├── README.md ├── README.md~ ├── dnsdelay.py ├── googleDNS.txt ├── normalDNS.txt ├── tcpstream.py ├── tcpstream.txt └── test.pcap /README.md: -------------------------------------------------------------------------------- 1 | # python-PCAP-Analysis 2 | PCAP files are analysed using python. DNS delays, congestion window sizes, through put and good put are calculated. 3 | 4 | SCAPY: 5 | We have imported scapy library in python for reading the .pcap file, worked on a Linux machine. 6 | scapy can be downloaded from http://www.secdev.org/projects/scapy/ 7 | scapy works on Python 2.X.X. 8 | For installation - cd /path 9 | python setup.py install 10 | 11 | 12 | Running the script: 13 | cd /path 14 | python tcpstream.py test.pcap 15 | 16 | Components: 17 | 18 | tcpstream.py - contains the python code for Task 1. 19 | tcpstream.txt - contains the result for Task 1. 20 | Assignment2 - Task 2.pdf contains the result and calculation for Task 2. 21 | 22 | 23 | Observations: 24 | 25 | Calculation of congestion window size at sender: 26 | Congestion window gives us the amount of data sender is willing to send based on the congestion it estimates. 27 | We came to the conclusion that congestion window at an instant will be equivalent the amount of data it actually sends. 28 | Our congestion window values, cwnd were taken from the number of bytes the sender transmits per transmission. 29 | 30 | Calculation of bytes/packets sent by sender/receiver: 31 | Flows were differentiated by their sender/receiver port numbers. 32 | A flow is said to have begun when the sender sends a packet with SYN flag. 33 | Lists were updated after each packet in the flow. 34 | 35 | Calculation of Out-of-order and Retransmitted packets: 36 | A packet is said to be out-of-order when it’s sequence number is less than the maximum of sequence numbers sent before. 37 | If a sequence number already exists in the list of sequence numbers, it was counted as retransmitted packet. [PSH, ACK]s were ignored in this process. 38 | 39 | Calculation of throughput and goodput: 40 | For throughput, all the packets transmitted by sender and receiver were considered. 41 | For goodput, only the packets with payload barring the retransmission were considered. 42 | 43 | -------------------------------------------------------------------------------- /README.md~: -------------------------------------------------------------------------------- 1 | # python-PCAP-Analysis 2 | PCAP files are analysed using python. DNS delays, congestion window sizes, through put and good put are calculated. 3 | -------------------------------------------------------------------------------- /dnsdelay.py: -------------------------------------------------------------------------------- 1 | from sys import argv 2 | 3 | script, filename = argv 4 | 5 | txt = open(filename) #cs692_hw1.txt 6 | 7 | ''' 8 | Lists for keeping track of 9 | open transactions and their timestamps 10 | ''' 11 | openTransact = [] 12 | closeTransact = [] 13 | timeOftransact = [] 14 | timeOfresponse = [] 15 | 16 | ''' 17 | dummy variables for finding 18 | the desired values from the text file. 19 | ''' 20 | i = 0 21 | a = 0 22 | b = 0 23 | read_ID = 0 24 | u = 0 25 | v = 0 26 | p = 0 27 | q = 0 28 | 29 | ''' 30 | Reading the Transaction ID, 31 | Timestamp, and the Protocol 32 | ''' 33 | i = len('0x') 34 | j = len('Time') 35 | k = len('Protocol') 36 | 37 | ''' 38 | Function for subtracting the timestamps 39 | ''' 40 | 41 | def dnsdelay(queryTime, responseTime): 42 | 43 | queryTime = float(queryTime) 44 | responseTime = float(responseTime) 45 | try: 46 | timeDiff = responseTime - queryTime 47 | except ValueError,e: 48 | print "error",e,"on line",line 49 | return(timeDiff) 50 | 51 | print('') 52 | print('DNS delays') 53 | 54 | for line in txt: 55 | 56 | x = 0 57 | 58 | while x < len(line): 59 | if line[x:x+k] == 'Protocol': 60 | p = x 61 | q = x + 3 62 | if line[x:x+j] == 'Time': 63 | u = x 64 | v = x + 8 65 | if line[x:x+i] == '0x': 66 | a = x 67 | b = a + 6 68 | x = x + 1 69 | 70 | if line[p:q] == 'DNS': 71 | if line[a:b] in (openTransact and closeTransact): 72 | timeOftransact.remove(timeOftransact[openTransact.index(line[a:b])]) 73 | timeOfresponse.remove(timeOfresponse[closeTransact.index(line[a:b])]) 74 | openTransact.remove(line[a:b]) 75 | closeTransact.remove(line[a:b]) 76 | if line[a:b] not in openTransact: 77 | openTransact.append(line[a:b]) 78 | timeOftransact.append(line[u:v]) 79 | else: 80 | delay = dnsdelay(timeOftransact[openTransact.index(line[a:b])], line[u:v]) 81 | print(''+str(delay)+'') 82 | closeTransact.append(line[a:b]) 83 | timeOfresponse.append(line[u:v]) 84 | read_ID = 0 85 | 86 | print('') 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | -------------------------------------------------------------------------------- /googleDNS.txt: -------------------------------------------------------------------------------- 1 | No. Time Source Destination Protocol Length Info 2 | 49 2.285365000 129.49.194.114 129.49.7.170 DNS 74 Standard query 0x4022 A www.google.com 3 | 4 | Frame 49: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) on interface 0 5 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 6 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 7 | User Datagram Protocol, Src Port: lhtp (1983), Dst Port: domain (53) 8 | Domain Name System (query) 9 | 10 | No. Time Source Destination Protocol Length Info 11 | 50 2.285424000 129.49.194.114 129.49.7.170 DNS 75 Standard query 0x6819 A apis.google.com 12 | 13 | Frame 50: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) on interface 0 14 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 15 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 16 | User Datagram Protocol, Src Port: 49077 (49077), Dst Port: domain (53) 17 | Domain Name System (query) 18 | 19 | No. Time Source Destination Protocol Length Info 20 | 51 2.285496000 129.49.194.114 129.49.7.170 DNS 79 Standard query 0xa2c0 A clients5.google.com 21 | 22 | Frame 51: 79 bytes on wire (632 bits), 79 bytes captured (632 bits) on interface 0 23 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 24 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 25 | User Datagram Protocol, Src Port: 47851 (47851), Dst Port: domain (53) 26 | Domain Name System (query) 27 | 28 | No. Time Source Destination Protocol Length Info 29 | 52 2.287029000 129.49.7.170 129.49.194.114 DNS 170 Standard query response 0x4022 A 173.194.68.104 A 173.194.68.105 A 173.194.68.106 A 173.194.68.99 A 173.194.68.103 A 173.194.68.147 30 | 31 | Frame 52: 170 bytes on wire (1360 bits), 170 bytes captured (1360 bits) on interface 0 32 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 33 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 34 | User Datagram Protocol, Src Port: domain (53), Dst Port: lhtp (1983) 35 | Domain Name System (response) 36 | 37 | No. Time Source Destination Protocol Length Info 38 | 53 2.287625000 129.49.7.170 129.49.194.114 DNS 272 Standard query response 0x6819 CNAME plus.l.google.com A 74.125.226.7 A 74.125.226.3 A 74.125.226.1 A 74.125.226.0 A 74.125.226.4 A 74.125.226.8 A 74.125.226.14 A 74.125.226.5 A 74.125.226.9 A 74.125.226.6 A 74.125.226.2 39 | 40 | Frame 53: 272 bytes on wire (2176 bits), 272 bytes captured (2176 bits) on interface 0 41 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 42 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 43 | User Datagram Protocol, Src Port: domain (53), Dst Port: 49077 (49077) 44 | Domain Name System (response) 45 | 46 | No. Time Source Destination Protocol Length Info 47 | 54 2.288468000 129.49.7.170 129.49.194.114 DNS 279 Standard query response 0xa2c0 CNAME clients.l.google.com A 74.125.226.0 A 74.125.226.9 A 74.125.226.1 A 74.125.226.4 A 74.125.226.7 A 74.125.226.14 A 74.125.226.3 A 74.125.226.6 A 74.125.226.5 A 74.125.226.8 A 74.125.226.2 48 | 49 | Frame 54: 279 bytes on wire (2232 bits), 279 bytes captured (2232 bits) on interface 0 50 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 51 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 52 | User Datagram Protocol, Src Port: domain (53), Dst Port: 47851 (47851) 53 | Domain Name System (response) 54 | 55 | No. Time Source Destination Protocol Length Info 56 | 55 2.293903000 129.49.194.114 129.49.7.170 DNS 85 Standard query 0x6f22 A lh3.googleusercontent.com 57 | 58 | Frame 55: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface 0 59 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 60 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 61 | User Datagram Protocol, Src Port: tdaccess (2910), Dst Port: domain (53) 62 | Domain Name System (query) 63 | 64 | No. Time Source Destination Protocol Length Info 65 | 56 2.294055000 129.49.194.114 129.49.7.170 DNS 75 Standard query 0x308f A plus.google.com 66 | 67 | Frame 56: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) on interface 0 68 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 69 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 70 | User Datagram Protocol, Src Port: 54089 (54089), Dst Port: domain (53) 71 | Domain Name System (query) 72 | 73 | No. Time Source Destination Protocol Length Info 74 | 57 2.294191000 129.49.194.114 129.49.7.170 DNS 75 Standard query 0xb0e0 A ssl.gstatic.com 75 | 76 | Frame 57: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) on interface 0 77 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 78 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 79 | User Datagram Protocol, Src Port: 22670 (22670), Dst Port: domain (53) 80 | Domain Name System (query) 81 | 82 | No. Time Source Destination Protocol Length Info 83 | 58 2.324218000 129.49.7.170 129.49.194.114 DNS 162 Standard query response 0x6f22 CNAME googlehosted.l.googleusercontent.com A 74.125.226.42 A 74.125.226.43 A 74.125.226.44 84 | 85 | Frame 58: 162 bytes on wire (1296 bits), 162 bytes captured (1296 bits) on interface 0 86 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 87 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 88 | User Datagram Protocol, Src Port: domain (53), Dst Port: tdaccess (2910) 89 | Domain Name System (response) 90 | 91 | No. Time Source Destination Protocol Length Info 92 | 59 2.324589000 129.49.194.114 129.49.7.170 DNS 75 Standard query 0xfe53 A www.gstatic.com 93 | 94 | Frame 59: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) on interface 0 95 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 96 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 97 | User Datagram Protocol, Src Port: 16274 (16274), Dst Port: domain (53) 98 | Domain Name System (query) 99 | 100 | No. Time Source Destination Protocol Length Info 101 | 60 2.330505000 129.49.7.170 129.49.194.114 DNS 251 Standard query response 0x308f A 74.125.226.14 A 74.125.226.5 A 74.125.226.7 A 74.125.226.4 A 74.125.226.6 A 74.125.226.0 A 74.125.226.9 A 74.125.226.1 A 74.125.226.8 A 74.125.226.3 A 74.125.226.2 102 | 103 | Frame 60: 251 bytes on wire (2008 bits), 251 bytes captured (2008 bits) on interface 0 104 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 105 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 106 | User Datagram Protocol, Src Port: domain (53), Dst Port: 54089 (54089) 107 | Domain Name System (response) 108 | 109 | No. Time Source Destination Protocol Length Info 110 | 61 2.330525000 129.49.7.170 129.49.194.114 DNS 139 Standard query response 0xb0e0 A 74.125.226.23 A 74.125.226.15 A 74.125.226.24 A 74.125.226.31 111 | 112 | Frame 61: 139 bytes on wire (1112 bits), 139 bytes captured (1112 bits) on interface 0 113 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 114 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 115 | User Datagram Protocol, Src Port: domain (53), Dst Port: 22670 (22670) 116 | Domain Name System (response) 117 | 118 | No. Time Source Destination Protocol Length Info 119 | 62 2.335522000 129.49.7.170 129.49.194.114 DNS 139 Standard query response 0xfe53 A 74.125.226.23 A 74.125.226.15 A 74.125.226.31 A 74.125.226.24 120 | 121 | Frame 62: 139 bytes on wire (1112 bits), 139 bytes captured (1112 bits) on interface 0 122 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 123 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 124 | User Datagram Protocol, Src Port: domain (53), Dst Port: 16274 (16274) 125 | Domain Name System (response) 126 | 127 | No. Time Source Destination Protocol Length Info 128 | 210 2.512727000 129.49.194.114 