771 (58771), Dst Port: ssdp (1900)
Hypertext Transfer Protocol


No.     Time        Source             Destination           Protocol Length Info
6 0.503913    192.9.205.101         192.9.205.255         NBNS     92     Name query NB ELIANA-PC<20>


Frame 6: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: Elitegro_cf:f9:8c (00:25:11:cf:f9:8c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.101 (192.9.205.101), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
7 0.958494    192.9.205.122         192.9.205.255         NBNS     92     Name query NB WPAD<00>


Frame 7: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: QuantaCo_1b:04:47 (60:eb:69:1b:04:47), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.122 (192.9.205.122), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
8 1.126748    201.248.76.123        192.9.205.125         TCP      66     https > 38942 [ACK] Seq=1 Ack=1 Win=1201 Len=0 TSval=1501769264 TSecr=1823832


Frame 8: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 201.248.76.123 (201.248.76.123), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 38942 (38942), Seq: 1, Ack: 1, Len: 0


No.     Time        Source                Destination           Protocol Length Info
9 1.253602    192.9.205.101         192.9.205.255         NBNS     92     Name query NB ELIANA-PC<20>


Frame 9: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: Elitegro_cf:f9:8c (00:25:11:cf:f9:8c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.101 (192.9.205.101), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
10 1.415554    192.9.205.125         199.16.156.52         TCP      66     46968 > https [ACK] Seq=1 Ack=1 Win=2550 Len=0 TSval=1847730 TSecr=1154942667


Frame 10: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 199.16.156.52 (199.16.156.52)
Transmission Control Protocol, Src Port: 46968 (46968), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0


No.     Time        Source                Destination           Protocol Length Info
11 1.708104    192.9.205.122         192.9.205.255         NBNS     92     Name query NB WPAD<00>


Frame 11: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: QuantaCo_1b:04:47 (60:eb:69:1b:04:47), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.122 (192.9.205.122), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
12 2.003606    192.9.205.101         192.9.205.255         NBNS     92     Name query NB ELIANA-PC<20>


Frame 12: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: Elitegro_cf:f9:8c (00:25:11:cf:f9:8c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.101 (192.9.205.101), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
13 2.379740    192.9.205.112         192.9.205.255         BROWSER  243    Host Announcement JUNIOR-PC, Workstation, Server, Print Queue Server, NT Workstation, Potential Browser


Frame 13: 243 bytes on wire (1944 bits), 243 bytes captured (1944 bits)
Ethernet II, Src: AsrockIn_38:96:98 (00:25:22:38:96:98), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.112 (192.9.205.112), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138)
NetBIOS Datagram Service
SMB (Server Message Block Protocol)
SMB MailSlot Protocol
Microsoft Windows Browser Protocol


No.     Time        Source                Destination           Protocol Length Info
14 2.457990    192.9.205.122         192.9.205.255         NBNS     92     Name query NB WPAD<00>


Frame 14: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: QuantaCo_1b:04:47 (60:eb:69:1b:04:47), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.122 (192.9.205.122), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
15 2.755773    192.9.205.101         192.9.205.255         NBNS     92     Name query NB ELIANA-PC<20>


Frame 15: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: Elitegro_cf:f9:8c (00:25:11:cf:f9:8c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.101 (192.9.205.101), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
16 3.210501    QuantaCo_1b:04:47     Broadcast             ARP      60     Who has 192.9.205.5?  Tell 192.9.205.122


Frame 16: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: QuantaCo_1b:04:47 (60:eb:69:1b:04:47), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)


No.     Time        Source                Destination           Protocol Length Info
17 3.271072    199.16.156.52         192.9.205.125         TCP      66     [TCP ACKed lost segment] https > 46968 [ACK] Seq=1 Ack=2 Win=139 Len=0 TSval=1154989370 TSecr=1754934


Frame 17: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 199.16.156.52 (199.16.156.52), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 46968 (46968), Seq: 1, Ack: 2, Len: 0


No.     Time        Source                Destination           Protocol Length Info
18 3.505728    192.9.205.101         192.9.205.255         NBNS     92     Name query NB ELIANA-PC<20>


Frame 18: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: Elitegro_cf:f9:8c (00:25:11:cf:f9:8c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.101 (192.9.205.101), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
19 3.871562    192.9.205.125         173.194.216.188       TCP      66     52811 > hpvroom [ACK] Seq=1 Ack=1 Win=2288 Len=0 TSval=1848344 TSecr=165495603


Frame 19: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 173.194.216.188 (173.194.216.188)
Transmission Control Protocol, Src Port: 52811 (52811), Dst Port: hpvroom (5228), Seq: 1, Ack: 1, Len: 0


No.     Time        Source                Destination           Protocol Length Info
20 4.255774    192.9.205.101         192.9.205.255         NBNS     92     Name query NB ELIANA-PC<20>


Frame 20: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: Elitegro_cf:f9:8c (00:25:11:cf:f9:8c), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.101 (192.9.205.101), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
21 5.505831    fe80::b089:aa83:ac1f:2fe2 ff02::1:3             LLMNR    89     Standard query A ELIANA-PC


