No. Time Source Destination Protocol Info 1 0.000000 10.128.1.64 10.128.255.255 NBNS Name query NB WPAD.UCT.EXP.<00> Frame 1 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: Foxconn_38:f6:2b (00:01:6c:38:f6:2b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 10.128.1.64 (10.128.1.64), Dst: 10.128.255.255 (10.128.255.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 2 0.046975 Intel_4e:d8:94 Broadcast ARP Who has 10.128.0.114? Gratuitous ARP Frame 2 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:d8:94 (00:0e:0c:4e:d8:94), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 3 0.206926 Intel_4e:c8:82 Broadcast ARP Who has 10.128.1.242? Gratuitous ARP Frame 3 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:c8:82 (00:0e:0c:4e:c8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 4 0.321780 10.128.1.115 10.128.255.255 NBNS Name query NB WPAD.UCT.EXP.<00> Frame 4 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: KatronCo_cc:fb:e5 (00:40:f6:cc:fb:e5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 10.128.1.115 (10.128.1.115), Dst: 10.128.255.255 (10.128.255.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 5 0.549158 10.128.1.34 255.255.255.255 DHCP DHCP Request - Transaction ID 0xdb812c1a Frame 5 (342 bytes on wire, 342 bytes captured) Ethernet II, Src: LucentTe_1f:33:11 (00:60:1d:1f:33:11), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 10.128.1.34 (10.128.1.34), Dst: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67) Bootstrap Protocol No. Time Source Destination Protocol Info 6 0.553028 3com_4e:c5:cb Broadcast ARP Who has 10.128.1.34? Tell 10.128.255.254 Frame 6 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 7 0.749929 10.128.1.64 10.128.255.255 NBNS Name query NB WPAD.UCT.EXP.<00> Frame 7 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: Foxconn_38:f6:2b (00:01:6c:38:f6:2b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 10.128.1.64 (10.128.1.64), Dst: 10.128.255.255 (10.128.255.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 8 1.072845 10.128.1.115 10.128.255.255 NBNS Name query NB WPAD.UCT.EXP.<00> Frame 8 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: KatronCo_cc:fb:e5 (00:40:f6:cc:fb:e5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 10.128.1.115 (10.128.1.115), Dst: 10.128.255.255 (10.128.255.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 9 1.499894 10.128.1.64 10.128.255.255 NBNS Name query NB WPAD.UCT.EXP.<00> Frame 9 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: Foxconn_38:f6:2b (00:01:6c:38:f6:2b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 10.128.1.64 (10.128.1.64), Dst: 10.128.255.255 (10.128.255.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 10 1.552328 3com_4e:c5:cb Broadcast ARP Who has 10.128.1.34? Tell 10.128.255.254 Frame 10 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 11 1.594316 Intel_4e:d8:94 Broadcast ARP Who has 10.128.0.114? Gratuitous ARP Frame 11 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:d8:94 (00:0e:0c:4e:d8:94), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 12 1.760680 Intel_4e:c8:82 Broadcast ARP Who has 10.128.1.242? Gratuitous ARP Frame 12 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:c8:82 (00:0e:0c:4e:c8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 13 1.823846 10.128.1.115 10.128.255.255 NBNS Name query NB WPAD.UCT.EXP.<00> Frame 13 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: KatronCo_cc:fb:e5 (00:40:f6:cc:fb:e5), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 10.128.1.115 (10.128.1.115), Dst: 10.128.255.255 (10.128.255.