129.49.7.170 DNS 84 Standard query 0x77a9 A translate.googleapis.com 129 | 130 | Frame 210: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) on interface 0 131 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 132 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 133 | User Datagram Protocol, Src Port: 22686 (22686), Dst Port: domain (53) 134 | Domain Name System (query) 135 | 136 | No. Time Source Destination Protocol Length Info 137 | 218 2.517354000 129.49.7.170 129.49.194.114 DNS 134 Standard query response 0x77a9 CNAME googleapis.l.google.com A 173.194.68.95 138 | 139 | Frame 218: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) on interface 0 140 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 141 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 142 | User Datagram Protocol, Src Port: domain (53), Dst Port: 22686 (22686) 143 | Domain Name System (response) 144 | 145 | No. Time Source Destination Protocol Length Info 146 | 289 2.643290000 129.49.194.114 129.49.7.170 DNS 83 Standard query 0x9ce2 A safebrowsing.google.com 147 | 148 | Frame 289: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) on interface 0 149 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 150 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 151 | User Datagram Protocol, Src Port: 16979 (16979), Dst Port: domain (53) 152 | Domain Name System (query) 153 | 154 | No. Time Source Destination Protocol Length Info 155 | 290 2.644972000 129.49.7.170 129.49.194.114 DNS 278 Standard query response 0x9ce2 CNAME sb.l.google.com A 74.125.228.232 A 74.125.228.228 A 74.125.228.233 A 74.125.228.226 A 74.125.228.231 A 74.125.228.230 A 74.125.228.238 A 74.125.228.227 A 74.125.228.225 A 74.125.228.224 A 74.125.228.229 156 | 157 | Frame 290: 278 bytes on wire (2224 bits), 278 bytes captured (2224 bits) on interface 0 158 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 159 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 160 | User Datagram Protocol, Src Port: domain (53), Dst Port: 16979 (16979) 161 | Domain Name System (response) 162 | 163 | No. Time Source Destination Protocol Length Info 164 | 439 3.770111000 129.49.194.114 129.49.7.170 DNS 73 Standard query 0xe366 A www.gmail.com 165 | 166 | Frame 439: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) on interface 0 167 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 168 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 169 | User Datagram Protocol, Src Port: 34565 (34565), Dst Port: domain (53) 170 | Domain Name System (query) 171 | 172 | No. Time Source Destination Protocol Length Info 173 | 440 3.771846000 129.49.7.170 129.49.194.114 DNS 158 Standard query response 0xe366 CNAME mail.google.com CNAME googlemail.l.google.com A 74.125.226.22 A 74.125.226.21 174 | 175 | Frame 440: 158 bytes on wire (1264 bits), 158 bytes captured (1264 bits) on interface 0 176 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 177 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 178 | User Datagram Protocol, Src Port: domain (53), Dst Port: 34565 (34565) 179 | Domain Name System (response) 180 | 181 | No. Time Source Destination Protocol Length Info 182 | 2443 7.774881000 129.49.194.114 129.49.7.170 DNS 76 Standard query 0xf8c5 A www.facebook.com 183 | 184 | Frame 2443: 76 bytes on wire (608 bits), 76 bytes captured (608 bits) on interface 0 185 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 186 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 187 | User Datagram Protocol, Src Port: 54071 (54071), Dst Port: domain (53) 188 | Domain Name System (query) 189 | 190 | No. Time Source Destination Protocol Length Info 191 | 2444 7.774918000 129.49.194.114 8.8.8.8 DNS 76 Standard query 0xf8c5 A www.facebook.com 192 | 193 | Frame 2444: 76 bytes on wire (608 bits), 76 bytes captured (608 bits) on interface 0 194 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 195 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 8.8.8.8 (8.8.8.8) 196 | User Datagram Protocol, Src Port: 54071 (54071), Dst Port: domain (53) 197 | Domain Name System (query) 198 | 199 | No. Time Source Destination Protocol Length Info 200 | 2445 7.779220000 129.49.194.114 129.49.7.170 DNS 84 Standard query 0x3688 A 2-edge-chat.facebook.com 201 | 202 | Frame 2445: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) on interface 0 203 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 204 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 205 | User Datagram Protocol, Src Port: 34801 (34801), Dst Port: domain (53) 206 | Domain Name System (query) 207 | 208 | No. Time Source Destination Protocol Length Info 209 | 2446 7.782057000 129.49.194.114 129.49.7.170 DNS 89 Standard query 0x43e6 A fbcdn-photos-a-a.akamaihd.net 210 | 211 | Frame 2446: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) on interface 0 212 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 213 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 214 | User Datagram Protocol, Src Port: afs (1483), Dst Port: domain (53) 215 | Domain Name System (query) 216 | 217 | No. Time Source Destination Protocol Length Info 218 | 2447 7.782485000 129.49.194.114 129.49.7.170 DNS 89 Standard query 0xc70e A fbcdn-photos-b-a.akamaihd.net 219 | 220 | Frame 2447: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) on interface 0 221 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 222 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 223 | User Datagram Protocol, Src Port: 43118 (43118), Dst Port: domain (53) 224 | Domain Name System (query) 225 | 226 | No. Time Source Destination Protocol Length Info 227 | 2448 7.782970000 129.49.194.114 129.49.7.170 DNS 88 Standard query 0x43c9 A fbcdn-profile-a.akamaihd.net 228 | 229 | Frame 2448: 88 bytes on wire (704 bits), 88 bytes captured (704 bits) on interface 0 230 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 231 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 232 | User Datagram Protocol, Src Port: 52058 (52058), Dst Port: domain (53) 233 | Domain Name System (query) 234 | 235 | No. Time Source Destination Protocol Length Info 236 | 2449 7.783383000 129.49.194.114 129.49.7.170 DNS 79 Standard query 0xd45f A static.xx.fbcdn.net 237 | 238 | Frame 2449: 79 bytes on wire (632 bits), 79 bytes captured (632 bits) on interface 0 239 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 240 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 241 | User Datagram Protocol, Src Port: 14171 (14171), Dst Port: domain (53) 242 | Domain Name System (query) 243 | 244 | No. Time Source Destination Protocol Length Info 245 | 2452 7.796572000 129.49.7.170 129.49.194.114 DNS 116 Standard query response 0xf8c5 CNAME star.c10r.facebook.com A 31.13.71.1 246 | 247 | Frame 2452: 116 bytes on wire (928 bits), 116 bytes captured (928 bits) on interface 0 248 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 249 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 250 | User Datagram Protocol, Src Port: domain (53), Dst Port: 54071 (54071) 251 | Domain Name System (response) 252 | 253 | No. Time Source Destination Protocol Length Info 254 | 2453 7.796594000 129.49.7.170 129.49.194.114 DNS 124 Standard query response 0x3688 CNAME star.c10r.facebook.com A 31.13.71.1 255 | 256 | Frame 2453: 124 bytes on wire (992 bits), 124 bytes captured (992 bits) on interface 0 257 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 258 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 259 | User Datagram Protocol, Src Port: domain (53), Dst Port: 34801 (34801) 260 | Domain Name System (response) 261 | 262 | No. Time Source Destination Protocol Length Info 263 | 2455 7.797438000 129.49.194.114 129.49.7.170 DNS 89 Standard query 0x123e A fbcdn-photos-h-a.akamaihd.net 264 | 265 | Frame 2455: 89 bytes on wire (712 bits), 89 bytes captured (712 bits) on interface 0 266 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 267 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 268 | User Datagram Protocol, Src Port: 59050 (59050), Dst Port: domain (53) 269 | Domain Name System (query) 270 | 271 | No. Time Source Destination Protocol Length Info 272 | 2456 7.797631000 8.8.8.8 129.49.194.114 DNS 116 Standard query response 0xf8c5 CNAME star.c10r.facebook.com A 31.13.73.1 273 | 274 | Frame 2456: 116 bytes on wire (928 bits), 116 bytes captured (928 bits) on interface 0 275 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 276 | Internet Protocol Version 4, Src: 8.8.8.8 (8.8.8.8), Dst: 129.49.194.114 (129.49.194.114) 277 | User Datagram Protocol, Src Port: domain (53), Dst Port: 54071 (54071) 278 | Domain Name System (response) 279 | 280 | No. Time Source Destination Protocol Length Info 281 | 2457 7.797654000 129.49.194.114 8.8.8.8 ICMP 144 Destination unreachable (Port unreachable) 282 | 283 | Frame 2457: 144 bytes on wire (1152 bits), 144 bytes captured (1152 bits) on interface 0 284 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 285 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 8.8.8.8 (8.8.8.8) 286 | Internet Control Message Protocol 287 | 288 | No. Time Source Destination Protocol Length Info 289 | 2458 7.799331000 129.49.7.170 129.49.194.114 DNS 118 Standard query response 0xd45f CNAME scontent.xx.fbcdn.net A 31.13.71.7 290 | 291 | Frame 2458: 118 bytes on wire (944 bits), 118 bytes captured (944 bits) on interface 0 292 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 293 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 294 | User Datagram Protocol, Src Port: domain (53), Dst Port: 14171 (14171) 295 | Domain Name System (response) 296 | 297 | No. Time Source Destination Protocol Length Info 298 | 2459 7.799745000 129.49.7.170 129.49.194.114 DNS 264 Standard query response 0x43c9 CNAME a2047.dspl.akamai.net A 198.144.127.80 A 198.144.127.75 A 198.144.127.83 A 198.144.127.74 A 198.144.127.32 A 198.144.127.64 A 198.144.127.16 A 198.144.127.25 A 198.144.127.27 299 | 300 | Frame 2459: 264 bytes on wire (2112 bits), 264 bytes captured (2112 bits) on interface 0 301 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 302 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 303 | User Datagram Protocol, Src Port: domain (53), Dst Port: 52058 (52058) 304 | Domain Name System (response) 305 | 306 | No. Time Source Destination Protocol Length Info 307 | 2460 7.800939000 129.49.7.170 129.49.194.114 DNS 209 Standard query response 0x123e CNAME fbcdn-photos-h-a.akamaihd.net.edgesuite.net CNAME a1990.dspmm1.akamai.net A 23.0.163.51 A 23.0.163.41 308 | 309 | Frame 2460: 209 bytes on wire (1672 bits), 209 bytes captured (1672 bits) on interface 0 310 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 311 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 312 | User Datagram Protocol, Src Port: domain (53), Dst Port: 59050 (59050) 313 | Domain Name System (response) 314 | 315 | No. Time Source Destination Protocol Length Info 316 | 2461 7.800963000 129.49.7.170 129.49.194.114 DNS 208 Standard query response 0x43e6 CNAME fbcdn-photos-a-a.akamaihd.net.edgesuite.net CNAME a995.dspmm1.akamai.net A 23.0.163.43 A 23.0.163.58 317 | 318 | Frame 2461: 208 bytes on wire (1664 bits), 208 bytes captured (1664 bits) on interface 0 319 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 320 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 321 | User Datagram Protocol, Src Port: domain (53), Dst Port: afs (1483) 322 | Domain Name System (response) 323 | 324 | No. Time Source Destination Protocol Length Info 325 | 2462 7.800980000 129.49.7.170 129.49.194.114 DNS 209 Standard query response 0xc70e CNAME fbcdn-photos-b-a.akamaihd.net.edgesuite.net CNAME a1791.dspmm1.akamai.net A 23.0.163.27 A 23.0.163.57 326 | 327 | Frame 2462: 209 bytes on wire (1672 bits), 209 bytes captured (1672 bits) on interface 0 328 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 329 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 330 | User Datagram Protocol, Src Port: domain (53), Dst Port: 43118 (43118) 331 | Domain Name System (response) 332 | 333 | No. Time Source Destination Protocol Length Info 334 | 2467 7.802686000 129.49.194.114 129.49.7.170 DNS 85 Standard query 0x1eaa A fbexternal-a.akamaihd.net 335 | 336 | Frame 2467: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface 0 337 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 338 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 339 | User Datagram Protocol, Src Port: 