Frame 21: 89 bytes on wire (712 bits), 89 bytes captured (712 bits)
Ethernet II, Src: BiostarM_65:cd:dc (b8:97:5a:65:cd:dc), Dst: IPv6mcast_00:01:00:03 (33:33:00:01:00:03)
Internet Protocol Version 6, Src: fe80::b089:aa83:ac1f:2fe2 (fe80::b089:aa83:ac1f:2fe2), Dst: ff02::1:3 (ff02::1:3)
User Datagram Protocol, Src Port: 62764 (62764), Dst Port: llmnr (5355)
Link-local Multicast Name Resolution (query)


No.     Time        Source                Destination           Protocol Length Info
22 5.506030    192.9.205.18          224.0.0.252           LLMNR    69     Standard query A ELIANA-PC


Frame 22: 69 bytes on wire (552 bits), 69 bytes captured (552 bits)
Ethernet II, Src: BiostarM_65:cd:dc (b8:97:5a:65:cd:dc), Dst: IPv4mcast_00:00:fc (01:00:5e:00:00:fc)
Internet Protocol Version 4, Src: 192.9.205.18 (192.9.205.18), Dst: 224.0.0.252 (224.0.0.252)
User Datagram Protocol, Src Port: 52816 (52816), Dst Port: llmnr (5355)
Link-local Multicast Name Resolution (query)


No.     Time        Source                Destination           Protocol Length Info
23 5.606255    fe80::b089:aa83:ac1f:2fe2 ff02::1:3             LLMNR    89     Standard query A ELIANA-PC


Frame 23: 89 bytes on wire (712 bits), 89 bytes captured (712 bits)
Ethernet II, Src: BiostarM_65:cd:dc (b8:97:5a:65:cd:dc), Dst: IPv6mcast_00:01:00:03 (33:33:00:01:00:03)
Internet Protocol Version 6, Src: fe80::b089:aa83:ac1f:2fe2 (fe80::b089:aa83:ac1f:2fe2), Dst: ff02::1:3 (ff02::1:3)
User Datagram Protocol, Src Port: 62764 (62764), Dst Port: llmnr (5355)
Link-local Multicast Name Resolution (query)


No.     Time        Source                Destination           Protocol Length Info
24 5.606288    192.9.205.18          224.0.0.252           LLMNR    69     Standard query A ELIANA-PC


Frame 24: 69 bytes on wire (552 bits), 69 bytes captured (552 bits)
Ethernet II, Src: BiostarM_65:cd:dc (b8:97:5a:65:cd:dc), Dst: IPv4mcast_00:00:fc (01:00:5e:00:00:fc)
Internet Protocol Version 4, Src: 192.9.205.18 (192.9.205.18), Dst: 224.0.0.252 (224.0.0.252)
User Datagram Protocol, Src Port: 52816 (52816), Dst Port: llmnr (5355)
Link-local Multicast Name Resolution (query)


No.     Time        Source                Destination           Protocol Length Info
25 5.806577    192.9.205.18          192.9.205.255         NBNS     92     Name query NB ELIANA-PC<20>


Frame 25: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: BiostarM_65:cd:dc (b8:97:5a:65:cd:dc), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.18 (192.9.205.18), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
26 5.954897    173.194.216.188       192.9.205.125         TCP      66     [TCP ACKed lost segment] hpvroom > 52811 [ACK] Seq=1 Ack=2 Win=366 Len=0 TSval=165543213 TSecr=1778826


Frame 26: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 173.194.216.188 (173.194.216.188), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: hpvroom (5228), Dst Port: 52811 (52811), Seq: 1, Ack: 2, Len: 0


No.     Time        Source                Destination           Protocol Length Info
27 6.556177    192.9.205.18          192.9.205.255         NBNS     92     Name query NB ELIANA-PC<20>


Frame 27: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: BiostarM_65:cd:dc (b8:97:5a:65:cd:dc), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.18 (192.9.205.18), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
28 7.306170    192.9.205.18          192.9.205.255         NBNS     92     Name query NB ELIANA-PC<20>


Frame 28: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: BiostarM_65:cd:dc (b8:97:5a:65:cd:dc), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.18 (192.9.205.18), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
29 7.541744    AsrockIn_c6:5a:76     Broadcast             ARP      60     Who has 192.9.205.5?  Tell 192.9.205.15


Frame 29: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: AsrockIn_c6:5a:76 (bc:5f:f4:c6:5a:76), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)


No.     Time        Source                Destination           Protocol Length Info
30 8.058309    fe80::b089:aa83:ac1f:2fe2 ff02::1:3             LLMNR    89     Standard query A ELIANA-PC


Frame 30: 89 bytes on wire (712 bits), 89 bytes captured (712 bits)
Ethernet II, Src: BiostarM_65:cd:dc (b8:97:5a:65:cd:dc), Dst: IPv6mcast_00:01:00:03 (33:33:00:01:00:03)
Internet Protocol Version 6, Src: fe80::b089:aa83:ac1f:2fe2 (fe80::b089:aa83:ac1f:2fe2), Dst: ff02::1:3 (ff02::1:3)
User Datagram Protocol, Src Port: 62272 (62272), Dst Port: llmnr (5355)
Link-local Multicast Name Resolution (query)


No.     Time        Source                Destination           Protocol Length Info
31 8.058580    192.9.205.18          224.0.0.252           LLMNR    69     Standard query A ELIANA-PC


Frame 31: 69 bytes on wire (552 bits), 69 bytes captured (552 bits)
Ethernet II, Src: BiostarM_65:cd:dc (b8:97:5a:65:cd:dc), Dst: IPv4mcast_00:00:fc (01:00:5e:00:00:fc)
Internet Protocol Version 4, Src: 192.9.205.18 (192.9.205.18), Dst: 224.0.0.252 (224.0.0.252)
User Datagram Protocol, Src Port: 60755 (60755), Dst Port: llmnr (5355)
Link-local Multicast Name Resolution (query)


