I have looked out interface trafic tcpdum and I could not find problem.

Configuration: http://  

Terminal commads while recording trafic headers:

joni@mpi2:/etc/apache2/SSL$ ping6 ipv6.google.com
PING ipv6.google.com(arn06s01-in-x12.1e100.net) 56 data bytes
^X^C
--- ipv6.google.com ping statistics ---
44 packets transmitted, 0 received, 100% packet loss, time 43344ms

joni@mpi2:/etc/apache2/SSL$ ping lut.fi
PING lut.fi (157.24.2.14) 56(84) bytes of data.
64 bytes from www.lut.fi (157.24.2.14): icmp_req=1 ttl=57 time=29.8 ms
64 bytes from www.lut.fi (157.24.2.14): icmp_req=2 ttl=57 time=28.8 ms
64 bytes from www.lut.fi (157.24.2.14): icmp_req=3 ttl=57 time=28.9 ms
64 bytes from www.lut.fi (157.24.2.14): icmp_req=4 ttl=57 time=27.8 ms
^X^C
--- lut.fi ping statistics ---
4 packets transmitted, 4 received, 0% packet loss, time 3001ms
rtt min/avg/max/mdev = 27.858/28.883/29.875/0.724 ms

joni@mpi2:/etc/apache2/SSL$ sudo restart aiccu
Password: 
aiccu start/running

joni@mpi2:/etc/apache2/SSL$ ping6 ipv6.google.com
PING ipv6.google.com(arn06s01-in-x13.1e100.net) 56 data bytes
64 bytes from arn06s01-in-x13.1e100.net: icmp_seq=1 ttl=55 time=70.1 ms
64 bytes from arn06s01-in-x13.1e100.net: icmp_seq=2 ttl=55 time=38.1 ms
64 bytes from arn06s01-in-x13.1e100.net: icmp_seq=3 ttl=55 time=46.8 ms
64 bytes from arn06s01-in-x13.1e100.net: icmp_seq=4 ttl=55 time=45.5 ms
64 bytes from arn06s01-in-x13.1e100.net: icmp_seq=5 ttl=55 time=43.8 ms
^X^C
--- ipv6.google.com ping statistics ---
5 packets transmitted, 5 received, 0% packet loss, time 4005ms
rtt min/avg/max/mdev = 38.165/48.899/70.102/11.006 ms
joni@mpi2:/etc/apache2/SSL$

sixxs:

11:23:08.842817 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 1, length 64
11:23:09.850798 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 2, length 64
11:23:10.858779 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 3, length 64
11:23:11.866814 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 4, length 64
11:23:12.874787 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 5, length 64
11:23:13.882830 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 6, length 64
11:23:14.890877 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 7, length 64
11:23:15.898851 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 8, length 64
11:23:16.906911 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 9, length 64
11:23:17.914885 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 10, length 64
11:23:18.922854 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 11, length 64
11:23:19.930843 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 12, length 64
11:23:20.938836 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 13, length 64
11:23:21.946775 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 14, length 64
11:23:22.337443 IP6 cl-868.hel-01.fi.sixxs.net.3783 > nlede01.sixxs.net.domain: 20109+ [1au] AAAA? daisy.ubuntu.com. (45)
11:23:22.954823 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 15, length 64
11:23:23.962773 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 16, length 64
11:23:24.337727 IP6 cl-868.hel-01.fi.sixxs.net.34628 > 2001:b18:0:1000:2e0:81ff:fe61:ae0d.domain: 38498+ [1au] AAAA? daisy.ubuntu.com. (45)
11:23:24.970868 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 17, length 64
11:23:25.978886 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 18, length 64
11:23:26.337877 IP6 cl-868.hel-01.fi.sixxs.net.8423 > frejus.ITgate.net.domain: 26716+ [1au] AAAA? daisy.ubuntu.com. (45)
11:23:26.986846 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 19, length 64
11:23:27.994824 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 20, length 64
11:23:29.002782 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 21, length 64
11:23:29.148840 IP6 cl-868.hel-01.fi.sixxs.net.42964 > danava.canonical.com.http: Flags [S], seq 2786433147, win 12200, options [mss 1220,sackOK,TS val 276740661 ecr 0,nop,wscale 7], length 0
11:23:30.010812 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 22, length 64
11:23:30.148680 IP6 cl-868.hel-01.fi.sixxs.net.42964 > danava.canonical.com.http: Flags [S], seq 2786433147, win 12200, options [mss 1220,sackOK,TS val 276740911 ecr 0,nop,wscale 7], length 0
11:23:31.018836 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 23, length 64
11:23:32.026909 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 24, length 64
11:23:32.152658 IP6 cl-868.hel-01.fi.sixxs.net.42964 > danava.canonical.com.http: Flags [S], seq 2786433147, win 12200, options [mss 1220,sackOK,TS val 276741412 ecr 0,nop,wscale 7], length 0
11:23:33.034835 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 25, length 64
11:23:34.042885 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 26, length 64
11:23:35.050861 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 27, length 64
11:23:36.058869 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 28, length 64
11:23:36.160680 IP6 cl-868.hel-01.fi.sixxs.net.42964 > danava.canonical.com.http: Flags [S], seq 2786433147, win 12200, options [mss 1220,sackOK,TS val 276742414 ecr 0,nop,wscale 7], length 0
11:23:37.066832 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 29, length 64
11:23:38.074792 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 30, length 64
11:23:39.082800 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 31, length 64
11:23:40.090860 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 32, length 64
11:23:41.098820 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 33, length 64
11:23:42.106798 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 34, length 64
11:23:43.114846 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 35, length 64
11:23:44.122824 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 36, length 64
11:23:44.168715 IP6 cl-868.hel-01.fi.sixxs.net.42964 > danava.canonical.com.http: Flags [S], seq 2786433147, win 12200, options [mss 1220,sackOK,TS val 276744416 ecr 0,nop,wscale 7], length 0
11:23:45.130829 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 37, length 64
11:23:46.138826 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 38, length 64
11:23:47.146804 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 39, length 64
11:23:48.154869 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 40, length 64
11:23:49.162773 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 41, length 64
11:23:50.170863 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 42, length 64
11:23:51.178866 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 43, length 64
11:23:52.186834 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x12.1e100.net: ICMP6, echo request, seq 44, length 64
11:24:00.200698 IP6 cl-868.hel-01.fi.sixxs.net.42964 > danava.canonical.com.http: Flags [S], seq 2786433147, win 12200, options [mss 1220,sackOK,TS val 276748424 ecr 0,nop,wscale 7], length 0
11:24:29.205551 IP6 cl-868.hel-01.fi.sixxs.net.36556 > urayuli.canonical.com.http: Flags [S], seq 3590494431, win 12200, options [mss 1220,sackOK,TS val 276755675 ecr 0,nop,wscale 7], length 0
11:24:30.204668 IP6 cl-868.hel-01.fi.sixxs.net.36556 > urayuli.canonical.com.http: Flags [S], seq 3590494431, win 12200, options [mss 1220,sackOK,TS val 276755925 ecr 0,nop,wscale 7], length 0
11:24:32.208669 IP6 cl-868.hel-01.fi.sixxs.net.36556 > urayuli.canonical.com.http: Flags [S], seq 3590494431, win 12200, options [mss 1220,sackOK,TS val 276756426 ecr 0,nop,wscale 7], length 0
11:24:36.216671 IP6 cl-868.hel-01.fi.sixxs.net.36556 > urayuli.canonical.com.http: Flags [S], seq 3590494431, win 12200, options [mss 1220,sackOK,TS val 276757428 ecr 0,nop,wscale 7], length 0
11:24:44.232711 IP6 cl-868.hel-01.fi.sixxs.net.36556 > urayuli.canonical.com.http: Flags [S], seq 3590494431, win 12200, options [mss 1220,sackOK,TS val 276759432 ecr 0,nop,wscale 7], length 0

THEN TCPDUMP STOPS WHEN GIVING RESTART AICCU DUE SIXXS DROPS OUT

11:25:14.085849 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x13.1e100.net: ICMP6, echo request, seq 1, length 64
11:25:14.155880 IP6 arn06s01-in-x13.1e100.net > cl-868.hel-01.fi.sixxs.net: ICMP6, echo reply, seq 1, length 64
11:25:15.087502 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x13.1e100.net: ICMP6, echo request, seq 2, length 64
11:25:15.125598 IP6 arn06s01-in-x13.1e100.net > cl-868.hel-01.fi.sixxs.net: ICMP6, echo reply, seq 2, length 64
11:25:16.088713 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x13.1e100.net: ICMP6, echo request, seq 3, length 64
11:25:16.135450 IP6 arn06s01-in-x13.1e100.net > cl-868.hel-01.fi.sixxs.net: ICMP6, echo reply, seq 3, length 64
11:25:17.089844 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x13.1e100.net: ICMP6, echo request, seq 4, length 64
11:25:17.135328 IP6 arn06s01-in-x13.1e100.net > cl-868.hel-01.fi.sixxs.net: ICMP6, echo reply, seq 4, length 64
11:25:18.091752 IP6 cl-868.hel-01.fi.sixxs.net > arn06s01-in-x13.1e100.net: ICMP6, echo request, seq 5, length 64
11:25:18.135557 IP6 arn06s01-in-x13.1e100.net > cl-868.hel-01.fi.sixxs.net: ICMP6, echo reply, seq 5, length 64
11:25:29.265816 IP6 cl-868.hel-01.fi.sixxs.net.55554 > obake.canonical.com.http: Flags [S], seq 3668397537, win 12200, options [mss 1220,sackOK,TS val 276770690 ecr 0,nop,wscale 7], length 0
11:25:29.445238 IP6 obake.canonical.com.http > cl-868.hel-01.fi.sixxs.net.55554: Flags [S.], seq 2410147854, ack 3668397538, win 14280, options [mss 1440,sackOK,TS val 471762363 ecr 276770690,nop,wscale 8], length 0
11:25:29.445332 IP6 cl-868.hel-01.fi.sixxs.net.55554 > obake.canonical.com.http: Flags [.], ack 1, win 96, options [nop,nop,TS val 276770735 ecr 471762363], length 0
11:25:29.445442 IP6 cl-868.hel-01.fi.sixxs.net.55554 > obake.canonical.com.http: Flags [P.], seq 1:232, ack 1, win 96, options [nop,nop,TS val 276770735 ecr 471762363], length 231
11:25:29.446316 IP6 cl-868.hel-01.fi.sixxs.net.43006 > danava.canonical.com.http: Flags [S], seq 2205270605, win 12200, options [mss 1220,sackOK,TS val 276770735 ecr 0,nop,wscale 7], length 0
11:25:29.617480 IP6 obake.canonical.com.http > cl-868.hel-01.fi.sixxs.net.55554: Flags [.], ack 232, win 60, options [nop,nop,TS val 471762404 ecr 276770735], length 0

ppp0 trafic tcpdump:

11:23:08.056928 IP 10.175.110.58.39116 > ns8.sci.fi.domain: 41074+ AAAA? ipv6.google.com. (33)
11:23:08.142564 IP ns8.sci.fi.domain > 10.175.110.58.34973: 5409 0/1/0 (95)
11:23:08.142749 IP 10.175.110.58.58657 > ns8.sci.fi.domain: 34623+ AAAA? daisy.ubuntu.com. (34)
11:23:08.342432 IP ns8.sci.fi.domain > 10.175.110.58.39116: 41074 2/0/0 CNAME ipv6.l.google.com., AAAA 2a00:1450:400f:800::1012 (82)
11:23:08.343013 IP 10.175.110.58.33453 > ns8.sci.fi.domain: 40980+ PTR? 2.1.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.0.f.0.0.4.0.5.4.1.0.0.a.2.ip6.arpa. (90)
11:23:08.532382 IP ns8.sci.fi.domain > 10.175.110.58.58657: 34623 0/1/0 (95)
11:23:08.532612 IP 10.175.110.58.39524 > ns8.sci.fi.domain: 28742+ A? daisy.ubuntu.com. (34)