53064 (53064), Dst Port: domain (53) 340 | Domain Name System (query) 341 | 342 | No. Time Source Destination Protocol Length Info 343 | 2468 7.803072000 129.49.194.114 129.49.7.170 DNS 78 Standard query 0x1506 A pixel.facebook.com 344 | 345 | Frame 2468: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) on interface 0 346 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 347 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 348 | User Datagram Protocol, Src Port: 56139 (56139), Dst Port: domain (53) 349 | Domain Name System (query) 350 | 351 | No. Time Source Destination Protocol Length Info 352 | 2469 7.803351000 129.49.194.114 129.49.7.170 DNS 81 Standard query 0xb714 A scontent.xx.fbcdn.net 353 | 354 | Frame 2469: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) on interface 0 355 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 356 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 357 | User Datagram Protocol, Src Port: 48083 (48083), Dst Port: domain (53) 358 | Domain Name System (query) 359 | 360 | No. Time Source Destination Protocol Length Info 361 | 2476 7.808954000 129.49.7.170 129.49.194.114 DNS 199 Standard query response 0x1eaa CNAME fbexternal-a.akamaihd.net.edgesuite.net CNAME a1531.dsw4.akamai.net A 129.49.1.70 A 129.49.1.73 362 | 363 | Frame 2476: 199 bytes on wire (1592 bits), 199 bytes captured (1592 bits) on interface 0 364 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 365 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 366 | User Datagram Protocol, Src Port: domain (53), Dst Port: 53064 (53064) 367 | Domain Name System (response) 368 | 369 | No. Time Source Destination Protocol Length Info 370 | 2478 7.809512000 129.49.7.170 129.49.194.114 DNS 137 Standard query response 0x1506 CNAME star.facebook.com CNAME star.c10r.facebook.com A 31.13.71.1 371 | 372 | Frame 2478: 137 bytes on wire (1096 bits), 137 bytes captured (1096 bits) on interface 0 373 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 374 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 375 | User Datagram Protocol, Src Port: domain (53), Dst Port: 56139 (56139) 376 | Domain Name System (response) 377 | 378 | No. Time Source Destination Protocol Length Info 379 | 2479 7.809664000 129.49.7.170 129.49.194.114 DNS 97 Standard query response 0xb714 A 31.13.71.7 380 | 381 | Frame 2479: 97 bytes on wire (776 bits), 97 bytes captured (776 bits) on interface 0 382 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 383 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 384 | User Datagram Protocol, Src Port: domain (53), Dst Port: 48083 (48083) 385 | Domain Name System (response) 386 | 387 | No. Time Source Destination Protocol Length Info 388 | 2702 9.132166000 129.49.194.114 129.49.7.170 DNS 90 Standard query 0x9d70 A fbcdn-sphotos-d-a.akamaihd.net 389 | 390 | Frame 2702: 90 bytes on wire (720 bits), 90 bytes captured (720 bits) on interface 0 391 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 392 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 393 | User Datagram Protocol, Src Port: 48563 (48563), Dst Port: domain (53) 394 | Domain Name System (query) 395 | 396 | No. Time Source Destination Protocol Length Info 397 | 2709 9.135424000 129.49.7.170 129.49.194.114 DNS 323 Standard query response 0x9d70 CNAME fbcdn-sphotos-d-a.akamaihd.net.edgesuite.net CNAME a1404.dspw41.akamai.net A 184.51.126.144 A 184.51.126.152 A 184.51.126.168 A 184.51.126.138 A 184.51.126.169 A 184.51.126.155 A 184.51.126.136 A 184.51.126.178 A 184.51.126.146 398 | 399 | Frame 2709: 323 bytes on wire (2584 bits), 323 bytes captured (2584 bits) on interface 0 400 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 401 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 402 | User Datagram Protocol, Src Port: domain (53), Dst Port: 48563 (48563) 403 | Domain Name System (response) 404 | 405 | No. Time Source Destination Protocol Length Info 406 | 2834 9.335778000 129.49.194.114 129.49.7.170 DNS 85 Standard query 0xe8a9 A eyygffckxy.stonybrook.edu 407 | 408 | Frame 2834: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface 0 409 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 410 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 411 | User Datagram Protocol, Src Port: 60951 (60951), Dst Port: domain (53) 412 | Domain Name System (query) 413 | 414 | No. Time Source Destination Protocol Length Info 415 | 2835 9.336118000 129.49.194.114 129.49.7.170 DNS 86 Standard query 0x1dca A xsoyuzhkhgv.stonybrook.edu 416 | 417 | Frame 2835: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) on interface 0 418 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 419 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 420 | User Datagram Protocol, Src Port: 18142 (18142), Dst Port: domain (53) 421 | Domain Name System (query) 422 | 423 | No. Time Source Destination Protocol Length Info 424 | 2836 9.336251000 129.49.194.114 129.49.7.170 DNS 83 Standard query 0x4c80 A xcmfphoc.stonybrook.edu 425 | 426 | Frame 2836: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) on interface 0 427 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 428 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 429 | User Datagram Protocol, Src Port: 55034 (55034), Dst Port: domain (53) 430 | Domain Name System (query) 431 | 432 | No. Time Source Destination Protocol Length Info 433 | 2837 9.337316000 129.49.7.170 129.49.194.114 DNS 136 Standard query response 0xe8a9 No such name 434 | 435 | Frame 2837: 136 bytes on wire (1088 bits), 136 bytes captured (1088 bits) on interface 0 436 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 437 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 438 | User Datagram Protocol, Src Port: domain (53), Dst Port: 60951 (60951) 439 | Domain Name System (response) 440 | 441 | No. Time Source Destination Protocol Length Info 442 | 2838 9.339656000 129.49.194.114 129.49.7.170 DNS 85 Standard query 0xfcb2 A eyygffckxy.stonybrook.edu 443 | 444 | Frame 2838: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface 0 445 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 446 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 447 | User Datagram Protocol, Src Port: interwise (7778), Dst Port: domain (53) 448 | Domain Name System (query) 449 | 450 | No. Time Source Destination Protocol Length Info 451 | 2839 9.340677000 129.49.7.170 129.49.194.114 DNS 137 Standard query response 0x1dca No such name 452 | 453 | Frame 2839: 137 bytes on wire (1096 bits), 137 bytes captured (1096 bits) on interface 0 454 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 455 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 456 | User Datagram Protocol, Src Port: domain (53), Dst Port: 18142 (18142) 457 | Domain Name System (response) 458 | 459 | No. Time Source Destination Protocol Length Info 460 | 2840 9.341366000 129.49.194.114 129.49.7.170 DNS 86 Standard query 0x6d41 A xsoyuzhkhgv.stonybrook.edu 461 | 462 | Frame 2840: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) on interface 0 463 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 464 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 465 | User Datagram Protocol, Src Port: 25639 (25639), Dst Port: domain (53) 466 | Domain Name System (query) 467 | 468 | No. Time Source Destination Protocol Length Info 469 | 2841 9.345638000 129.49.7.170 129.49.194.114 DNS 134 Standard query response 0x4c80 No such name 470 | 471 | Frame 2841: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) on interface 0 472 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 473 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 474 | User Datagram Protocol, Src Port: domain (53), Dst Port: 55034 (55034) 475 | Domain Name System (response) 476 | 477 | No. Time Source Destination Protocol Length Info 478 | 2842 9.345659000 129.49.7.170 129.49.194.114 DNS 136 Standard query response 0xfcb2 No such name 479 | 480 | Frame 2842: 136 bytes on wire (1088 bits), 136 bytes captured (1088 bits) on interface 0 481 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 482 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 483 | User Datagram Protocol, Src Port: domain (53), Dst Port: interwise (7778) 484 | Domain Name System (response) 485 | 486 | No. Time Source Destination Protocol Length Info 487 | 2843 9.345670000 129.49.7.170 129.49.194.114 DNS 137 Standard query response 0x6d41 No such name 488 | 489 | Frame 2843: 137 bytes on wire (1096 bits), 137 bytes captured (1096 bits) on interface 0 490 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 491 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 492 | User Datagram Protocol, Src Port: domain (53), Dst Port: 25639 (25639) 493 | Domain Name System (response) 494 | 495 | No. Time Source Destination Protocol Length Info 496 | 2844 9.345901000 129.49.194.114 129.49.7.170 DNS 71 Standard query 0x4e42 A xsoyuzhkhgv 497 | 498 | Frame 2844: 71 bytes on wire (568 bits), 71 bytes captured (568 bits) on interface 0 499 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 500 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 501 | User Datagram Protocol, Src Port: 51115 (51115), Dst Port: domain (53) 502 | Domain Name System (query) 503 | 504 | No. Time Source Destination Protocol Length Info 505 | 2845 9.345941000 129.49.194.114 129.49.7.170 DNS 70 Standard query 0x1ebe A eyygffckxy 506 | 507 | Frame 2845: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) on interface 0 508 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 509 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 510 | User Datagram Protocol, Src Port: 38336 (38336), Dst Port: domain (53) 511 | Domain Name System (query) 512 | 513 | No. Time Source Destination Protocol Length Info 514 | 2846 9.346302000 129.49.194.114 129.49.7.170 DNS 83 Standard query 0x773e A xcmfphoc.stonybrook.edu 515 | 516 | Frame 2846: 83 bytes on wire (664 bits), 83 bytes captured (664 bits) on interface 0 517 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 518 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 519 | User Datagram Protocol, Src Port: 26701 (26701), Dst Port: domain (53) 520 | Domain Name System (query) 521 | 522 | No. Time Source Destination Protocol Length Info 523 | 2856 9.349036000 129.49.7.170 129.49.194.114 DNS 134 Standard query response 0x773e No such name 524 | 525 | Frame 2856: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) on interface 0 526 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 527 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 528 | User Datagram Protocol, Src Port: domain (53), Dst Port: 26701 (26701) 529 | Domain Name System (response) 530 | 531 | No. Time Source Destination Protocol Length Info 532 | 2857 9.349462000 129.49.194.114 129.49.7.170 DNS 68 Standard query 0xc62f A xcmfphoc 533 | 534 | Frame 2857: 68 bytes on wire (544 bits), 68 bytes captured (544 bits) on interface 0 535 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 536 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 537 | User Datagram Protocol, Src Port: 18057 (18057), Dst Port: domain (53) 538 | Domain Name System (query) 539 | 540 | No. Time Source Destination Protocol Length Info 541 | 2867 9.354737000 129.49.7.170 129.49.194.114 DNS 146 Standard query response 0x4e42 No such name 542 | 543 | Frame 2867: 146 bytes on wire (1168 bits), 146 bytes captured (1168 bits) on interface 0 544 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 545 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 546 | User Datagram Protocol, Src Port: domain (53), Dst Port: 51115 (51115) 547 | Domain Name System (response) 548 | 549 | No. Time Source Destination Protocol Length Info 550 | 2868 9.354755000 129.49.7.170 129.49.194.114 DNS 145 Standard query response 0x1ebe No such name 551 | 552 | Frame 2868: 145 bytes on wire (1160 bits), 145 bytes captured (1160 bits) on interface 0 553 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 554 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 555 | User Datagram Protocol, Src Port: domain (53), Dst Port: 38336 (38336) 556 | Domain Name System (response) 557 | 558 | No. Time Source Destination Protocol Length Info 559 | 2949 9.459916000 129.49.7.170 129.49.194.114 DNS 143 Standard query response 0xc62f No such name 560 | 561 | Frame 2949: 143 bytes on wire (1144 bits), 143 bytes captured (1144 bits) on interface 0 562 