No.     Time        Source                Destination           Protocol Length Info
32 8.161522    fe80::b089:aa83:ac1f:2fe2 ff02::1:3             LLMNR    89     Standard query A ELIANA-PC


Frame 32: 89 bytes on wire (712 bits), 89 bytes captured (712 bits)
Ethernet II, Src: BiostarM_65:cd:dc (b8:97:5a:65:cd:dc), Dst: IPv6mcast_00:01:00:03 (33:33:00:01:00:03)
Internet Protocol Version 6, Src: fe80::b089:aa83:ac1f:2fe2 (fe80::b089:aa83:ac1f:2fe2), Dst: ff02::1:3 (ff02::1:3)
User Datagram Protocol, Src Port: 62272 (62272), Dst Port: llmnr (5355)
Link-local Multicast Name Resolution (query)


No.     Time        Source                Destination           Protocol Length Info
33 8.161601    192.9.205.18          224.0.0.252           LLMNR    69     Standard query A ELIANA-PC


Frame 33: 69 bytes on wire (552 bits), 69 bytes captured (552 bits)
Ethernet II, Src: BiostarM_65:cd:dc (b8:97:5a:65:cd:dc), Dst: IPv4mcast_00:00:fc (01:00:5e:00:00:fc)
Internet Protocol Version 4, Src: 192.9.205.18 (192.9.205.18), Dst: 224.0.0.252 (224.0.0.252)
User Datagram Protocol, Src Port: 60755 (60755), Dst Port: llmnr (5355)
Link-local Multicast Name Resolution (query)


No.     Time        Source                Destination           Protocol Length Info
34 8.361425    192.9.205.18          192.9.205.255         NBNS     92     Name query NB ELIANA-PC<20>


Frame 34: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: BiostarM_65:cd:dc (b8:97:5a:65:cd:dc), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.18 (192.9.205.18), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
35 9.111204    192.9.205.18          192.9.205.255         NBNS     92     Name query NB ELIANA-PC<20>


Frame 35: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: BiostarM_65:cd:dc (b8:97:5a:65:cd:dc), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.18 (192.9.205.18), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
36 9.861224    192.9.205.18          192.9.205.255         NBNS     92     Name query NB ELIANA-PC<20>


Frame 36: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: BiostarM_65:cd:dc (b8:97:5a:65:cd:dc), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.18 (192.9.205.18), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
37 10.044808   192.9.205.125         91.189.89.22          TCP      74     44618 > https [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1849887 TSecr=0 WS=16


Frame 37: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 91.189.89.22 (91.189.89.22)
Transmission Control Protocol, Src Port: 44618 (44618), Dst Port: https (443), Seq: 0, Len: 0


No.     Time        Source                Destination           Protocol Length Info
38 10.109680   AsrockIn_0d:ce:69     Broadcast             ARP      60     Who has 192.9.205.122?  Tell 192.9.205.54


Frame 38: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: AsrockIn_0d:ce:69 (bc:5f:f4:0d:ce:69), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Address Resolution Protocol (request)


No.     Time        Source                Destination           Protocol Length Info
39 10.955187   Cisco-Li_84:64:18     fc:aa:14:50:17:45     ARP      60     Who has 192.9.205.125?  Tell 192.9.205.5


Frame 39: 60 bytes on wire (480 bits), 60 bytes captured (480 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Address Resolution Protocol (request)


No.     Time        Source                Destination           Protocol Length Info
40 10.955195   fc:aa:14:50:17:45     Cisco-Li_84:64:18     ARP      42     192.9.205.125 is at fc:aa:14:50:17:45


Frame 40: 42 bytes on wire (336 bits), 42 bytes captured (336 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Address Resolution Protocol (reply)


No.     Time        Source                Destination           Protocol Length Info
41 11.021178   74.125.141.189        192.9.205.125         TLSv1.2  126    Application Data


Frame 41: 126 bytes on wire (1008 bits), 126 bytes captured (1008 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 74.125.141.189 (74.125.141.189), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 39708 (39708), Seq: 1, Ack: 1, Len: 60
Secure Sockets Layer


No.     Time        Source                Destination           Protocol Length Info
42 11.021208   192.9.205.125         74.125.141.189        TCP      66     39708 > https [ACK] Seq=1 Ack=61 Win=1306 Len=0 TSval=1850131 TSecr=4033384573


Frame 42: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 74.125.141.189 (74.125.141.189)
Transmission Control Protocol, Src Port: 39708 (39708), Dst Port: https (443), Seq: 1, Ack: 61, Len: 0


No.     Time        Source                Destination           Protocol Length Info
43 11.043563   192.9.205.125         91.189.89.22          TCP      74     44618 > https [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1850137 TSecr=0 WS=16


Frame 43: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 91.189.89.22 (91.189.89.22)
Transmission Control Protocol, Src Port: 44618 (44618), Dst Port: https (443), Seq: 0, Len: 0


No.     Time        Source                Destination           Protocol Length Info
44 11.345497   91.189.89.22          192.9.205.125         TCP      74     https > 44618 [SYN, ACK] Seq=0 Ack=1 Win=14480 Len=0 MSS=536 SACK_PERM=1 TSval=463463289 TSecr=1849887 WS=128