11:23:08.842406 IP ns8.sci.fi.domain > 10.175.110.58.33453: 40980 1/0/0 PTR arn06s01-in-x12.1e100.net. (129)
11:23:08.863583 IP 10.175.110.58.40607 > ns8.sci.fi.domain: 6928+ PTR? 255.0.168.192.in-addr.arpa. (44)
11:23:08.881020 IP 10.175.110.58.56427 > ns8.sci.fi.domain: 30538+ PTR? 2.1.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.0.f.0.0.4.0.5.4.1.0.0.a.2.ip6.arpa. (90)
11:23:08.922371 IP ns8.sci.fi.domain > 10.175.110.58.39524: 28742 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:23:08.923364 IP 10.175.110.58.60728 > ns8.sci.fi.domain: 45779+ AAAA? daisy.ubuntu.com. (34)
11:23:09.045602 IP 10.175.110.58.49429 > ns8.sci.fi.domain: 20075+ PTR? 255.255.255.255.in-addr.arpa. (46)
11:23:09.212465 IP ns8.sci.fi.domain > 10.175.110.58.40607: 6928 NXDomain 0/1/0 (93)
11:23:09.212865 IP 10.175.110.58.53576 > ns8.sci.fi.domain: 64513+ PTR? 255.255.255.255.in-addr.arpa. (46)
11:23:09.288707 IP 10.175.110.58.58704 > decker.sci.fi.domain: 41923+ [1au] A? talk.l.google.com. (46)
11:23:09.301492 IP 10.175.110.58.59030 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [S], seq 795455188, win 14600, options [mss 1460,sackOK,TS val 7446023 ecr 0,nop,wscale 6], length 0
11:23:09.301743 IP 10.175.110.58.39578 > ns8.sci.fi.domain: 32148+ PTR? 17.107.252.173.in-addr.arpa. (45)
11:23:09.432361 IP ns8.sci.fi.domain > 10.175.110.58.56427: 30538 1/0/0 PTR arn06s01-in-x12.1e100.net. (129)
11:23:09.432750 IP 10.175.110.58.40135 > ns8.sci.fi.domain: 12169+ PTR? 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.3.0.0.0.1.0.8.b.4.1.1.0.0.2.ip6.arpa. (90)
11:23:09.536416 IP 10.175.110.58.43820 > lb-in-f188.1e100.net.5228: Flags [S], seq 1594269626, win 14600, options [mss 1460,sackOK,TS val 7446047 ecr 0,nop,wscale 6], length 0
11:23:09.602378 IP ns8.sci.fi.domain > 10.175.110.58.60728: 45779 0/1/0 (95)
11:23:09.602564 IP 10.175.110.58.50944 > ns8.sci.fi.domain: 63699+ AAAA? daisy.ubuntu.com. (34)
11:23:09.741032 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [S], seq 3059271554, win 14600, options [mss 1460,sackOK,TS val 7446067 ecr 0,nop,wscale 6], length 0
11:23:09.792378 IP ns8.sci.fi.domain > 10.175.110.58.49429: 20075 NXDomain 0/1/0 (114)
11:23:09.792750 IP 10.175.110.58.58560 > ns8.sci.fi.domain: 49191+ PTR? 0.0.0.0.in-addr.arpa. (38)
11:23:10.131386 IP 10.175.110.58.56712 > owa.lut.fi.imaps: Flags [S], seq 1693328296, win 14600, options [mss 1460,sackOK,TS val 7446106 ecr 0,nop,wscale 6], length 0
11:23:10.131651 IP 10.175.110.58.59858 > owa.lut.fi.imaps: Flags [S], seq 2545477516, win 14600, options [mss 1460,sackOK,TS val 7446106 ecr 0,nop,wscale 6], length 0
11:23:10.143519 IP 10.175.110.58.49209 > decker.sci.fi.domain: 61901+ [1au] A? imap4-rr.mail.global.gm0.yahoodns.net. (66)
11:23:10.149749 IP 10.175.110.58.59695 > ns8.sci.fi.domain: 30433+ AAAA? krb5auth3.stanford.edu. (40)
11:23:10.187844 IP 10.175.110.58.47425 > ns8.sci.fi.domain: 15294+ AAAA? krb5auth3.stanford.edu. (40)
11:23:10.197556 IP 10.175.110.58.55233 > ns8.sci.fi.domain: 29981+ AAAA? krb5auth3.stanford.edu. (40)
11:23:10.199367 IP 10.175.110.58.43885 > ns8.sci.fi.domain: 27731+ AAAA? krb5auth3.stanford.edu. (40)
11:23:10.207519 IP 10.175.110.58.32916 > ns8.sci.fi.domain: 46659+ AAAA? krb5auth3.stanford.edu. (40)
11:23:10.208038 IP 10.175.110.58.36368 > ns8.sci.fi.domain: 387+ AAAA? krb5auth3.stanford.edu. (40)
11:23:10.226859 IP 10.175.110.58.58242 > ns8.sci.fi.domain: 61406+ AAAA? krb5auth3.stanford.edu. (40)
11:23:10.236927 IP 10.175.110.58.39244 > ns8.sci.fi.domain: 48081+ AAAA? krb5auth3.stanford.edu. (40)
11:23:10.294898 IP 10.175.110.58.59030 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [S], seq 795455188, win 14600, options [mss 1460,sackOK,TS val 7446123 ecr 0,nop,wscale 6], length 0
11:23:10.557274 IP 10.175.110.58.43820 > lb-in-f188.1e100.net.5228: Flags [S], seq 1594269626, win 14600, options [mss 1460,sackOK,TS val 7446147 ecr 0,nop,wscale 6], length 0
11:23:10.691049 IP ns8.sci.fi.domain > 10.175.110.58.60728: 45779 0/1/0 (95)
11:23:10.691128 IP 10.175.110.58 > ns8.sci.fi: ICMP 10.175.110.58 udp port 60728 unreachable, length 131
11:23:10.691173 IP ns8.sci.fi.domain > 10.175.110.58.49429: 20075 NXDomain 0/1/0 (114)
11:23:10.691195 IP 10.175.110.58 > ns8.sci.fi: ICMP 10.175.110.58 udp port 49429 unreachable, length 150
11:23:10.737141 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [S], seq 3059271554, win 14600, options [mss 1460,sackOK,TS val 7446167 ecr 0,nop,wscale 6], length 0
11:23:10.820930 IP ns8.sci.fi.domain > 10.175.110.58.53576: 64513 NXDomain 0/1/0 (114)
11:23:10.821263 IP 10.175.110.58.59520 > ns8.sci.fi.domain: 43390+ PTR? 0.0.0.0.in-addr.arpa. (38)
11:23:10.831157 IP decker.sci.fi.domain > 10.175.110.58.58704: 41923 1/0/0 A 173.194.69.125 (51)
11:23:10.952221 IP 10.175.110.58.41343 > ns8.sci.fi.domain: 4198+ PTR? 65.248.171.69.in-addr.arpa. (44)
11:23:10.981103 IP 10.175.110.58.56712 > owa.lut.fi.imaps: Flags [.], ack 2051392351, win 229, options [nop,nop,TS val 7446191 ecr 2415959772], length 0
11:23:10.981332 IP 10.175.110.58.59858 > owa.lut.fi.imaps: Flags [.], ack 3603039451, win 229, options [nop,nop,TS val 7446191 ecr 2415959772], length 0
11:23:10.981359 IP 10.175.110.58.43820 > lb-in-f188.1e100.net.5228: Flags [.], ack 1481803430, win 229, options [nop,nop,TS val 7446191 ecr 559393233], length 0
11:23:10.981588 IP 10.175.110.58.43820 > lb-in-f188.1e100.net.5228: Flags [.], ack 1, win 229, options [nop,nop,TS val 7446191 ecr 559393251,nop,nop,sack 1 {0:1}], length 0
11:23:10.981841 IP 10.175.110.58.59030 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 190751220, win 229, options [nop,nop,TS val 7446191 ecr 3197590690], length 0
11:23:10.985286 IP 10.175.110.58.53394 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [S], seq 4144735210, win 14600, options [mss 1460,sackOK,TS val 7446192 ecr 0,nop,wscale 6], length 0
11:23:11.184303 IP ns8.sci.fi.domain > 10.175.110.58.54495: 41059 1/0/0 PTR xmpp-shv-04-frc3.facebook.com. (88)
11:23:11.184436 IP owa.lut.fi.imaps > 10.175.110.58.56712: Flags [P.], seq 3711:3758, ack 498, win 4384, options [nop,nop,TS val 2415960078 ecr 7446203], length 47
11:23:11.184493 IP 10.175.110.58.37649 > ns8.sci.fi.domain: 46445+ PTR? 31.3.24.157.in-addr.arpa. (42)
11:23:11.251742 IP 10.175.110.58.56415 > ns8.sci.fi.domain: 28330+ PTR? 43.69.125.188.in-addr.arpa. (44)
11:23:11.261193 IP owa.lut.fi.imaps > 10.175.110.58.59858: Flags [.], ack 535, win 4735, options [nop,nop,TS val 2415960198 ecr 7446216], length 0
11:23:11.261289 IP owa.lut.fi.imaps > 10.175.110.58.56712: Flags [.], ack 587, win 4787, options [nop,nop,TS val 2415960200 ecr 7446216], length 0
11:23:11.261425 IP owa.lut.fi.imaps > 10.175.110.58.56712: Flags [P.], seq 3836:4002, ack 587, win 4787, options [nop,nop,TS val 2415960201 ecr 7446216], length 166
11:23:11.263028 IP 10.175.110.58.59858 > owa.lut.fi.imaps: Flags [P.], seq 535:587, ack 3836, win 359, options [nop,nop,TS val 7446219 ecr 2415960198], length 52
11:23:11.265529 IP 10.175.110.58.56712 > owa.lut.fi.imaps: Flags [P.], seq 587:643, ack 4002, win 402, options [nop,nop,TS val 7446220 ecr 2415960201], length 56
11:23:11.271161 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [.], ack 3285877516, win 663, options [nop,nop,TS val 497058050 ecr 7446213], length 0
11:23:11.271283 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 0:138, ack 1, win 663, options [nop,nop,TS val 497058050 ecr 7446213], length 138
11:23:11.271411 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 138:379, ack 1, win 663, options [nop,nop,TS val 497058050 ecr 7446213], length 241
11:23:11.271524 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.43820: Flags [P.], seq 4237:4284, ack 306, win 661, options [nop,nop,TS val 559393663 ecr 7446215], length 47
11:23:11.273088 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 138, win 245, options [nop,nop,TS val 7446220 ecr 497058050], length 0
11:23:11.273779 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 379, win 262, options [nop,nop,TS val 7446220 ecr 497058050], length 0
11:23:11.275369 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1:52, ack 379, win 262, options [nop,nop,TS val 7446221 ecr 497058050], length 51
11:23:11.283606 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.53394: Flags [.], ack 4144735395, win 15544, options [nop,nop,TS val 415437839 ecr 7446212], length 0
11:23:11.283786 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.53394: Flags [.], seq 0:1388, ack 1, win 15544, options [nop,nop,TS val 415437839 ecr 7446212], length 1388
11:23:11.283893 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.53394: Flags [P.], seq 2776:3438, ack 1, win 15544, options [nop,nop,TS val 415437839 ecr 7446212], length 662
11:23:11.286100 IP 10.175.110.58.53394 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 1388, win 16656, options [nop,nop,TS val 7446222 ecr 415437839], length 0
11:23:11.286345 IP 10.175.110.58.53394 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 1388, win 16656, options [nop,nop,TS val 7446222 ecr 415437839,nop,nop,sack 1 {2776:3438}], length 0
11:23:11.293284 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.53394: Flags [.], seq 1388:2776, ack 1, win 15544, options [nop,nop,TS val 415437839 ecr 7446212], length 1388
11:23:11.293331 IP owa.lut.fi.imaps > 10.175.110.58.59858: Flags [.], ack 587, win 4787, options [nop,nop,TS val 2415960232 ecr 7446219], length 0
11:23:11.293454 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.59069: Flags [.], ack 2904865117, win 15544, options [nop,nop,TS val 415208582 ecr 7446213], length 0
11:23:11.293625 IP ns8.sci.fi.domain > 10.175.110.58.53932: 48633 NXDomain 0/1/0 (160)
11:23:11.294036 IP 10.175.110.58.52135 > ns8.sci.fi.domain: 2681+ PTR? 65.248.171.69.in-addr.arpa. (44)
11:23:11.294820 IP 10.175.110.58.43820 > lb-in-f188.1e100.net.5228: Flags [P.], seq 306:332, ack 4284, win 402, options [nop,nop,TS val 7446222 ecr 559393663], length 26
11:23:11.295633 IP 10.175.110.58.53394 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 3438, win 19432, options [nop,nop,TS val 7446223 ecr 415437839], length 0
11:23:11.303446 IP ns8.sci.fi.domain > 10.175.110.58.38313: 24510 NXDomain 0/1/0 (160)
11:23:11.303637 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.59069: Flags [.], seq 0:1388, ack 1, win 15544, options [nop,nop,TS val 415208582 ecr 7446213], length 1388
11:23:11.472186 IP 10.175.110.58.36911 > ns8.sci.fi.domain: 52632+ PTR? 125.69.194.173.in-addr.arpa. (45)
11:23:11.474699 IP 10.175.110.58.59069 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 3485, win 22208, options [nop,nop,TS val 7446241 ecr 415208728], length 0
11:23:11.480933 IP 10.175.110.58.56712 > owa.lut.fi.imaps: Flags [P.], seq 742:799, ack 4401, win 445, options [nop,nop,TS val 7446241 ecr 2415960393], length 57
11:23:11.483088 IP 10.175.110.58.43820 > lb-in-f188.1e100.net.5228: Flags [.], ack 4657, win 402, options [nop,nop,TS val 7446241 ecr 559393859], length 0