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 563 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 564 | User Datagram Protocol, Src Port: domain (53), Dst Port: 18057 (18057) 565 | Domain Name System (response) 566 | 567 | No. Time Source Destination Protocol Length Info 568 | 3255 11.021761000 129.49.194.114 129.49.7.170 DNS 75 Standard query 0xeca4 A www.youtube.com 569 | 570 | Frame 3255: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) on interface 0 571 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 572 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 573 | User Datagram Protocol, Src Port: 36767 (36767), Dst Port: domain (53) 574 | Domain Name System (query) 575 | 576 | No. Time Source Destination Protocol Length Info 577 | 3256 11.023375000 129.49.7.170 129.49.194.114 DNS 285 Standard query response 0xeca4 CNAME youtube-ui.l.google.com A 74.125.226.2 A 74.125.226.6 A 74.125.226.9 A 74.125.226.0 A 74.125.226.5 A 74.125.226.1 A 74.125.226.14 A 74.125.226.8 A 74.125.226.3 A 74.125.226.7 A 74.125.226.4 578 | 579 | Frame 3256: 285 bytes on wire (2280 bits), 285 bytes captured (2280 bits) on interface 0 580 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 581 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 582 | User Datagram Protocol, Src Port: domain (53), Dst Port: 36767 (36767) 583 | Domain Name System (response) 584 | 585 | No. Time Source Destination Protocol Length Info 586 | 3268 11.120958000 129.49.194.114 129.49.7.170 DNS 79 Standard query 0x5b75 A accounts.google.com 587 | 588 | Frame 3268: 79 bytes on wire (632 bits), 79 bytes captured (632 bits) on interface 0 589 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 590 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 591 | User Datagram Protocol, Src Port: 17929 (17929), Dst Port: domain (53) 592 | Domain Name System (query) 593 | 594 | No. Time Source Destination Protocol Length Info 595 | 3269 11.121123000 129.49.194.114 129.49.7.170 DNS 78 Standard query 0x4cfa A ad.doubleclick.net 596 | 597 | Frame 3269: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) on interface 0 598 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 599 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 600 | User Datagram Protocol, Src Port: 48105 (48105), Dst Port: domain (53) 601 | Domain Name System (query) 602 | 603 | No. Time Source Destination Protocol Length Info 604 | 3270 11.121327000 129.49.194.114 129.49.7.170 DNS 79 Standard query 0xcdd7 A clients6.google.com 605 | 606 | Frame 3270: 79 bytes on wire (632 bits), 79 bytes captured (632 bits) on interface 0 607 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 608 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 609 | User Datagram Protocol, Src Port: 5381 (5381), Dst Port: domain (53) 610 | Domain Name System (query) 611 | 612 | No. Time Source Destination Protocol Length Info 613 | 3271 11.121482000 129.49.194.114 129.49.7.170 DNS 73 Standard query 0x7e00 A gg.google.com 614 | 615 | Frame 3271: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) on interface 0 616 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 617 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 618 | User Datagram Protocol, Src Port: 25462 (25462), Dst Port: domain (53) 619 | Domain Name System (query) 620 | 621 | No. Time Source Destination Protocol Length Info 622 | 3272 11.121630000 129.49.194.114 129.49.7.170 DNS 71 Standard query 0xa3b5 A i.ytimg.com 623 | 624 | Frame 3272: 71 bytes on wire (568 bits), 71 bytes captured (568 bits) on interface 0 625 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 626 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 627 | User Datagram Protocol, Src Port: 65386 (65386), Dst Port: domain (53) 628 | Domain Name System (query) 629 | 630 | No. Time Source Destination Protocol Length Info 631 | 3273 11.121818000 129.49.194.114 129.49.7.170 DNS 71 Standard query 0x1186 A s.ytimg.com 632 | 633 | Frame 3273: 71 bytes on wire (568 bits), 71 bytes captured (568 bits) on interface 0 634 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 635 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 636 | User Datagram Protocol, Src Port: 33936 (33936), Dst Port: domain (53) 637 | Domain Name System (query) 638 | 639 | No. Time Source Destination Protocol Length Info 640 | 3275 11.124586000 129.49.7.170 129.49.194.114 DNS 120 Standard query response 0x5b75 CNAME accounts.l.google.com A 216.58.217.109 641 | 642 | Frame 3275: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) on interface 0 643 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 644 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 645 | User Datagram Protocol, Src Port: domain (53), Dst Port: 17929 (17929) 646 | Domain Name System (response) 647 | 648 | No. Time Source Destination Protocol Length Info 649 | 3276 11.124602000 129.49.7.170 129.49.194.114 DNS 131 Standard query response 0x4cfa CNAME dart.l.doubleclick.net A 74.125.226.28 A 74.125.226.27 650 | 651 | Frame 3276: 131 bytes on wire (1048 bits), 131 bytes captured (1048 bits) on interface 0 652 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 653 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 654 | User Datagram Protocol, Src Port: domain (53), Dst Port: 48105 (48105) 655 | Domain Name System (response) 656 | 657 | No. Time Source Destination Protocol Length Info 658 | 3277 11.124607000 129.49.7.170 129.49.194.114 DNS 279 Standard query response 0xcdd7 CNAME clients.l.google.com A 74.125.226.8 A 74.125.226.2 A 74.125.226.0 A 74.125.226.9 A 74.125.226.1 A 74.125.226.4 A 74.125.226.7 A 74.125.226.14 A 74.125.226.3 A 74.125.226.6 A 74.125.226.5 659 | 660 | Frame 3277: 279 bytes on wire (2232 bits), 279 bytes captured (2232 bits) on interface 0 661 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 662 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 663 | User Datagram Protocol, Src Port: domain (53), Dst Port: 5381 (5381) 664 | Domain Name System (response) 665 | 666 | No. Time Source Destination Protocol Length Info 667 | 3278 11.124622000 129.49.7.170 129.49.194.114 DNS 249 Standard query response 0x7e00 A 74.125.226.9 A 74.125.226.7 A 74.125.226.4 A 74.125.226.3 A 74.125.226.6 A 74.125.226.14 A 74.125.226.0 A 74.125.226.5 A 74.125.226.2 A 74.125.226.1 A 74.125.226.8 668 | 669 | Frame 3278: 249 bytes on wire (1992 bits), 249 bytes captured (1992 bits) on interface 0 670 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 671 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 672 | User Datagram Protocol, Src Port: domain (53), Dst Port: 25462 (25462) 673 | Domain Name System (response) 674 | 675 | No. Time Source Destination Protocol Length Info 676 | 3279 11.124800000 129.49.194.114 129.49.7.170 DNS 73 Standard query 0xac56 A yt3.ggpht.com 677 | 678 | Frame 3279: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) on interface 0 679 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 680 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 681 | User Datagram Protocol, Src Port: 5810 (5810), Dst Port: domain (53) 682 | Domain Name System (query) 683 | 684 | No. Time Source Destination Protocol Length Info 685 | 3283 11.124976000 129.49.7.170 129.49.194.114 DNS 276 Standard query response 0xa3b5 CNAME ytimg.l.google.com A 74.125.228.232 A 74.125.228.228 A 74.125.228.224 A 74.125.228.229 A 74.125.228.230 A 74.125.228.227 A 74.125.228.233 A 74.125.228.226 A 74.125.228.238 A 74.125.228.225 A 74.125.228.231 686 | 687 | Frame 3283: 276 bytes on wire (2208 bits), 276 bytes captured (2208 bits) on interface 0 688 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 689 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 690 | User Datagram Protocol, Src Port: domain (53), Dst Port: 65386 (65386) 691 | Domain Name System (response) 692 | 693 | No. Time Source Destination Protocol Length Info 694 | 3286 11.126971000 129.49.7.170 129.49.194.114 DNS 279 Standard query response 0x1186 CNAME ytstatic.l.google.com A 74.125.226.161 A 74.125.226.169 A 74.125.226.174 A 74.125.226.166 A 74.125.226.160 A 74.125.226.163 A 74.125.226.162 A 74.125.226.164 A 74.125.226.168 A 74.125.226.165 A 74.125.226.167 695 | 696 | Frame 3286: 279 bytes on wire (2232 bits), 279 bytes captured (2232 bits) on interface 0 697 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 698 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 699 | User Datagram Protocol, Src Port: domain (53), Dst Port: 33936 (33936) 700 | Domain Name System (response) 701 | 702 | No. Time Source Destination Protocol Length Info 703 | 3287 11.126985000 129.49.7.170 129.49.194.114 DNS 166 Standard query response 0xac56 CNAME photos-ugc.l.googleusercontent.com A 74.125.226.12 A 74.125.226.10 A 74.125.226.11 704 | 705 | Frame 3287: 166 bytes on wire (1328 bits), 166 bytes captured (1328 bits) on interface 0 706 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 707 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 708 | User Datagram Protocol, Src Port: domain (53), Dst Port: 5810 (5810) 709 | Domain Name System (response) 710 | 711 | No. Time Source Destination Protocol Length Info 712 | 4046 13.744216000 129.49.194.114 129.49.7.170 DNS 87 Standard query 0x6fc8 A oauth.googleusercontent.com 713 | 714 | Frame 4046: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) on interface 0 715 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 716 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 717 | User Datagram Protocol, Src Port: 15276 (15276), Dst Port: domain (53) 718 | Domain Name System (query) 719 | 720 | No. Time Source Destination Protocol Length Info 721 | 4047 13.750316000 129.49.7.170 129.49.194.114 DNS 164 Standard query response 0x6fc8 CNAME googlehosted.l.googleusercontent.com A 74.125.226.44 A 74.125.226.42 A 74.125.226.43 722 | 723 | Frame 4047: 164 bytes on wire (1312 bits), 164 bytes captured (1312 bits) on interface 0 724 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 725 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 726 | User Datagram Protocol, Src Port: domain (53), Dst Port: 15276 (15276) 727 | Domain Name System (response) 728 | 729 | No. Time Source Destination Protocol Length Info 730 | 4251 14.511929000 129.49.194.114 129.49.7.170 DNS 73 Standard query 0xf975 A www.yahoo.com 731 | 732 | Frame 4251: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) on interface 0 733 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 734 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 735 | User Datagram Protocol, Src Port: 14529 (14529), Dst Port: domain (53) 736 | Domain Name System (query) 737 | 738 | No. Time Source Destination Protocol Length Info 739 | 4252 14.512351000 129.49.194.114 129.49.7.170 DNS 87 Standard query 0xb493 A ci.beap.ad.yieldmanager.net 740 | 741 | Frame 4252: 87 bytes on wire (696 bits), 87 bytes captured (696 bits) on interface 0 742 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 743 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 744 | User Datagram Protocol, Src Port: 24394 (24394), Dst Port: domain (53) 745 | Domain Name System (query) 746 | 747 | No. Time Source Destination Protocol Length Info 748 | 4253 14.512496000 129.49.194.114 129.49.7.170 DNS 84 Standard query 0xbca9 A clicks.beap.bc.yahoo.com 749 | 750 | Frame 4253: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) on interface 0 751 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 752 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 753 | User Datagram Protocol, Src Port: dddp (9131), Dst Port: domain (53) 754 | Domain Name System (query) 755 | 756 | No. Time Source Destination Protocol Length Info 757 | 4254 14.512836000 129.49.194.114 129.49.7.170 DNS 78 Standard query 0xe3bd A pr.comet.yahoo.com 758 | 759 | Frame 4254: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) on interface 0 760 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 761 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 762 | User Datagram Protocol, Src Port: 11173 (11173), Dst Port: domain (53) 763 | Domain Name System (query) 764 | 765 | No. Time Source Destination Protocol Length Info 766 | 4255 14.513003000 129.49.194.114 129.49.7.170 DNS 70 Standard query 0xbc3f A s.yimg.com 767 | 768 | Frame 4255: 70 bytes on wire (560 bits), 70 bytes captured (560 bits) on interface 0 769 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 770 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 