Frame 44: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 91.189.89.22 (91.189.89.22), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 44618 (44618), Seq: 0, Ack: 1, Len: 0


No.     Time        Source                Destination           Protocol Length Info
45 11.345515   192.9.205.125         91.189.89.22          TCP      66     44618 > https [ACK] Seq=1 Ack=1 Win=14608 Len=0 TSval=1850212 TSecr=463463289


Frame 45: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 91.189.89.22 (91.189.89.22)
Transmission Control Protocol, Src Port: 44618 (44618), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0


No.     Time        Source                Destination           Protocol Length Info
46 11.345683   192.9.205.125         91.189.89.22          SSLv3    138    Client Hello


Frame 46: 138 bytes on wire (1104 bits), 138 bytes captured (1104 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 91.189.89.22 (91.189.89.22)
Transmission Control Protocol, Src Port: 44618 (44618), Dst Port: https (443), Seq: 1, Ack: 1, Len: 72
Secure Sockets Layer


No.     Time        Source                Destination           Protocol Length Info
47 11.583826   192.9.205.125         8.8.8.8               DNS      76     Standard query A daisy.ubuntu.com


Frame 47: 76 bytes on wire (608 bits), 76 bytes captured (608 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 8.8.8.8 (8.8.8.8)
User Datagram Protocol, Src Port: 19644 (19644), Dst Port: domain (53)
Domain Name System (query)


No.     Time        Source                Destination           Protocol Length Info
48 11.713600   fe80::b17d:20ce:f940:c364 ff02::1:3             LLMNR    84     Standard query A wpad


Frame 48: 84 bytes on wire (672 bits), 84 bytes captured (672 bits)
Ethernet II, Src: AsrockIn_c6:5a:76 (bc:5f:f4:c6:5a:76), Dst: IPv6mcast_00:01:00:03 (33:33:00:01:00:03)
Internet Protocol Version 6, Src: fe80::b17d:20ce:f940:c364 (fe80::b17d:20ce:f940:c364), Dst: ff02::1:3 (ff02::1:3)
User Datagram Protocol, Src Port: 54835 (54835), Dst Port: llmnr (5355)
Link-local Multicast Name Resolution (query)


No.     Time        Source                Destination           Protocol Length Info
49 11.713722   192.9.205.15          224.0.0.252           LLMNR    64     Standard query A wpad


Frame 49: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: AsrockIn_c6:5a:76 (bc:5f:f4:c6:5a:76), Dst: IPv4mcast_00:00:fc (01:00:5e:00:00:fc)
Internet Protocol Version 4, Src: 192.9.205.15 (192.9.205.15), Dst: 224.0.0.252 (224.0.0.252)
User Datagram Protocol, Src Port: 55249 (55249), Dst Port: llmnr (5355)
Link-local Multicast Name Resolution (query)


No.     Time        Source                Destination           Protocol Length Info
50 11.814725   fe80::b17d:20ce:f940:c364 ff02::1:3             LLMNR    84     Standard query A wpad


Frame 50: 84 bytes on wire (672 bits), 84 bytes captured (672 bits)
Ethernet II, Src: AsrockIn_c6:5a:76 (bc:5f:f4:c6:5a:76), Dst: IPv6mcast_00:01:00:03 (33:33:00:01:00:03)
Internet Protocol Version 6, Src: fe80::b17d:20ce:f940:c364 (fe80::b17d:20ce:f940:c364), Dst: ff02::1:3 (ff02::1:3)
User Datagram Protocol, Src Port: 54835 (54835), Dst Port: llmnr (5355)
Link-local Multicast Name Resolution (query)


No.     Time        Source                Destination           Protocol Length Info
51 11.814728   192.9.205.15          224.0.0.252           LLMNR    64     Standard query A wpad


Frame 51: 64 bytes on wire (512 bits), 64 bytes captured (512 bits)
Ethernet II, Src: AsrockIn_c6:5a:76 (bc:5f:f4:c6:5a:76), Dst: IPv4mcast_00:00:fc (01:00:5e:00:00:fc)
Internet Protocol Version 4, Src: 192.9.205.15 (192.9.205.15), Dst: 224.0.0.252 (224.0.0.252)
User Datagram Protocol, Src Port: 55249 (55249), Dst Port: llmnr (5355)
Link-local Multicast Name Resolution (query)


No.     Time        Source                Destination           Protocol Length Info
52 11.873409   fe80::f8ed:8a7f:a3bf:9878 ff02::1:2             DHCPv6   153    Solicit XID: 0x1598c3 CID: 000100011bed42b60030673cbef7


Frame 52: 153 bytes on wire (1224 bits), 153 bytes captured (1224 bits)
Ethernet II, Src: BiostarM_3c:be:f7 (00:30:67:3c:be:f7), Dst: IPv6mcast_00:01:00:02 (33:33:00:01:00:02)
Internet Protocol Version 6, Src: fe80::f8ed:8a7f:a3bf:9878 (fe80::f8ed:8a7f:a3bf:9878), Dst: ff02::1:2 (ff02::1:2)
User Datagram Protocol, Src Port: dhcpv6-client (546), Dst Port: dhcpv6-server (547)
DHCPv6


No.     Time        Source                Destination           Protocol Length Info
53 11.898973   192.9.205.125         8.8.8.8               DNS      75     Standard query A mail.google.com


