21:07:29.051800 IP (tos 0x10, ttl 64, id 20636, offset 0, flags [DF], proto TCP (6), length 168) 10.0.0.1.ssh > 10.0.0.4.50278: Flags [P.], cksum 0x149f (incorrect -> 0x2a20), seq 3004637206:3004637322, ack 3748211322, win 521, options [nop,nop,TS val 8424728 ecr 499647812], length 116 21:07:29.054092 IP (tos 0x10, ttl 64, id 18892, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.50278 > 10.0.0.1.ssh: Flags [.], cksum 0xe9cd (correct), ack 116, win 9770, options [nop,nop,TS val 499647838 ecr 8424728], length 0 21:07:29.077911 IP (tos 0x0, ttl 44, id 0, offset 0, flags [DF], proto TCP (6), length 60) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59984: Flags [S.], cksum 0x09d6 (correct), seq 406752199, ack 18487192, win 14480, options [mss 1460,sackOK,TS val 29554101 ecr 499647756,nop,wscale 8], length 0 21:07:29.080221 IP (tos 0x0, ttl 64, id 52506, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.59984 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [.], cksum 0x60b2 (correct), ack 1, win 4117, options [nop,nop,TS val 499647864 ecr 29554101], length 0 21:07:29.080773 IP (tos 0x0, ttl 64, id 42691, offset 0, flags [DF], proto TCP (6), length 284) 10.0.0.4.59984 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [P.], cksum 0x769b (correct), seq 1:233, ack 1, win 4117, options [nop,nop,TS val 499647864 ecr 29554101], length 232 21:07:29.181404 IP (tos 0x0, ttl 44, id 32261, offset 0, flags [DF], proto TCP (6), length 52) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59984: Flags [.], cksum 0x6f88 (correct), ack 233, win 61, options [nop,nop,TS val 29554127 ecr 499647864], length 0 21:07:29.182232 IP (tos 0x0, ttl 44, id 32262, offset 0, flags [DF], proto TCP (6), length 237) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59984: Flags [P.], cksum 0x82b4 (correct), seq 1:186, ack 233, win 61, options [nop,nop,TS val 29554127 ecr 499647864], length 185 21:07:29.184045 IP (tos 0x0, ttl 64, id 52247, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.59984 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [.], cksum 0x5e96 (correct), ack 186, win 4111, options [nop,nop,TS val 499647967 ecr 29554127], length 0 21:07:29.184594 IP (tos 0x0, ttl 64, id 3546, offset 0, flags [DF], proto TCP (6), length 58) 10.0.0.4.59984 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [.], cksum 0x468c (correct), seq 233:239, ack 186, win 4111, options [nop,nop,TS val 499647967 ecr 29554127], length 6 21:07:29.184639 IP (tos 0x0, ttl 64, id 11118, offset 0, flags [DF], proto TCP (6), length 137) 10.0.0.4.59984 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [P.], cksum 0x1fc1 (correct), seq 239:324, ack 186, win 4111, options [nop,nop,TS val 499647967 ecr 29554127], length 85 21:07:29.186057 IP (tos 0x0, ttl 64, id 33876, offset 0, flags [DF], proto TCP (6), length 1500) 10.0.0.4.59984 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [.], cksum 0x037b (correct), seq 324:1772, ack 186, win 4111, options [nop,nop,TS val 499647967 ecr 29554127], length 1448 21:07:29.186101 IP (tos 0x0, ttl 64, id 64309, offset 0, flags [DF], proto TCP (6), length 209) 10.0.0.4.59984 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [P.], cksum 0xb6ad (correct), seq 1772:1929, ack 186, win 4111, options [nop,nop,TS val 499647967 ecr 29554127], length 157 21:07:29.229039 IP (tos 0x0, ttl 50, id 0, offset 0, flags [DF], proto UDP (17), length 77) vpn24-eqix-sv5.ooma.com.openvpn > 10.0.0.52.48679: UDP, length 49 21:07:29.280068 IP (tos 0x0, ttl 44, id 32263, offset 0, flags [DF], proto TCP (6), length 64) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59984: Flags [.], cksum 0x050b (correct), ack 233, win 61, options [nop,nop,TS val 29554151 ecr 499647864,nop,nop,sack 1 {239:324}], length 0 21:07:29.287347 IP (tos 0x0, ttl 44, id 32264, offset 0, flags [DF], proto TCP (6), length 64) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59984: Flags [.], cksum 0xff60 (correct), ack 233, win 61, options [nop,nop,TS val 29554153 ecr 499647864,nop,nop,sack 1 {239:1772}], length 0 21:07:29.287372 IP (tos 0x0, ttl 44, id 32265, offset 0, flags [DF], proto TCP (6), length 64) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59984: Flags [.], cksum 0xfec3 (correct), ack 233, win 61, options [nop,nop,TS val 29554153 ecr 499647864,nop,nop,sack 1 {239:1929}], length 0 21:07:29.287387 IP (tos 0x0, ttl 44, id 32266, offset 0, flags [DF], proto TCP (6), length 52) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59984: Flags [.], cksum 0x67ae (correct), ack 1929, win 61, options [nop,nop,TS val 29554153 ecr 499647967], length 0 21:07:29.290068 IP (tos 0x0, ttl 64, id 37041, offset 0, flags [DF], proto TCP (6), length 58) 10.0.0.4.59984 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [.], cksum 0x460a (correct), seq 233:239, ack 186, win 4111, options [nop,nop,TS val 499648071 ecr 29554153], length 6 21:07:29.384664 IP (tos 0x0, ttl 44, id 32267, offset 0, flags [DF], proto TCP (6), length 64) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59984: Flags [.], cksum 0xfe43 (correct), ack 1929, win 61, options [nop,nop,TS val 29554178 ecr 499647967,nop,nop,sack 1 {233:239}], length 0 21:07:29.673059 IP (tos 0x0, ttl 128, id 6655, offset 0, flags [none], proto UDP (17), length 89) 10.0.0.3.3074 > 65.55.158.118.3544: UDP, length 61 21:07:29.697951 IP (tos 0x0, ttl 111, id 30079, offset 0, flags [none], proto UDP (17), length 137) 65.55.158.118.3544 > 10.0.0.3.3074: UDP, length 109 21:07:29.852241 IP (tos 0x0, ttl 64, id 51421, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.33757 > 10.0.0.255.32412: UDP, length 21 21:07:29.852329 IP (tos 0x0, ttl 64, id 51422, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.47472 > 10.0.0.255.32414: UDP, length 21 21:07:31.217645 IP (tos 0x0, ttl 255, id 58363, offset 0, flags [none], proto UDP (17), length 65) 10.0.0.4.mdns > 224.0.0.251.mdns: 0 PTR (QM)? _airport._tcp.local. (37) 21:07:31.218183 IP6 (flowlabel 0x4633c, hlim 255, next-header UDP (17) payload length: 45) fe80::d633:a3ff:feed:f212.mdns > ff02::fb.mdns: [udp sum ok] 0 PTR (QM)? _airport._tcp.local. (37) 21:07:31.218209 IP (tos 0x0, ttl 255, id 35124, offset 0, flags [none], proto UDP (17), length 104) 10.0.0.4.mdns > 224.0.0.251.mdns: 0 [1a] PTR (QU)? _airport._tcp.local. (76) 21:07:31.218282 IP6 (flowlabel 0x4633c, hlim 255, next-header UDP (17) payload length: 84) fe80::d633:a3ff:feed:f212.mdns > ff02::fb.mdns: [udp sum ok] 0 [1a] PTR (QU)? _airport._tcp.local. (76) 21:07:31.877687 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.1 tell 10.0.0.50, length 46 21:07:31.877711 ARP, Ethernet (len 6), IPv4 (len 4), Reply 10.0.0.1 is-at 00:1e:67:ad:9e:1e (oui Unknown), length 28 21:07:32.263485 IP (tos 0x0, ttl 255, id 45109, offset 0, flags [none], proto UDP (17), length 65) 10.0.0.4.mdns > 224.0.0.251.mdns: 0 PTR (QM)? _airport._tcp.local. (37) 21:07:32.263964 IP6 (flowlabel 0x4633c, hlim 255, next-header UDP (17) payload length: 45) fe80::d633:a3ff:feed:f212.mdns > ff02::fb.mdns: [udp sum ok] 0 PTR (QM)? _airport._tcp.local. (37) 21:07:32.377927 IP (tos 0x0, ttl 255, id 2675, offset 0, flags [none], proto UDP (17), length 505) 10.0.0.2.mdns > 224.0.0.251.mdns: 0*- [0q] 2/0/7 _airport._tcp.local. PTR Custer's AirPort Extreme._airport._tcp.local., Custer's AirPort Extreme._device-info._tcp.local. TXT "model=AirPort7,120" (477) 21:07:32.378092 IP6 (hlim 255, next-header UDP (17) payload length: 485) fe80::9272:40ff:fe05:7987.mdns > ff02::fb.mdns: [udp sum ok] 0*- [0q] 2/0/7 _airport._tcp.local. PTR Custer's AirPort Extreme._airport._tcp.local., Custer's AirPort Extreme._device-info._tcp.local. TXT "model=AirPort7,120" (477) 21:07:32.447778 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 77) 10.0.0.52.48679 > vpn24-eqix-sv5.ooma.com.openvpn: UDP, length 49 21:07:32.683256 IP (tos 0x0, ttl 64, id 14808, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.59978 > yk-in-f139.1e100.net.http: Flags [F.], cksum 0xb2c8 (correct), seq 296017252, ack 2476524071, win 4107, options [nop,nop,TS val 499651459 ecr 630723729], length 0 21:07:32.683768 IP (tos 0x0, ttl 64, id 47310, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.4.59977 > 190.93.244.58.http: Flags [F.], cksum 0x609f (correct), seq 1328646786, ack 182756198, win 8192, length 0 21:07:32.683814 IP (tos 0x0, ttl 64, id 4754, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.59981 > a23-61-194-50.deploy.static.akamaitechnologies.com.http: Flags [F.], cksum 0x510d (correct), seq 1858145980, ack 2985669790, win 4110, options [nop,nop,TS val 499651459 ecr 1869660866], length 0 21:07:32.705068 IP (tos 0x0, ttl 56, id 17841, offset 0, flags [DF], proto TCP (6), length 40) 190.93.244.58.http > 10.0.0.4.59977: Flags [F.], cksum 0x807c (correct), seq 1, ack 1, win 34, length 0 21:07:32.706857 IP (tos 0x0, ttl 64, id 36177, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.4.59977 > 190.93.244.58.http: Flags [.], cksum 0x609e (correct), ack 2, win 8192, length 0 21:07:32.712369 IP (tos 0x0, ttl 54, id 28959, offset 0, flags [DF], proto TCP (6), length 52) a23-61-194-50.deploy.static.akamaitechnologies.com.http > 10.0.0.4.59981: Flags [F.], cksum 0xaff8 (correct), seq 1, ack 1, win 501, options [nop,nop,TS val 