771 | User Datagram Protocol, Src Port: 61947 (61947), Dst Port: domain (53) 772 | Domain Name System (query) 773 | 774 | No. Time Source Destination Protocol Length Info 775 | 4256 14.513074000 129.49.194.114 129.49.7.170 DNS 84 Standard query 0x0b5c A sb.scorecardresearch.com 776 | 777 | Frame 4256: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) on interface 0 778 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 779 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 780 | User Datagram Protocol, Src Port: 43146 (43146), Dst Port: domain (53) 781 | Domain Name System (query) 782 | 783 | No. Time Source Destination Protocol Length Info 784 | 4257 14.514405000 129.49.7.170 129.49.194.114 DNS 132 Standard query response 0xf975 CNAME fd-fp3.wg1.b.yahoo.com A 98.139.183.24 A 98.139.180.149 785 | 786 | Frame 4257: 132 bytes on wire (1056 bits), 132 bytes captured (1056 bits) on interface 0 787 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 788 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 789 | User Datagram Protocol, Src Port: domain (53), Dst Port: 14529 (14529) 790 | Domain Name System (response) 791 | 792 | No. Time Source Destination Protocol Length Info 793 | 4259 14.514990000 129.49.7.170 129.49.194.114 DNS 144 Standard query response 0xb493 CNAME beap-aik2.adx.ysm.yahoodns.net A 98.139.225.13 794 | 795 | Frame 4259: 144 bytes on wire (1152 bits), 144 bytes captured (1152 bits) on interface 0 796 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 797 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 798 | User Datagram Protocol, Src Port: domain (53), Dst Port: 24394 (24394) 799 | Domain Name System (response) 800 | 801 | No. Time Source Destination Protocol Length Info 802 | 4260 14.515683000 129.49.7.170 129.49.194.114 DNS 166 Standard query response 0xbca9 CNAME beapcsc1.ysm.yahoodns.net CNAME any-beapcsc1.ysm.yahoodns.net A 76.13.28.70 803 | 804 | Frame 4260: 166 bytes on wire (1328 bits), 166 bytes captured (1328 bits) on interface 0 805 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 806 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 807 | User Datagram Protocol, Src Port: domain (53), Dst Port: dddp (9131) 808 | Domain Name System (response) 809 | 810 | No. Time Source Destination Protocol Length Info 811 | 4261 14.522428000 129.49.7.170 129.49.194.114 DNS 137 Standard query response 0xbc3f CNAME s.gycs.b.yahoodns.net A 206.190.56.190 A 206.190.56.191 812 | 813 | Frame 4261: 137 bytes on wire (1096 bits), 137 bytes captured (1096 bits) on interface 0 814 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 815 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 816 | User Datagram Protocol, Src Port: domain (53), Dst Port: 61947 (61947) 817 | Domain Name System (response) 818 | 819 | No. Time Source Destination Protocol Length Info 820 | 4262 14.522451000 129.49.7.170 129.49.194.114 DNS 176 Standard query response 0xe3bd CNAME comet.yahoo.pr.g01.yahoodns.net CNAME any-comet.yahoo.pr.a01.yahoodns.net A 66.196.116.112 821 | 822 | Frame 4262: 176 bytes on wire (1408 bits), 176 bytes captured (1408 bits) on interface 0 823 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 824 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 825 | User Datagram Protocol, Src Port: domain (53), Dst Port: 11173 (11173) 826 | Domain Name System (response) 827 | 828 | No. Time Source Destination Protocol Length Info 829 | 4263 14.522457000 129.49.7.170 129.49.194.114 DNS 184 Standard query response 0x0b5c CNAME sb.scorecardresearch.com.edgekey.net CNAME e2799.e7.akamaiedge.net A 23.65.251.61 830 | 831 | Frame 4263: 184 bytes on wire (1472 bits), 184 bytes captured (1472 bits) on interface 0 832 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 833 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 834 | User Datagram Protocol, Src Port: domain (53), Dst Port: 43146 (43146) 835 | Domain Name System (response) 836 | 837 | No. Time Source Destination Protocol Length Info 838 | 4344 14.761964000 129.49.194.114 129.49.7.170 DNS 81 Standard query 0x7bcf A csc.beap.bc.yahoo.com 839 | 840 | Frame 4344: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) on interface 0 841 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 842 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 843 | User Datagram Protocol, Src Port: 6264 (6264), Dst Port: domain (53) 844 | Domain Name System (query) 845 | 846 | No. Time Source Destination Protocol Length Info 847 | 4345 14.762032000 129.49.194.114 129.49.7.170 DNS 79 Standard query 0xed6d A geo.query.yahoo.com 848 | 849 | Frame 4345: 79 bytes on wire (632 bits), 79 bytes captured (632 bits) on interface 0 850 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 851 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 852 | User Datagram Protocol, Src Port: 16426 (16426), Dst Port: domain (53) 853 | Domain Name System (query) 854 | 855 | No. Time Source Destination Protocol Length Info 856 | 4346 14.762170000 129.49.194.114 129.49.7.170 DNS 81 Standard query 0xdb68 A y.analytics.yahoo.com 857 | 858 | Frame 4346: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) on interface 0 859 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 860 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 861 | User Datagram Protocol, Src Port: 28928 (28928), Dst Port: domain (53) 862 | Domain Name System (query) 863 | 864 | No. Time Source Destination Protocol Length Info 865 | 4347 14.764115000 129.49.7.170 129.49.194.114 DNS 163 Standard query response 0x7bcf CNAME beapcsc1.ysm.yahoodns.net CNAME any-beapcsc1.ysm.yahoodns.net A 76.13.28.70 866 | 867 | Frame 4347: 163 bytes on wire (1304 bits), 163 bytes captured (1304 bits) on interface 0 868 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 869 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 870 | User Datagram Protocol, Src Port: domain (53), Dst Port: 6264 (6264) 871 | Domain Name System (response) 872 | 873 | No. Time Source Destination Protocol Length Info 874 | 4348 14.764144000 129.49.7.170 129.49.194.114 DNS 195 Standard query response 0xed6d CNAME global-cache.internal.query.g03.yahoodns.net CNAME us-cache.internal.query.a01.yahoodns.net A 98.137.201.232 875 | 876 | Frame 4348: 195 bytes on wire (1560 bits), 195 bytes captured (1560 bits) on interface 0 877 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 878 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 879 | User Datagram Protocol, Src Port: domain (53), Dst Port: 16426 (16426) 880 | Domain Name System (response) 881 | 882 | No. Time Source Destination Protocol Length Info 883 | 4349 14.764816000 129.49.7.170 129.49.194.114 DNS 132 Standard query response 0xdb68 CNAME y.it.a03.yahoodns.net A 98.139.225.23 884 | 885 | Frame 4349: 132 bytes on wire (1056 bits), 132 bytes captured (1056 bits) on interface 0 886 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 887 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 888 | User Datagram Protocol, Src Port: domain (53), Dst Port: 28928 (28928) 889 | Domain Name System (response) 890 | 891 | No. Time Source Destination Protocol Length Info 892 | 4352 14.773380000 129.49.194.114 129.49.7.170 DNS 74 Standard query 0xd446 A hsrd.yahoo.com 893 | 894 | Frame 4352: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) on interface 0 895 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 896 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 897 | User Datagram Protocol, Src Port: 33974 (33974), Dst Port: domain (53) 898 | Domain Name System (query) 899 | 900 | No. Time Source Destination Protocol Length Info 901 | 4353 14.775598000 129.49.7.170 129.49.194.114 DNS 149 Standard query response 0xd446 CNAME eu-hrbw1.fp.wa1.b.yahoo.com CNAME any-eu-hrbw1.fp.wa1.b.yahoo.com A 98.139.180.157 902 | 903 | Frame 4353: 149 bytes on wire (1192 bits), 149 bytes captured (1192 bits) on interface 0 904 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 905 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 906 | User Datagram Protocol, Src Port: domain (53), Dst Port: 33974 (33974) 907 | Domain Name System (response) 908 | 909 | No. Time Source Destination Protocol Length Info 910 | 4430 14.928165000 129.49.194.114 129.49.7.170 DNS 75 Standard query 0x2c86 A login.yahoo.com 911 | 912 | Frame 4430: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) on interface 0 913 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 914 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 915 | User Datagram Protocol, Src Port: 16224 (16224), Dst Port: domain (53) 916 | Domain Name System (query) 917 | 918 | No. Time Source Destination Protocol Length Info 919 | 4431 14.928207000 129.49.194.114 129.49.7.170 DNS 74 Standard query 0xb6d6 A mail.yahoo.com 920 | 921 | Frame 4431: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) on interface 0 922 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 923 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 924 | User Datagram Protocol, Src Port: 63149 (63149), Dst Port: domain (53) 925 | Domain Name System (query) 926 | 927 | No. Time Source Destination Protocol Length Info 928 | 4484 14.974098000 129.49.7.170 129.49.194.114 DNS 196 Standard query response 0x2c86 CNAME ats.login.lgg1.b.yahoo.com CNAME ats.member.g02.yahoodns.net CNAME any-ats.member.a02.yahoodns.net A 98.139.21.169 929 | 930 | Frame 4484: 196 bytes on wire (1568 bits), 196 bytes captured (1568 bits) on interface 0 931 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 932 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 933 | User Datagram Protocol, Src Port: domain (53), Dst Port: 16224 (16224) 934 | Domain Name System (response) 935 | 936 | No. Time Source Destination Protocol Length Info 937 | 4485 14.976205000 129.49.7.170 129.49.194.114 DNS 215 Standard query response 0xb6d6 CNAME login.yahoo.com CNAME ats.login.lgg1.b.yahoo.com CNAME ats.member.g02.yahoodns.net CNAME any-ats.member.a02.yahoodns.net A 98.139.21.169 938 | 939 | Frame 4485: 215 bytes on wire (1720 bits), 215 bytes captured (1720 bits) on interface 0 940 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 941 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 942 | User Datagram Protocol, Src Port: domain (53), Dst Port: 63149 (63149) 943 | Domain Name System (response) 944 | 945 | No. Time Source Destination Protocol Length Info 946 | 4545 15.013592000 129.49.194.114 129.49.7.170 DNS 81 Standard query 0xcd5b A advertising.yahoo.com 947 | 948 | Frame 4545: 81 bytes on wire (648 bits), 81 bytes captured (648 bits) on interface 0 949 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 950 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 951 | User Datagram Protocol, Src Port: 56306 (56306), Dst Port: domain (53) 952 | Domain Name System (query) 953 | 954 | No. Time Source Destination Protocol Length Info 955 | 4546 15.013803000 129.49.194.114 129.49.7.170 DNS 77 Standard query 0x0f90 A careers.yahoo.com 956 | 957 | Frame 4546: 77 bytes on wire (616 bits), 77 bytes captured (616 bits) on interface 0 958 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 959 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 960 | User Datagram Protocol, Src Port: rsqlserver (4430), Dst Port: domain (53) 961 | Domain Name System (query) 962 | 963 | No. Time Source Destination Protocol Length Info 964 | 4547 15.013966000 129.49.194.114 129.49.7.170 DNS 78 Standard query 0xcb6c A feedback.yahoo.com 965 | 966 | Frame 4547: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) on interface 0 967 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 968 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 969 | User Datagram Protocol, Src Port: 32003 (32003), Dst Port: domain (53) 970 | Domain Name System (query) 971 | 972 | No. Time Source Destination Protocol Length Info 973 | 4549 15.017723000 129.49.7.170 129.49.194.114 DNS 221 Standard query response 0x0f90 CNAME geoycpi-uno-deluxe.gycpi.b.yahoodns.net CNAME geoycpi-uno.gycpi.b.yahoodns.net CNAME any-ycpi-uno.aycpi.b.yahoodns.net A 216.115.101.178 A 216.115.101.179 974 | 975 | Frame 4549: 221 bytes on wire (1768 bits), 221 bytes captured (1768 bits) on interface 0 976 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 977 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 978 | User Datagram Protocol, Src Port: domain (53), Dst Port: rsqlserver (4430) 979 | Domain Name System (response) 980 | 981 | No. Time Source Destination Protocol Length Info 982 | 4550 15.017824000 129.49.194.114 129.49.7.170 DNS 84 Standard query 0x03f9 A 6-edge-chat.facebook.com 983 | 984 | Frame 4550: 84 bytes on wire (672 bits), 84 bytes captured (672 bits) on interface 0 985 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 986 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 987 | User Datagram Protocol, Src Port: 42764 (42764), Dst Port: domain (53) 988 | Domain Name System (query) 989 | 990 | No. Time Source Destination Protocol Length Info 991 | 4551 15.018802000 129.49.7.170 129.49.194.114 DNS 156 Standard query response 0xcb6c CNAME src2.yahoo.com CNAME any-src.san2.a01.yahoodns.net A 74.6.50.25 992 | 993 | Frame 4551: 156 bytes on wire (1248 bits), 156 bytes captured (1248 bits) on interface 0 994 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 995 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 996 | User Datagram Protocol, Src Port: domain (53), Dst Port: 32003 (32003) 997 | Domain Name System (response) 998 | 999 | No. Time Source Destination Protocol Length Info 1000 | 4552 15.019985000 129.49.7.170 129.49.194.114 DNS 124 Standard query response 0x03f9 CNAME star.c10r.facebook.com A 31.13.71.1 1001 | 1002 | Frame 4552: 124 bytes on wire (992 bits), 124 bytes captured (992 bits) on interface 0 1003 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1004 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1005 | User Datagram Protocol, Src Port: domain (53), Dst Port: 42764 (42764) 1006 | Domain Name System (response) 1007 | 1008 | No. Time Source Destination Protocol Length Info 1009 | 4553 15.020633000 129.49.194.114 129.49.7.170 DNS 74 Standard query 0xa7f6 A help.yahoo.com 1010 | 1011 | Frame 4553: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) on interface 0 1012 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1013 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1014 | User Datagram Protocol, Src Port: 30014 (30014), Dst Port: domain (53) 1015 | Domain Name System (query) 1016 | 1017 | No. Time Source Destination Protocol Length Info 1018 | 4554 15.021381000 129.49.194.114 129.49.7.170 DNS 74 Standard query 0x85cd A info.yahoo.com 1019 | 1020 | Frame 4554: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) on interface 0 1021 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1022 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1023 | User Datagram Protocol, Src Port: 54404 (54404), Dst Port: domain (53) 1024 | Domain Name System (query) 1025 | 1026 | No. Time Source Destination Protocol Length Info 1027 | 4555 15.023061000 129.49.7.170 129.49.194.114 DNS 185 Standard query response 0xa7f6 CNAME geoycpi-uno.gycpi.b.yahoodns.net CNAME any-ycpi-uno.aycpi.b.yahoodns.net A 216.115.101.179 A 216.115.101.178 1028 | 1029 | Frame 4555: 185 bytes on wire (1480 bits), 185 bytes captured (1480 bits) on interface 0 1030 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1031 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1032 | User Datagram Protocol, Src Port: domain (53), Dst Port: 30014 (30014) 1033 | Domain Name System (response) 1034 | 1035 | No. Time Source Destination Protocol Length Info 1036 | 4558 15.034892000 129.49.7.170 129.49.194.114 DNS 227 Standard query response 0xcd5b CNAME fd-geoycpi-uno.gycpi.b.yahoodns.net CNAME ds-geoycpi-uno.gycpi.b.yahoodns.net CNAME ds-any-ycpi-uno.aycpi.b.yahoodns.net A 216.115.101.178 A 216.115.101.179 1037 | 1038 | Frame 4558: 227 bytes on wire (1816 bits), 227 bytes captured (1816 bits) on interface 0 1039 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1040 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1041 | User Datagram Protocol, Src Port: domain (53), Dst Port: 56306 (56306) 1042 | Domain Name System (response) 1043 | 1044 | No. Time Source Destination Protocol Length Info 1045 | 4559 15.034916000 129.49.7.170 129.49.194.114 DNS 263 Standard query response 0x85cd CNAME fd-geoycpi-uno-deluxe.gycpi.b.yahoodns.net CNAME ds-geoycpi-uno-deluxe.gycpi.b.yahoodns.net CNAME ds-geoycpi-uno.gycpi.b.yahoodns.net CNAME ds-any-ycpi-uno.aycpi.b.yahoodns.net A 216.115.101.178 A 216.115.101.179 1046 | 1047 | Frame 4559: 263 bytes on wire (2104 bits), 263 bytes captured (2104 bits) on interface 0 1048 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1049 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1050 | User Datagram Protocol, Src Port: domain (53), Dst Port: 54404 (54404) 1051 | Domain Name System (response) 1052 | 1053 | No. Time Source Destination Protocol Length Info 1054 | 4962 17.524769000 129.49.194.114 129.49.7.170 DNS 73 Standard query 0xc034 A www.baidu.com 1055 | 1056 | Frame 4962: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) on interface 0 1057 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1058 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1059 | User Datagram Protocol, Src Port: 14362 (14362), Dst Port: domain (53) 1060 | Domain Name System (query) 1061 | 1062 | No. Time Source Destination Protocol Length Info 1063 | 4963 17.525708000 129.49.194.114 129.49.7.170 DNS 78 Standard query 0xe1be A passport.baidu.com 1064 | 1065 | Frame 4963: 78 bytes on wire (624 bits), 78 bytes captured (624 bits) on interface 0 1066 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1067 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1068 | User Datagram Protocol, Src Port: 24406 (24406), Dst Port: domain (53) 1069 | Domain Name System (query) 1070 | 1071 | No. Time Source Destination Protocol Length Info 1072 | 4964 17.526601000 129.49.194.114 129.49.7.170 DNS 75 Standard query 0x5d1b A s1.bdstatic.com 1073 | 1074 | Frame 4964: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) on interface 0 1075 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1076 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1077 | User Datagram Protocol, Src Port: 29248 (29248), Dst Port: domain (53) 1078 | Domain Name System (query) 1079 | 1080 | No. Time Source Destination Protocol Length Info 1081 | 4965 17.527671000 129.49.7.170 129.49.194.114 DNS 116 Standard query response 0xc034 CNAME www.a.shifen.com A 180.76.3.151 1082 | 1083 | Frame 4965: 116 bytes on wire (928 bits), 116 bytes captured (928 bits) on interface 0 1084 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1085 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1086 | User Datagram Protocol, Src Port: domain (53), Dst Port: 14362 (14362) 1087 | Domain Name System (response) 1088 | 1089 | No. Time Source Destination Protocol Length Info 1090 | 4966 17.533156000 129.49.194.114 129.49.7.170 DNS 80 Standard query 0x32f3 A suggestion.baidu.com 1091 | 1092 | Frame 4966: 80 bytes on wire (640 bits), 80 bytes captured (640 bits) on interface 0 1093 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1094 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1095 | User Datagram Protocol, Src Port: 63477 (63477), Dst Port: domain (53) 1096 | Domain Name System (query) 1097 | 1098 | No. Time Source Destination Protocol Length Info 1099 | 4970 17.534999000 129.49.7.170 129.49.194.114 DNS 130 Standard query response 0x32f3 CNAME suggestion.a.shifen.com A 123.125.114.101 1100 | 1101 | Frame 4970: 130 bytes on wire (1040 bits), 130 bytes captured (1040 bits) on interface 0 1102 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1103 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1104 | User Datagram Protocol, Src Port: domain (53), Dst Port: 63477 (63477) 1105 | Domain Name System (response) 1106 | 1107 | No. Time Source Destination Protocol Length Info 1108 | 4983 17.756997000 129.49.7.170 129.49.194.114 DNS 126 Standard query response 0xe1be CNAME passport.n.shifen.com A 180.76.2.35 1109 | 1110 | Frame 4983: 126 bytes on wire (1008 bits), 126 bytes captured (1008 bits) on interface 0 1111 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1112 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1113 | User Datagram Protocol, Src Port: domain (53), Dst Port: 24406 (24406) 1114 | Domain Name System (response) 1115 | 1116 | No. Time Source Destination Protocol Length Info 1117 | 4991 17.903238000 129.49.7.170 129.49.194.114 DNS 155 Standard query response 0x5d1b CNAME wwwbaidu.jomodns.com CNAME wwwstatic1.wshifen.com A 63.217.158.168 1118 | 1119 | Frame 4991: 155 bytes on wire (1240 bits), 155 bytes captured (1240 bits) on interface 0 1120 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1121 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1122 | User Datagram Protocol, Src Port: domain (53), Dst Port: 29248 (29248) 1123 | Domain Name System (response) 1124 | 1125 | No. Time Source Destination Protocol Length Info 1126 | 5072 18.119813000 129.49.194.114 129.49.7.170 DNS 75 Standard query 0xdf28 A b1.bdstatic.com 1127 | 1128 | Frame 5072: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) on interface 0 1129 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1130 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1131 | User Datagram Protocol, Src Port: 22636 (22636), Dst Port: domain (53) 1132 | Domain Name System (query) 1133 | 1134 | No. Time Source Destination Protocol Length Info 1135 | 5073 18.120011000 129.49.194.114 129.49.7.170 DNS 72 Standard query 0x2a04 A t1.baidu.com 1136 | 1137 | Frame 5073: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) on interface 0 1138 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1139 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1140 | User Datagram Protocol, Src Port: 62740 (62740), Dst Port: domain (53) 1141 | Domain Name System (query) 1142 | 1143 | No. Time Source Destination Protocol Length Info 1144 | 5074 18.120022000 129.49.194.114 8.8.8.8 DNS 72 Standard query 0x2a04 A t1.baidu.com 1145 | 1146 | Frame 5074: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) on interface 0 1147 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1148 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 8.8.8.8 (8.8.8.8) 1149 | User Datagram Protocol, Src Port: 62740 (62740), Dst Port: domain (53) 1150 | Domain Name System (query) 1151 | 1152 | No. Time Source Destination Protocol Length Info 1153 | 5075 18.120148000 129.49.194.114 129.49.7.170 DNS 73 Standard query 0x1718 A t10.baidu.com 1154 | 1155 | Frame 5075: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) on interface 0 1156 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1157 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1158 | User Datagram Protocol, Src Port: 36758 (36758), Dst Port: domain (53) 1159 | Domain Name System (query) 1160 | 1161 | No. Time Source Destination Protocol Length Info 1162 | 5076 18.124024000 129.49.7.170 129.49.194.114 DNS 149 Standard query response 0xdf28 CNAME base64.jomodns.com CNAME base64.wshifen.com A 63.217.158.147 1163 | 1164 | Frame 5076: 149 bytes on wire (1192 bits), 149 bytes captured (1192 bits) on interface 0 1165 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1166 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1167 | User Datagram Protocol, Src Port: domain (53), Dst Port: 22636 (22636) 1168 | Domain Name System (response) 1169 | 1170 | No. Time Source Destination Protocol Length Info 1171 | 5077 18.124047000 129.49.7.170 129.49.194.114 DNS 143 Standard query response 0x1718 CNAME image.jomodns.com CNAME t1.n.shifen.com A 180.97.33.30 1172 | 1173 | Frame 5077: 143 bytes on wire (1144 bits), 143 bytes captured (1144 bits) on interface 0 1174 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1175 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1176 | User Datagram Protocol, Src Port: domain (53), Dst Port: 36758 (36758) 1177 | Domain Name System (response) 1178 | 1179 | No. Time Source Destination Protocol Length Info 1180 | 5078 18.124348000 129.49.194.114 129.49.7.170 DNS 73 Standard query 0xd88a A t11.baidu.com 1181 | 1182 | Frame 5078: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) on interface 0 1183 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1184 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1185 | User Datagram Protocol, Src Port: 36470 (36470), Dst Port: domain (53) 1186 | Domain Name System (query) 1187 | 1188 | No. Time Source Destination Protocol Length Info 1189 | 5079 18.124525000 129.49.194.114 129.49.7.170 DNS 73 Standard query 0x8ca5 A t12.baidu.com 1190 | 1191 | Frame 5079: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) on interface 0 