Frame 53: 75 bytes on wire (600 bits), 75 bytes captured (600 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 8.8.8.8 (8.8.8.8)
User Datagram Protocol, Src Port: 10088 (10088), Dst Port: domain (53)
Domain Name System (query)


No.     Time        Source                Destination           Protocol Length Info
54 11.901424   108.160.170.45        192.9.205.125         TLSv1    391    Application Data


Frame 54: 391 bytes on wire (3128 bits), 391 bytes captured (3128 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 108.160.170.45 (108.160.170.45), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 46949 (46949), Seq: 1, Ack: 1, Len: 325
Secure Sockets Layer


No.     Time        Source                Destination           Protocol Length Info
55 11.902528   192.9.205.125         108.160.170.45        TLSv1    492    Application Data, Application Data


Frame 55: 492 bytes on wire (3936 bits), 492 bytes captured (3936 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 108.160.170.45 (108.160.170.45)
Transmission Control Protocol, Src Port: 46949 (46949), Dst Port: https (443), Seq: 1, Ack: 326, Len: 426
Secure Sockets Layer


No.     Time        Source                Destination           Protocol Length Info
56 12.017731   192.9.205.15          192.9.205.255         NBNS     92     Name query NB WPAD<00>


Frame 56: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: AsrockIn_c6:5a:76 (bc:5f:f4:c6:5a:76), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.15 (192.9.205.15), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
57 12.251209   91.189.89.22          192.9.205.125         TCP      74     https > 44618 [SYN, ACK] Seq=0 Ack=1 Win=14480 Len=0 MSS=536 SACK_PERM=1 TSval=463463540 TSecr=1849887 WS=128


Frame 57: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 91.189.89.22 (91.189.89.22), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 44618 (44618), Seq: 0, Ack: 1, Len: 0


No.     Time        Source                Destination           Protocol Length Info
58 12.251215   192.9.205.125         91.189.89.22          TCP      66     [TCP Dup ACK 46#1] 44618 > https [ACK] Seq=73 Ack=1 Win=14608 Len=0 TSval=1850438 TSecr=463463289


Frame 58: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 91.189.89.22 (91.189.89.22)
Transmission Control Protocol, Src Port: 44618 (44618), Dst Port: https (443), Seq: 73, Ack: 1, Len: 0


No.     Time        Source                Destination           Protocol Length Info
59 12.596406   192.9.205.122         192.9.205.255         NBNS     92     Name query NB WPAD<00>


Frame 59: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: QuantaCo_1b:04:47 (60:eb:69:1b:04:47), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.122 (192.9.205.122), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
60 12.763447   91.189.89.22          192.9.205.125         TCP      66     https > 44618 [ACK] Seq=1 Ack=73 Win=14592 Len=0 TSval=463463617 TSecr=1850212


Frame 60: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 91.189.89.22 (91.189.89.22), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 44618 (44618), Seq: 1, Ack: 73, Len: 0


No.     Time        Source                Destination           Protocol Length Info
61 12.765183   91.189.89.22          192.9.205.125         SSLv3    73     Alert (Level: Fatal, Description: Handshake Failure)


Frame 61: 73 bytes on wire (584 bits), 73 bytes captured (584 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 91.189.89.22 (91.189.89.22), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 44618 (44618), Seq: 1, Ack: 73, Len: 7
Secure Sockets Layer


No.     Time        Source                Destination           Protocol Length Info
62 12.765200   192.9.205.125         91.189.89.22          TCP      66     44618 > https [ACK] Seq=73 Ack=8 Win=14608 Len=0 TSval=1850567 TSecr=463463617


Frame 62: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 91.189.89.22 (91.189.89.22)
Transmission Control Protocol, Src Port: 44618 (44618), Dst Port: https (443), Seq: 73, Ack: 8, Len: 0


No.     Time        Source                Destination           Protocol Length Info
63 12.765286   192.9.205.125         91.189.89.22          TCP      66     44618 > https [FIN, ACK] Seq=73 Ack=8 Win=14608 Len=0 TSval=1850567 TSecr=463463617


Frame 63: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 91.189.89.22 (91.189.89.22)
Transmission Control Protocol, Src Port: 44618 (44618), Dst Port: https (443), Seq: 73, Ack: 8, Len: 0


No.     Time        Source                Destination           Protocol Length Info
64 12.765321   91.189.89.22          192.9.205.125         TCP      66     https > 44618 [FIN, ACK] Seq=8 Ack=73 Win=14592 Len=0 TSval=463463617 TSecr=1850212


Frame 64: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 91.189.89.22 (91.189.89.22), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 44618 (44618), Seq: 8, Ack: 73, Len: 0


No.     Time        Source                Destination           Protocol Length Info
65 12.765327   192.9.205.125         91.189.89.22          TCP      66     44618 > https [ACK] Seq=74 Ack=9 Win=14608 Len=0 TSval=1850567 TSecr=463463617


Frame 65: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 91.189.89.22 (91.189.89.22)
Transmission Control Protocol, Src Port: 44618 (44618), Dst Port: https (443), Seq: 74, Ack: 9, Len: 0


No.     Time        Source                Destination           Protocol Length Info
66 12.781961   192.9.205.15          192.9.205.255         NBNS     92     Name query NB WPAD<00>


Frame 66: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: AsrockIn_c6:5a:76 (bc:5f:f4:c6:5a:76), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.15 (192.9.205.15), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
67 12.821213   8.8.8.8               192.9.205.125         DNS      108    Standard query response A 91.189.92.55 A 91.189.92.57