1869705710 ecr 499651459], length 0 21:07:32.714785 IP (tos 0x0, ttl 64, id 51003, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.59981 > a23-61-194-50.deploy.static.akamaitechnologies.com.http: Flags [.], cksum 0xa1c0 (correct), ack 2, win 4110, options [nop,nop,TS val 499651490 ecr 1869705710], length 0 21:07:32.758052 IP (tos 0x0, ttl 37, id 50226, offset 0, flags [none], proto TCP (6), length 52) yk-in-f139.1e100.net.http > 10.0.0.4.59978: Flags [F.], cksum 0x1272 (correct), seq 1, ack 1, win 346, options [nop,nop,TS val 630768535 ecr 499651459], length 0 21:07:32.759402 IP (tos 0x0, ttl 64, id 8584, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.59978 > yk-in-f139.1e100.net.http: Flags [.], cksum 0x0376 (correct), ack 2, win 4107, options [nop,nop,TS val 499651534 ecr 630768535], length 0 21:07:34.076241 IP (tos 0x0, ttl 56, id 2617, offset 0, flags [DF], proto TCP (6), length 40) 190.93.245.58.http > 10.0.0.4.59982: Flags [F.], cksum 0x6e66 (correct), seq 2707657063, ack 3095571910, win 30, length 0 21:07:34.163480 IP (tos 0x0, ttl 64, id 29428, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.4.59982 > 190.93.245.58.http: Flags [.], cksum 0x4e84 (correct), ack 1, win 8192, length 0 21:07:34.183413 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.1 (00:1e:67:ad:9e:1e (oui Unknown)) tell 10.0.0.3, length 46 21:07:34.183441 ARP, Ethernet (len 6), IPv4 (len 4), Reply 10.0.0.1 is-at 00:1e:67:ad:9e:1e (oui Unknown), length 28 21:07:34.232196 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.52 tell 10.0.0.1, length 28 21:07:34.232457 ARP, Ethernet (len 6), IPv4 (len 4), Reply 10.0.0.52 is-at 00:18:61:06:d1:e1 (oui Unknown), length 46 21:07:34.852240 IP (tos 0x0, ttl 64, id 51423, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.33757 > 10.0.0.255.32412: UDP, length 21 21:07:34.852333 IP (tos 0x0, ttl 64, id 51424, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.47472 > 10.0.0.255.32414: UDP, length 21 21:07:35.272061 IP (tos 0x0, ttl 255, id 58777, offset 0, flags [none], proto UDP (17), length 104) 10.0.0.4.mdns > 224.0.0.251.mdns: 0 [1a] PTR (QM)? _airport._tcp.local. (76) 21:07:35.272563 IP6 (flowlabel 0x4633c, hlim 255, next-header UDP (17) payload length: 84) fe80::d633:a3ff:feed:f212.mdns > ff02::fb.mdns: [udp sum ok] 0 [1a] PTR (QM)? _airport._tcp.local. (76) 21:07:35.818105 IP (tos 0x0, ttl 64, id 21332, offset 0, flags [DF], proto TCP (6), length 174) 10.0.0.4.59654 > 17.172.232.8.5223: Flags [P.], cksum 0x2896 (correct), seq 914381305:914381427, ack 3110266364, win 4096, options [nop,nop,TS val 499654587 ecr 2745578906], length 122 21:07:35.907996 IP (tos 0x0, ttl 46, id 61810, offset 0, flags [DF], proto TCP (6), length 126) 17.172.232.8.5223 > 10.0.0.4.59654: Flags [P.], cksum 0xda35 (correct), seq 1:75, ack 122, win 166, options [nop,nop,TS val 2746476205 ecr 499654587], length 74 21:07:35.910523 IP (tos 0x0, ttl 64, id 45717, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.59654 > 17.172.232.8.5223: Flags [.], cksum 0x6cbb (correct), ack 75, win 4093, options [nop,nop,TS val 499654680 ecr 2746476205], length 0 21:07:36.913218 IP (tos 0x0, ttl 64, id 32395, offset 0, flags [DF], proto TCP (6), length 174) 10.0.0.4.59657 > 17.172.239.36.5223: Flags [P.], cksum 0x3456 (correct), seq 1961792800:1961792922, ack 2317733422, win 4096, options [nop,nop,TS val 499655680 ecr 3507847307], length 122 21:07:36.992742 IP (tos 0x0, ttl 46, id 56394, offset 0, flags [DF], proto TCP (6), length 52) 17.172.239.36.5223 > 10.0.0.4.59657: Flags [.], cksum 0xd46b (correct), ack 122, win 205, options [nop,nop,TS val 3508740982 ecr 499655680], length 0 21:07:36.994694 IP (tos 0x0, ttl 46, id 56395, offset 0, flags [DF], proto TCP (6), length 126) 17.172.239.36.5223 > 10.0.0.4.59657: Flags [P.], cksum 0x5c4e (correct), seq 1:75, ack 122, win 205, options [nop,nop,TS val 3508740985 ecr 499655680], length 74 21:07:36.996555 IP (tos 0x0, ttl 64, id 17760, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.59657 > 17.172.239.36.5223: Flags [.], cksum 0xc49b (correct), ack 75, win 4093, options [nop,nop,TS val 499655763 ecr 3508740985], length 0 21:07:38.667767 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 77) 10.0.0.52.48679 > vpn24-eqix-sv5.ooma.com.openvpn: UDP, length 49 21:07:39.281334 IP (tos 0x0, ttl 102, id 30216, offset 0, flags [DF], proto TCP (6), length 40) 134.170.178.9.https > 10.0.0.3.51493: Flags [R.], cksum 0xe6ef (correct), seq 2272651477, ack 2598285343, win 0, length 0 21:07:39.347489 IP (tos 0x0, ttl 128, id 14614, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.3.51510 > 134.170.178.144.https: Flags [F.], cksum 0x67e7 (correct), seq 2787724693, ack 4123741236, win 1022, length 0 21:07:39.348568 IP (tos 0x0, ttl 128, id 14615, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.3.51514 > 134.170.178.144.https: Flags [S], cksum 0xd084 (correct), seq 61377712, win 65535, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0 21:07:39.392825 IP (tos 0x0, ttl 238, id 61689, offset 0, flags [none], proto TCP (6), length 40) 134.170.178.144.https > 10.0.0.3.51510: Flags [F.], cksum 0x10a4 (correct), seq 1, ack 1, win 23360, length 0 21:07:39.393479 IP (tos 0x0, ttl 128, id 14616, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.3.51510 > 134.170.178.144.https: Flags [.], cksum 0x67e6 (correct), ack 2, win 1022, length 0 21:07:39.400579 IP (tos 0x0, ttl 111, id 14615, offset 0, flags [DF], proto TCP (6), length 52) 134.170.178.144.https > 10.0.0.3.51514: Flags [S.], cksum 0x6084 (correct), seq 2407587958, ack 61377713, win 65535, options [mss 1460,nop,wscale 0,nop,nop,sackOK], length 0 21:07:39.401162 IP (tos 0x0, ttl 128, id 14617, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.3.51514 > 134.170.178.144.https: Flags [.], cksum 0x9d4f (correct), ack 1, win 1024, length 0 21:07:39.403635 IP (tos 0x0, ttl 128, id 14618, offset 0, flags [DF], proto TCP (6), length 210) 10.0.0.3.51514 > 134.170.178.144.https: Flags [P.], cksum 0xa8e1 (correct), seq 1:171, ack 1, win 1024, length 170 21:07:39.454538 IP (tos 0x0, ttl 238, id 64779, offset 0, flags [none], proto TCP (6), length 40) 134.170.178.144.https > 10.0.0.3.51514: Flags [.], cksum 0x7f25 (correct), ack 171, win 8576, length 0 21:07:39.455138 IP (tos 0x0, ttl 238, id 64780, offset 0, flags [none], proto TCP (6), length 185) 134.170.178.144.https > 10.0.0.3.51514: Flags [P.], cksum 0x2885 (correct), seq 1:146, ack 171, win 8576, length 145 21:07:39.456366 IP (tos 0x0, ttl 128, id 14619, offset 0, flags [DF], proto TCP (6), length 99) 10.0.0.3.51514 > 134.170.178.144.https: Flags [P.], cksum 0x23d6 (correct), seq 171:230, ack 146, win 1023, length 59 21:07:39.461093 IP (tos 0x0, ttl 128, id 14621, offset 0, flags [DF], proto TCP (6), length 3053) 10.0.0.3.51514 > 134.170.178.144.https: Flags [P.], cksum 0x4f1d (incorrect -> 0x1fae), seq 230:3243, ack 146, win 1023, length 3013 21:07:39.461139 IP (tos 0x0, ttl 128, id 14623, offset 0, flags [DF], proto TCP (6), length 413) 10.0.0.3.51514 > 134.170.178.144.https: Flags [P.], cksum 0xf88a (correct), seq 3243:3616, ack 146, win 1023, length 373 21:07:39.509470 IP (tos 0x0, ttl 238, id 64781, offset 0, flags [none], proto TCP (6), length 52) 134.170.178.144.https > 10.0.0.3.51514: Flags [.], cksum 0x14a9 (correct), ack 230, win 8576, options [nop,nop,sack 1 {1690:3150}], length 0 21:07:39.509493 IP (tos 0x0, ttl 238, id 64782, offset 0, flags [none], proto TCP (6), length 52) 134.170.178.144.https > 10.0.0.3.51514: Flags [.], cksum 0x144c (correct), ack 230, win 8576, options [nop,nop,sack 1 {1690:3243}], length 0 21:07:39.509502 IP (tos 0x0, ttl 238, id 64783, offset 0, flags [none], proto TCP (6), length 52) 134.170.178.144.https > 10.0.0.3.51514: Flags [.], cksum 0x12d7 (correct), ack 230, win 8576, options [nop,nop,sack 1 {1690:3616}], length 0 21:07:39.514773 IP (tos 0x0, ttl 238, id 64784, offset 0, flags [none], proto TCP (6), length 40) 134.170.178.144.https > 10.0.0.3.51514: Flags [.], cksum 0x64ff (correct), ack 3616, win 11680, length 0 21:07:39.645152 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.5 tell 10.0.0.3, length 46 21:07:39.803808 IP (tos 0x0, ttl 238, id 64785, offset 0, flags [none], proto TCP (6), length 365) 134.170.178.144.https > 10.0.0.3.51514: Flags [P.], cksum 0xaffb (correct), seq 146:471, ack 3616, win 11680, length 325 21:07:39.824528 IP (tos 0x0, ttl 128, id 14624, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.3.51514 > 134.170.178.144.https: Flags [.], cksum 0x8d5c (correct), ack 471, win 1022, length 0 21:07:39.852241 IP (tos 0x0, ttl 64, id 51425, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.33757 > 10.0.0.255.32412: UDP, length 21 21:07:39.852345 IP (tos 0x0, ttl 64, id 51426, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.47472 > 10.0.0.255.32414: UDP, length 21 21:07:40.183562 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.5 tell 10.0.0.3, length 46 21:07:40.225925 IP (tos 0x0, ttl 50, id 0, offset 0, flags [DF], proto UDP (17), length 77) vpn24-eqix-sv5.ooma.com.openvpn > 10.0.0.52.48679: UDP, length 49 21:07:41.183403 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.5 tell 10.0.0.3, length 46 21:07:42.645425 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.5 