11:23:11.484774 IP 10.175.110.58.43820 > lb-in-f188.1e100.net.5228: Flags [P.], seq 507:646, ack 4657, win 402, options [nop,nop,TS val 7446242 ecr 559393859], length 139
11:23:11.500951 IP ns8.sci.fi.domain > 10.175.110.58.36911: 52632 1/0/0 PTR bk-in-f125.1e100.net. (79)
11:23:11.504675 IP 10.175.110.58.59858 > owa.lut.fi.imaps: Flags [.], ack 4336, win 445, options [nop,nop,TS val 7446244 ecr 2415960405], length 0
11:23:11.510960 IP owa.lut.fi.imaps > 10.175.110.58.56712: Flags [.], ack 799, win 4999, options [nop,nop,TS val 2415960450 ecr 7446241], length 0
11:23:11.511040 IP owa.lut.fi.imaps > 10.175.110.58.56712: Flags [P.], seq 4401:4469, ack 799, win 4999, options [nop,nop,TS val 2415960452 ecr 7446241], length 68
11:23:11.521193 IP owa.lut.fi.imaps > 10.175.110.58.56712: Flags [P.], seq 4469:4584, ack 799, win 4999, options [nop,nop,TS val 2415960453 ecr 7446241], length 115
11:23:11.522405 IP 10.175.110.58.56712 > owa.lut.fi.imaps: Flags [.], ack 4584, win 445, options [nop,nop,TS val 7446245 ecr 2415960452], length 0
11:23:11.530936 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 3600:3643, ack 546, win 661, options [nop,nop,TS val 497058311 ecr 7446238], length 43
11:23:11.531010 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.43820: Flags [.], ack 646, win 661, options [nop,nop,TS val 559393923 ecr 7446242], length 0
11:23:11.532362 IP 10.175.110.58.43820 > lb-in-f188.1e100.net.5228: Flags [P.], seq 646:783, ack 4657, win 402, options [nop,nop,TS val 7446246 ecr 559393923], length 137
11:23:11.543918 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 546:681, ack 3643, win 381, options [nop,nop,TS val 7446247 ecr 497058311], length 135
11:23:11.553526 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.53394: Flags [P.], seq 3485:3770, ack 315, win 16616, options [nop,nop,TS val 415438110 ecr 7446240], length 285
11:23:11.553601 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.52731: Flags [.], ack 3059273231, win 80, options [nop,nop,TS val 39435034 ecr 7446230], length 0
11:23:11.553780 IP ns8.sci.fi.domain > 10.175.110.58.53854: 37895 NXDomain 0/1/0 (160)
11:23:11.553918 IP ns8.sci.fi.domain > 10.175.110.58.42799: 30975 NXDomain 0/1/0 (160)
11:23:11.554524 IP 10.175.110.58.35911 > ns8.sci.fi.domain: 36163+ PTR? 31.3.24.157.in-addr.arpa. (42)
11:23:11.554558 IP 10.175.110.58.35271 > ns8.sci.fi.domain: 5122+ PTR? 31.3.24.157.in-addr.arpa. (42)
11:23:11.555080 IP 10.175.110.58.53394 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 3770, win 22208, options [nop,nop,TS val 7446249 ecr 415438110], length 0
11:23:11.555302 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.59030: Flags [.], seq 440:1828, ack 357, win 31, options [nop,nop,TS val 3197591294 ecr 7446230], length 1388
11:23:11.557575 IP 10.175.110.58.53394 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 315:383, ack 3770, win 22208, options [nop,nop,TS val 7446249 ecr 415438110], length 68
11:23:11.563799 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.59030: Flags [.], seq 1828:3216, ack 357, win 31, options [nop,nop,TS val 3197591294 ecr 7446230], length 1388
11:23:11.563974 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.59030: Flags [.], seq 3216:4604, ack 357, win 31, options [nop,nop,TS val 3197591294 ecr 7446230], length 1388
11:23:11.563975 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.59030: Flags [P.], seq 4604:4632, ack 357, win 31, options [nop,nop,TS val 3197591294 ecr 7446230], length 28
11:23:11.566090 IP 10.175.110.58.59030 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 3216, win 332, options [nop,nop,TS val 7446250 ecr 3197591294], length 0
11:23:11.566300 IP 10.175.110.58.59030 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 4632, win 375, options [nop,nop,TS val 7446250 ecr 3197591294], length 0
11:23:11.570913 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.59069: Flags [P.], seq 3485:3770, ack 315, win 16616, options [nop,nop,TS val 415208852 ecr 7446241], length 285
11:23:11.572134 IP 10.175.110.58.59069 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 3770, win 24984, options [nop,nop,TS val 7446250 ecr 415208852], length 0
11:23:11.574268 IP 10.175.110.58.59069 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 315:383, ack 3770, win 24984, options [nop,nop,TS val 7446250 ecr 415208852], length 68
11:23:11.575238 IP 10.175.110.58.56712 > owa.lut.fi.imaps: Flags [P.], seq 799:832, ack 4584, win 445, options [nop,nop,TS val 7446251 ecr 2415960452], length 33
11:23:11.580930 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.43820: Flags [.], ack 783, win 661, options [nop,nop,TS val 559393971 ecr 7446246], length 0
11:23:11.581050 IP ns8.sci.fi.domain > 10.175.110.58.35271: 5122 1/0/0 PTR owa.lut.fi. (66)
11:23:11.581439 IP 10.175.110.58.52354 > ns8.sci.fi.domain: 818+ PTR? 43.69.125.188.in-addr.arpa. (44)
11:23:11.583351 IP 10.175.110.58.59030 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 357:667, ack 4632, win 375, options [nop,nop,TS val 7446251 ecr 3197591294], length 310
11:23:11.590983 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.52731: Flags [P.], seq 0:29, ack 1, win 80, options [nop,nop,TS val 39435066 ecr 7446230], length 29
11:23:11.591061 IP mqtt-shv-06-ash2.facebook.com.https > 10.175.110.58.36686: Flags [P.], seq 967838527:967838554, ack 3432889494, win 91, options [nop,nop,TS val 271720477 ecr 7443856], length 27
11:23:11.591169 IP mqtt-shv-06-ash2.facebook.com.https > 10.175.110.58.36686: Flags [F.], seq 27, ack 1, win 91, options [nop,nop,TS val 271720477 ecr 7443856], length 0
11:23:11.591269 IP 10.175.110.58.39278 > ns8.sci.fi.domain: 38126+ PTR? 16.102.252.173.in-addr.arpa. (45)
11:23:11.592618 IP 10.175.110.58.36686 > mqtt-shv-06-ash2.facebook.com.https: Flags [R], seq 3432889494, win 0, length 0
11:23:11.601911 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1:27, ack 29, win 245, options [nop,nop,TS val 7446253 ecr 39435066], length 26
11:23:11.602131 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 27:53, ack 29, win 245, options [nop,nop,TS val 7446253 ecr 39435066], length 26
11:23:11.602421 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 53:80, ack 29, win 245, options [nop,nop,TS val 7446253 ecr 39435066], length 27
11:23:11.602690 IP 10.175.110.58.36686 > mqtt-shv-06-ash2.facebook.com.https: Flags [R], seq 3432889494, win 0, length 0
11:23:11.602968 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 80:107, ack 29, win 245, options [nop,nop,TS val 7446253 ecr 39435066], length 27
11:23:11.603244 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 107:150, ack 29, win 245, options [nop,nop,TS val 7446253 ecr 39435066], length 43
11:23:11.605089 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 150:176, ack 29, win 245, options [nop,nop,TS val 7446254 ecr 39435066], length 26
11:23:11.605901 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 176:203, ack 29, win 245, options [nop,nop,TS val 7446254 ecr 39435066], length 27
11:23:11.606124 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 203:244, ack 29, win 245, options [nop,nop,TS val 7446254 ecr 39435066], length 41
11:23:11.607079 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 244:270, ack 29, win 245, options [nop,nop,TS val 7446254 ecr 39435066], length 26
11:23:11.608514 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 270:297, ack 29, win 245, options [nop,nop,TS val 7446254 ecr 39435066], length 27
11:23:11.609355 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 297:329, ack 29, win 245, options [nop,nop,TS val 7446254 ecr 39435066], length 32
11:23:11.609651 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 329:355, ack 29, win 245, options [nop,nop,TS val 7446254 ecr 39435066], length 26
11:23:11.610741 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 355:382, ack 29, win 245, options [nop,nop,TS val 7446254 ecr 39435066], length 27
11:23:11.611485 IP owa.lut.fi.imaps > 10.175.110.58.56712: Flags [.], ack 832, win 5032, options [nop,nop,TS val 2415960544 ecr 7446251], length 0
11:23:11.611618 IP owa.lut.fi.imaps > 10.175.110.58.56712: Flags [P.], seq 4584:4650, ack 832, win 5032, options [nop,nop,TS val 2415960545 ecr 7446251], length 66
11:23:11.611761 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 3643:3802, ack 681, win 661, options [nop,nop,TS val 497058390 ecr 7446247], length 159
11:23:11.611928 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 3802:4020, ack 681, win 661, options [nop,nop,TS val 497058390 ecr 7446247], length 218
11:23:11.614405 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 4020, win 468, options [nop,nop,TS val 7446254 ecr 497058390], length 0
11:23:11.620911 IP ns8.sci.fi.domain > 10.175.110.58.35911: 36163 1/0/0 PTR owa.lut.fi. (66)
11:23:11.621251 IP 10.175.110.58.57776 > ns8.sci.fi.domain: 3456+ PTR? 43.69.125.188.in-addr.arpa. (44)
11:23:11.625370 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 681:854, ack 4020, win 468, options [nop,nop,TS val 7446256 ecr 497058390], length 173
11:23:11.650965 IP ns8.sci.fi.domain > 10.175.110.58.57776: 3456 1/0/0 PTR imap4.mail.vip.ir2.yahoo.com. (86)
11:23:11.651636 IP 10.175.110.58.46544 > ns8.sci.fi.domain: 46957+ PTR? 16.102.252.173.in-addr.arpa. (45)
11:23:11.654813 IP 10.175.110.58.56712 > owa.lut.fi.imaps: Flags [.], ack 4650, win 445, options [nop,nop,TS val 7446259 ecr 2415960545], length 0
11:23:11.658874 IP 10.175.110.58.59858 > owa.lut.fi.imaps: Flags [P.], seq 692:725, ack 4336, win 445, options [nop,nop,TS val 7446259 ecr 2415960405], length 33
11:23:11.690990 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.53394: Flags [.], ack 383, win 16616, options [nop,nop,TS val 415438247 ecr 7446249], length 0
11:23:11.781611 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.52731: Flags [.], ack 329, win 80, options [nop,nop,TS val 39435257 ecr 7446254], length 0
11:23:11.781733 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.52731: Flags [.], ack 355, win 80, options [nop,nop,TS val 39435259 ecr 7446254], length 0
11:23:11.781799 IP 10.175.110.58.39190 > ns8.sci.fi.domain: 20281+ PTR? 16.102.252.173.in-addr.arpa. (45)
11:23:11.781881 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.52731: Flags [.], ack 382, win 80, options [nop,nop,TS val 39435261 ecr 7446254], length 0
11:23:11.794450 IP 10.175.110.58.59030 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 667:810, ack 4675, win 375, options [nop,nop,TS val 7446272 ecr 3197591500], length 143
11:23:11.811228 IP ns8.sci.fi.domain > 10.175.110.58.46544: 46957 1/0/0 PTR mqtt-shv-06-ash2.facebook.com. (88)
11:23:11.811311 IP ns8.sci.fi.domain > 10.175.110.58.39190: 20281 1/0/0 PTR mqtt-shv-06-ash2.facebook.com. (88)
11:23:11.811630 IP 10.175.110.58.42547 > ns8.sci.fi.domain: 12780+ PTR? 125.69.194.173.in-addr.arpa. (45)
11:23:11.811853 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.53394: Flags [.], ack 432, win 16616, options [nop,nop,TS val 415438369 ecr 7446265], length 0