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 14 2.552149 3com_4e:c5:cb Broadcast ARP Who has 10.128.1.34? Tell 10.128.255.254 Frame 14 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 15 3.148288 Intel_4e:d8:94 Broadcast ARP Who has 10.128.0.114? Gratuitous ARP Frame 15 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:d8:94 (00:0e:0c:4e:d8:94), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 16 3.310215 Intel_4e:c8:82 Broadcast ARP Who has 10.128.1.242? Gratuitous ARP Frame 16 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:c8:82 (00:0e:0c:4e:c8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 17 4.665102 Cisco_48:0c:92 AirvastT_0f:a2:f8 FC [Malformed Packet] Frame 17 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_48:0c:92 (00:11:20:48:0c:92), Dst: AirvastT_0f:a2:f8 (00:0a:e9:0f:a2:f8) MDS Header(Unknown(0)/Unknown(0)) [Malformed Packet: FC] No. Time Source Destination Protocol Info 18 4.697678 Intel_4e:d8:94 Broadcast ARP Who has 10.128.0.114? Gratuitous ARP Frame 18 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:d8:94 (00:0e:0c:4e:d8:94), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 19 4.859535 Intel_4e:c8:82 Broadcast ARP Who has 10.128.1.242? Gratuitous ARP Frame 19 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:c8:82 (00:0e:0c:4e:c8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 20 6.247176 Intel_4e:d8:94 Broadcast ARP Who has 10.128.0.114? Gratuitous ARP Frame 20 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:d8:94 (00:0e:0c:4e:d8:94), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 21 6.396495 Intel_4e:c8:82 Broadcast ARP Who has 10.128.1.242? Gratuitous ARP Frame 21 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:c8:82 (00:0e:0c:4e:c8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 22 7.784134 Intel_4e:d8:94 Broadcast ARP Who has 10.128.0.114? Gratuitous ARP Frame 22 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:d8:94 (00:0e:0c:4e:d8:94), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 23 7.943901 Intel_4e:c8:82 Broadcast ARP Who has 10.128.1.242? Gratuitous ARP Frame 23 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:c8:82 (00:0e:0c:4e:c8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 24 9.331442 Intel_4e:d8:94 Broadcast ARP Who has 10.128.0.114? Gratuitous ARP Frame 24 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:d8:94 (00:0e:0c:4e:d8:94), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 25 9.491392 Intel_4e:c8:82 Broadcast ARP Who has 10.128.1.242? Gratuitous ARP Frame 25 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:c8:82 (00:0e:0c:4e:c8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 26 10.878769 Intel_4e:d8:94 Broadcast ARP Who has 10.128.0.114? Gratuitous ARP Frame 26 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:d8:94 (00:0e:0c:4e:d8:94), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 27 11.038738 Intel_4e:c8:82 Broadcast ARP Who has 10.128.1.242? Gratuitous ARP Frame 27 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:c8:82 (00:0e:0c:4e:c8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 28 12.283224 00000000.0007e9e707e0 00000000.ffffffffffff IPX RIP Response Frame 28 (60 bytes on wire, 60 bytes captured) IEEE 802.3 Ethernet Logical-Link Control Internetwork Packet eXchange IPX Routing Information Protocol No. Time Source Destination Protocol Info 29 12.426180 Intel_4e:d8:94 Broadcast ARP Who has 10.128.0.114? Gratuitous ARP Frame 29 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:d8:94 (00:0e:0c:4e:d8:94), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 30 12.585937 Intel_4e:c8:82 Broadcast ARP Who has 10.128.1.242? Gratuitous ARP Frame 30 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:c8:82 (00:0e:0c:4e:c8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 31 13.973466 Intel_4e:d8:94 Broadcast ARP Who has 10.128.0.114? Gratuitous ARP Frame 31 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:d8:94 (00:0e:0c:4e:d8:94), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 32 14.133145 Intel_4e:c8:82 Broadcast ARP Who has 10.128.1.242? Gratuitous ARP Frame 32 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:c8:82 (00:0e:0c:4e:c8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 33 15.520681 Intel_4e:d8:94 Broadcast ARP Who has 10.128.0.114? Gratuitous ARP Frame 33 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:d8:94 (00:0e:0c:4e:d8:94), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 34 15.658463 Cisco_48:0c:92 AirvastT_0f:a2:f8 FC [Malformed Packet] Frame 34 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Cisco_48:0c:92 (00:11:20:48:0c:92), Dst: AirvastT_0f:a2:f8 (00:0a:e9:0f:a2:f8) MDS