tell 10.0.0.3, length 46 21:07:43.183600 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.5 tell 10.0.0.3, length 46 21:07:43.667242 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.1 tell 10.0.0.52, length 46 21:07:43.667265 ARP, Ethernet (len 6), IPv4 (len 4), Reply 10.0.0.1 is-at 00:1e:67:ad:9e:1e (oui Unknown), length 28 21:07:44.183836 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.5 tell 10.0.0.3, length 46 21:07:44.273067 IP (tos 0x0, ttl 255, id 23456, offset 0, flags [none], proto UDP (17), length 104) 10.0.0.4.mdns > 224.0.0.251.mdns: 0 [1a] PTR (QM)? _airport._tcp.local. (76) 21:07:44.273566 IP6 (flowlabel 0x4633c, hlim 255, next-header UDP (17) payload length: 84) fe80::d633:a3ff:feed:f212.mdns > ff02::fb.mdns: [udp sum ok] 0 [1a] PTR (QM)? _airport._tcp.local. (76) 21:07:44.527762 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 77) 10.0.0.52.48679 > vpn24-eqix-sv5.ooma.com.openvpn: UDP, length 49 21:07:44.852245 IP (tos 0x0, ttl 64, id 51427, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.33757 > 10.0.0.255.32412: UDP, length 21 21:07:44.852323 IP (tos 0x0, ttl 64, id 51428, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.47472 > 10.0.0.255.32414: UDP, length 21 21:07:45.266678 IP (tos 0x0, ttl 64, id 48493, offset 0, flags [none], proto UDP (17), length 74) 10.0.0.4.58561 > rns01.charter.com.domain: 20497+ A? www.isg-apple.com.akadns.net. (46) 21:07:45.266729 IP (tos 0x0, ttl 64, id 61446, offset 0, flags [none], proto UDP (17), length 74) 10.0.0.4.53487 > rns01.charter.com.domain: 57281+ AAAA? www.isg-apple.com.akadns.net. (46) 21:07:45.280741 IP (tos 0x0, ttl 248, id 9071, offset 0, flags [DF], proto UDP (17), length 162) rns01.charter.com.domain > 10.0.0.4.58561: 20497 3/0/0 www.isg-apple.com.akadns.net. CNAME www.apple.com.edgekey.net., www.apple.com.edgekey.net. CNAME e3191.dscc.akamaiedge.net., e3191.dscc.akamaiedge.net. A 184.87.63.145 (134) 21:07:45.287218 IP (tos 0x0, ttl 248, id 9373, offset 0, flags [DF], proto UDP (17), length 202) rns01.charter.com.domain > 10.0.0.4.53487: 57281 4/0/0 www.isg-apple.com.akadns.net. CNAME www.apple.com.edgekey.net., www.apple.com.edgekey.net. CNAME e3191.dscc.akamaiedge.net., e3191.dscc.akamaiedge.net. AAAA 2001:428:4c08:19b::c77, e3191.dscc.akamaiedge.net. AAAA 2001:428:4c08:1a4::c77 (174) 21:07:47.937730 IP (tos 0x0, ttl 64, id 64506, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.4.59982 > 190.93.245.58.http: Flags [F.], cksum 0x4e83 (correct), seq 1, ack 1, win 8192, length 0 21:07:47.954935 IP (tos 0x0, ttl 56, id 45539, offset 0, flags [DF], proto TCP (6), length 40) 190.93.245.58.http > 10.0.0.4.59982: Flags [R], cksum 0xd4d9 (correct), seq 2707657064, win 0, length 0 21:07:48.537068 IP (tos 0x0, ttl 128, id 6656, offset 0, flags [none], proto UDP (17), length 89) 10.0.0.3.3074 > 65.55.158.118.3544: UDP, length 61 21:07:48.565086 IP (tos 0x0, ttl 111, id 29512, offset 0, flags [none], proto UDP (17), length 137) 65.55.158.118.3544 > 10.0.0.3.3074: UDP, length 109 21:07:49.852239 IP (tos 0x0, ttl 64, id 51429, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.33757 > 10.0.0.255.32412: UDP, length 21 21:07:49.852318 IP (tos 0x0, ttl 64, id 51430, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.47472 > 10.0.0.255.32414: UDP, length 21 21:07:50.222983 IP (tos 0x0, ttl 50, id 0, offset 0, flags [DF], proto UDP (17), length 77) vpn24-eqix-sv5.ooma.com.openvpn > 10.0.0.52.48679: UDP, length 49 21:07:50.224009 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 77) 10.0.0.52.48679 > vpn24-eqix-sv5.ooma.com.openvpn: UDP, length 49 21:07:52.327740 IP (tos 0x10, ttl 64, id 48864, offset 0, flags [DF], proto UDP (17), length 76) 10.0.0.52.43804 > ns2.ooma.com.ntp: NTPv4, length 48 Client, Leap indicator: (0), Stratum 0 (unspecified), poll 0 (1s), precision 0 Root Delay: 0.000000, Root dispersion: 0.000000, Reference-ID: (unspec) Reference Timestamp: 0.000000000 Originator Timestamp: 0.000000000 Receive Timestamp: 0.000000000 Transmit Timestamp: 3841985605.564216911 (2021/09/30 03:13:25) Originator - Receive Timestamp: 0.000000000 Originator - Transmit Timestamp: 3841985605.564216911 (2021/09/30 03:13:25) 21:07:52.354843 IP (tos 0x0, ttl 51, id 0, offset 0, flags [DF], proto UDP (17), length 76) ns2.ooma.com.ntp > 10.0.0.52.43804: NTPv4, length 48 Server, Leap indicator: (0), Stratum 3 (secondary reference), poll 0 (1s), precision -24 Root Delay: 0.073196, Root dispersion: 0.053939, Reference-ID: sundial.columbia.edu Reference Timestamp: 3641773303.553519964 (2015/05/27 20:41:43) Originator Timestamp: 3841985605.564216911 (2021/09/30 03:13:25) Receive Timestamp: 3641774872.156018972 (2015/05/27 21:07:52) Transmit Timestamp: 3641774872.156052440 (2015/05/27 21:07:52) Originator - Receive Timestamp: -200210733.408197909 Originator - Transmit Timestamp: -200210733.408164441 21:07:53.576196 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.3 tell 10.0.0.1, length 28 21:07:53.576654 ARP, Ethernet (len 6), IPv4 (len 4), Reply 10.0.0.3 is-at c0:33:5e:4d:7f:7b (oui Unknown), length 46 21:07:54.852240 IP (tos 0x0, ttl 64, id 51431, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.33757 > 10.0.0.255.32412: UDP, length 21 21:07:54.852316 IP (tos 0x0, ttl 64, id 51432, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.47472 > 10.0.0.255.32414: UDP, length 21 21:07:55.267470 IP (tos 0x0, ttl 64, id 42096, offset 0, flags [none], proto UDP (17), length 72) 10.0.0.4.54562 > rns01.charter.com.domain: 14333+ PTR? 145.63.87.184.in-addr.arpa. (44) 21:07:55.296722 IP (tos 0x0, ttl 248, id 6127, offset 0, flags [DF], proto UDP (17), length 137) rns01.charter.com.domain > 10.0.0.4.54562: 14333 1/0/0 145.63.87.184.in-addr.arpa. PTR a184-87-63-145.deploy.static.akamaitechnologies.com. (109) 21:07:55.648413 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.254 tell 10.0.0.4, length 46 21:07:55.648448 ARP, Ethernet (len 6), IPv4 (len 4), Reply 10.0.0.254 is-at 3e:0a:b5:c6:f4:07 (oui Unknown), length 28 21:07:55.651291 IP (tos 0x0, ttl 64, id 40353, offset 0, flags [none], proto ICMP (1), length 84) 10.0.0.4 > 10.0.0.254: ICMP echo request, id 11630, seq 0, length 64 21:07:56.287664 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 77) 10.0.0.52.48679 > vpn24-eqix-sv5.ooma.com.openvpn: UDP, length 49 21:07:56.651465 IP (tos 0x0, ttl 64, id 10780, offset 0, flags [none], proto ICMP (1), length 84) 10.0.0.4 > 10.0.0.254: ICMP echo request, id 11630, seq 1, length 64 21:07:57.651685 IP (tos 0x0, ttl 64, id 49577, offset 0, flags [none], proto ICMP (1), length 84) 10.0.0.4 > 10.0.0.254: ICMP echo request, id 11630, seq 2, length 64 21:07:58.656988 IP (tos 0x0, ttl 64, id 61495, offset 0, flags [none], proto ICMP (1), length 84) 10.0.0.4 > 10.0.0.254: ICMP echo request, id 11630, seq 3, length 64 21:07:59.518955 IP6 (hlim 1, next-header UDP (17) payload length: 455) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 447 21:07:59.518957 IP (tos 0x0, ttl 1, id 17663, offset 0, flags [none], proto UDP (17), length 464) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 436 21:07:59.524643 IP (tos 0x0, ttl 1, id 17664, offset 0, flags [none], proto UDP (17), length 464) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 436 21:07:59.524853 IP6 (hlim 1, next-header UDP (17) payload length: 455) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 447 21:07:59.595532 IP6 (hlim 1, next-header UDP (17) payload length: 464) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 456 21:07:59.595534 IP (tos 0x0, ttl 1, id 17665, offset 0, flags [none], proto UDP (17), length 473) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 445 21:07:59.609244 IP (tos 0x0, ttl 1, id 17666, offset 0, flags [none], proto UDP (17), length 473) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 445 21:07:59.609352 IP6 (hlim 1, next-header UDP (17) payload length: 464) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 456 21:07:59.666226 IP (tos 0x0, ttl 64, id 15729, offset 0, flags [none], proto ICMP (1), length 84) 10.0.0.4 > 10.0.0.254: ICMP echo request, id 11630, seq 4, length 64 21:07:59.676525 IP (tos 0x0, ttl 1, id 17667, offset 0, flags [none], proto UDP (17), length 520) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 492 21:07:59.676863 IP6 (hlim 1, next-header UDP (17) payload length: 511) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 503 21:07:59.692671 IP (tos 0x0, ttl 1, id 17668, offset 0, flags [none], proto UDP (17), length 510) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 482 21:07:59.692847 IP6 (hlim 1, next-header UDP (17) payload length: 501) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 493 21:07:59.741009 IP (tos 0x0, ttl 1, id 17669, offset 0, flags [none], proto UDP (17), length 528) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 500 21:07:59.741059 IP6 (hlim 1, next-header UDP (17) payload length: 519) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 511 21:07:59.762739 IP6 (hlim 1, next-header UDP (17) payload length: 503) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 495 21:07:59.762740 IP (tos 0x0, ttl 1, id 17670, offset 0, flags [none], proto UDP (17), length 512) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 