11:23:11.811854 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.53394: Flags [P.], seq 3858:4220, ack 432, win 16616, options [nop,nop,TS val 415438370 ecr 7446265], length 362
11:23:11.821175 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [.], ack 989, win 661, options [nop,nop,TS val 497058602 ecr 7446269], length 0
11:23:11.821351 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 4092:4251, ack 989, win 661, options [nop,nop,TS val 497058602 ecr 7446269], length 159
11:23:11.821436 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 4251:4409, ack 989, win 661, options [nop,nop,TS val 497058602 ecr 7446269], length 158
11:23:11.823275 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 4409, win 554, options [nop,nop,TS val 7446275 ecr 497058602], length 0
11:23:11.824661 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 989:1136, ack 4409, win 554, options [nop,nop,TS val 7446275 ecr 497058602], length 147
11:23:11.841152 IP ns8.sci.fi.domain > 10.175.110.58.42547: 12780 1/0/0 PTR bk-in-f125.1e100.net. (79)
11:23:11.844659 IP 10.175.110.58.53394 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4220, win 24984, options [nop,nop,TS val 7446278 ecr 415438370], length 0
11:23:11.851213 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.59069: Flags [.], ack 427, win 16616, options [nop,nop,TS val 415209136 ecr 7446268], length 0
11:23:11.851316 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.59069: Flags [P.], seq 3858:4222, ack 427, win 16616, options [nop,nop,TS val 415209137 ecr 7446268], length 364
11:23:11.884796 IP 10.175.110.58.59069 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4222, win 27760, options [nop,nop,TS val 7446282 ecr 415209137], length 0
11:23:11.891283 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 4409:4576, ack 1136, win 661, options [nop,nop,TS val 497058670 ecr 7446275], length 167
11:23:11.891379 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 4576:4598, ack 1136, win 661, options [nop,nop,TS val 497058670 ecr 7446275], length 22
11:23:11.896645 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 4598, win 598, options [nop,nop,TS val 7446283 ecr 497058670], length 0
11:23:11.897458 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1136:1247, ack 4598, win 598, options [nop,nop,TS val 7446283 ecr 497058670], length 111
11:23:11.940962 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.52731: Flags [.], ack 1181, win 91, options [nop,nop,TS val 39435419 ecr 7446269], length 0
11:23:11.941176 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.52731: Flags [P.], seq 29:64, ack 1181, win 91, options [nop,nop,TS val 39435420 ecr 7446269], length 35
11:23:11.944634 IP 10.175.110.58.44166 > kerberos3.Stanford.EDU.0: Flags [S], seq 2628450710, win 14600, options [mss 1460,sackOK,TS val 276736360 ecr 0,nop,wscale 7], length 0
11:23:11.944703 IP 10.175.110.58.44167 > kerberos3.Stanford.EDU.0: Flags [S], seq 1360986281, win 14600, options [mss 1460,sackOK,TS val 276736360 ecr 0,nop,wscale 7], length 0
11:23:11.945882 IP 10.175.110.58.44168 > kerberos3.Stanford.EDU.0: Flags [S], seq 2891511757, win 14600, options [mss 1460,sackOK,TS val 276736360 ecr 0,nop,wscale 7], length 0
11:23:11.945915 IP 10.175.110.58.44169 > kerberos3.Stanford.EDU.0: Flags [S], seq 4004033096, win 14600, options [mss 1460,sackOK,TS val 276736360 ecr 0,nop,wscale 7], length 0
11:23:11.946153 IP 10.175.110.58.44170 > kerberos3.Stanford.EDU.0: Flags [S], seq 3345751102, win 14600, options [mss 1460,sackOK,TS val 276736360 ecr 0,nop,wscale 7], length 0
11:23:11.952717 IP 10.175.110.58.44171 > kerberos3.Stanford.EDU.0: Flags [S], seq 2762631443, win 14600, options [mss 1460,sackOK,TS val 276736362 ecr 0,nop,wscale 7], length 0
11:23:11.961215 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.59030: Flags [P.], seq 4675:5034, ack 810, win 39, options [nop,nop,TS val 3197591696 ecr 7446272], length 359
11:23:11.961314 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 4598:4654, ack 1247, win 661, options [nop,nop,TS val 497058742 ecr 7446283], length 56
11:23:11.975048 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [.], ack 64, win 245, options [nop,nop,TS val 7446291 ecr 39435420], length 0
11:23:11.978622 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1247:1512, ack 4654, win 598, options [nop,nop,TS val 7446291 ecr 497058742], length 265
11:23:11.994935 IP 10.175.110.58.59030 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 5034, win 419, options [nop,nop,TS val 7446293 ecr 3197591696], length 0
11:23:11.999136 IP 10.175.110.58.59030 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 810:951, ack 5034, win 419, options [nop,nop,TS val 7446293 ecr 3197591696], length 141
11:23:12.003854 IP 10.175.110.58.44172 > kerberos3.Stanford.EDU.0: Flags [S], seq 3204808245, win 14600, options [mss 1460,sackOK,TS val 276736374 ecr 0,nop,wscale 7], length 0
11:23:12.003893 IP 10.175.110.58.44173 > kerberos3.Stanford.EDU.0: Flags [S], seq 3035560638, win 14600, options [mss 1460,sackOK,TS val 276736374 ecr 0,nop,wscale 7], length 0
11:23:12.080899 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [.], ack 1512, win 661, options [nop,nop,TS val 497058866 ecr 7446291], length 0
11:23:12.082201 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1512:1610, ack 4654, win 598, options [nop,nop,TS val 7446301 ecr 497058866], length 98
11:23:12.150942 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [.], ack 1610, win 661, options [nop,nop,TS val 497058928 ecr 7446301], length 0
11:23:12.163251 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 1:521, ack 26, win 661, options [nop,nop,TS val 3049719841 ecr 262789258], length 520
11:23:12.163353 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 521:959, ack 26, win 661, options [nop,nop,TS val 3049719841 ecr 262789258], length 438
11:23:12.163570 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 521, win 642, options [nop,nop,TS val 262792331 ecr 3049719841], length 0
11:23:12.163621 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 959, win 639, options [nop,nop,TS val 262792331 ecr 3049719841], length 0
11:23:12.164420 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 26:124, ack 959, win 639, options [nop,nop,TS val 262792331 ecr 3049719841], length 98
11:23:12.173521 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.40000: Flags [P.], seq 1:425, ack 26, win 670, options [nop,nop,TS val 249966324 ecr 109088365], length 424
11:23:12.173627 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.46720: Flags [P.], seq 1554300271:1554300705, ack 2848227452, win 661, options [nop,nop,TS val 696889821 ecr 7443838], length 434
11:23:12.173755 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 4654:5079, ack 1610, win 661, options [nop,nop,TS val 497058953 ecr 7446301], length 425
11:23:12.173807 IP 10.175.110.58.40000 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 425, win 331, options [nop,nop,TS val 109093800 ecr 249966324], length 0
11:23:12.173831 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 5079:5101, ack 1610, win 661, options [nop,nop,TS val 497058953 ecr 7446301], length 22
11:23:12.173939 IP 10.175.110.58.45491 > ns8.sci.fi.domain: 54737+ PTR? 43.0.168.192.in-addr.arpa. (43)
11:23:12.174014 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 5101:5554, ack 1610, win 661, options [nop,nop,TS val 497058953 ecr 7446301], length 453
11:23:12.174030 IP 10.175.110.58.41142 > ns8.sci.fi.domain: 46398+ PTR? 43.0.168.192.in-addr.arpa. (43)
11:23:12.174280 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 5554:5912, ack 1610, win 661, options [nop,nop,TS val 497058953 ecr 7446301], length 358
11:23:12.174922 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 5912:6281, ack 1610, win 661, options [nop,nop,TS val 497058956 ecr 7446301], length 369
11:23:12.177126 IP 10.175.110.58.46720 > bk-in-f125.1e100.net.xmpp-client: Flags [R], seq 2848227452, win 0, length 0
11:23:12.177348 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 6281, win 771, options [nop,nop,TS val 7446311 ecr 497058953], length 0
11:23:12.181340 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 6281:6650, ack 1610, win 661, options [nop,nop,TS val 497058956 ecr 7446301], length 369
11:23:12.181429 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 6650:7059, ack 1610, win 661, options [nop,nop,TS val 497058957 ecr 7446301], length 409
11:23:12.188367 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1610:1827, ack 7059, win 858, options [nop,nop,TS val 7446312 ecr 497058956], length 217
11:23:12.201196 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.59030: Flags [.], ack 951, win 41, options [nop,nop,TS val 3197591939 ecr 7446293], length 0
11:23:12.201287 IP ns8.sci.fi.domain > 10.175.110.58.45491: 54737 NXDomain 0/1/0 (92)
11:23:12.201400 IP ns8.sci.fi.domain > 10.175.110.58.41142: 46398 NXDomain 0/1/0 (92)
11:23:12.230875 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [.], ack 124, win 661, options [nop,nop,TS val 3049719912 ecr 262792331], length 0
11:23:12.241315 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 7059:7798, ack 1610, win 661, options [nop,nop,TS val 497059020 ecr 7446311], length 739
11:23:12.275007 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 7798, win 901, options [nop,nop,TS val 7446321 ecr 497059020], length 0
11:23:12.290832 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [.], ack 1827, win 661, options [nop,nop,TS val 497059076 ecr 7446312], length 0
11:23:12.413290 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 959:1479, ack 124, win 661, options [nop,nop,TS val 3049720091 ecr 262792331], length 520
11:23:12.413351 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 1479:1613, ack 124, win 661, options [nop,nop,TS val 3049720091 ecr 262792331], length 134
11:23:12.413490 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 1613:2133, ack 124, win 661, options [nop,nop,TS val 3049720092 ecr 262792331], length 520
11:23:12.414391 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 124:222, ack 2133, win 633, options [nop,nop,TS val 262792394 ecr 3049720091], length 98
11:23:12.423230 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.40000: Flags [P.], seq 425:585, ack 26, win 670, options [nop,nop,TS val 249966572 ecr 109093800], length 160
11:23:12.423381 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 7798:8824, ack 1827, win 661, options [nop,nop,TS val 497059199 ecr 7446321], length 1026
11:23:12.423466 IP 10.175.110.58.40000 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 585, win 331, options [nop,nop,TS val 109093862 ecr 249966572], length 0
11:23:12.423482 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 8824:8878, ack 1827, win 661, options [nop,nop,TS val 497059199 ecr 7446321], length 54
11:23:12.423629 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 8878:9008, ack 1827, win 661, options [nop,nop,TS val 497059201 ecr 7446321], length 130