Frame 67: 108 bytes on wire (864 bits), 108 bytes captured (864 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 8.8.8.8 (8.8.8.8), Dst: 192.9.205.125 (192.9.205.125)
User Datagram Protocol, Src Port: domain (53), Dst Port: 19644 (19644)
Domain Name System (response)


No.     Time        Source                Destination           Protocol Length Info
68 12.821677   192.9.205.125         8.8.8.8               DNS      76     Standard query A daisy.ubuntu.com


Frame 68: 76 bytes on wire (608 bits), 76 bytes captured (608 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 8.8.8.8 (8.8.8.8)
User Datagram Protocol, Src Port: 62764 (62764), Dst Port: domain (53)
Domain Name System (query)


No.     Time        Source                Destination           Protocol Length Info
69 13.215726   8.8.8.8               192.9.205.125         DNS      118    Standard query response CNAME googlemail.l.google.com A 216.58.219.101


Frame 69: 118 bytes on wire (944 bits), 118 bytes captured (944 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 8.8.8.8 (8.8.8.8), Dst: 192.9.205.125 (192.9.205.125)
User Datagram Protocol, Src Port: domain (53), Dst Port: 10088 (10088)
Domain Name System (response)


No.     Time        Source                Destination           Protocol Length Info
70 13.215863   192.9.205.125         216.58.219.101        TCP      74     38881 > https [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1850680 TSecr=0 WS=16


Frame 70: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38881 (38881), Dst Port: https (443), Seq: 0, Len: 0


No.     Time        Source                Destination           Protocol Length Info
71 13.251286   108.160.170.45        192.9.205.125         TCP      66     https > 46949 [ACK] Seq=326 Ack=427 Win=80 Len=0 TSval=4052677314 TSecr=1850351


Frame 71: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 108.160.170.45 (108.160.170.45), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 46949 (46949), Seq: 326, Ack: 427, Len: 0


No.     Time        Source                Destination           Protocol Length Info
72 13.346153   192.9.205.122         192.9.205.255         NBNS     92     Name query NB WPAD<00>


Frame 72: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: QuantaCo_1b:04:47 (60:eb:69:1b:04:47), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.122 (192.9.205.122), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
73 13.402488   192.9.205.125         216.58.219.101        TCP      74     38882 > https [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1850726 TSecr=0 WS=16


Frame 73: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38882 (38882), Dst Port: https (443), Seq: 0, Len: 0


No.     Time        Source                Destination           Protocol Length Info
74 13.497672   192.9.205.18          192.9.205.255         NBNS     92     Name query NB W.SHARETHIS.COM<00>


Frame 74: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: BiostarM_65:cd:dc (b8:97:5a:65:cd:dc), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.18 (192.9.205.18), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
75 13.546341   192.9.205.15          192.9.205.255         NBNS     92     Name query NB WPAD<00>


Frame 75: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: AsrockIn_c6:5a:76 (bc:5f:f4:c6:5a:76), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.15 (192.9.205.15), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
76 13.885315   8.8.8.8               192.9.205.125         DNS      108    Standard query response A 91.189.92.57 A 91.189.92.55


Frame 76: 108 bytes on wire (864 bits), 108 bytes captured (864 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 8.8.8.8 (8.8.8.8), Dst: 192.9.205.125 (192.9.205.125)
User Datagram Protocol, Src Port: domain (53), Dst Port: 62764 (62764)
Domain Name System (response)


No.     Time        Source                Destination           Protocol Length Info
77 13.889382   91.189.89.22          192.9.205.125         TCP      66     https > 44618 [ACK] Seq=9 Ack=74 Win=14592 Len=0 TSval=463463970 TSecr=1850567


Frame 77: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 91.189.89.22 (91.189.89.22), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 44618 (44618), Seq: 9, Ack: 74, Len: 0


No.     Time        Source                Destination           Protocol Length Info
78 14.096229   192.9.205.122         192.9.205.255         NBNS     92     Name query NB WPAD<00>


Frame 78: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: QuantaCo_1b:04:47 (60:eb:69:1b:04:47), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.122 (192.9.205.122), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
79 14.211293   216.58.219.101        192.9.205.125         TCP      74     https > 38881 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=536 SACK_PERM=1 TSval=1522311232 TSecr=1850680 WS=128


Frame 79: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 216.58.219.101 (216.58.219.101), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 38881 (38881), Seq: 0, Ack: 1, Len: 0


No.     Time        Source                Destination           Protocol Length Info
80 14.211305   192.9.205.125         216.58.219.101        TCP      66     38881 > https [ACK] Seq=1 Ack=1 Win=14608 Len=0 TSval=1850928 TSecr=1522311232


Frame 80: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38881 (38881), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0


No.     Time        Source                Destination           Protocol Length Info
81 14.211493   192.9.205.125         216.58.219.101        TLSv1.2  583    Client Hello


Frame 81: 583 bytes on wire (4664 bits), 583 bytes captured (4664 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38881 (38881), Dst Port: https (443), Seq: 1, Ack: 1, Len: 517
Secure Sockets Layer


No.     Time        Source                Destination           Protocol Length Info
82 14.247286   192.9.205.18          192.9.205.255         NBNS     92     Name query NB W.SHARETHIS.COM<00>