484 21:07:59.817752 IP (tos 0x0, ttl 1, id 17671, offset 0, flags [none], proto UDP (17), length 518) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 490 21:07:59.817842 IP6 (hlim 1, next-header UDP (17) payload length: 509) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 501 21:07:59.852240 IP (tos 0x0, ttl 64, id 51433, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.33757 > 10.0.0.255.32412: UDP, length 21 21:07:59.852315 IP (tos 0x0, ttl 64, id 51434, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.47472 > 10.0.0.255.32414: UDP, length 21 21:07:59.894858 IP (tos 0x0, ttl 1, id 17672, offset 0, flags [none], proto UDP (17), length 530) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 502 21:07:59.895070 IP6 (hlim 1, next-header UDP (17) payload length: 521) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 513 21:08:00.662159 IP (tos 0x0, ttl 64, id 58515, offset 0, flags [none], proto ICMP (1), length 84) 10.0.0.4 > 10.0.0.254: ICMP echo request, id 11630, seq 5, length 64 21:08:01.225824 IP (tos 0x0, ttl 50, id 0, offset 0, flags [DF], proto UDP (17), length 77) vpn24-eqix-sv5.ooma.com.openvpn > 10.0.0.52.48679: UDP, length 49 21:08:01.667600 IP (tos 0x0, ttl 64, id 61332, offset 0, flags [none], proto ICMP (1), length 84) 10.0.0.4 > 10.0.0.254: ICMP echo request, id 11630, seq 6, length 64 21:08:02.467451 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 77) 10.0.0.52.48679 > vpn24-eqix-sv5.ooma.com.openvpn: UDP, length 49 21:08:02.519805 IP (tos 0x0, ttl 1, id 17673, offset 0, flags [none], proto UDP (17), length 464) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 436 21:08:02.520075 IP6 (hlim 1, next-header UDP (17) payload length: 455) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 447 21:08:02.525345 IP (tos 0x0, ttl 1, id 17674, offset 0, flags [none], proto UDP (17), length 464) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 436 21:08:02.525526 IP6 (hlim 1, next-header UDP (17) payload length: 455) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 447 21:08:02.595948 IP (tos 0x0, ttl 1, id 17675, offset 0, flags [none], proto UDP (17), length 473) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 445 21:08:02.596525 IP6 (hlim 1, next-header UDP (17) payload length: 464) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 456 21:08:02.610096 IP (tos 0x0, ttl 1, id 17676, offset 0, flags [none], proto UDP (17), length 473) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 445 21:08:02.610183 IP6 (hlim 1, next-header UDP (17) payload length: 464) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 456 21:08:02.672678 IP (tos 0x0, ttl 64, id 752, offset 0, flags [none], proto ICMP (1), length 84) 10.0.0.4 > 10.0.0.254: ICMP echo request, id 11630, seq 7, length 64 21:08:02.676736 IP (tos 0x0, ttl 1, id 17677, offset 0, flags [none], proto UDP (17), length 520) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 492 21:08:02.676901 IP6 (hlim 1, next-header UDP (17) payload length: 511) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 503 21:08:02.693128 IP (tos 0x0, ttl 1, id 17678, offset 0, flags [none], proto UDP (17), length 510) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 482 21:08:02.693279 IP6 (hlim 1, next-header UDP (17) payload length: 501) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 493 21:08:02.741536 IP (tos 0x0, ttl 1, id 17679, offset 0, flags [none], proto UDP (17), length 528) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 500 21:08:02.741726 IP6 (hlim 1, next-header UDP (17) payload length: 519) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 511 21:08:02.763130 IP6 (hlim 1, next-header UDP (17) payload length: 503) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 495 21:08:02.763101 IP (tos 0x0, ttl 1, id 17680, offset 0, flags [none], proto UDP (17), length 512) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 484 21:08:02.818016 IP (tos 0x0, ttl 1, id 17681, offset 0, flags [none], proto UDP (17), length 518) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 490 21:08:02.818169 IP6 (hlim 1, next-header UDP (17) payload length: 509) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 501 21:08:02.895035 IP6 (hlim 1, next-header UDP (17) payload length: 521) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 513 21:08:02.895008 IP (tos 0x0, ttl 1, id 17682, offset 0, flags [none], proto UDP (17), length 530) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 502 21:08:03.677915 IP (tos 0x0, ttl 64, id 27662, offset 0, flags [none], proto ICMP (1), length 84) 10.0.0.4 > 10.0.0.254: ICMP echo request, id 11630, seq 8, length 64 21:08:04.683146 IP (tos 0x0, ttl 64, id 56689, offset 0, flags [none], proto ICMP (1), length 84) 10.0.0.4 > 10.0.0.254: ICMP echo request, id 11630, seq 9, length 64 21:08:04.852239 IP (tos 0x0, ttl 64, id 51435, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.33757 > 10.0.0.255.32412: UDP, length 21 21:08:04.852315 IP (tos 0x0, ttl 64, id 51436, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.47472 > 10.0.0.255.32414: UDP, length 21 21:08:05.266876 IP (tos 0x0, ttl 64, id 20814, offset 0, flags [none], proto UDP (17), length 71) 10.0.0.4.52231 > rns01.charter.com.domain: 55061+ A? e3191.dscc.akamaiedge.net. (43) 21:08:05.266927 IP (tos 0x0, ttl 64, id 47298, offset 0, flags [none], proto UDP (17), length 71) 10.0.0.4.55064 > rns01.charter.com.domain: 55972+ AAAA? e3191.dscc.akamaiedge.net. (43) 21:08:05.281661 IP (tos 0x0, ttl 248, id 5984, offset 0, flags [DF], proto UDP (17), length 127) rns01.charter.com.domain > 10.0.0.4.55064: 55972 2/0/0 e3191.dscc.akamaiedge.net. AAAA 2600:1406:3:184::c77, e3191.dscc.akamaiedge.net. AAAA 2600:1406:3:18a::c77 (99) 21:08:05.282505 IP (tos 0x0, ttl 248, id 41584, offset 0, flags [DF], proto UDP (17), length 87) rns01.charter.com.domain > 10.0.0.4.52231: 55061 1/0/0 e3191.dscc.akamaiedge.net. A 23.203.109.9 (59) 21:08:05.285574 IP (tos 0x0, ttl 64, id 33098, offset 0, flags [none], proto UDP (17), length 71) 10.0.0.4.56238 > rns01.charter.com.domain: 4385+ PTR? 9.109.203.23.in-addr.arpa. (43) 21:08:05.286131 IP (tos 0x0, ttl 64, id 28424, offset 0, flags [none], proto UDP (17), length 118) 10.0.0.4.60593 > rns01.charter.com.domain: 45468+ PTR? 7.7.c.0.0.0.0.0.0.0.0.0.0.0.0.0.4.8.1.0.3.0.0.0.6.0.4.1.0.0.6.2.ip6.arpa. (90) 21:08:05.286663 IP (tos 0x0, ttl 64, id 46592, offset 0, flags [none], proto UDP (17), length 118) 10.0.0.4.58207 > rns01.charter.com.domain: 28652+ PTR? 7.7.c.0.0.0.0.0.0.0.0.0.0.0.0.0.a.8.1.0.3.0.0.0.6.0.4.1.0.0.6.2.ip6.arpa. (90) 21:08:05.300486 IP (tos 0x0, ttl 248, id 7062, offset 0, flags [DF], proto UDP (17), length 135) rns01.charter.com.domain > 10.0.0.4.56238: 4385 1/0/0 9.109.203.23.in-addr.arpa. PTR a23-203-109-9.deploy.static.akamaitechnologies.com. (107) 21:08:05.306587 IP (tos 0x0, ttl 248, id 14686, offset 0, flags [DF], proto UDP (17), length 200) rns01.charter.com.domain > 10.0.0.4.58207: 28652 NXDomain 0/1/0 (172) 21:08:05.307486 IP (tos 0x0, ttl 248, id 34804, offset 0, flags [DF], proto UDP (17), length 200) rns01.charter.com.domain > 10.0.0.4.60593: 45468 NXDomain 0/1/0 (172) 21:08:05.520356 IP (tos 0x0, ttl 1, id 17683, offset 0, flags [none], proto UDP (17), length 464) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 436 21:08:05.520626 IP6 (hlim 1, next-header UDP (17) payload length: 455) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 447 21:08:05.526355 IP (tos 0x0, ttl 1, id 17684, offset 0, flags [none], proto UDP (17), length 464) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 436 21:08:05.526503 IP6 (hlim 1, next-header UDP (17) payload length: 455) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 447 21:08:05.596064 IP (tos 0x0, ttl 1, id 17685, offset 0, flags [none], proto UDP (17), length 473) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 445 21:08:05.596254 IP6 (hlim 1, next-header UDP (17) payload length: 464) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 456 21:08:05.610940 IP (tos 0x0, ttl 1, id 17686, offset 0, flags [none], proto UDP (17), length 473) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 445 21:08:05.611204 IP6 (hlim 1, next-header UDP (17) payload length: 464) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 456 21:08:05.677258 IP6 (hlim 1, next-header UDP (17) payload length: 511) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 503 21:08:05.677220 IP (tos 0x0, ttl 1, id 17687, offset 0, flags [none], proto UDP (17), length 520) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 492 21:08:05.688418 IP (tos 0x0, ttl 64, id 64051, offset 0, flags [none], proto ICMP (1), length 84) 10.0.0.4 > 10.0.0.254: ICMP echo request, id 11630, seq 10, length 64 21:08:05.693708 IP (tos 0x0, ttl 1, id 17688, offset 0, flags [none], proto UDP (17), length 510) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 482 21:08:05.693864 IP6 (hlim 1, next-header UDP (17) payload length: 501) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 493 21:08:05.742499 IP (tos 0x0, ttl 1, id 17689, offset 0, flags [none], proto UDP (17), length 528) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 500 21:08:05.742692 IP6 (hlim 1, next-header UDP (17) payload length: 519) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 511 21:08:05.763529 IP (tos 0x0, ttl 1, id 17690, offset 0, flags [none], proto UDP (17), length 512) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 484 21:08:05.763627 IP6 (hlim 1, next-header UDP (17) payload length: 503) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 495 21:08:05.818637 IP (tos 0x0, ttl 1, id 17691, offset 0, flags [none], proto UDP (17), length 518) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 490 21:08:05.818738 IP6 (hlim 1, next-header UDP (17) payload length: 509) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 501 21:08:05.895511 IP (tos 0x0, ttl 1, id 17692, offset 0, flags [none], proto UDP (17), length 530) 10.0.0.3.1900 > 239.255.255.250.1900: UDP, length 502 21:08:05.895610 IP6 (hlim 1, next-header UDP (17) payload length: 521) fe80::cd0:d237:f46f:a0e.1900 > ff02::c.1900: [udp sum ok] UDP, length 513 21:08:06.375172 IP (tos 0x0, ttl 128, id 6657, offset 0, flags [none], proto UDP (17), length 89) 10.0.0.3.3074 > 65.55.158.118.3544: UDP, length 61 21:08:06.402482 IP (tos 0x0, ttl 111, id 30130, offset 0, flags [none], proto UDP (17), length 137) 65.55.158.118.3544 > 10.0.0.3.3074: UDP, length 109 21:08:06.688888 IP (tos 0x0, ttl 64, id 1383, offset 0, flags [none], proto ICMP (1), length 84) 10.0.0.4 > 10.0.0.254: ICMP echo request, id 11630, seq 11, length 64 21:08:07.466895 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.1 tell 10.0.0.52, length 46 21:08:07.466919 ARP, Ethernet (len 6), IPv4 (len 4), Reply 10.0.0.1 is-at 00:1e:67:ad:9e:1e (oui Unknown), length 28 21:08:08.717322 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 77) 10.0.0.52.48679 > vpn24-eqix-sv5.ooma.com.openvpn: UDP, length 49 21:08:09.290262 IP (tos 0x0, ttl 44, id 32268, offset 0, flags [DF], proto TCP (6), length 425) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59984: Flags [P.], cksum 0x99d2 (correct), seq 186:559, ack 1929, win 61, options [nop,nop,TS val 29564154 ecr 499647967], length 373 21:08:09.290880 IP (tos 0x0, ttl 44, id 32269, offset 0, flags [DF], proto TCP (6), length 121) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59984: Flags [P.], cksum 0x0c1f (correct), seq 559:628, ack 1929, win 61, options [nop,nop,TS val 29564154 ecr 499647967], length 69 21:08:09.492696 IP (tos 0x0, ttl 64, id 52790, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.59984 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [.], cksum 0x91c8 (correct), ack 628, win 4098, options [nop,nop,TS val 499688244 ecr 29564154], length 0 21:08:09.493034 IP (tos 0x0, ttl 64, id 62806, offset 0, flags [DF], proto TCP (6), length 121) 10.0.0.4.59984 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [P.], cksum 0xb0db (correct), seq 1929:1998, ack 628, win 4098, options [nop,nop,TS val 499688244 ecr 29564154], length 69 21:08:09.493888 IP (tos 0x0, ttl 64, id 65361, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.59984 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [F.], cksum 0x9181 (correct), seq 1998, ack 628, win 4098, options [nop,nop,TS val 499688245 ecr 29564154], length 0 21:08:09.496494 IP (tos 0x0, ttl 64, id 56266, offset 0, flags [DF], proto TCP (6), length 64) 10.0.0.4.59985 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [S], cksum 0x48b3 (correct), seq 1530307469, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 499688247 ecr 0,sackOK,eol], length 0 21:08:09.590286 IP (tos 0x0, ttl 44, id 32270, offset 0, flags [DF], proto TCP (6), length 52) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59984: Flags [.], cksum 0xa0fd (correct), ack 1998, win 61, options [nop,nop,TS val 29564229 ecr 499688244], length 0 21:08:09.591136 IP (tos 0x0, ttl 44, id 32271, offset 0, flags [DF], proto TCP (6), length 52) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59984: Flags [F.], cksum 0xa0fc (correct), seq 628, ack 1998, win 61, options [nop,nop,TS val 29564229 ecr 499688244], length 0 21:08:09.592991 IP (tos 0x0, ttl 64, id 28603, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.59984 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [F.], cksum 0x90d5 (correct), seq 1998, ack 628, win 4098, options [nop,nop,TS val 499688342 ecr 29564229], length 0 21:08:09.593926 IP (tos 0x0, ttl 64, id 39498, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.59984 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [F.], cksum 0x90d3 (correct), seq 1998, ack 629, win 4098, options [nop,nop,TS val 499688343 ecr 29564229], length 0 21:08:09.597038 IP (tos 0x0, ttl 44, id 32272, offset 0, flags [DF], proto TCP (6), length 52) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59984: Flags [.], cksum 0xa0f8 (correct), ack 1999, win 61, options [nop,nop,TS val 29564231 ecr 499688245], length 0 21:08:09.597963 IP (tos 0x0, ttl 46, id 0, offset 0, flags [DF], proto TCP (6), length 60) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59985: Flags [S.], cksum 0xb4d1 (correct), seq 3513220048, ack 1530307470, win 14480, options [mss 1460,sackOK,TS val 29564231 ecr 499688247,nop,wscale 8], length 0 21:08:09.599098 IP (tos 0x0, ttl 64, id 26656, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.59984 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [.], cksum 0x90cc (correct), ack 629, win 4098, options [nop,nop,TS val 499688348 ecr 29564231], length 0 21:08:09.600374 IP (tos 0x0, ttl 64, id 15376, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.59985 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [.], cksum 0x0bb4 (correct), ack 1, win 4117, options [nop,nop,TS val 499688349 ecr 29564231], length 0 21:08:09.601107 IP (tos 0x0, ttl 64, id 51156, offset 0, flags [DF], proto TCP (6), length 284) 10.0.0.4.59985 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [P.], cksum 0x595b (correct), seq 1:233, ack 1, win 4117, options [nop,nop,TS val 499688349 ecr 29564231], length 232 21:08:09.638084 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.5 tell 10.0.0.3, length 46 21:08:09.688753 IP (tos 0x0, ttl 44, id 32273, offset 0, flags [DF], proto TCP (6), length 64) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59984: Flags [.], cksum 0x296a (correct), ack 1999, win 61, options [nop,nop,TS val 29564254 ecr 499688342,nop,nop,sack 1 {1998:1999}], length 0 21:08:09.702807 IP (tos 0x0, ttl 46, id 26288, offset 0, flags [DF], proto TCP (6), length 52) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59985: Flags [.], cksum 0x1a8a (correct), ack 233, win 61, options [nop,nop,TS val 29564257 ecr 499688349], length 0 21:08:09.704352 IP (tos 0x0, ttl 46, id 26290, offset 0, flags [DF], proto TCP (6), length 2700) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59985: Flags [P.], cksum 0x4cf8 (incorrect -> 0x2e95), seq 1449:4097, ack 233, win 61, options [nop,nop,TS val 29564257 ecr 499688349], length 2648 21:08:09.704379 IP (tos 0x0, ttl 46, id 26289, offset 0, flags [DF], proto TCP (6), length 1500) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59985: Flags [.], cksum 0x2fc8 (correct), seq 1:1449, ack 233, win 61, options [nop,nop,TS val 29564257 ecr 499688349], length 1448 21:08:09.704556 IP (tos 0x0, ttl 46, id 26292, offset 0, flags [DF], proto TCP (6), length 512) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59985: Flags [P.], cksum 0x20c5 (correct), seq 4097:4557, ack 233, win 61, options [nop,nop,TS val 29564258 ecr 499688349], length 460 21:08:09.707008 IP (tos 0x0, ttl 64, id 45237, offset 0, flags [DF], proto TCP (6), length 64) 10.0.0.4.59985 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [.], cksum 0x28c7 (correct), ack 1, win 4117, options [nop,nop,TS val 499688454 ecr 29564257,nop,nop,sack 1 {1449:2897}], length 0 21:08:09.707053 IP (tos 0x0, ttl 64, id 6728, offset 0, flags [DF], proto TCP (6), length 64) 10.0.0.4.59985 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [.], cksum 0x2417 (correct), ack 1, win 4117, options [nop,nop,TS val 499688454 ecr 29564257,nop,nop,sack 1 {1449:4097}], length 0 21:08:09.707384 IP (tos 0x0, ttl 64, id 45721, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.59985 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [.], cksum 0xf890 (correct), ack 4557, win 4096, options [nop,nop,TS val 499688454 ecr 29564258], length 0 21:08:09.716740 IP (tos 0x0, ttl 64, id 48831, offset 0, flags [DF], proto TCP (6), length 127) 10.0.0.4.59985 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [.], cksum 0xc71e (correct), seq 233:308, ack 4557, win 4096, options [nop,nop,TS val 499688463 ecr 29564258], length 75 21:08:09.716785 IP (tos 0x0, ttl 64, id 55247, offset 0, flags [DF], proto TCP (6), length 58) 10.0.0.4.59985 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [P.], cksum 0xe02a (correct), seq 308:314, ack 4557, win 4096, options [nop,nop,TS val 499688463 ecr 29564258], length 6 21:08:09.717147 IP (tos 0x0, ttl 64, id 27862, offset 0, flags [DF], proto TCP (6), length 137) 10.0.0.4.59985 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [P.], cksum 0xa541 (correct), seq 314:399, ack 4557, win 4096, options [nop,nop,TS val 499688463 ecr 29564258], length 85 21:08:09.814427 IP (tos 0x0, ttl 46, id 26293, offset 0, flags [DF], proto TCP (6), length 52) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59985: Flags [.], cksum 0x078a (correct), ack 399, win 61, options [nop,nop,TS val 29564285 ecr 499688463], length 0 21:08:09.815301 IP (tos 0x0, ttl 46, id 26294, offset 0, flags [DF], proto TCP (6), length 143) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59985: Flags [P.], cksum 0xe1d9 (correct), seq 4557:4648, ack 399, win 61, options [nop,nop,TS val 29564285 ecr 499688463], length 91 21:08:09.817106 IP (tos 0x0, ttl 64, id 27378, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.59985 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [.], cksum 0xf70b (correct), ack 4648, win 4093, options [nop,nop,TS val 499688562 ecr 29564285], length 0 21:08:09.817582 IP (tos 0x0, ttl 64, id 3494, offset 0, flags [DF], proto TCP (6), length 1500) 10.0.0.4.59985 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [.], cksum 0x0e89 (correct), seq 399:1847, ack 4648, win 4096, options [nop,nop,TS val 499688563 ecr 29564285], length 1448 21:08:09.817628 IP (tos 0x0, ttl 64, id 17010, offset 0, flags [DF], proto TCP (6), length 209) 10.0.0.4.59985 > ec2-52-4-4-114.compute-1.amazonaws.com.https: Flags [P.], cksum 0x55a4 (correct), seq 1847:2004, ack 4648, win 4096, options [nop,nop,TS val 499688563 ecr 29564285], length 157 21:08:09.852240 IP (tos 0x0, ttl 64, id 51437, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.33757 > 10.0.0.255.32412: UDP, length 21 21:08:09.852316 IP (tos 0x0, ttl 64, id 51438, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.47472 > 10.0.0.255.32414: UDP, length 21 21:08:09.917696 IP (tos 0x0, ttl 46, id 26295, offset 0, flags [DF], proto TCP (6), length 52) ec2-52-4-4-114.compute-1.amazonaws.com.https > 10.0.0.4.59985: Flags [.], cksum 0x0055 (correct), ack 2004, win 84, options [nop,nop,TS val 29564311 ecr 499688563], length 0 21:08:10.183757 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.5 tell 10.0.0.3, length 46 21:08:10.296198 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.4 tell 10.0.0.1, length 28 21:08:10.414284 ARP, Ethernet (len 6), IPv4 (len 4), Reply 10.0.0.4 is-at d4:33:a3:ed:f2:12 (oui Unknown), length 46 21:08:11.183907 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.5 tell 10.0.0.3, length 46 21:08:12.207960 IP (tos 0x0, ttl 50, id 0, offset 0, flags [DF], proto UDP (17), length 77) vpn24-eqix-sv5.ooma.com.openvpn > 10.0.0.52.48679: UDP, length 49 21:08:12.640923 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.5 tell 10.0.0.3, length 46 21:08:13.184003 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.5 tell 10.0.0.3, length 46 21:08:14.184443 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.5 tell 10.0.0.3, length 46 21:08:14.377271 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 77) 10.0.0.52.48679 > vpn24-eqix-sv5.ooma.com.openvpn: UDP, length 49 21:08:14.852240 IP (tos 0x0, ttl 64, id 51439, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.33757 > 10.0.0.255.32412: UDP, length 21 21:08:14.852338 IP (tos 0x0, ttl 64, id 51440, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.47472 > 10.0.0.255.32414: UDP, length 21 21:08:17.208197 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.52 tell 10.0.0.1, length 28 21:08:17.208458 ARP, Ethernet (len 6), IPv4 (len 4), Reply 10.0.0.52 is-at 00:18:61:06:d1:e1 (oui Unknown), length 46 21:08:17.690901 IP (tos 0x0, ttl 64, id 40273, offset 0, flags [none], proto UDP (17), length 82) 10.0.0.4.58187 > rns01.charter.com.domain: 47421+ A? p22-ckdatabase.icloud.com.akadns.net. (54) 21:08:17.707504 IP (tos 0x0, ttl 248, id 58225, offset 0, flags [DF], proto UDP (17), length 98) rns01.charter.com.domain > 10.0.0.4.58187: 47421 1/0/0 p22-ckdatabase.icloud.com.akadns.net. A 17.151.239.67 (70) 21:08:17.709952 IP (tos 0x0, ttl 64, id 27250, offset 0, flags [DF], proto TCP (6), length 64) 10.0.0.4.59986 > 17.151.239.67.https: Flags [S], cksum 0xe7b2 (correct), seq 2175333801, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 499696451 ecr 0,sackOK,eol], length 0 21:08:17.765018 IP (tos 0x0, ttl 242, id 20365, offset 0, flags [DF], proto TCP (6), length 44) 17.151.239.67.https > 10.0.0.4.59986: Flags [S.], cksum 0x55eb (correct), seq 2454200741, ack 2175333802, win 8190, options [mss 1460], length 0 21:08:17.767505 IP (tos 0x0, ttl 64, id 30148, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.4.59986 > 17.151.239.67.https: Flags [.], cksum 0x8da6 (correct), ack 1, win 65535, length 0 21:08:17.768499 IP (tos 0x0, ttl 64, id 33477, offset 0, flags [DF], proto TCP (6), length 236) 10.0.0.4.59986 > 17.151.239.67.https: Flags [P.], cksum 0x57e4 (correct), seq 1:197, ack 1, win 65535, length 196 21:08:17.810312 IP (tos 0x0, ttl 242, id 20367, offset 0, flags [DF], proto TCP (6), length 1500) 17.151.239.67.https > 10.0.0.4.59986: Flags [P.], cksum 0x0b54 (correct), seq 1:1461, ack 197, win 35296, length 1460 21:08:17.811119 IP (tos 0x0, ttl 242, id 20369, offset 0, flags [DF], proto TCP (6), length 1181) 17.151.239.67.https > 10.0.0.4.59986: Flags [P.], cksum 0x1c9c (correct), seq 1461:2602, ack 197, win 35296, length 1141 21:08:17.812502 IP (tos 0x0, ttl 64, id 43344, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.4.59986 > 17.151.239.67.https: Flags [.], cksum 0x872e (correct), ack 1461, win 65535, length 0 21:08:17.813208 IP (tos 0x0, ttl 64, id 29796, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.4.59986 > 17.151.239.67.https: Flags [.], cksum 0x82b9 (correct), ack 2602, win 65535, length 0 21:08:17.823794 IP (tos 0x0, ttl 64, id 24480, offset 0, flags [DF], proto TCP (6), length 307) 10.0.0.4.59986 > 17.151.239.67.https: Flags [.], cksum 0xa65c (correct), seq 197:464, ack 2602, win 65535, length 267 21:08:17.823838 IP (tos 0x0, ttl 64, id 30867, offset 0, flags [DF], proto TCP (6), length 46) 10.0.0.4.59986 > 17.151.239.67.https: Flags [P.], cksum 0x699c (correct), seq 464:470, ack 2602, win 65535, length 6 21:08:17.824922 IP (tos 0x0, ttl 64, id 45346, offset 0, flags [DF], proto TCP (6), length 77) 10.0.0.4.59986 > 17.151.239.67.https: Flags [P.], cksum 0x703b (correct), seq 470:507, ack 2602, win 65535, length 37 21:08:17.854452 IP (tos 0x0, ttl 242, id 20370, offset 0, flags [DF], proto TCP (6), length 40) 17.151.239.67.https > 10.0.0.4.59986: Flags [.], cksum 0xf8d8 (correct), ack 470, win 35023, length 0 21:08:17.854477 IP (tos 0x0, ttl 242, id 20371, offset 0, flags [DF], proto TCP (6), length 40) 17.151.239.67.https > 10.0.0.4.59986: Flags [.], cksum 0xf8d8 (correct), ack 507, win 34986, length 0 21:08:17.857906 IP (tos 0x0, ttl 242, id 20373, offset 0, flags [DF], proto TCP (6), length 83) 17.151.239.67.https > 10.0.0.4.59986: Flags [P.], cksum 0xf3c5 (correct), seq 2602:2645, ack 507, win 34986, length 43 21:08:17.859465 IP (tos 0x0, ttl 64, id 20582, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.4.59986 > 17.151.239.67.https: Flags [.], cksum 0x8158 (correct), ack 2645, win 65535, length 0 21:08:17.861175 IP (tos 0x0, ttl 64, id 8723, offset 0, flags [DF], proto TCP (6), length 1121) 10.0.0.4.59986 > 17.151.239.67.https: Flags [.], cksum 0x3359 (correct), seq 507:1588, ack 2645, win 65535, length 1081 21:08:17.861220 IP (tos 0x0, ttl 64, id 51970, offset 0, flags [DF], proto TCP (6), length 66) 10.0.0.4.59986 > 17.151.239.67.https: Flags [P.], cksum 0x1329 (correct), seq 1588:1614, ack 2645, win 65535, length 26 21:08:17.861232 IP (tos 0x0, ttl 64, id 36617, offset 0, flags [DF], proto TCP (6), length 463) 10.0.0.4.59986 > 17.151.239.67.https: Flags [.], cksum 0x9da5 (correct), seq 1614:2037, ack 2645, win 65535, length 423 21:08:17.861240 IP (tos 0x0, ttl 64, id 30792, offset 0, flags [DF], proto TCP (6), length 68) 10.0.0.4.59986 > 17.151.239.67.https: Flags [P.], cksum 0x9dd6 (correct), seq 2037:2065, ack 2645, win 65535, length 28 21:08:17.890108 IP (tos 0x0, ttl 242, id 20374, offset 0, flags [DF], proto TCP (6), length 40) 17.151.239.67.https > 10.0.0.4.59986: Flags [.], cksum 0xf8ad (correct), ack 1614, win 33879, length 0 21:08:17.890133 IP (tos 0x0, ttl 242, id 20375, offset 0, flags [DF], proto TCP (6), length 40) 17.151.239.67.https > 10.0.0.4.59986: Flags [.], cksum 0xf8ad (correct), ack 2065, win 33428, length 0 21:08:17.930124 IP (tos 0x0, ttl 242, id 20377, offset 0, flags [DF], proto TCP (6), length 449) 17.151.239.67.https > 10.0.0.4.59986: Flags [P.], cksum 0x922f (correct), seq 2645:3054, ack 2065, win 65535, length 409 21:08:17.930147 IP (tos 0x0, ttl 242, id 20379, offset 0, flags [DF], proto TCP (6), length 171) 17.151.239.67.https > 10.0.0.4.59986: Flags [P.], cksum 0x4440 (correct), seq 3054:3185, ack 2065, win 65535, length 131 21:08:17.930156 IP (tos 0x0, ttl 242, id 20381, offset 0, flags [DF], proto TCP (6), length 66) 17.151.239.67.https > 10.0.0.4.59986: Flags [P.], cksum 0x5085 (correct), seq 3185:3211, ack 2065, win 65535, length 26 21:08:17.932274 IP (tos 0x0, ttl 64, id 20696, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.4.59986 > 17.151.239.67.https: Flags [.], cksum 0x790c (correct), ack 3211, win 65535, length 0 21:08:17.934404 IP (tos 0x0, ttl 64, id 64915, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.4.59986 > 17.151.239.67.https: Flags [F.], cksum 0x790b (correct), seq 2065, ack 3211, win 65535, length 0 21:08:17.965082 IP (tos 0x0, ttl 