1192 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1193 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1194 | User Datagram Protocol, Src Port: 18307 (18307), Dst Port: domain (53) 1195 | Domain Name System (query) 1196 | 1197 | No. Time Source Destination Protocol Length Info 1198 | 5080 18.126202000 129.49.7.170 129.49.194.114 DNS 143 Standard query response 0xd88a CNAME image.jomodns.com CNAME t1.n.shifen.com A 180.97.33.30 1199 | 1200 | Frame 5080: 143 bytes on wire (1144 bits), 143 bytes captured (1144 bits) on interface 0 1201 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1202 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1203 | User Datagram Protocol, Src Port: domain (53), Dst Port: 36470 (36470) 1204 | Domain Name System (response) 1205 | 1206 | No. Time Source Destination Protocol Length Info 1207 | 5081 18.126232000 129.49.7.170 129.49.194.114 DNS 143 Standard query response 0x8ca5 CNAME image.jomodns.com CNAME t1.n.shifen.com A 180.97.33.30 1208 | 1209 | Frame 5081: 143 bytes on wire (1144 bits), 143 bytes captured (1144 bits) on interface 0 1210 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1211 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1212 | User Datagram Protocol, Src Port: domain (53), Dst Port: 18307 (18307) 1213 | Domain Name System (response) 1214 | 1215 | No. Time Source Destination Protocol Length Info 1216 | 5082 18.126559000 129.49.194.114 129.49.7.170 DNS 72 Standard query 0x85ff A t2.baidu.com 1217 | 1218 | Frame 5082: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) on interface 0 1219 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1220 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1221 | User Datagram Protocol, Src Port: 55390 (55390), Dst Port: domain (53) 1222 | Domain Name System (query) 1223 | 1224 | No. Time Source Destination Protocol Length Info 1225 | 5083 18.126747000 129.49.194.114 129.49.7.170 DNS 72 Standard query 0x1108 A t3.baidu.com 1226 | 1227 | Frame 5083: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) on interface 0 1228 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1229 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1230 | User Datagram Protocol, Src Port: 10940 (10940), Dst Port: domain (53) 1231 | Domain Name System (query) 1232 | 1233 | No. Time Source Destination Protocol Length Info 1234 | 5111 18.363477000 129.49.7.170 129.49.194.114 DNS 165 Standard query response 0x2a04 CNAME imagecdn.baidu.com CNAME image.jomodns.com CNAME t1.n.shifen.com A 180.97.33.30 1235 | 1236 | Frame 5111: 165 bytes on wire (1320 bits), 165 bytes captured (1320 bits) on interface 0 1237 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1238 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1239 | User Datagram Protocol, Src Port: domain (53), Dst Port: 62740 (62740) 1240 | Domain Name System (response) 1241 | 1242 | No. Time Source Destination Protocol Length Info 1243 | 5112 18.363814000 129.49.194.114 129.49.7.170 DNS 74 Standard query 0xda6e A home.baidu.com 1244 | 1245 | Frame 5112: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) on interface 0 1246 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1247 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1248 | User Datagram Protocol, Src Port: 49218 (49218), Dst Port: domain (53) 1249 | Domain Name System (query) 1250 | 1251 | No. Time Source Destination Protocol Length Info 1252 | 5114 18.370203000 129.49.7.170 129.49.194.114 DNS 165 Standard query response 0x85ff CNAME imagecdn.baidu.com CNAME image.jomodns.com CNAME t1.n.shifen.com A 180.97.33.30 1253 | 1254 | Frame 5114: 165 bytes on wire (1320 bits), 165 bytes captured (1320 bits) on interface 0 1255 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1256 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1257 | User Datagram Protocol, Src Port: domain (53), Dst Port: 55390 (55390) 1258 | Domain Name System (response) 1259 | 1260 | No. Time Source Destination Protocol Length Info 1261 | 5115 18.370246000 129.49.7.170 129.49.194.114 DNS 165 Standard query response 0x1108 CNAME imagecdn.baidu.com CNAME image.jomodns.com CNAME t1.n.shifen.com A 180.97.33.30 1262 | 1263 | Frame 5115: 165 bytes on wire (1320 bits), 165 bytes captured (1320 bits) on interface 0 1264 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1265 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1266 | User Datagram Protocol, Src Port: domain (53), Dst Port: 10940 (10940) 1267 | Domain Name System (response) 1268 | 1269 | No. Time Source Destination Protocol Length Info 1270 | 5116 18.370580000 129.49.194.114 129.49.7.170 DNS 75 Standard query 0xd145 A image.baidu.com 1271 | 1272 | Frame 5116: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) on interface 0 1273 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1274 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1275 | User Datagram Protocol, Src Port: 13265 (13265), Dst Port: domain (53) 1276 | Domain Name System (query) 1277 | 1278 | No. Time Source Destination Protocol Length Info 1279 | 5117 18.370700000 129.49.194.114 129.49.7.170 DNS 72 Standard query 0x74b6 A ir.baidu.com 1280 | 1281 | Frame 5117: 72 bytes on wire (576 bits), 72 bytes captured (576 bits) on interface 0 1282 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1283 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1284 | User Datagram Protocol, Src Port: 32704 (32704), Dst Port: domain (53) 1285 | Domain Name System (query) 1286 | 1287 | No. Time Source Destination Protocol Length Info 1288 | 5118 18.372602000 129.49.7.170 129.49.194.114 DNS 211 Standard query response 0x74b6 CNAME phx.corporate-ir.net CNAME www.corporate-ir.net.edgesuite.net CNAME a121.g.akamai.net A 129.49.1.70 A 129.49.1.73 1289 | 1290 | Frame 5118: 211 bytes on wire (1688 bits), 211 bytes captured (1688 bits) on interface 0 1291 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1292 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1293 | User Datagram Protocol, Src Port: domain (53), Dst Port: 32704 (32704) 1294 | Domain Name System (response) 1295 | 1296 | No. Time Source Destination Protocol Length Info 1297 | 5119 18.372845000 129.49.194.114 129.49.7.170 DNS 73 Standard query 0xe3c9 A map.baidu.com 1298 | 1299 | Frame 5119: 73 bytes on wire (584 bits), 73 bytes captured (584 bits) on interface 0 1300 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1301 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1302 | User Datagram Protocol, Src Port: 19022 (19022), Dst Port: domain (53) 1303 | Domain Name System (query) 1304 | 1305 | No. Time Source Destination Protocol Length Info 1306 | 5129 18.586913000 129.49.7.170 129.49.194.114 DNS 118 Standard query response 0xda6e CNAME bapp.n.shifen.com A 123.125.114.197 1307 | 1308 | Frame 5129: 118 bytes on wire (944 bits), 118 bytes captured (944 bits) on interface 0 1309 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1310 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1311 | User Datagram Protocol, Src Port: domain (53), Dst Port: 49218 (49218) 1312 | Domain Name System (response) 1313 | 1314 | No. Time Source Destination Protocol Length Info 1315 | 5130 18.587259000 129.49.194.114 129.49.7.170 DNS 75 Standard query 0xb43f A music.baidu.com 1316 | 1317 | Frame 5130: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) on interface 0 1318 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1319 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1320 | User Datagram Protocol, Src Port: 59938 (59938), Dst Port: domain (53) 1321 | Domain Name System (query) 1322 | 1323 | No. Time Source Destination Protocol Length Info 1324 | 5132 18.594669000 129.49.7.170 129.49.194.114 DNS 120 Standard query response 0xd145 CNAME image.n.shifen.com A 180.76.3.18 1325 | 1326 | Frame 5132: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) on interface 0 1327 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1328 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1329 | User Datagram Protocol, Src Port: domain (53), Dst Port: 13265 (13265) 1330 | Domain Name System (response) 1331 | 1332 | No. Time Source Destination Protocol Length Info 1333 | 5134 18.594947000 129.49.194.114 129.49.7.170 DNS 74 Standard query 0xa648 A news.baidu.com 1334 | 1335 | Frame 5134: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) on interface 0 1336 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1337 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1338 | User Datagram Protocol, Src Port: 29135 (29135), Dst Port: domain (53) 1339 | Domain Name System (query) 1340 | 1341 | No. Time Source Destination Protocol Length Info 1342 | 5140 18.601568000 129.49.7.170 129.49.194.114 DNS 116 Standard query response 0xe3c9 CNAME map.n.shifen.com A 180.76.2.39 1343 | 1344 | Frame 5140: 116 bytes on wire (928 bits), 116 bytes captured (928 bits) on interface 0 1345 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1346 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1347 | User Datagram Protocol, Src Port: domain (53), Dst Port: 19022 (19022) 1348 | Domain Name System (response) 1349 | 1350 | No. Time Source Destination Protocol Length Info 1351 | 5141 18.602095000 129.49.194.114 129.49.7.170 DNS 75 Standard query 0xd749 A tieba.baidu.com 1352 | 1353 | Frame 5141: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) on interface 0 1354 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1355 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1356 | User Datagram Protocol, Src Port: 21055 (21055), Dst Port: domain (53) 1357 | Domain Name System (query) 1358 | 1359 | No. Time Source Destination Protocol Length Info 1360 | 5142 18.608546000 8.8.8.8 129.49.194.114 DNS 165 Standard query response 0x2a04 CNAME imagecdn.baidu.com CNAME image.jomodns.com CNAME t1.n.shifen.com A 180.97.33.30 1361 | 1362 | Frame 5142: 165 bytes on wire (1320 bits), 165 bytes captured (1320 bits) on interface 0 1363 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1364 | Internet Protocol Version 4, Src: 8.8.8.8 (8.8.8.8), Dst: 129.49.194.114 (129.49.194.114) 1365 | User Datagram Protocol, Src Port: domain (53), Dst Port: 62740 (62740) 1366 | Domain Name System (response) 1367 | 1368 | No. Time Source Destination Protocol Length Info 1369 | 5143 18.608570000 129.49.194.114 8.8.8.8 ICMP 193 Destination unreachable (Port unreachable) 1370 | 1371 | Frame 5143: 193 bytes on wire (1544 bits), 193 bytes captured (1544 bits) on interface 0 1372 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1373 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 8.8.8.8 (8.8.8.8) 1374 | Internet Control Message Protocol 1375 | 1376 | No. Time Source Destination Protocol Length Info 1377 | 5173 18.864679000 129.49.7.170 129.49.194.114 DNS 151 Standard query response 0xd749 CNAME post.n.shifen.com A 180.76.3.18 A 180.76.2.36 A 180.76.2.37 1378 | 1379 | Frame 5173: 151 bytes on wire (1208 bits), 151 bytes captured (1208 bits) on interface 0 1380 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1381 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1382 | User Datagram Protocol, Src Port: domain (53), Dst Port: 21055 (21055) 1383 | Domain Name System (response) 1384 | 1385 | No. Time Source Destination Protocol Length Info 1386 | 5174 18.865301000 129.49.194.114 129.49.7.170 DNS 71 Standard query 0x880f A v.baidu.com 1387 | 1388 | Frame 5174: 71 bytes on wire (568 bits), 71 bytes captured (568 bits) on interface 0 1389 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1390 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1391 | User Datagram Protocol, Src Port: 18562 (18562), Dst Port: domain (53) 1392 | Domain Name System (query) 1393 | 1394 | No. Time Source Destination Protocol Length Info 1395 | 5175 18.886522000 129.49.7.170 129.49.194.114 DNS 134 Standard query response 0xa648 CNAME news.n.shifen.com A 180.149.131.76 A 180.149.132.203 1396 | 1397 | Frame 5175: 134 bytes on wire (1072 bits), 134 bytes captured (1072 bits) on interface 0 1398 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1399 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1400 | User Datagram Protocol, Src Port: domain (53), Dst Port: 29135 (29135) 1401 | Domain Name System (response) 1402 | 1403 | No. Time Source Destination Protocol Length Info 1404 | 5176 18.886805000 129.49.194.114 129.49.7.170 DNS 75 Standard query 0x3445 A wenku.baidu.com 1405 | 1406 | Frame 