Frame 82: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: BiostarM_65:cd:dc (b8:97:5a:65:cd:dc), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.18 (192.9.205.18), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
83 14.399559   192.9.205.125         216.58.219.101        TCP      74     38882 > https [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1850976 TSecr=0 WS=16


Frame 83: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38882 (38882), Dst Port: https (443), Seq: 0, Len: 0


No.     Time        Source                Destination           Protocol Length Info
84 14.409389   216.58.219.101        192.9.205.125         TCP      74     https > 38882 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=536 SACK_PERM=1 TSval=1522320089 TSecr=1850726 WS=128


Frame 84: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 216.58.219.101 (216.58.219.101), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 38882 (38882), Seq: 0, Ack: 1, Len: 0


No.     Time        Source                Destination           Protocol Length Info
85 14.409449   192.9.205.125         216.58.219.101        TCP      66     38882 > https [ACK] Seq=1 Ack=1 Win=14608 Len=0 TSval=1850978 TSecr=1522320089


Frame 85: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38882 (38882), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0


No.     Time        Source                Destination           Protocol Length Info
86 14.593591   216.58.219.101        192.9.205.125         TCP      74     https > 38881 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=536 SACK_PERM=1 TSval=1522311676 TSecr=1850680 WS=128


Frame 86: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 216.58.219.101 (216.58.219.101), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 38881 (38881), Seq: 0, Ack: 1, Len: 0


No.     Time        Source                Destination           Protocol Length Info
87 14.593603   192.9.205.125         216.58.219.101        TCP      66     [TCP Dup ACK 81#1] 38881 > https [ACK] Seq=518 Ack=1 Win=14608 Len=0 TSval=1851024 TSecr=1522311232


Frame 87: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38881 (38881), Dst Port: https (443), Seq: 518, Ack: 1, Len: 0


No.     Time        Source                Destination           Protocol Length Info
88 14.739235   216.58.219.101        192.9.205.125         TCP      74     https > 38882 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=536 SACK_PERM=1 TSval=1522320450 TSecr=1850726 WS=128


Frame 88: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 216.58.219.101 (216.58.219.101), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 38882 (38882), Seq: 0, Ack: 1, Len: 0


No.     Time        Source                Destination           Protocol Length Info
89 14.739246   192.9.205.125         216.58.219.101        TCP      66     [TCP Dup ACK 85#1] 38882 > https [ACK] Seq=1 Ack=1 Win=14608 Len=0 TSval=1851060 TSecr=1522320089


Frame 89: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38882 (38882), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0


No.     Time        Source                Destination           Protocol Length Info
90 14.997254   192.9.205.18          192.9.205.255         NBNS     92     Name query NB W.SHARETHIS.COM<00>


Frame 90: 92 bytes on wire (736 bits), 92 bytes captured (736 bits)
Ethernet II, Src: BiostarM_65:cd:dc (b8:97:5a:65:cd:dc), Dst: Broadcast (ff:ff:ff:ff:ff:ff)
Internet Protocol Version 4, Src: 192.9.205.18 (192.9.205.18), Dst: 192.9.205.255 (192.9.205.255)
User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137)
NetBIOS Name Service


No.     Time        Source                Destination           Protocol Length Info
91 15.041315   216.58.219.101        192.9.205.125         TCP      66     https > 38881 [ACK] Seq=1 Ack=518 Win=43648 Len=0 TSval=1522312238 TSecr=1850928


Frame 91: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 216.58.219.101 (216.58.219.101), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 38881 (38881), Seq: 1, Ack: 518, Len: 0


No.     Time        Source                Destination           Protocol Length Info
92 15.043384   216.58.219.101        192.9.205.125         TLSv1.2  216    Server Hello, Change Cipher Spec, Hello Request, Hello Request


Frame 92: 216 bytes on wire (1728 bits), 216 bytes captured (1728 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 216.58.219.101 (216.58.219.101), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 38881 (38881), Seq: 1, Ack: 518, Len: 150
Secure Sockets Layer


No.     Time        Source                Destination           Protocol Length Info
93 15.043390   192.9.205.125         216.58.219.101        TCP      66     38881 > https [ACK] Seq=518 Ack=151 Win=15648 Len=0 TSval=1851136 TSecr=1522312238


Frame 93: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38881 (38881), Dst Port: https (443), Seq: 518, Ack: 151, Len: 0


No.     Time        Source                Destination           Protocol Length Info
94 15.045006   192.9.205.125         216.58.219.101        TLSv1.2  253    Change Cipher Spec, Hello Request, Hello Request


Frame 94: 253 bytes on wire (2024 bits), 253 bytes captured (2024 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38881 (38881), Dst Port: https (443), Seq: 518, Ack: 151, Len: 187
Secure Sockets Layer


No.     Time        Source                Destination           Protocol Length Info
95 15.053216   192.9.205.125         216.58.219.101        TLSv1.2  119    Application Data


Frame 95: 119 bytes on wire (952 bits), 119 bytes captured (952 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38881 (38881), Dst Port: https (443), Seq: 705, Ack: 151, Len: 53
Secure Sockets Layer


No.     Time        Source                Destination           Protocol Length Info
96 15.053270   192.9.205.125         216.58.219.101        TLSv1.2  116    Application Data


Frame 96: 116 bytes on wire (928 bits), 116 bytes captured (928 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38881 (38881), Dst Port: https (443), Seq: 758, Ack: 151, Len: 50
Secure Sockets Layer