Header(Unknown(0)/Unknown(0)) [Malformed Packet: FC] No. Time Source Destination Protocol Info 35 15.686439 Intel_4e:c8:82 Broadcast ARP Who has 10.128.1.242? Gratuitous ARP Frame 35 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:c8:82 (00:0e:0c:4e:c8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 36 16.550969 10.128.1.34 255.255.255.255 DHCP DHCP Request - Transaction ID 0xdb812c1a Frame 36 (342 bytes on wire, 342 bytes captured) Ethernet II, Src: LucentTe_1f:33:11 (00:60:1d:1f:33:11), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 10.128.1.34 (10.128.1.34), Dst: 255.255.255.255 (255.255.255.255) User Datagram Protocol, Src Port: bootpc (68), Dst Port: bootps (67) Bootstrap Protocol No. Time Source Destination Protocol Info 37 16.559014 3com_4e:c5:cb Broadcast ARP Who has 10.128.1.34? Tell 10.128.255.254 Frame 37 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 38 17.074193 Intel_4e:d8:94 Broadcast ARP Who has 10.128.0.114? Gratuitous ARP Frame 38 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:d8:94 (00:0e:0c:4e:d8:94), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 39 17.237098 Intel_4e:c8:82 Broadcast ARP Who has 10.128.1.242? Gratuitous ARP Frame 39 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:c8:82 (00:0e:0c:4e:c8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 40 17.549480 3com_4e:c5:cb Broadcast ARP Who has 10.128.1.34? Tell 10.128.255.254 Frame 40 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 41 17.646138 137.158.152.199 10.128.1.52 TCP [TCP segment of a reassembled PDU] Frame 41 (348 bytes on wire, 348 bytes captured) Ethernet II, Src: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb), Dst: Intel_7d:dc:49 (00:0c:f1:7d:dc:49) Internet Protocol, Src: 137.158.152.199 (137.158.152.199), Dst: 10.128.1.52 (10.128.1.52) Transmission Control Protocol, Src Port: webcache (8080), Dst Port: 39099 (39099), Seq: 0, Ack: 0, Len: 282 No. Time Source Destination Protocol Info 42 17.646163 10.128.1.52 137.158.152.199 TCP 39099 > webcache [ACK] Seq=0 Ack=282 Win=1728 Len=0 TSV=59340598 TSER=42207662 Frame 42 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Intel_7d:dc:49 (00:0c:f1:7d:dc:49), Dst: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb) Internet Protocol, Src: 10.128.1.52 (10.128.1.52), Dst: 137.158.152.199 (137.158.152.199) Transmission Control Protocol, Src Port: 39099 (39099), Dst Port: webcache (8080), Seq: 0, Ack: 282, Len: 0 No. Time Source Destination Protocol Info 43 17.646167 137.158.152.199 10.128.1.52 HTTP HTTP/1.0 200 OK (text/plain) Frame 43 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb), Dst: Intel_7d:dc:49 (00:0c:f1:7d:dc:49) Internet Protocol, Src: 137.158.152.199 (137.158.152.199), Dst: 10.128.1.52 (10.128.1.52) Transmission Control Protocol, Src Port: webcache (8080), Dst Port: 39099 (39099), Seq: 282, Ack: 0, Len: 0 Hypertext Transfer Protocol Line-based text data: text/plain No. Time Source Destination Protocol Info 44 17.646334 10.128.1.52 137.158.152.199 TCP 39099 > webcache [FIN, ACK] Seq=0 Ack=283 Win=1728 Len=0 TSV=59340598 TSER=42207662 Frame 44 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Intel_7d:dc:49 (00:0c:f1:7d:dc:49), Dst: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb) Internet Protocol, Src: 10.128.1.52 (10.128.1.52), Dst: 137.158.152.199 (137.158.152.199) Transmission Control Protocol, Src Port: 39099 (39099), Dst Port: webcache (8080), Seq: 0, Ack: 283, Len: 0 No. Time Source Destination Protocol Info 45 17.647909 137.158.152.199 10.128.1.52 TCP webcache > 39099 [ACK] Seq=283 Ack=1 Win=33303 Len=0 TSV=42207662 TSER=59340598 Frame 45 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb), Dst: Intel_7d:dc:49 (00:0c:f1:7d:dc:49) Internet Protocol, Src: 137.158.152.199 (137.158.152.199), Dst: 10.128.1.52 (10.128.1.52) Transmission Control Protocol, Src Port: webcache (8080), Dst Port: 39099 (39099), Seq: 283, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 46 17.677994 10.128.1.52 137.158.152.199 TCP 39100 > webcache [SYN] Seq=0 Len=0 MSS=1460 TSV=59340606 TSER=0 WS=2 Frame 46 (74 bytes on wire, 74 bytes captured) Ethernet II, Src: Intel_7d:dc:49 (00:0c:f1:7d:dc:49), Dst: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb) Internet Protocol, Src: 10.128.1.52 (10.128.1.52), Dst: 137.158.152.199 (137.158.152.199) Transmission Control Protocol, Src Port: 39100 (39100), Dst Port: webcache (8080), Seq: 0, Len: 0 No. Time Source Destination Protocol Info 47 17.679170 137.158.152.199 10.128.1.52 TCP webcache > 39100 [SYN, ACK] Seq=0 Ack=1 Win=131070 Len=0 MSS=1460 WS=1 TSV=42207665 TSER=59340606 Frame 47 (78 bytes on wire, 78 bytes captured) Ethernet II, Src: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb), Dst: Intel_7d:dc:49 (00:0c:f1:7d:dc:49) Internet Protocol, Src: 137.158.152.199 (137.158.152.199), Dst: 10.128.1.52 (10.128.1.52) Transmission Control Protocol, Src Port: webcache (8080), Dst Port: 39100 (39100), Seq: 0, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 48 17.679188 10.128.1.52 137.158.152.199 TCP 39100 > webcache [ACK] Seq=1 Ack=1 Win=5840 Len=0 TSV=59340606 TSER=42207665 Frame 48 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: Intel_7d:dc:49 (00:0c:f1:7d:dc:49), Dst: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb) Internet Protocol, Src: 10.128.1.52 (10.128.1.52), Dst: 137.158.152.199 (137.158.152.199) Transmission Control Protocol, Src Port: 39100 (39100), Dst Port: webcache (8080), Seq: 1, Ack: 1, Len: 0 No. Time Source Destination Protocol Info 49 17.679241 10.128.1.52 137.158.152.199 TCP [TCP segment of a reassembled PDU] Frame 49 (703 bytes on wire, 703 bytes captured) Ethernet II, Src: Intel_7d:dc:49 (00:0c:f1:7d:dc:49), Dst: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb) Internet Protocol, Src: 10.128.1.52 (10.128.1.52), Dst: 137.158.152.199 (137.158.152.199) Transmission Control Protocol, Src Port: 39100 (39100), Dst Port: webcache (8080), Seq: 1, Ack: 1, Len: 637 No. Time Source Destination Protocol Info 50 17.947952 10.128.1.52 137.158.152.199 TCP [TCP Retransmission] [TCP segment of a reassembled PDU] Frame 50 (703 bytes on wire, 703 bytes captured) Ethernet II, Src: Intel_7d:dc:49 (00:0c:f1:7d:dc:49), Dst: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb) Internet Protocol, Src: 10.128.1.52 (10.128.1.52), Dst: 137.158.152.199 (137.158.152.199) Transmission Control Protocol, Src Port: 39100 (39100), Dst Port: webcache (8080), Seq: 1, Ack: 1, Len: 637 No. Time Source Destination Protocol Info 51 18.041756 137.158.152.199 10.128.1.52 TCP webcache > 39100 [ACK] Seq=1 Ack=638 Win=66608 Len=0 TSV=42207702 TSER=59340674 Frame 51 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb), Dst: Intel_7d:dc:49 (00:0c:f1:7d:dc:49) Internet Protocol, Src: 137.158.152.199 (137.158.152.199), Dst: 10.128.1.52 (10.128.1.52) Transmission Control Protocol, Src Port: webcache (8080), Dst Port: 39100 (39100), Seq: 1, Ack: 638, Len: 0 No. Time Source Destination Protocol Info 52 18.041778 10.128.1.52 137.158.152.199 HTTP POST http://wwwl.meebo.com/mcmd/events HTTP/1.1 (application/x-www-form-urlencoded) Frame 52 (154 bytes on wire, 154 bytes captured) Ethernet II, Src: Intel_7d:dc:49 (00:0c:f1:7d:dc:49), Dst: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb) Internet Protocol, Src: 10.128.1.52 (10.128.1.52), Dst: 137.158.152.199 (137.158.152.199) Transmission Control Protocol, Src Port: 39100 (39100), Dst Port: webcache (8080), Seq: 638, Ack: 1, Len: 88 [Reassembled TCP Segments (725 bytes): #50(637), #52(88)] Hypertext Transfer Protocol Line-based text data: application/x-www-form-urlencoded No. Time Source Destination Protocol Info 53 18.141936 137.158.152.199 10.128.1.52 TCP webcache > 39100 [ACK] Seq=1 Ack=726 Win=66608 Len=0 TSV=42207712 TSER=59340697 Frame 53 (66 bytes on wire, 66 bytes captured) Ethernet II, Src: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb), Dst: Intel_7d:dc:49 (00:0c:f1:7d:dc:49) Internet Protocol, Src: 137.158.152.199 (137.158.152.199), Dst: 10.128.1.52 (10.128.1.52) Transmission Control Protocol, Src Port: webcache (8080), Dst Port: 39100 (39100), Seq: 1, Ack: 726, Len: 0 No. Time Source Destination Protocol Info 54 18.224398 10.128.1.64 10.128.255.255 NBNS Name query NB WPAD.UCT.EXP.