11:23:12.425167 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 8824, win 945, options [nop,nop,TS val 7446336 ecr 497059199], length 0
11:23:12.425515 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 9008, win 988, options [nop,nop,TS val 7446336 ecr 497059199], length 0
11:23:12.481179 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [.], ack 222, win 661, options [nop,nop,TS val 3049720162 ecr 262792394], length 0
11:23:12.481477 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 222:320, ack 2133, win 646, options [nop,nop,TS val 262792410 ecr 3049720162], length 98
11:23:12.541179 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.59030: Flags [P.], seq 5034:5106, ack 951, win 41, options [nop,nop,TS val 3197592276 ecr 7446293], length 72
11:23:12.541400 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [.], ack 320, win 661, options [nop,nop,TS val 3049720228 ecr 262792410], length 0
11:23:12.542373 IP 10.175.110.58.59030 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 5106, win 419, options [nop,nop,TS val 7446347 ecr 3197592276], length 0
11:23:12.543447 IP 10.175.110.58.59030 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 951:1094, ack 5106, win 419, options [nop,nop,TS val 7446347 ecr 3197592276], length 143
11:23:12.641816 IP 10.175.110.58.56712 > owa.lut.fi.imaps: Flags [P.], seq 832:859, ack 4650, win 445, options [nop,nop,TS val 7446357 ecr 2415960545], length 27
11:23:12.642816 IP 10.175.110.58.56712 > owa.lut.fi.imaps: Flags [F.], seq 859, ack 4650, win 445, options [nop,nop,TS val 7446357 ecr 2415960545], length 0
11:23:12.643322 IP 10.175.110.58.59858 > owa.lut.fi.imaps: Flags [P.], seq 725:752, ack 4402, win 445, options [nop,nop,TS val 7446357 ecr 2415960629], length 27
11:23:12.644076 IP 10.175.110.58.59858 > owa.lut.fi.imaps: Flags [F.], seq 752, ack 4402, win 445, options [nop,nop,TS val 7446357 ecr 2415960629], length 0
11:23:12.671317 IP owa.lut.fi.imaps > 10.175.110.58.56712: Flags [.], ack 859, win 5059, options [nop,nop,TS val 2415961610 ecr 7446357], length 0
11:23:12.671413 IP owa.lut.fi.imaps > 10.175.110.58.56712: Flags [F.], seq 4650, ack 859, win 5059, options [nop,nop,TS val 2415961610 ecr 7446357], length 0
11:23:12.672966 IP 10.175.110.58.56712 > owa.lut.fi.imaps: Flags [.], ack 4651, win 445, options [nop,nop,TS val 7446360 ecr 2415961610], length 0
11:23:12.681152 IP owa.lut.fi.imaps > 10.175.110.58.56712: Flags [F.], seq 4650, ack 860, win 5059, options [nop,nop,TS val 2415961613 ecr 7446357], length 0
11:23:12.681259 IP owa.lut.fi.imaps > 10.175.110.58.59858: Flags [.], ack 752, win 4952, options [nop,nop,TS val 2415961614 ecr 7446357], length 0
11:23:12.681374 IP owa.lut.fi.imaps > 10.175.110.58.59858: Flags [F.], seq 4402, ack 752, win 4952, options [nop,nop,TS val 2415961614 ecr 7446357], length 0
11:23:12.681504 IP owa.lut.fi.imaps > 10.175.110.58.59858: Flags [F.], seq 4402, ack 753, win 4952, options [nop,nop,TS val 2415961614 ecr 7446357], length 0
11:23:12.683666 IP 10.175.110.58.59858 > owa.lut.fi.imaps: Flags [.], ack 4403, win 445, options [nop,nop,TS val 7446361 ecr 2415961614], length 0
11:23:12.700872 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.59030: Flags [.], ack 1094, win 43, options [nop,nop,TS val 3197592445 ecr 7446347], length 0
11:23:12.711859 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.59030: Flags [P.], seq 5106:5431, ack 1094, win 43, options [nop,nop,TS val 3197592446 ecr 7446347], length 325
11:23:12.717447 IP 10.175.110.58.53394 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 432:465, ack 4220, win 24984, options [nop,nop,TS val 7446365 ecr 415438370], length 33
11:23:12.718848 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [S], seq 887599991, win 14600, options [mss 1460,sackOK,TS val 7446365 ecr 0,nop,wscale 6], length 0
11:23:12.721637 IP 10.175.110.58.59030 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 1094:1241, ack 5431, win 462, options [nop,nop,TS val 7446365 ecr 3197592446], length 147
11:23:12.750863 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [S.], seq 2978815177, ack 887599992, win 4200, options [mss 1400,nop,wscale 0,nop,nop,TS val 2415961688 ecr 7446365,sackOK,eol], length 0
11:23:12.751883 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [.], ack 1, win 229, options [nop,nop,TS val 7446368 ecr 2415961688], length 0
11:23:12.755728 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [P.], seq 1:185, ack 1, win 229, options [nop,nop,TS val 7446369 ecr 2415961688], length 184
11:23:12.778011 IP 10.175.110.58.56713 > ns8.sci.fi.domain: 21462+ AAAA? krb5auth3.stanford.edu. (40)
11:23:12.788726 IP 10.175.110.58.51774 > ns8.sci.fi.domain: 11453+ AAAA? krb5auth3.stanford.edu. (40)
11:23:12.793309 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [.], seq 1:1389, ack 185, win 4200, options [nop,nop,TS val 2415961726 ecr 7446369], length 1388
11:23:12.795266 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [.], ack 1389, win 272, options [nop,nop,TS val 7446373 ecr 2415961726], length 0
11:23:12.800183 IP 10.175.110.58.47891 > ns8.sci.fi.domain: 65171+ AAAA? krb5auth3.stanford.edu. (40)
11:23:12.800472 IP 10.175.110.58.37336 > ns8.sci.fi.domain: 64187+ AAAA? krb5auth3.stanford.edu. (40)
11:23:12.803613 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [.], seq 1389:2777, ack 185, win 4200, options [nop,nop,TS val 2415961726 ecr 7446369], length 1388
11:23:12.803719 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [P.], seq 2777:3711, ack 185, win 4200, options [nop,nop,TS val 2415961726 ecr 7446369], length 934
11:23:12.803836 IP ns8.sci.fi.domain > 10.175.110.58.56713: 21462 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:12.803914 IP 10.175.110.58.54821 > ns8.sci.fi.domain: 10254+ A? krb5auth3.stanford.edu. (40)
11:23:12.805473 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [.], ack 2777, win 315, options [nop,nop,TS val 7446374 ecr 2415961726], length 0
11:23:12.805839 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [.], ack 3711, win 359, options [nop,nop,TS val 7446374 ecr 2415961726], length 0
11:23:12.820899 IP ns8.sci.fi.domain > 10.175.110.58.51774: 11453 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:12.820981 IP 10.175.110.58.40249 > ns8.sci.fi.domain: 25507+ A? krb5auth3.stanford.edu. (40)
11:23:12.821827 IP 10.175.110.58.38428 > ns8.sci.fi.domain: 19254+ AAAA? krb5auth3.stanford.edu. (40)
11:23:12.831113 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [P.], seq 185:499, ack 3711, win 359, options [nop,nop,TS val 7446376 ecr 2415961726], length 314
11:23:12.831201 IP ns8.sci.fi.domain > 10.175.110.58.47891: 65171 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:12.831278 IP ns8.sci.fi.domain > 10.175.110.58.37336: 64187 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:12.831352 IP 10.175.110.58.43540 > ns8.sci.fi.domain: 37888+ A? krb5auth3.stanford.edu. (40)
11:23:12.831409 IP 10.175.110.58.37593 > ns8.sci.fi.domain: 56104+ A? krb5auth3.stanford.edu. (40)
11:23:12.831421 IP ns8.sci.fi.domain > 10.175.110.58.54821: 10254 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:12.831590 IP 10.175.110.58.37621 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:12.838587 IP 10.175.110.58.35998 > ns8.sci.fi.domain: 40191+ AAAA? krb5auth3.stanford.edu. (40)
11:23:12.840892 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.53394: Flags [.], ack 465, win 16616, options [nop,nop,TS val 415439403 ecr 7446365], length 0
11:23:12.851211 IP ns8.sci.fi.domain > 10.175.110.58.40249: 25507 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:12.851389 IP 10.175.110.58.43179 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:12.857664 IP 10.175.110.58.52831 > ns8.sci.fi.domain: 50590+ AAAA? krb5auth3.stanford.edu. (40)
11:23:12.860913 IP ns8.sci.fi.domain > 10.175.110.58.38428: 19254 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:12.861103 IP 10.175.110.58.53457 > ns8.sci.fi.domain: 15523+ A? krb5auth3.stanford.edu. (40)
11:23:12.861162 IP ns8.sci.fi.domain > 10.175.110.58.43540: 37888 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:12.861334 IP 10.175.110.58.40195 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:12.871163 IP ns8.sci.fi.domain > 10.175.110.58.37593: 56104 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:12.871262 IP ns8.sci.fi.domain > 10.175.110.58.35998: 40191 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:12.871366 IP 10.175.110.58.57442 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:12.871506 IP 10.175.110.58.40046 > ns8.sci.fi.domain: 48549+ A? krb5auth3.stanford.edu. (40)
11:23:12.871557 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [P.], seq 3711:3758, ack 499, win 4384, options [nop,nop,TS val 2415961806 ecr 7446376], length 47
11:23:12.881307 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [P.], seq 3758:3836, ack 499, win 4698, options [nop,nop,TS val 2415961814 ecr 7446376], length 78
11:23:12.881422 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.59030: Flags [P.], seq 5431:5631, ack 1241, win 45, options [nop,nop,TS val 3197592624 ecr 7446365], length 200
11:23:12.881525 IP ns8.sci.fi.domain > 10.175.110.58.52831: 50590 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:12.881674 IP 10.175.110.58.59725 > ns8.sci.fi.domain: 37991+ A? krb5auth3.stanford.edu. (40)
11:23:12.884501 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [.], ack 3836, win 359, options [nop,nop,TS val 7446381 ecr 2415961806], length 0
11:23:12.885938 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [P.], seq 499:536, ack 3836, win 359, options [nop,nop,TS val 7446382 ecr 2415961806], length 37
11:23:12.886803 IP 10.175.110.58.59030 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 1241:1352, ack 5631, win 506, options [nop,nop,TS val 7446382 ecr 3197592624], length 111
11:23:12.888784 IP 10.175.110.58.43678 > ns8.sci.fi.domain: 59793+ AAAA? krb5auth3.stanford.edu. (40)
11:23:12.891428 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.53394: Flags [P.], seq 4220:4266, ack 465, win 16616, options [nop,nop,TS val 415439446 ecr 7446365], length 46
11:23:12.891564 IP ns8.sci.fi.domain > 10.175.110.58.53457: 15523 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:12.891734 IP 10.175.110.58.58781 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:12.892725 IP 10.175.110.58.53394 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4266, win 24984, options [nop,nop,TS val 7446382 ecr 415439446], length 0
11:23:12.893617 IP 10.175.110.58.59069 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 427:460, ack 4222, win 27760, options [nop,nop,TS val 7446382 ecr 415209137], length 33
11:23:12.893844 IP 10.175.110.58.53394 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 465:514, ack 4266, win 24984, options [nop,nop,TS val 7446382 ecr 415439446], length 49