No.     Time        Source                Destination           Protocol Length Info
97 15.053312   192.9.205.125         216.58.219.101        TLSv1.2  108    Application Data


Frame 97: 108 bytes on wire (864 bits), 108 bytes captured (864 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38881 (38881), Dst Port: https (443), Seq: 808, Ack: 151, Len: 42
Secure Sockets Layer


No.     Time        Source                Destination           Protocol Length Info
98 15.053586   192.9.205.125         216.58.219.101        TCP      590    [TCP segment of a reassembled PDU]


Frame 98: 590 bytes on wire (4720 bits), 590 bytes captured (4720 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38881 (38881), Dst Port: https (443), Seq: 850, Ack: 151, Len: 524


No.     Time        Source                Destination           Protocol Length Info
99 15.053591   192.9.205.125         216.58.219.101        TCP      590    [TCP segment of a reassembled PDU]


Frame 99: 590 bytes on wire (4720 bits), 590 bytes captured (4720 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38881 (38881), Dst Port: https (443), Seq: 1374, Ack: 151, Len: 524


No.     Time        Source                Destination           Protocol Length Info
100 15.053610   192.9.205.125         216.58.219.101        TCP      590    [TCP segment of a reassembled PDU]


Frame 100: 590 bytes on wire (4720 bits), 590 bytes captured (4720 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38881 (38881), Dst Port: https (443), Seq: 1898, Ack: 151, Len: 524


No.     Time        Source                Destination           Protocol Length Info
101 15.053612   192.9.205.125         216.58.219.101        TLSv1.2  533    Application Data


Frame 101: 533 bytes on wire (4264 bits), 533 bytes captured (4264 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38881 (38881), Dst Port: https (443), Seq: 2422, Ack: 151, Len: 467
[4 Reassembled TCP Segments (2039 bytes): #98(524), #99(524), #100(524), #101(467)]
Secure Sockets Layer


No.     Time        Source                Destination           Protocol Length Info
102 15.267398   216.58.219.101        192.9.205.125         TCP      74     https > 38882 [SYN, ACK] Seq=0 Ack=1 Win=42540 Len=0 MSS=536 SACK_PERM=1 TSval=1522321086 TSecr=1850726 WS=128


Frame 102: 74 bytes on wire (592 bits), 74 bytes captured (592 bits)
Ethernet II, Src: Cisco-Li_84:64:18 (00:16:b6:84:64:18), Dst: fc:aa:14:50:17:45 (fc:aa:14:50:17:45)
Internet Protocol Version 4, Src: 216.58.219.101 (216.58.219.101), Dst: 192.9.205.125 (192.9.205.125)
Transmission Control Protocol, Src Port: https (443), Dst Port: 38882 (38882), Seq: 0, Ack: 1, Len: 0


No.     Time        Source                Destination           Protocol Length Info
103 15.267424   192.9.205.125         216.58.219.101        TCP      66     [TCP Dup ACK 85#2] 38882 > https [ACK] Seq=1 Ack=1 Win=14608 Len=0 TSval=1851192 TSecr=1522320089


Frame 103: 66 bytes on wire (528 bits), 66 bytes captured (528 bits)
Ethernet II, Src: fc:aa:14:50:17:45 (fc:aa:14:50:17:45), Dst: Cisco-Li_84:64:18 (00:16:b6:84:64:18)
Internet Protocol Version 4, Src: 192.9.205.125 (192.9.205.125), Dst: 216.58.219.101 (216.58.219.101)
Transmission Control Protocol, Src Port: 38882 (38882), Dst Port: https (443), Seq: 1, Ack: 1, Len: 0

asked 07 Sep ‘15, 08:41

Jicelle's gravatar image

Jicelle
0●2●2●5
accept rate: 0%

edited 07 Sep ‘15, 08:50

grahamb's gravatar image

grahamb ♦
19.8k●3●30●206

Analysis of a wall of text isn’t much fun, especially given all the tools in Wireshark if given a capture file.

Can you share the capture in a publicly accessible spot, e.g. CloudShark, Google Drive, DropBox?

(07 Sep ‘15, 08:51) grahamb ♦

ok ;) well here is another capture ;)

1) alt text

alt text

2) alt text

alt text

thanks!

(07 Sep ‘15, 10:11) Jicelle

One Answer:

2

NBNS queries are "normal" in a lot of networks.

The internet velocity has decreased.

I can see quite a number of requests for WPAD. That's the browser trying to (automatically) find a local proxy, maybe because you enabled something like "Automatically detect settings" in the Proxy settings of Internet Explorer, or "Auto-detect proxy settings for this network" in Firefox. These queries for WPAD can indeed slow down internet access. Please disable those settings in your browser (please google how to do that!).

     66 12.781961   192.9.205.15  192.9.205.255 NBNS 92  Name query NB WPAD<00> <=== HERE

See also: https://en.wikipedia.org/wiki/Web_Proxy_Autodiscovery_Protocol

Regards
Kurt

answered 07 Sep '15, 17:00

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k●10●39●237
accept rate: 15%

thank you, I'll check that :)

(08 Sep '15, 07:27) Jicelle

good luck.

Hint: If a supplied answer resolves your question can you please "accept" it by clicking the checkmark icon next to it. This highlights good answers for the benefit of subsequent users with the same or similar questions. For extra points you can up vote the answer (thumb up).

(08 Sep '15, 08:14) Kurt Knochner ♦