64, id 17051, offset 0, flags [DF], proto TCP (6), length 64) 10.0.0.4.59987 > 17.151.239.67.https: Flags [S], cksum 0x9fcd (correct), seq 4056861805, win 65535, options [mss 1460,nop,wscale 5,nop,nop,TS val 499696701 ecr 0,sackOK,eol], length 0 21:08:17.967149 IP (tos 0x0, ttl 242, id 20383, offset 0, flags [DF], proto TCP (6), length 40) 17.151.239.67.https > 10.0.0.4.59986: Flags [F.], cksum 0xd90b (correct), seq 3211, ack 2066, win 40958, length 0 21:08:17.968918 IP (tos 0x0, ttl 64, id 51873, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.4.59986 > 17.151.239.67.https: Flags [.], cksum 0x790a (correct), ack 3212, win 65535, length 0 21:08:17.991855 IP (tos 0x0, ttl 240, id 45300, offset 0, flags [DF], proto TCP (6), length 44) 17.151.239.67.https > 10.0.0.4.59987: Flags [S.], cksum 0xb573 (correct), seq 41028360, ack 4056861806, win 8190, options [mss 1460], length 0 21:08:17.993502 IP (tos 0x0, ttl 64, id 47541, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.4.59987 > 17.151.239.67.https: Flags [.], cksum 0xed2e (correct), ack 1, win 65535, length 0 21:08:17.994386 IP (tos 0x0, ttl 64, id 55191, offset 0, flags [DF], proto TCP (6), length 268) 10.0.0.4.59987 > 17.151.239.67.https: Flags [P.], cksum 0x8060 (correct), seq 1:229, ack 1, win 65535, length 228 21:08:18.026736 IP (tos 0x0, ttl 240, id 45301, offset 0, flags [DF], proto TCP (6), length 40) 17.151.239.67.https > 10.0.0.4.59987: Flags [.], cksum 0x62aa (correct), ack 229, win 35232, length 0 21:08:18.027588 IP (tos 0x0, ttl 240, id 45305, offset 0, flags [DF], proto TCP (6), length 77) 17.151.239.67.https > 10.0.0.4.59987: Flags [P.], cksum 0x3189 (correct), seq 93:130, ack 229, win 35232, length 37 21:08:18.027610 IP (tos 0x0, ttl 240, id 45303, offset 0, flags [DF], proto TCP (6), length 132) 17.151.239.67.https > 10.0.0.4.59987: Flags [P.], cksum 0x1b4d (correct), seq 1:93, ack 229, win 35232, length 92 21:08:18.029381 IP (tos 0x0, ttl 64, id 6881, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.4.59987 > 17.151.239.67.https: Flags [.], cksum 0xebc9 (correct), ack 130, win 65535, length 0 21:08:18.029829 IP (tos 0x0, ttl 64, id 25711, offset 0, flags [DF], proto TCP (6), length 46) 10.0.0.4.59987 > 17.151.239.67.https: Flags [.], cksum 0xd3bf (correct), seq 229:235, ack 130, win 65535, length 6 21:08:18.029874 IP (tos 0x0, ttl 64, id 23851, offset 0, flags [DF], proto TCP (6), length 77) 10.0.0.4.59987 > 17.151.239.67.https: Flags [P.], cksum 0x1ae1 (correct), seq 235:272, ack 130, win 65535, length 37 21:08:18.031389 IP (tos 0x0, ttl 64, id 11248, offset 0, flags [DF], proto TCP (6), length 1117) 10.0.0.4.59987 > 17.151.239.67.https: Flags [.], cksum 0xa339 (correct), seq 272:1349, ack 130, win 65535, length 1077 21:08:18.031433 IP (tos 0x0, ttl 64, id 17796, offset 0, flags [DF], proto TCP (6), length 66) 10.0.0.4.59987 > 17.151.239.67.https: Flags [P.], cksum 0x1fec (correct), seq 1349:1375, ack 130, win 65535, length 26 21:08:18.031787 IP (tos 0x0, ttl 64, id 27048, offset 0, flags [DF], proto TCP (6), length 1085) 10.0.0.4.59987 > 17.151.239.67.https: Flags [.], cksum 0x989f (correct), seq 1375:2420, ack 130, win 65535, length 1045 21:08:18.031831 IP (tos 0x0, ttl 64, id 38027, offset 0, flags [DF], proto TCP (6), length 68) 10.0.0.4.59987 > 17.151.239.67.https: Flags [P.], cksum 0x9632 (correct), seq 2420:2448, ack 130, win 65535, length 28 21:08:18.031841 IP (tos 0x0, ttl 64, id 42974, offset 0, flags [DF], proto TCP (6), length 487) 10.0.0.4.59987 > 17.151.239.67.https: Flags [P.], cksum 0xcdc5 (correct), seq 2448:2895, ack 130, win 65535, length 447 21:08:18.032171 IP (tos 0x0, ttl 64, id 61924, offset 0, flags [DF], proto TCP (6), length 68) 10.0.0.4.59987 > 17.151.239.67.https: Flags [P.], cksum 0x7627 (correct), seq 2895:2923, ack 130, win 65535, length 28 21:08:18.064016 IP (tos 0x0, ttl 240, id 45306, offset 0, flags [DF], proto TCP (6), length 40) 17.151.239.67.https > 10.0.0.4.59987: Flags [.], cksum 0x6229 (correct), ack 272, win 35189, length 0 21:08:18.064039 IP (tos 0x0, ttl 240, id 45307, offset 0, flags [DF], proto TCP (6), length 40) 17.151.239.67.https > 10.0.0.4.59987: Flags [.], cksum 0x6229 (correct), ack 1349, win 34112, length 0 21:08:18.064047 IP (tos 0x0, ttl 240, id 45308, offset 0, flags [DF], proto TCP (6), length 40) 17.151.239.67.https > 10.0.0.4.59987: Flags [.], cksum 0x6229 (correct), ack 1375, win 34086, length 0 21:08:18.064055 IP (tos 0x0, ttl 240, id 45309, offset 0, flags [DF], proto TCP (6), length 40) 17.151.239.67.https > 10.0.0.4.59987: Flags [.], cksum 0x6229 (correct), ack 2448, win 33013, length 0 21:08:18.064063 IP (tos 0x0, ttl 240, id 45310, offset 0, flags [DF], proto TCP (6), length 40) 17.151.239.67.https > 10.0.0.4.59987: Flags [.], cksum 0x6229 (correct), ack 2895, win 32566, length 0 21:08:18.064073 IP (tos 0x0, ttl 240, id 45311, offset 0, flags [DF], proto TCP (6), length 40) 17.151.239.67.https > 10.0.0.4.59987: Flags [.], cksum 0x6229 (correct), ack 2923, win 32538, length 0 21:08:18.133438 IP (tos 0x0, ttl 240, id 45313, offset 0, flags [DF], proto TCP (6), length 449) 17.151.239.67.https > 10.0.0.4.59987: Flags [P.], cksum 0x979b (correct), seq 130:539, ack 2923, win 65535, length 409 21:08:18.133548 IP (tos 0x0, ttl 240, id 45315, offset 0, flags [DF], proto TCP (6), length 755) 17.151.239.67.https > 10.0.0.4.59987: Flags [P.], cksum 0x93fe (correct), seq 539:1254, ack 2923, win 65535, length 715 21:08:18.133563 IP (tos 0x0, ttl 240, id 45317, offset 0, flags [DF], proto TCP (6), length 66) 17.151.239.67.https > 10.0.0.4.59987: Flags [P.], cksum 0x8fda (correct), seq 1254:1280, ack 2923, win 65535, length 26 21:08:18.135410 IP (tos 0x0, ttl 64, id 10844, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.4.59987 > 17.151.239.67.https: Flags [.], cksum 0xdcc5 (correct), ack 1280, win 65535, length 0 21:08:18.138113 IP (tos 0x0, ttl 64, id 25863, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.4.59987 > 17.151.239.67.https: Flags [F.], cksum 0xdcc4 (correct), seq 2923, ack 1280, win 65535, length 0 21:08:18.167435 IP (tos 0x0, ttl 240, id 45319, offset 0, flags [DF], proto TCP (6), length 40) 17.151.239.67.https > 10.0.0.4.59987: Flags [F.], cksum 0x3cc5 (correct), seq 1280, ack 2924, win 40958, length 0 21:08:18.169528 IP (tos 0x0, ttl 64, id 26724, offset 0, flags [DF], proto TCP (6), length 40) 10.0.0.4.59987 > 17.151.239.67.https: Flags [.], cksum 0xdcc3 (correct), ack 1281, win 65535, length 0 21:08:19.852238 IP (tos 0x0, ttl 64, id 51441, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.33757 > 10.0.0.255.32412: UDP, length 21 21:08:19.852348 IP (tos 0x0, ttl 64, id 51442, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.47472 > 10.0.0.255.32414: UDP, length 21 21:08:20.557135 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 77) 10.0.0.52.48679 > vpn24-eqix-sv5.ooma.com.openvpn: UDP, length 49 21:08:22.217046 IP (tos 0x0, ttl 50, id 0, offset 0, flags [DF], proto UDP (17), length 77) vpn24-eqix-sv5.ooma.com.openvpn > 10.0.0.52.48679: UDP, length 49 21:08:23.077593 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 328) 10.0.0.52.bootpc > 10.0.0.1.bootps: BOOTP/DHCP, Request from 00:18:61:06:d1:e1 (oui Unknown), length 300, xid 0xdabbe301, Flags [none] Client-IP 10.0.0.52 Client-Ethernet-Address 00:18:61:06:d1:e1 (oui Unknown) Vendor-rfc1048 Extensions Magic Cookie 0x63825363 DHCP-Message Option 53, length 1: Request Parameter-Request Option 55, length 7: Subnet-Mask, BR, Time-Zone, Default-Gateway Domain-Name, Domain-Name-Server, Hostname 21:08:23.078695 IP (tos 0x0, ttl 64, id 62768, offset 0, flags [DF], proto UDP (17), length 328) 10.0.0.1.bootps > 10.0.0.52.bootpc: BOOTP/DHCP, Reply, length 300, xid 0xdabbe301, Flags [none] Client-IP 10.0.0.52 Your-IP 10.0.0.52 Server-IP 10.0.0.1 Client-Ethernet-Address 00:18:61:06:d1:e1 (oui Unknown) Vendor-rfc1048 Extensions Magic Cookie 0x63825363 DHCP-Message Option 53, length 1: ACK Server-ID Option 54, length 4: 10.0.0.1 Lease-Time Option 51, length 4: 600 Subnet-Mask Option 1, length 4: 255.255.255.0 BR Option 28, length 4: 10.0.0.255 Default-Gateway Option 3, length 4: 10.0.0.1 Domain-Name-Server Option 6, length 8: rns01.charter.com,rns02.charter.com 21:08:23.079173 IP (tos 0x0, ttl 64, id 43979, offset 0, flags [DF], proto TCP (6), length 169) 10.0.0.52.45633 > 38.114.132.204.pop3: Flags [P.], cksum 0x7ec1 (correct), seq 137532798:137532915, ack 2186325707, win 464, options [nop,nop,TS val 11548072 ecr 1309491317], length 117 21:08:23.119931 IP (tos 0x0, ttl 49, id 37900, offset 0, flags [none], proto TCP (6), length 52) 38.114.132.204.pop3 > 10.0.0.52.45633: Flags [.], cksum 0x5d33 (correct), ack 117, win 155, options [nop,nop,TS val 1309760802 ecr 11548072], length 0 21:08:23.120477 IP (tos 0x0, ttl 64, id 43980, offset 0, flags [DF], proto TCP (6), length 153) 10.0.0.52.45633 > 38.114.132.204.pop3: Flags [P.], cksum 0x03fe (correct), seq 117:218, ack 1, win 464, options [nop,nop,TS val 11548076 ecr 1309760802], length 101 21:08:23.154912 IP (tos 0x0, ttl 49, id 11334, offset 0, flags [none], proto TCP (6), length 52) 38.114.132.204.pop3 > 10.0.0.52.45633: Flags [.], cksum 0x5ca7 (correct), ack 218, win 155, options [nop,nop,TS val 1309760837 ecr 