11:23:12.900908 IP ns8.sci.fi.domain > 10.175.110.58.40046: 48549 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:12.901078 IP 10.175.110.58.49016 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:12.910886 IP ns8.sci.fi.domain > 10.175.110.58.59725: 37991 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:12.911067 IP 10.175.110.58.40978 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:12.921194 IP ns8.sci.fi.domain > 10.175.110.58.43678: 59793 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:12.921264 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [.], ack 536, win 4735, options [nop,nop,TS val 2415961856 ecr 7446382], length 0
11:23:12.921388 IP 10.175.110.58.38233 > ns8.sci.fi.domain: 3824+ A? krb5auth3.stanford.edu. (40)
11:23:12.922705 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [P.], seq 536:588, ack 3836, win 359, options [nop,nop,TS val 7446385 ecr 2415961856], length 52
11:23:12.944625 IP 10.175.110.58.44166 > kerberos3.Stanford.EDU.0: Flags [S], seq 2628450710, win 14600, options [mss 1460,sackOK,TS val 276736610 ecr 0,nop,wscale 7], length 0
11:23:12.944658 IP 10.175.110.58.44168 > kerberos3.Stanford.EDU.0: Flags [S], seq 2891511757, win 14600, options [mss 1460,sackOK,TS val 276736610 ecr 0,nop,wscale 7], length 0
11:23:12.944682 IP 10.175.110.58.44167 > kerberos3.Stanford.EDU.0: Flags [S], seq 1360986281, win 14600, options [mss 1460,sackOK,TS val 276736610 ecr 0,nop,wscale 7], length 0
11:23:12.944696 IP 10.175.110.58.44170 > kerberos3.Stanford.EDU.0: Flags [S], seq 3345751102, win 14600, options [mss 1460,sackOK,TS val 276736610 ecr 0,nop,wscale 7], length 0
11:23:12.944706 IP 10.175.110.58.44169 > kerberos3.Stanford.EDU.0: Flags [S], seq 4004033096, win 14600, options [mss 1460,sackOK,TS val 276736610 ecr 0,nop,wscale 7], length 0
11:23:12.951465 IP ns8.sci.fi.domain > 10.175.110.58.38233: 3824 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:12.951535 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [.], ack 588, win 4787, options [nop,nop,TS val 2415961892 ecr 7446385], length 0
11:23:12.951677 IP 10.175.110.58.38434 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:12.952628 IP 10.175.110.58.44171 > kerberos3.Stanford.EDU.0: Flags [S], seq 2762631443, win 14600, options [mss 1460,sackOK,TS val 276736612 ecr 0,nop,wscale 7], length 0
11:23:12.961261 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [P.], seq 3836:4002, ack 588, win 4787, options [nop,nop,TS val 2415961893 ecr 7446385], length 166
11:23:12.965206 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [P.], seq 588:644, ack 4002, win 402, options [nop,nop,TS val 7446390 ecr 2415961893], length 56
11:23:12.981184 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.53394: Flags [.], ack 514, win 16616, options [nop,nop,TS val 415439541 ecr 7446382], length 0
11:23:12.981400 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.53394: Flags [P.], seq 4266:4628, ack 514, win 16616, options [nop,nop,TS val 415439542 ecr 7446382], length 362
11:23:12.990912 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.59069: Flags [P.], seq 4222:4268, ack 460, win 16616, options [nop,nop,TS val 415210278 ecr 7446382], length 46
11:23:12.992281 IP 10.175.110.58.59069 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4268, win 27760, options [nop,nop,TS val 7446392 ecr 415210278], length 0
11:23:12.993313 IP 10.175.110.58.59069 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 460:504, ack 4268, win 27760, options [nop,nop,TS val 7446392 ecr 415210278], length 44
11:23:13.000678 IP 10.175.110.58.44173 > kerberos3.Stanford.EDU.0: Flags [S], seq 3035560638, win 14600, options [mss 1460,sackOK,TS val 276736624 ecr 0,nop,wscale 7], length 0
11:23:13.000715 IP 10.175.110.58.44172 > kerberos3.Stanford.EDU.0: Flags [S], seq 3204808245, win 14600, options [mss 1460,sackOK,TS val 276736624 ecr 0,nop,wscale 7], length 0
11:23:13.001157 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [.], ack 644, win 4843, options [nop,nop,TS val 2415961934 ecr 7446390], length 0
11:23:13.014735 IP 10.175.110.58.53394 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4628, win 27760, options [nop,nop,TS val 7446395 ecr 415439542], length 0
11:23:13.041183 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [P.], seq 4002:4050, ack 644, win 4843, options [nop,nop,TS val 2415961974 ecr 7446390], length 48
11:23:13.043239 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [P.], seq 644:677, ack 4050, win 402, options [nop,nop,TS val 7446397 ecr 2415961974], length 33
11:23:13.060871 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.59030: Flags [P.], seq 5631:5770, ack 1352, win 45, options [nop,nop,TS val 3197592789 ecr 7446382], length 139
11:23:13.074037 IP 10.175.110.58.59030 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 1352:1617, ack 5770, win 549, options [nop,nop,TS val 7446400 ecr 3197592789], length 265
11:23:13.081237 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [.], ack 677, win 4876, options [nop,nop,TS val 2415962013 ecr 7446397], length 0
11:23:13.081333 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [P.], seq 4050:4097, ack 677, win 4876, options [nop,nop,TS val 2415962014 ecr 7446397], length 47
11:23:13.083893 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [P.], seq 677:721, ack 4097, win 402, options [nop,nop,TS val 7446401 ecr 2415962014], length 44
11:23:13.084923 IP 10.175.110.58.40128 > owa.lut.fi.imaps: Flags [S], seq 2583797807, win 14600, options [mss 1460,sackOK,TS val 7446402 ecr 0,nop,wscale 6], length 0
11:23:13.111272 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.59069: Flags [P.], seq 4268:4632, ack 504, win 16616, options [nop,nop,TS val 415210396 ecr 7446392], length 364
11:23:13.111358 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [.], ack 721, win 4920, options [nop,nop,TS val 2415962052 ecr 7446401], length 0
11:23:13.120926 IP owa.lut.fi.imaps > 10.175.110.58.40128: Flags [S.], seq 3096767280, ack 2583797808, win 4200, options [mss 1400,nop,wscale 0,nop,nop,TS val 2415962054 ecr 7446402,sackOK,eol], length 0
11:23:13.122409 IP 10.175.110.58.40128 > owa.lut.fi.imaps: Flags [.], ack 1, win 229, options [nop,nop,TS val 7446405 ecr 2415962054], length 0
11:23:13.131231 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [P.], seq 4097:4382, ack 721, win 4920, options [nop,nop,TS val 2415962071 ecr 7446401], length 285
11:23:13.132296 IP 10.175.110.58.40128 > owa.lut.fi.imaps: Flags [P.], seq 1:185, ack 1, win 229, options [nop,nop,TS val 7446406 ecr 2415962054], length 184
11:23:13.144920 IP 10.175.110.58.59069 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4632, win 30536, options [nop,nop,TS val 7446408 ecr 415210396], length 0
11:23:13.155968 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [P.], seq 721:776, ack 4382, win 445, options [nop,nop,TS val 7446409 ecr 2415962071], length 55
11:23:13.173275 IP owa.lut.fi.imaps > 10.175.110.58.40128: Flags [.], seq 1:1389, ack 185, win 4200, options [nop,nop,TS val 2415962104 ecr 7446406], length 1388
11:23:13.175423 IP 10.175.110.58.40128 > owa.lut.fi.imaps: Flags [.], ack 1389, win 272, options [nop,nop,TS val 7446411 ecr 2415962104], length 0
11:23:13.183331 IP owa.lut.fi.imaps > 10.175.110.58.40128: Flags [.], seq 1389:2777, ack 185, win 4200, options [nop,nop,TS val 2415962104 ecr 7446406], length 1388
11:23:13.183333 IP owa.lut.fi.imaps > 10.175.110.58.40128: Flags [P.], seq 2777:3711, ack 185, win 4200, options [nop,nop,TS val 2415962104 ecr 7446406], length 934
11:23:13.185533 IP 10.175.110.58.40128 > owa.lut.fi.imaps: Flags [.], ack 2777, win 315, options [nop,nop,TS val 7446412 ecr 2415962104], length 0
11:23:13.185763 IP 10.175.110.58.40128 > owa.lut.fi.imaps: Flags [.], ack 3711, win 359, options [nop,nop,TS val 7446412 ecr 2415962104], length 0
11:23:13.190947 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [.], ack 776, win 4975, options [nop,nop,TS val 2415962124 ecr 7446409], length 0
11:23:13.191037 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [P.], seq 4382:4448, ack 776, win 4975, options [nop,nop,TS val 2415962125 ecr 7446409], length 66
11:23:13.215195 IP 10.175.110.58.40128 > owa.lut.fi.imaps: Flags [P.], seq 185:499, ack 3711, win 359, options [nop,nop,TS val 7446414 ecr 2415962104], length 314
11:23:13.216077 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [P.], seq 776:833, ack 4448, win 445, options [nop,nop,TS val 7446415 ecr 2415962125], length 57
11:23:13.241288 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.59030: Flags [P.], seq 5770:6000, ack 1617, win 47, options [nop,nop,TS val 3197592978 ecr 7446400], length 230
11:23:13.242673 IP 10.175.110.58.59030 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 1617:1715, ack 6000, win 592, options [nop,nop,TS val 7446417 ecr 3197592978], length 98
11:23:13.261183 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [.], ack 833, win 5032, options [nop,nop,TS val 2415962190 ecr 7446415], length 0
11:23:13.261281 IP owa.lut.fi.imaps > 10.175.110.58.40128: Flags [P.], seq 3711:3758, ack 499, win 4384, options [nop,nop,TS val 2415962190 ecr 7446414], length 47
11:23:13.261417 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [P.], seq 4448:4516, ack 833, win 5032, options [nop,nop,TS val 2415962196 ecr 7446415], length 68
11:23:13.261547 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [P.], seq 4516:4631, ack 833, win 5032, options [nop,nop,TS val 2415962198 ecr 7446415], length 115
11:23:13.261673 IP owa.lut.fi.imaps > 10.175.110.58.40128: Flags [P.], seq 3758:3836, ack 499, win 4698, options [nop,nop,TS val 2415962198 ecr 7446414], length 78
11:23:13.266082 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [.], ack 4631, win 445, options [nop,nop,TS val 7446420 ecr 2415962196], length 0
11:23:13.276970 IP 10.175.110.58.40128 > owa.lut.fi.imaps: Flags [.], ack 3836, win 359, options [nop,nop,TS val 7446421 ecr 2415962190], length 0
11:23:13.277207 IP 10.175.110.58.40128 > owa.lut.fi.imaps: Flags [P.], seq 499:536, ack 3836, win 359, options [nop,nop,TS val 7446421 ecr 2415962190], length 37
11:23:13.310839 IP owa.lut.fi.imaps > 10.175.110.58.40128: Flags [.], ack 536, win 4735, options [nop,nop,TS val 2415962248 ecr 7446421], length 0
11:23:13.311960 IP 10.175.110.58.40128 > owa.lut.fi.imaps: Flags [P.], seq 536:588, ack 3836, win 359, options [nop,nop,TS val 7446424 ecr 2415962248], length 52
11:23:13.340116 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [P.], seq 833:866, ack 4631, win 445, options [nop,nop,TS val 7446427 ecr 2415962196], length 33
11:23:13.340817 IP owa.lut.fi.imaps > 10.175.110.58.40128: Flags [.], ack 588, win 4787, options [nop,nop,TS val 2415962280 ecr 7446424], length 0
11:23:13.351351 IP owa.lut.fi.imaps > 10.175.110.58.40128: Flags [P.], seq 3836:4002, ack 588, win 4787, options [nop,nop,TS val 2415962285 ecr 7446424], length 166
11:23:13.355208 IP 10.175.110.58.40128 > owa.lut.fi.imaps: Flags [P.], seq 588:644, ack 4002, win 402, options [nop,nop,TS val 7446429 ecr 2415962285], length 56
11:23:13.370845 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [.], ack 866, win 5065, options [nop,nop,TS val 2415962310 ecr 7446427], length 0