5176: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) on interface 0 1407 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1408 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1409 | User Datagram Protocol, Src Port: 7301 (7301), Dst Port: domain (53) 1410 | Domain Name System (query) 1411 | 1412 | No. Time Source Destination Protocol Length Info 1413 | 5177 18.888710000 129.49.7.170 129.49.194.114 DNS 120 Standard query response 0x3445 CNAME wenku.n.shifen.com A 180.76.2.36 1414 | 1415 | Frame 5177: 120 bytes on wire (960 bits), 120 bytes captured (960 bits) on interface 0 1416 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1417 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1418 | User Datagram Protocol, Src Port: domain (53), Dst Port: 7301 (7301) 1419 | Domain Name System (response) 1420 | 1421 | No. Time Source Destination Protocol Length Info 1422 | 5178 18.889354000 129.49.194.114 129.49.7.170 DNS 74 Standard query 0x0d9f A www.hao123.com 1423 | 1424 | Frame 5178: 74 bytes on wire (592 bits), 74 bytes captured (592 bits) on interface 0 1425 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1426 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1427 | User Datagram Protocol, Src Port: 16615 (16615), Dst Port: domain (53) 1428 | Domain Name System (query) 1429 | 1430 | No. Time Source Destination Protocol Length Info 1431 | 5182 18.933769000 129.49.194.114 129.49.7.170 DNS 75 Standard query 0xd9db A formi.baidu.com 1432 | 1433 | Frame 5182: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) on interface 0 1434 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1435 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1436 | User Datagram Protocol, Src Port: 40528 (40528), Dst Port: domain (53) 1437 | Domain Name System (query) 1438 | 1439 | No. Time Source Destination Protocol Length Info 1440 | 5184 18.937317000 129.49.7.170 129.49.194.114 DNS 107 Standard query response 0xd9db A 180.149.131.55 A 61.135.169.120 1441 | 1442 | Frame 5184: 107 bytes on wire (856 bits), 107 bytes captured (856 bits) on interface 0 1443 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1444 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1445 | User Datagram Protocol, Src Port: domain (53), Dst Port: 40528 (40528) 1446 | Domain Name System (response) 1447 | 1448 | No. Time Source Destination Protocol Length Info 1449 | 5207 19.090558000 129.49.7.170 129.49.194.114 DNS 116 Standard query response 0x880f CNAME video.n.shifen.com A 180.76.2.36 1450 | 1451 | Frame 5207: 116 bytes on wire (928 bits), 116 bytes captured (928 bits) on interface 0 1452 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1453 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1454 | User Datagram Protocol, Src Port: domain (53), Dst Port: 18562 (18562) 1455 | Domain Name System (response) 1456 | 1457 | No. Time Source Destination Protocol Length Info 1458 | 5208 19.090905000 129.49.194.114 129.49.7.170 DNS 76 Standard query 0x009b A zhidao.baidu.com 1459 | 1460 | Frame 5208: 76 bytes on wire (608 bits), 76 bytes captured (608 bits) on interface 0 1461 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1462 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1463 | User Datagram Protocol, Src Port: 29412 (29412), Dst Port: domain (53) 1464 | Domain Name System (query) 1465 | 1466 | No. Time Source Destination Protocol Length Info 1467 | 5498 19.319090000 129.49.7.170 129.49.194.114 DNS 141 Standard query response 0x009b CNAME iknow.baidu.com CNAME iknow.n.shifen.com A 180.76.2.36 1468 | 1469 | Frame 5498: 141 bytes on wire (1128 bits), 141 bytes captured (1128 bits) on interface 0 1470 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1471 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1472 | User Datagram Protocol, Src Port: domain (53), Dst Port: 29412 (29412) 1473 | Domain Name System (response) 1474 | 1475 | No. Time Source Destination Protocol Length Info 1476 | 5603 19.559794000 129.49.7.170 129.49.194.114 DNS 191 Standard query response 0x0d9f CNAME hao123.n.shifen.com CNAME hao123.g.shifen.com A 61.135.185.29 A 220.181.163.22 A 119.75.219.38 A 123.125.112.45 1477 | 1478 | Frame 5603: 191 bytes on wire (1528 bits), 191 bytes captured (1528 bits) on interface 0 1479 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1480 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1481 | User Datagram Protocol, Src Port: domain (53), Dst Port: 16615 (16615) 1482 | Domain Name System (response) 1483 | 1484 | No. Time Source Destination Protocol Length Info 1485 | 5604 19.594842000 129.49.194.114 129.49.7.170 DNS 75 Standard query 0x3998 A music.baidu.com 1486 | 1487 | Frame 5604: 75 bytes on wire (600 bits), 75 bytes captured (600 bits) on interface 0 1488 | Ethernet II, Src: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f), Dst: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4) 1489 | Internet Protocol Version 4, Src: 129.49.194.114 (129.49.194.114), Dst: 129.49.7.170 (129.49.7.170) 1490 | User Datagram Protocol, Src Port: 17722 (17722), Dst Port: domain (53) 1491 | Domain Name System (query) 1492 | 1493 | No. Time Source Destination Protocol Length Info 1494 | 5610 19.613404000 129.49.7.170 129.49.194.114 DNS 139 Standard query response 0x3998 CNAME api.ting.n.shifen.com A 180.149.133.171 A 180.149.132.184 1495 | 1496 | Frame 5610: 139 bytes on wire (1112 bits), 139 bytes captured (1112 bits) on interface 0 1497 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1498 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1499 | User Datagram Protocol, Src Port: domain (53), Dst Port: 17722 (17722) 1500 | Domain Name System (response) 1501 | 1502 | No. Time Source Destination Protocol Length Info 1503 | 5611 19.613418000 129.49.7.170 129.49.194.114 DNS 139 Standard query response 0xb43f CNAME api.ting.n.shifen.com A 180.149.133.171 A 180.149.132.184 1504 | 1505 | Frame 5611: 139 bytes on wire (1112 bits), 139 bytes captured (1112 bits) on interface 0 1506 | Ethernet II, Src: HewlettP_c9:96:a4 (d0:7e:28:c9:96:a4), Dst: 30:10:b3:12:c8:2f (30:10:b3:12:c8:2f) 1507 | Internet Protocol Version 4, Src: 129.49.7.170 (129.49.7.170), Dst: 129.49.194.114 (129.49.194.114) 1508 | User Datagram Protocol, Src Port: domain (53), Dst Port: 59938 (59938) 1509 | Domain Name System (response) 1510 | -------------------------------------------------------------------------------- /tcpstream.py: -------------------------------------------------------------------------------- 1 | from sys import argv 2 | 3 | script, filename = argv 4 | 5 | import logging 6 | logging.getLogger("scapy.runtime").setLevel(logging.ERROR) 7 | 8 | import scapy 9 | import scapy.all 10 | 11 | from scapy.all import rdpcap, TCP, Raw 12 | 13 | sPort = [] 14 | dPort = [] 15 | senderPackets = [] 16 | receiverPackets = [] 17 | senderBytes = [] 18 | receiverBytes = [] 19 | senderACK = [] 20 | receiverACK = [] 21 | outOfseqSender = [] 22 | outOfseqReceiver = [] 23 | seqNumSender = [] 24 | seqNumReceiver = [] 25 | seqNum = [] 26 | senderRetransmit = [] 27 | receiverRetransmit = [] 28 | retransmit = [] 29 | totalBytes = [] 30 | usefulBytes = [] 31 | usefulPackets = [] 32 | startTime = [] 33 | stopTime = [] 34 | cwnd = [] 35 | cwnd_max = [] 36 | receiverWindow = [] 37 | SYN = 2 38 | ACK = 16 39 | PSH = 24 40 | i = 0 41 | count = 0 42 | 43 | 44 | 45 | pcap = rdpcap(filename) 46 | 47 | for packet in pcap: 48 | try: 49 | if packet[TCP].flags == SYN: 50 | sPort.append(packet[TCP].sport) 51 | dPort.append(packet[TCP].dport) 52 | senderPackets.append(0) 53 | receiverPackets.append(0) 54 | senderACK.append(0) 55 | receiverACK.append(0) 56 | outOfseqSender.append(0) 57 | outOfseqReceiver.append(0) 58 | seqNumSender.append(packet[TCP].seq) 59 | seqNumReceiver.append(0) 60 | senderBytes.append(0) 61 | receiverBytes.append(0) 62 | senderRetransmit.append(0) 63 | receiverRetransmit.append(0) 64 | startTime.append(packet.time) 65 | stopTime.append(0) 66 | totalBytes.append(len(packet)) 67 | usefulBytes.append(0) 68 | usefulPackets.append(0) 69 | cwnd_max.append(0) 70 | receiverWindow.append(0) 71 | 72 | 73 | if packet[TCP].sport in sPort: 74 | 75 | stopTime[sPort.index(packet[TCP].sport)] = packet.time 76 | if packet[TCP].flags != SYN: 77 | totalBytes[sPort.index(packet[TCP].sport)] = totalBytes[sPort.index(packet[TCP].sport)] + len(packet) 78 | # Retransmission 79 | if packet[TCP].seq in seqNum: 80 | if packet[TCP].flags not in (ACK, PSH): 81 | #print(packet[TCP].flags) 82 | senderRetransmit[sPort.index(packet[TCP].sport)] = senderRetransmit[sPort.index(packet[TCP].sport)] + 1 83 | else: 84 | seqNum.append(packet[TCP].seq) 85 | # Out of Sequence at Sender 86 | if packet[TCP].seq < seqNumSender[sPort.index(packet[TCP].sport)]: 87 | outOfseqSender[sPort.index(packet[TCP].sport)] = outOfseqSender[sPort.index(packet[TCP].sport)] + 1 88 | else: 89 | seqNumSender[sPort.index(packet[TCP].sport)] = packet[TCP].seq 90 | try: 91 | usefulBytes[sPort.index(packet[TCP].sport)] = usefulBytes[sPort.index(packet[TCP].sport)] + len(packet[Raw]) 92 | except: 93 | pass 94 | 95 | # Number of Packets sent by the Sender 96 | senderPackets[sPort.index(packet[TCP].sport)] = senderPackets[sPort.index(packet[TCP].sport)] + 1 97 | 98 | # Number of ACK sent by Sender 99 | if packet[TCP].flags == ACK: 100 | senderACK[sPort.index(packet[TCP].sport)] = senderACK[sPort.index(packet[TCP].sport)] + 1 101 | 102 | try: 103 | # Bytes sent by the Sender 104 | #print(len(packet)) 105 | senderBytes[sPort.index(packet[TCP].sport)] = senderBytes[sPort.index(packet[TCP].sport)] + len(packet[Raw]) 106 | usefulPackets[sPort.index(packet[TCP].sport)] = usefulPackets[sPort.index(packet[TCP].sport)] + 1 107 | if len(packet[Raw]) > cwnd_max[sPort.index(packet[TCP].sport)]: 108 | cwnd_max[sPort.index(packet[TCP].sport)] = len(packet[Raw]) 109 | except: 110 | pass 111 | 112 | elif packet[TCP].sport in dPort: 113 | 114 | receiverWindow[sPort.index(packet[TCP].dport)] = receiverWindow[sPort.index(packet[TCP].dport)] + packet[TCP].window 115 | stopTime[sPort.index(packet[TCP].dport)] = packet.time 116 | totalBytes[sPort.index(packet[TCP].dport)] = totalBytes[sPort.index(packet[TCP].dport)] + len(packet) 117 | 118 | # Retransmission 119 | if packet[TCP].seq in seqNum: 120 | if packet[TCP].flags not in (ACK,PSH): 121 | #print(packet[TCP].flags) 122 | receiverRetransmit[sPort.index(packet[TCP].dport)] = receiverRetransmit[sPort.index(packet[TCP].dport)] + 1 123 | else: 124 | seqNum.append(packet[TCP].seq) 125 | 126 | # Out of Sequence at Receiver 127 | if packet[TCP].seq < seqNumReceiver[sPort.index(packet[TCP].dport)]: 128 | outOfseqReceiver[sPort.index(packet[TCP].dport)] = outOfseqReceiver[sPort.index(packet[TCP].dport)] + 1 129 | else: 130 | seqNumReceiver[sPort.index(packet[TCP].dport)] = packet[TCP].seq 131 | try: 132 | usefulBytes[sPort.index(packet[TCP].dport)] = usefulBytes[sPort.index(packet[TCP].dport)] + len(packet[Raw]) 133 | except: 134 | pass 135 | 136 | # Number of Packets sent by the Receiver 137 | receiverPackets[sPort.index(packet[TCP].dport)] = receiverPackets[sPort.index(packet[TCP].dport)] + 1 138 | 139 | # Number of ACK sent by Receiver 140 | if packet[TCP].flags == ACK: 141 | receiverACK[sPort.index(packet[TCP].dport)] = receiverACK[sPort.index(packet[TCP].dport)] + 1 142 | try: 143 | # Bytes sent by the Receiver 144 | receiverBytes[sPort.index(packet[TCP].dport)] = receiverBytes[sPort.index(packet[TCP].dport)] + len(packet[Raw]) 145 | except: 146 | pass 147 | 148 | except: 149 | continue 150 | 151 | while i < len(sPort): 152 | gp = 0 153 | tp = 0 154 | rw = 0 155 | rw = receiverWindow[i]/receiverPackets[i] 156 | cwnd.append(senderBytes[i]/usefulPackets[i]) 157 | tp = totalBytes[i]/(stopTime[i]-startTime[i]) 158 | gp = usefulBytes[i]/(stopTime[i]-startTime[i]) 159 | print('\n\n') 176 | 177 | 178 | 179 | 180 | -------------------------------------------------------------------------------- /tcpstream.txt: -------------------------------------------------------------------------------- 1 | 16 | 17 | 18 | 33 | 34 | 35 | 50 | 51 | 52 | 67 | 68 | 69 | 84 | 85 | 86 | -------------------------------------------------------------------------------- /test.pcap: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/amohanta/python-PCAP-Analysis/73b3307a4fe601fc2d4771f8f1339fbb766830e9/test.pcap --------------------------------------------------------------------------------