11548076], length 0 21:08:23.230491 IP (tos 0x0, ttl 64, id 43981, offset 0, flags [DF], proto TCP (6), length 201) 10.0.0.52.45633 > 38.114.132.204.pop3: Flags [P.], cksum 0x4785 (correct), seq 218:367, ack 1, win 464, options [nop,nop,TS val 11548087 ecr 1309760837], length 149 21:08:23.262433 IP (tos 0x0, ttl 49, id 62304, offset 0, flags [none], proto TCP (6), length 52) 38.114.132.204.pop3 > 10.0.0.52.45633: Flags [.], cksum 0x5b92 (correct), ack 367, win 163, options [nop,nop,TS val 1309760946 ecr 11548087], length 0 21:08:23.262943 IP (tos 0x0, ttl 64, id 43982, offset 0, flags [DF], proto TCP (6), length 185) 10.0.0.52.45633 > 38.114.132.204.pop3: Flags [P.], cksum 0x35af (correct), seq 367:500, ack 1, win 464, options [nop,nop,TS val 11548090 ecr 1309760946], length 133 21:08:23.316245 IP (tos 0x0, ttl 49, id 44865, offset 0, flags [none], proto TCP (6), length 52) 38.114.132.204.pop3 > 10.0.0.52.45633: Flags [.], cksum 0x5acc (correct), ack 500, win 171, options [nop,nop,TS val 1309761000 ecr 11548090], length 0 21:08:24.852239 IP (tos 0x0, ttl 64, id 51443, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.33757 > 10.0.0.255.32412: UDP, length 21 21:08:24.852328 IP (tos 0x0, ttl 64, id 51444, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.47472 > 10.0.0.255.32414: UDP, length 21 21:08:25.267710 IP (tos 0x0, ttl 64, id 39460, offset 0, flags [none], proto UDP (17), length 71) 10.0.0.4.60314 > rns01.charter.com.domain: 27923+ A? e3191.dscc.akamaiedge.net. (43) 21:08:25.267761 IP (tos 0x0, ttl 64, id 44590, offset 0, flags [none], proto UDP (17), length 71) 10.0.0.4.52141 > rns01.charter.com.domain: 45443+ AAAA? e3191.dscc.akamaiedge.net. (43) 21:08:25.297103 IP (tos 0x0, ttl 248, id 30393, offset 0, flags [DF], proto UDP (17), length 87) rns01.charter.com.domain > 10.0.0.4.60314: 27923 1/0/0 e3191.dscc.akamaiedge.net. A 23.201.244.132 (59) 21:08:25.300429 IP (tos 0x0, ttl 248, id 36879, offset 0, flags [DF], proto UDP (17), length 127) rns01.charter.com.domain > 10.0.0.4.52141: 45443 2/0/0 e3191.dscc.akamaiedge.net. AAAA 2001:559:14:1a1::c77, e3191.dscc.akamaiedge.net. AAAA 2001:559:14:19c::c77 (99) 21:08:25.304444 IP (tos 0x0, ttl 64, id 2484, offset 0, flags [none], proto UDP (17), length 118) 10.0.0.4.64501 > rns01.charter.com.domain: 45632+ PTR? 7.7.c.0.0.0.0.0.0.0.0.0.0.0.0.0.1.a.1.0.4.1.0.0.9.5.5.0.1.0.0.2.ip6.arpa. (90) 21:08:25.305110 IP (tos 0x0, ttl 64, id 30331, offset 0, flags [none], proto UDP (17), length 118) 10.0.0.4.54721 > rns01.charter.com.domain: 37557+ PTR? 7.7.c.0.0.0.0.0.0.0.0.0.0.0.0.0.c.9.1.0.4.1.0.0.9.5.5.0.1.0.0.2.ip6.arpa. (90) 21:08:25.335807 IP (tos 0x0, ttl 248, id 33929, offset 0, flags [DF], proto UDP (17), length 181) rns01.charter.com.domain > 10.0.0.4.64501: 45632 NXDomain 0/1/0 (153) 21:08:25.342760 IP (tos 0x0, ttl 248, id 34612, offset 0, flags [DF], proto UDP (17), length 181) rns01.charter.com.domain > 10.0.0.4.54721: 37557 NXDomain 0/1/0 (153) 21:08:25.562406 IP (tos 0x0, ttl 128, id 6658, offset 0, flags [none], proto UDP (17), length 89) 10.0.0.3.3074 > 65.55.158.118.3544: UDP, length 61 21:08:25.586552 IP (tos 0x0, ttl 111, id 9373, offset 0, flags [none], proto UDP (17), length 137) 65.55.158.118.3544 > 10.0.0.3.3074: UDP, length 109 21:08:26.297108 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 77) 10.0.0.52.48679 > vpn24-eqix-sv5.ooma.com.openvpn: UDP, length 49 21:08:29.852240 IP (tos 0x0, ttl 64, id 51445, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.33757 > 10.0.0.255.32412: UDP, length 21 21:08:29.852339 IP (tos 0x0, ttl 64, id 51446, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.47472 > 10.0.0.255.32414: UDP, length 21 21:08:30.183866 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.1 (00:1e:67:ad:9e:1e (oui Unknown)) tell 10.0.0.3, length 46 21:08:30.183890 ARP, Ethernet (len 6), IPv4 (len 4), Reply 10.0.0.1 is-at 00:1e:67:ad:9e:1e (oui Unknown), length 28 21:08:31.208967 IP (tos 0x0, ttl 255, id 9737, offset 0, flags [none], proto UDP (17), length 65) 10.0.0.4.mdns > 224.0.0.251.mdns: 0 PTR (QM)? _airport._tcp.local. (37) 21:08:31.209340 IP6 (flowlabel 0x4633c, hlim 255, next-header UDP (17) payload length: 45) fe80::d633:a3ff:feed:f212.mdns > ff02::fb.mdns: [udp sum ok] 0 PTR (QM)? _airport._tcp.local. (37) 21:08:31.209386 IP (tos 0x0, ttl 255, id 10017, offset 0, flags [none], proto UDP (17), length 104) 10.0.0.4.mdns > 224.0.0.251.mdns: 0 [1a] PTR (QU)? _airport._tcp.local. (76) 21:08:31.209458 IP6 (flowlabel 0x4633c, hlim 255, next-header UDP (17) payload length: 84) fe80::d633:a3ff:feed:f212.mdns > ff02::fb.mdns: [udp sum ok] 0 [1a] PTR (QU)? _airport._tcp.local. (76) 21:08:32.278884 IP (tos 0x0, ttl 255, id 28560, offset 0, flags [none], proto UDP (17), length 65) 10.0.0.4.mdns > 224.0.0.251.mdns: 0 PTR (QM)? _airport._tcp.local. (37) 21:08:32.279316 IP6 (flowlabel 0x4633c, hlim 255, next-header UDP (17) payload length: 45) fe80::d633:a3ff:feed:f212.mdns > ff02::fb.mdns: [udp sum ok] 0 PTR (QM)? _airport._tcp.local. (37) 21:08:32.377077 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 77) 10.0.0.52.48679 > vpn24-eqix-sv5.ooma.com.openvpn: UDP, length 49 21:08:32.406134 IP (tos 0x0, ttl 50, id 0, offset 0, flags [DF], proto UDP (17), length 77) vpn24-eqix-sv5.ooma.com.openvpn > 10.0.0.52.48679: UDP, length 49 21:08:32.409441 IP (tos 0x0, ttl 255, id 2676, offset 0, flags [none], proto UDP (17), length 505) 10.0.0.2.mdns > 224.0.0.251.mdns: 0*- [0q] 2/0/7 _airport._tcp.local. PTR Custer's AirPort Extreme._airport._tcp.local., Custer's AirPort Extreme._device-info._tcp.local. TXT "model=AirPort7,120" (477) 21:08:32.409622 IP6 (hlim 255, next-header UDP (17) payload length: 485) fe80::9272:40ff:fe05:7987.mdns > ff02::fb.mdns: [udp sum ok] 0*- [0q] 2/0/7 _airport._tcp.local. PTR Custer's AirPort Extreme._airport._tcp.local., Custer's AirPort Extreme._device-info._tcp.local. TXT "model=AirPort7,120" (477) 21:08:32.897252 IP (tos 0x0, ttl 48, id 8705, offset 0, flags [DF], proto TCP (6), length 137) stackoverflow.com.https > 10.0.0.4.59853: Flags [P.], cksum 0xd996 (correct), seq 3079789358:3079789443, ack 3469811438, win 34, options [nop,nop,TS val 1847475839 ecr 499409219], length 85 21:08:33.147475 IP (tos 0x0, ttl 64, id 25204, offset 0, flags [DF], proto TCP (6), length 52) 10.0.0.4.59853 > stackoverflow.com.https: Flags [.], cksum 0x915a (correct), ack 85, win 4100, options [nop,nop,TS val 499711872 ecr 1847475839], length 0 21:08:33.148066 IP (tos 0x0, ttl 64, id 34911, offset 0, flags [DF], proto TCP (6), length 121) 10.0.0.4.59853 > stackoverflow.com.https: Flags [P.], cksum 0xf16a (correct), seq 1:70, ack 85, win 4100, options [nop,nop,TS val 499711872 ecr 1847475839], length 69 21:08:33.247014 IP (tos 0x0, ttl 48, id 8706, offset 0, flags [DF], proto TCP (6), length 52) stackoverflow.com.https > 10.0.0.4.59853: Flags [.], cksum 0x9f9a (correct), ack 70, win 34, options [nop,nop,TS val 1847476188 ecr 499711872], length 0 21:08:34.852241 IP (tos 0x0, ttl 64, id 51447, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.33757 > 10.0.0.255.32412: UDP, length 21 21:08:34.852329 IP (tos 0x0, ttl 64, id 51448, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.47472 > 10.0.0.255.32414: UDP, length 21 21:08:35.268127 IP (tos 0x0, ttl 64, id 20495, offset 0, flags [none], proto UDP (17), length 74) 10.0.0.4.59153 > rns01.charter.com.domain: 5675+ A? www.isg-apple.com.akadns.net. (46) 21:08:35.268179 IP (tos 0x0, ttl 64, id 11026, offset 0, flags [none], proto UDP (17), length 74) 10.0.0.4.63118 > rns01.charter.com.domain: 41742+ AAAA? www.isg-apple.com.akadns.net. (46) 21:08:35.285307 IP (tos 0x0, ttl 248, id 8739, offset 0, flags [DF], proto UDP (17), length 162) rns01.charter.com.domain > 10.0.0.4.59153: 5675 3/0/0 www.isg-apple.com.akadns.net. CNAME www.apple.com.edgekey.net., www.apple.com.edgekey.net. CNAME e3191.dscc.akamaiedge.net., e3191.dscc.akamaiedge.net. A 23.201.244.132 (134) 21:08:35.291334 IP (tos 0x0, ttl 248, id 37990, offset 0, flags [DF], proto UDP (17), length 202) rns01.charter.com.domain > 10.0.0.4.63118: 41742 4/0/0 www.isg-apple.com.akadns.net. CNAME www.apple.com.edgekey.net., www.apple.com.edgekey.net. CNAME e3191.dscc.akamaiedge.net., e3191.dscc.akamaiedge.net. AAAA 2600:1406:3:18a::c77, e3191.dscc.akamaiedge.net. AAAA 2600:1406:3:184::c77 (174) 21:08:35.293901 IP (tos 0x0, ttl 255, id 22409, offset 0, flags [none], proto UDP (17), length 104) 10.0.0.4.mdns > 224.0.0.251.mdns: 0 [1a] PTR (QM)? _airport._tcp.local. (76) 21:08:35.293976 IP6 (flowlabel 0x4633c, hlim 255, next-header UDP (17) payload length: 84) fe80::d633:a3ff:feed:f212.mdns > ff02::fb.mdns: [udp sum ok] 0 [1a] PTR (QM)? _airport._tcp.local. (76) 21:08:38.496893 IP (tos 0x68, ttl 64, id 0, offset 0, flags [DF], proto UDP (17), length 77) 10.0.0.52.48679 > vpn24-eqix-sv5.ooma.com.openvpn: UDP, length 49 21:08:39.646906 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 10.0.0.5 tell 10.0.0.3, length 46 21:08:39.852241 IP (tos 0x0, ttl 64, id 51449, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.33757 > 10.0.0.255.32412: UDP, length 21 21:08:39.852333 IP (tos 0x0, ttl 64, id 51450, offset 0, flags [DF], proto UDP (17), length 49) 10.0.0.1.47472 > 10.0.0.255.32414: UDP, length 21