11:23:13.370957 IP owa.lut.fi.imaps > 10.175.110.58.49628: Flags [P.], seq 4631:4697, ack 866, win 5065, options [nop,nop,TS val 2415962312 ecr 7446427], length 66
11:23:13.400946 IP owa.lut.fi.imaps > 10.175.110.58.40128: Flags [.], ack 644, win 4843, options [nop,nop,TS val 2415962340 ecr 7446429], length 0
11:23:13.404735 IP 10.175.110.58.49628 > owa.lut.fi.imaps: Flags [.], ack 4697, win 445, options [nop,nop,TS val 7446434 ecr 2415962312], length 0
11:23:13.413274 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.59030: Flags [.], seq 6000:7388, ack 1715, win 47, options [nop,nop,TS val 3197593146 ecr 7446417], length 1388
11:23:13.423274 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.59030: Flags [.], seq 7388:8776, ack 1715, win 47, options [nop,nop,TS val 3197593146 ecr 7446417], length 1388
11:23:13.425319 IP 10.175.110.58.59030 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 8776, win 679, options [nop,nop,TS val 7446436 ecr 3197593146], length 0
11:23:13.431020 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.59030: Flags [.], seq 8776:10164, ack 1715, win 47, options [nop,nop,TS val 3197593146 ecr 7446417], length 1388
11:23:13.431022 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.59030: Flags [P.], seq 10164:10274, ack 1715, win 47, options [nop,nop,TS val 3197593146 ecr 7446417], length 110
11:23:13.441150 IP owa.lut.fi.imaps > 10.175.110.58.40128: Flags [P.], seq 4002:4050, ack 644, win 4843, options [nop,nop,TS val 2415962379 ecr 7446429], length 48
11:23:13.448420 IP 10.175.110.58.59030 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 10274, win 722, options [nop,nop,TS val 7446438 ecr 3197593146], length 0
11:23:13.449816 IP 10.175.110.58.40128 > owa.lut.fi.imaps: Flags [P.], seq 644:693, ack 4050, win 402, options [nop,nop,TS val 7446438 ecr 2415962379], length 49
11:23:13.480879 IP owa.lut.fi.imaps > 10.175.110.58.40128: Flags [.], ack 693, win 4892, options [nop,nop,TS val 2415962420 ecr 7446438], length 0
11:23:13.501266 IP owa.lut.fi.imaps > 10.175.110.58.40128: Flags [P.], seq 4050:4336, ack 693, win 4892, options [nop,nop,TS val 2415962438 ecr 7446438], length 286
11:23:13.535111 IP 10.175.110.58.40128 > owa.lut.fi.imaps: Flags [.], ack 4336, win 445, options [nop,nop,TS val 7446447 ecr 2415962438], length 0
11:23:13.627662 IP 10.175.110.58.40128 > owa.lut.fi.imaps: Flags [P.], seq 693:726, ack 4336, win 445, options [nop,nop,TS val 7446456 ecr 2415962438], length 33
11:23:13.660944 IP owa.lut.fi.imaps > 10.175.110.58.40128: Flags [.], ack 726, win 4925, options [nop,nop,TS val 2415962596 ecr 7446456], length 0
11:23:13.661035 IP owa.lut.fi.imaps > 10.175.110.58.40128: Flags [P.], seq 4336:4402, ack 726, win 4925, options [nop,nop,TS val 2415962597 ecr 7446456], length 66
11:23:13.662971 IP 10.175.110.58.40128 > owa.lut.fi.imaps: Flags [.], ack 4402, win 445, options [nop,nop,TS val 7446459 ecr 2415962597], length 0
11:23:13.832732 IP 10.175.110.58.44174 > kerberos3.Stanford.EDU.0: Flags [S], seq 2793365912, win 14600, options [mss 1460,sackOK,TS val 276736832 ecr 0,nop,wscale 7], length 0
11:23:13.852644 IP 10.175.110.58.44175 > kerberos3.Stanford.EDU.0: Flags [S], seq 2003290526, win 14600, options [mss 1460,sackOK,TS val 276736836 ecr 0,nop,wscale 7], length 0
11:23:13.862521 IP 10.175.110.58.44176 > kerberos3.Stanford.EDU.0: Flags [S], seq 552970481, win 14600, options [mss 1460,sackOK,TS val 276736839 ecr 0,nop,wscale 7], length 0
11:23:13.872645 IP 10.175.110.58.44177 > kerberos3.Stanford.EDU.0: Flags [S], seq 3952815760, win 14600, options [mss 1460,sackOK,TS val 276736842 ecr 0,nop,wscale 7], length 0
11:23:13.892660 IP 10.175.110.58.44178 > kerberos3.Stanford.EDU.0: Flags [S], seq 2222681174, win 14600, options [mss 1460,sackOK,TS val 276736847 ecr 0,nop,wscale 7], length 0
11:23:13.902298 IP 10.175.110.58.44179 > kerberos3.Stanford.EDU.0: Flags [S], seq 413257585, win 14600, options [mss 1460,sackOK,TS val 276736849 ecr 0,nop,wscale 7], length 0
11:23:13.912282 IP 10.175.110.58.44180 > kerberos3.Stanford.EDU.0: Flags [S], seq 404137372, win 14600, options [mss 1460,sackOK,TS val 276736851 ecr 0,nop,wscale 7], length 0
11:23:13.952860 IP 10.175.110.58.44181 > kerberos3.Stanford.EDU.0: Flags [S], seq 3650200003, win 14600, options [mss 1460,sackOK,TS val 276736862 ecr 0,nop,wscale 7], length 0
11:23:14.832601 IP 10.175.110.58.44174 > kerberos3.Stanford.EDU.0: Flags [S], seq 2793365912, win 14600, options [mss 1460,sackOK,TS val 276737082 ecr 0,nop,wscale 7], length 0
11:23:14.852642 IP 10.175.110.58.44175 > kerberos3.Stanford.EDU.0: Flags [S], seq 2003290526, win 14600, options [mss 1460,sackOK,TS val 276737087 ecr 0,nop,wscale 7], length 0
11:23:14.860586 IP 10.175.110.58.44176 > kerberos3.Stanford.EDU.0: Flags [S], seq 552970481, win 14600, options [mss 1460,sackOK,TS val 276737089 ecr 0,nop,wscale 7], length 0
11:23:14.872636 IP 10.175.110.58.44177 > kerberos3.Stanford.EDU.0: Flags [S], seq 3952815760, win 14600, options [mss 1460,sackOK,TS val 276737092 ecr 0,nop,wscale 7], length 0
11:23:14.892672 IP 10.175.110.58.44178 > kerberos3.Stanford.EDU.0: Flags [S], seq 2222681174, win 14600, options [mss 1460,sackOK,TS val 276737097 ecr 0,nop,wscale 7], length 0
11:23:14.900673 IP 10.175.110.58.44179 > kerberos3.Stanford.EDU.0: Flags [S], seq 413257585, win 14600, options [mss 1460,sackOK,TS val 276737099 ecr 0,nop,wscale 7], length 0
11:23:14.908665 IP 10.175.110.58.44180 > kerberos3.Stanford.EDU.0: Flags [S], seq 404137372, win 14600, options [mss 1460,sackOK,TS val 276737101 ecr 0,nop,wscale 7], length 0
11:23:14.946484 IP 10.175.110.58.50169 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:14.947852 IP 10.175.110.58.43429 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:14.948561 IP 10.175.110.58.39755 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:14.948619 IP 10.175.110.58.44167 > kerberos3.Stanford.EDU.0: Flags [S], seq 1360986281, win 14600, options [mss 1460,sackOK,TS val 276737111 ecr 0,nop,wscale 7], length 0
11:23:14.948634 IP 10.175.110.58.44170 > kerberos3.Stanford.EDU.0: Flags [S], seq 3345751102, win 14600, options [mss 1460,sackOK,TS val 276737111 ecr 0,nop,wscale 7], length 0
11:23:14.948649 IP 10.175.110.58.44166 > kerberos3.Stanford.EDU.0: Flags [S], seq 2628450710, win 14600, options [mss 1460,sackOK,TS val 276737111 ecr 0,nop,wscale 7], length 0
11:23:14.948679 IP 10.175.110.58.44168 > kerberos3.Stanford.EDU.0: Flags [S], seq 2891511757, win 14600, options [mss 1460,sackOK,TS val 276737111 ecr 0,nop,wscale 7], length 0
11:23:14.948702 IP 10.175.110.58.38982 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:14.948730 IP 10.175.110.58.44169 > kerberos3.Stanford.EDU.0: Flags [S], seq 4004033096, win 14600, options [mss 1460,sackOK,TS val 276737111 ecr 0,nop,wscale 7], length 0
11:23:14.948741 IP 10.175.110.58.43531 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:14.952625 IP 10.175.110.58.44181 > kerberos3.Stanford.EDU.0: Flags [S], seq 3650200003, win 14600, options [mss 1460,sackOK,TS val 276737112 ecr 0,nop,wscale 7], length 0
11:23:14.953967 IP 10.175.110.58.45979 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:14.956644 IP 10.175.110.58.44171 > kerberos3.Stanford.EDU.0: Flags [S], seq 2762631443, win 14600, options [mss 1460,sackOK,TS val 276737113 ecr 0,nop,wscale 7], length 0
11:23:15.004670 IP 10.175.110.58.44172 > kerberos3.Stanford.EDU.0: Flags [S], seq 3204808245, win 14600, options [mss 1460,sackOK,TS val 276737125 ecr 0,nop,wscale 7], length 0
11:23:15.004707 IP 10.175.110.58.44173 > kerberos3.Stanford.EDU.0: Flags [S], seq 3035560638, win 14600, options [mss 1460,sackOK,TS val 276737125 ecr 0,nop,wscale 7], length 0
11:23:15.006809 IP 10.175.110.58.50333 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:15.007010 IP 10.175.110.58.58396 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:16.835941 IP 10.175.110.58.37621 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:16.836630 IP 10.175.110.58.44174 > kerberos3.Stanford.EDU.0: Flags [S], seq 2793365912, win 14600, options [mss 1460,sackOK,TS val 276737583 ecr 0,nop,wscale 7], length 0
11:23:16.854618 IP 10.175.110.58.43179 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:16.856590 IP 10.175.110.58.44175 > kerberos3.Stanford.EDU.0: Flags [S], seq 2003290526, win 14600, options [mss 1460,sackOK,TS val 276737588 ecr 0,nop,wscale 7], length 0
11:23:16.864637 IP 10.175.110.58.44176 > kerberos3.Stanford.EDU.0: Flags [S], seq 552970481, win 14600, options [mss 1460,sackOK,TS val 276737590 ecr 0,nop,wscale 7], length 0
11:23:16.864673 IP 10.175.110.58.40195 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:16.875825 IP 10.175.110.58.57442 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:16.876630 IP 10.175.110.58.44177 > kerberos3.Stanford.EDU.0: Flags [S], seq 3952815760, win 14600, options [mss 1460,sackOK,TS val 276737593 ecr 0,nop,wscale 7], length 0
11:23:16.895868 IP 10.175.110.58.58781 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:16.896673 IP 10.175.110.58.44178 > kerberos3.Stanford.EDU.0: Flags [S], seq 2222681174, win 14600, options [mss 1460,sackOK,TS val 276737598 ecr 0,nop,wscale 7], length 0
11:23:16.904682 IP 10.175.110.58.44179 > kerberos3.Stanford.EDU.0: Flags [S], seq 413257585, win 14600, options [mss 1460,sackOK,TS val 276737600 ecr 0,nop,wscale 7], length 0
11:23:16.904777 IP 10.175.110.58.49016 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:16.912637 IP 10.175.110.58.44180 > kerberos3.Stanford.EDU.0: Flags [S], seq 404137372, win 14600, options [mss 1460,sackOK,TS val 276737602 ecr 0,nop,wscale 7], length 0
11:23:16.915505 IP 10.175.110.58.40978 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:16.956054 IP 10.175.110.58.38434 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:16.956664 IP 10.175.110.58.44181 > kerberos3.Stanford.EDU.0: Flags [S], seq 3650200003, win 14600, options [mss 1460,sackOK,TS val 276737613 ecr 0,nop,wscale 7], length 0
11:23:18.952703 IP 10.175.110.58.44166 > kerberos3.Stanford.EDU.0: Flags [S], seq 2628450710, win 14600, options [mss 1460,sackOK,TS val 276738112 ecr 0,nop,wscale 7], length 0
11:23:18.952748 IP 10.175.110.58.44167 > kerberos3.Stanford.EDU.0: Flags [S], seq 1360986281, win 14600, options [mss 1460,sackOK,TS val 276738112 ecr 0,nop,wscale 7], length 0
11:23:18.952772 IP 10.175.110.58.44168 > kerberos3.Stanford.EDU.0: Flags [S], seq 2891511757, win 14600, options [mss 1460,sackOK,TS val 276738112 ecr 0,nop,wscale 7], length 0
11:23:18.952787 IP 10.175.110.58.44170 > kerberos3.Stanford.EDU.0: Flags [S], seq 3345751102, win 14600, options [mss 1460,sackOK,TS val 276738112 ecr 0,nop,wscale 7], length 0
11:23:18.952796 IP 10.175.110.58.44169 > kerberos3.Stanford.EDU.0: Flags [S], seq 4004033096, win 14600, options [mss 1460,sackOK,TS val 276738112 ecr 0,nop,wscale 7], length 0
11:23:18.968636 IP 10.175.110.58.44171 > kerberos3.Stanford.EDU.0: Flags [S], seq 2762631443, win 14600, options [mss 1460,sackOK,TS val 276738116 ecr 0,nop,wscale 7], length 0