<00> Frame 54 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: Foxconn_38:f6:2b (00:01:6c:38:f6:2b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 10.128.1.64 (10.128.1.64), Dst: 10.128.255.255 (10.128.255.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 55 18.549301 3com_4e:c5:cb Broadcast ARP Who has 10.128.1.34? Tell 10.128.255.254 Frame 55 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: 3com_4e:c5:cb (00:0a:5e:4e:c5:cb), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request) No. Time Source Destination Protocol Info 56 18.624740 Intel_4e:d8:94 Broadcast ARP Who has 10.128.0.114? Gratuitous ARP Frame 56 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:d8:94 (00:0e:0c:4e:d8:94), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 57 18.784602 Intel_4e:c8:82 Broadcast ARP Who has 10.128.1.242? Gratuitous ARP Frame 57 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:c8:82 (00:0e:0c:4e:c8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 58 18.974370 10.128.1.64 10.128.255.255 NBNS Name query NB WPAD.UCT.EXP.<00> Frame 58 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: Foxconn_38:f6:2b (00:01:6c:38:f6:2b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 10.128.1.64 (10.128.1.64), Dst: 10.128.255.255 (10.128.255.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 59 19.491339 10.128.1.130 10.128.255.255 BROWSER Host Announcement COEOPNET, Workstation, Server, NT Workstation, Potential Browser Frame 59 (243 bytes on wire, 243 bytes captured) Ethernet II, Src: Micro-St_38:cf:d8 (00:13:d3:38:cf:d8), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 10.128.1.130 (10.128.1.130), Dst: 10.128.255.255 (10.128.255.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 60 19.724326 10.128.1.64 10.128.255.255 NBNS Name query NB WPAD.UCT.EXP.<00> Frame 60 (92 bytes on wire, 92 bytes captured) Ethernet II, Src: Foxconn_38:f6:2b (00:01:6c:38:f6:2b), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 10.128.1.64 (10.128.1.64), Dst: 10.128.255.255 (10.128.255.255) User Datagram Protocol, Src Port: netbios-ns (137), Dst Port: netbios-ns (137) NetBIOS Name Service No. Time Source Destination Protocol Info 61 20.172354 Intel_4e:d8:94 Broadcast ARP Who has 10.128.0.114? Gratuitous ARP Frame 61 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:d8:94 (00:0e:0c:4e:d8:94), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 62 20.322067 Intel_4e:c8:82 Broadcast ARP Who has 10.128.1.242? Gratuitous ARP Frame 62 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:c8:82 (00:0e:0c:4e:c8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 63 21.709846 Intel_4e:d8:94 Broadcast ARP Who has 10.128.0.114? Gratuitous ARP Frame 63 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:d8:94 (00:0e:0c:4e:d8:94), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 64 21.869892 Intel_4e:c8:82 Broadcast ARP Who has 10.128.1.242? Gratuitous ARP Frame 64 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:c8:82 (00:0e:0c:4e:c8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 65 23.097494 10.128.1.41 10.128.255.255 BROWSER Host Announcement OLABISI, Workstation, Server, Print Queue Server, NT Workstation, Potential Browser Frame 65 (247 bytes on wire, 247 bytes captured) Ethernet II, Src: Intel_0e:98:95 (00:11:11:0e:98:95), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Internet Protocol, Src: 10.128.1.41 (10.128.1.41), Dst: 10.128.255.255 (10.128.255.255) User Datagram Protocol, Src Port: netbios-dgm (138), Dst Port: netbios-dgm (138) NetBIOS Datagram Service SMB (Server Message Block Protocol) SMB MailSlot Protocol Microsoft Windows Browser Protocol No. Time Source Destination Protocol Info 66 23.257370 Intel_4e:d8:94 Broadcast ARP Who has 10.128.0.114? Gratuitous ARP Frame 66 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:d8:94 (00:0e:0c:4e:d8:94), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP) No. Time Source Destination Protocol Info 67 23.417014 Intel_4e:c8:82 Broadcast ARP Who has 10.128.1.242? Gratuitous ARP Frame 67 (60 bytes on wire, 60 bytes captured) Ethernet II, Src: Intel_4e:c8:82 (00:0e:0c:4e:c8:82), Dst: Broadcast (ff:ff:ff:ff:ff:ff) Address Resolution Protocol (request/gratuitous ARP)