11:23:19.016664 IP 10.175.110.58.44172 > kerberos3.Stanford.EDU.0: Flags [S], seq 3204808245, win 14600, options [mss 1460,sackOK,TS val 276738128 ecr 0,nop,wscale 7], length 0
11:23:19.016708 IP 10.175.110.58.44173 > kerberos3.Stanford.EDU.0: Flags [S], seq 3035560638, win 14600, options [mss 1460,sackOK,TS val 276738128 ecr 0,nop,wscale 7], length 0
11:23:19.615775 IP 10.175.110.58.40341 > cs116p2.us1.msg.gq1.yahoo.com.mmcc: Flags [P.], seq 3596823575:3596823621, ack 3704314660, win 140, options [nop,nop,TS val 262794194 ecr 1458578107], length 46
11:23:19.616054 IP 10.175.110.58.45489 > ns8.sci.fi.domain: 20744+ PTR? 45.121.196.66.in-addr.arpa. (44)
11:23:19.616091 IP 10.175.110.58.38636 > ns8.sci.fi.domain: 34787+ PTR? 45.121.196.66.in-addr.arpa. (44)
11:23:19.616108 IP 10.175.110.58.44565 > ns8.sci.fi.domain: 52025+ PTR? 45.121.196.66.in-addr.arpa. (44)
11:23:19.730910 IP ns8.sci.fi.domain > 10.175.110.58.44565: 52025 1/0/0 PTR cs116p2.us1.msg.gq1.yahoo.com. (87)
11:23:19.731043 IP ns8.sci.fi.domain > 10.175.110.58.45489: 20744 1/0/0 PTR cs116p2.us1.msg.gq1.yahoo.com. (87)
11:23:19.841095 IP ns8.sci.fi.domain > 10.175.110.58.38636: 34787 1/0/0 PTR cs116p2.us1.msg.gq1.yahoo.com. (87)
11:23:19.930805 IP cs116p2.us1.msg.gq1.yahoo.com.mmcc > 10.175.110.58.40341: Flags [.], ack 46, win 2082, options [nop,nop,TS val 1458639075 ecr 262794194], length 0
11:23:19.951116 IP 10.175.110.58.43429 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:19.951218 IP 10.175.110.58.50169 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:19.952654 IP 10.175.110.58.39755 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:19.953001 IP 10.175.110.58.38982 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:19.953423 IP 10.175.110.58.43531 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:19.959175 IP 10.175.110.58.45979 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:20.008691 IP 10.175.110.58.58396 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:20.012045 IP 10.175.110.58.50333 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:20.440927 IP 10.175.110.58.40000 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 26:52, ack 585, win 331, options [nop,nop,TS val 109095867 ecr 249966572], length 26
11:23:20.440989 IP 10.175.110.58.34161 > xmpp-shv-01-frc3.facebook.com.xmpp-client: Flags [P.], seq 229:362, ack 1, win 331, options [nop,nop,TS val 109095867 ecr 2935840817], length 133
11:23:20.441239 IP 10.175.110.58.48594 > ns8.sci.fi.domain: 13286+ PTR? 17.106.252.173.in-addr.arpa. (45)
11:23:20.441658 IP 10.175.110.58.39151 > ns8.sci.fi.domain: 17650+ PTR? 17.106.252.173.in-addr.arpa. (45)
11:23:20.500801 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.40000: Flags [.], ack 52, win 670, options [nop,nop,TS val 249974664 ecr 109095867], length 0
11:23:20.600761 IP xmpp-shv-01-frc3.facebook.com.xmpp-client > 10.175.110.58.34161: Flags [.], ack 362, win 120, options [nop,nop,TS val 2935870821 ecr 109095867], length 0
11:23:20.631171 IP ns8.sci.fi.domain > 10.175.110.58.48594: 13286 1/0/0 PTR xmpp-shv-01-frc3.facebook.com. (88)
11:23:20.631247 IP ns8.sci.fi.domain > 10.175.110.58.39151: 17650 1/0/0 PTR xmpp-shv-01-frc3.facebook.com. (88)
11:23:20.840619 IP 10.175.110.58.44174 > kerberos3.Stanford.EDU.0: Flags [S], seq 2793365912, win 14600, options [mss 1460,sackOK,TS val 276738584 ecr 0,nop,wscale 7], length 0
11:23:20.866086 IP 10.175.110.58.44175 > kerberos3.Stanford.EDU.0: Flags [S], seq 2003290526, win 14600, options [mss 1460,sackOK,TS val 276738590 ecr 0,nop,wscale 7], length 0
11:23:20.872627 IP 10.175.110.58.44176 > kerberos3.Stanford.EDU.0: Flags [S], seq 552970481, win 14600, options [mss 1460,sackOK,TS val 276738592 ecr 0,nop,wscale 7], length 0
11:23:20.888634 IP 10.175.110.58.44177 > kerberos3.Stanford.EDU.0: Flags [S], seq 3952815760, win 14600, options [mss 1460,sackOK,TS val 276738596 ecr 0,nop,wscale 7], length 0
11:23:20.904674 IP 10.175.110.58.44178 > kerberos3.Stanford.EDU.0: Flags [S], seq 2222681174, win 14600, options [mss 1460,sackOK,TS val 276738600 ecr 0,nop,wscale 7], length 0
11:23:20.912631 IP 10.175.110.58.44179 > kerberos3.Stanford.EDU.0: Flags [S], seq 413257585, win 14600, options [mss 1460,sackOK,TS val 276738602 ecr 0,nop,wscale 7], length 0
11:23:20.920666 IP 10.175.110.58.44180 > kerberos3.Stanford.EDU.0: Flags [S], seq 404137372, win 14600, options [mss 1460,sackOK,TS val 276738604 ecr 0,nop,wscale 7], length 0
11:23:20.968646 IP 10.175.110.58.44181 > kerberos3.Stanford.EDU.0: Flags [S], seq 3650200003, win 14600, options [mss 1460,sackOK,TS val 276738616 ecr 0,nop,wscale 7], length 0
11:23:21.840674 IP 10.175.110.58.37621 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:21.859830 IP 10.175.110.58.43179 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:21.869813 IP 10.175.110.58.40195 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:21.880692 IP 10.175.110.58.57442 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:21.900650 IP 10.175.110.58.58781 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:21.908671 IP 10.175.110.58.49016 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:21.920746 IP 10.175.110.58.40978 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:21.960164 IP 10.175.110.58.38434 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:22.337742 IP 10.175.110.58.48243 > ns8.sci.fi.domain: 17842+ PTR? c.e.b.0.6.4.e.f.f.f.3.b.2.0.2.0.f.4.0.0.3.0.0.0.8.b.7.0.1.0.0.2.ip6.arpa. (90)
11:23:22.338083 IP 10.175.110.58.60716 > ns8.sci.fi.domain: 39355+ AAAA? daisy.ubuntu.com. (34)
11:23:22.370846 IP ns8.sci.fi.domain > 10.175.110.58.60716: 39355 0/1/0 (95)
11:23:22.371046 IP 10.175.110.58.42025 > ns8.sci.fi.domain: 11082+ AAAA? daisy.ubuntu.com. (34)
11:23:22.401055 IP ns8.sci.fi.domain > 10.175.110.58.42025: 11082 0/1/0 (95)
11:23:22.401179 IP 10.175.110.58.48107 > ns8.sci.fi.domain: 60493+ A? daisy.ubuntu.com. (34)
11:23:22.430814 IP ns8.sci.fi.domain > 10.175.110.58.48107: 60493 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:23:22.591124 IP ns8.sci.fi.domain > 10.175.110.58.48243: 17842 1/0/0 PTR nlede01.sixxs.net. (121)
11:23:23.341419 IP 10.175.110.58.43373 > ns8.sci.fi.domain: 27766+ AAAA? daisy.ubuntu.com. (34)
11:23:23.371125 IP ns8.sci.fi.domain > 10.175.110.58.43373: 27766 0/1/0 (95)
11:23:23.371337 IP 10.175.110.58.35015 > ns8.sci.fi.domain: 44547+ AAAA? daisy.ubuntu.com. (34)
11:23:23.381937 IP 10.175.110.58.58925 > ns8.sci.fi.domain: 28329+ PTR? 1.0.0.224.in-addr.arpa. (40)
11:23:23.382041 IP 10.175.110.58.41294 > ns8.sci.fi.domain: 43142+ PTR? 1.0.0.224.in-addr.arpa. (40)
11:23:23.401024 IP ns8.sci.fi.domain > 10.175.110.58.35015: 44547 0/1/0 (95)
11:23:23.401131 IP 10.175.110.58.48754 > ns8.sci.fi.domain: 13831+ A? daisy.ubuntu.com. (34)
11:23:23.430755 IP ns8.sci.fi.domain > 10.175.110.58.48754: 13831 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:23:23.450844 IP ns8.sci.fi.domain > 10.175.110.58.41294: 43142 1/0/0 PTR all-systems.mcast.net. (75)
11:23:23.451209 IP 10.175.110.58.39797 > ns8.sci.fi.domain: 64439+ PTR? d.5.0.1.6.3.e.f.f.f.4.f.f.5.e.b.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
11:23:23.460747 IP ns8.sci.fi.domain > 10.175.110.58.58925: 28329 1/0/0 PTR all-systems.mcast.net. (75)
11:23:23.461135 IP 10.175.110.58.55121 > ns8.sci.fi.domain: 62432+ PTR? d.5.0.1.6.3.e.f.f.f.4.f.f.5.e.b.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
11:23:23.621095 IP ns8.sci.fi.domain > 10.175.110.58.55121: 62432 NXDomain 0/1/0 (160)
11:23:23.700860 IP ns8.sci.fi.domain > 10.175.110.58.39797: 64439 NXDomain 0/1/0 (160)
11:23:23.876138 IP 10.175.110.58.58128 > ns8.sci.fi.domain: 45882+ PTR? 251.0.0.224.in-addr.arpa. (42)
11:23:23.876174 IP 10.175.110.58.60627 > ns8.sci.fi.domain: 48680+ PTR? 251.0.0.224.in-addr.arpa. (42)
11:23:23.920697 IP ns8.sci.fi.domain > 10.175.110.58.58128: 45882 NXDomain 0/1/0 (99)
11:23:24.130747 IP ns8.sci.fi.domain > 10.175.110.58.60627: 48680 NXDomain 0/1/0 (99)
11:23:24.235774 IP 10.175.110.58.35097 > ns8.sci.fi.domain: 46589+ PTR? 250.255.255.239.in-addr.arpa. (46)
11:23:24.235810 IP 10.175.110.58.45010 > ns8.sci.fi.domain: 36016+ PTR? 250.255.255.239.in-addr.arpa. (46)
11:23:24.261037 IP ns8.sci.fi.domain > 10.175.110.58.35097: 46589 NXDomain 0/1/0 (103)
11:23:24.261366 IP 10.175.110.58.49129 > ns8.sci.fi.domain: 11227+ PTR? 51.0.168.192.in-addr.arpa. (43)
11:23:24.281084 IP ns8.sci.fi.domain > 10.175.110.58.45010: 36016 NXDomain 0/1/0 (103)
11:23:24.281439 IP 10.175.110.58.45745 > ns8.sci.fi.domain: 29596+ PTR? 51.0.168.192.in-addr.arpa. (43)
11:23:24.321117 IP ns8.sci.fi.domain > 10.175.110.58.49129: 11227 NXDomain 0/1/0 (92)
11:23:24.321212 IP ns8.sci.fi.domain > 10.175.110.58.45745: 29596 NXDomain 0/1/0 (92)
11:23:24.338054 IP 10.175.110.58.53211 > ns8.sci.fi.domain: 2534+ PTR? d.0.e.a.1.6.e.f.f.f.1.8.0.e.2.0.0.0.0.1.0.0.0.0.8.1.b.0.1.0.0.2.ip6.arpa. (90)
11:23:24.338425 IP 10.175.110.58.50062 > ns8.sci.fi.domain: 22981+ AAAA? daisy.ubuntu.com. (34)
11:23:24.371130 IP ns8.sci.fi.domain > 10.175.110.58.50062: 22981 0/1/0 (95)
11:23:24.371376 IP 10.175.110.58.35144 > ns8.sci.fi.domain: 16031+ AAAA? daisy.ubuntu.com. (34)
11:23:24.384792 IP 10.175.110.58.47507 > ns8.sci.fi.domain: 30336+ PTR? 42.0.168.192.in-addr.arpa. (43)
11:23:24.384872 IP 10.175.110.58.48620 > ns8.sci.fi.domain: 5846+ PTR? 42.0.168.192.in-addr.arpa. (43)
11:23:24.401115 IP ns8.sci.fi.domain > 10.175.110.58.35144: 16031 0/1/0 (95)
11:23:24.401325 IP 10.175.110.58.46434 > ns8.sci.fi.domain: 49671+ A? daisy.ubuntu.com. (34)
11:23:24.421094 IP ns8.sci.fi.domain > 10.175.110.58.47507: 30336 NXDomain 0/1/0 (92)
11:23:24.421184 IP ns8.sci.fi.domain > 10.175.110.58.48620: 5846 NXDomain 0/1/0 (92)
11:23:24.430712 IP ns8.sci.fi.domain > 10.175.110.58.46434: 49671 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:23:24.445013 IP 10.175.110.58.41131 > ns8.sci.fi.domain: 4295+ PTR? 0.0.0.0.0.0.f.f.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa. (90)
11:23:24.445060 IP 10.175.110.58.40353 > ns8.sci.fi.domain: 16727+ PTR? 0.0.0.0.0.0.f.f.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa. (90)
11:23:24.520804 IP ns8.sci.fi.domain > 10.175.110.58.40353: 16727 NXDomain 0/1/0 (160)
11:23:24.521134 IP 10.175.110.58.50730 > ns8.sci.fi.domain: 39528+ PTR? 9.1.4.5.0.9.e.f.f.f.6.6.9.1.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
11:23:24.711123 IP ns8.sci.fi.domain > 10.175.110.58.41131: 4295 NXDomain 0/1/0 (160)
11:23:24.711458 IP 10.175.110.58.45932 > ns8.sci.fi.domain: 60624+ PTR? 9.1.4.5.0.9.e.f.f.f.6.6.9.1.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
11:23:24.780811 IP ns8.sci.fi.domain > 10.175.110.58.50730: 39528 NXDomain 0/1/0 (160)
11:23:24.814992 IP 10.175.110.58.36233 > ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http: Flags [S], seq 2939257710, win 14600, options [mss 1460,sackOK,TS val 7447574 ecr 0,nop,wscale 6], length 0
11:23:24.815264 IP 10.175.110.58.57039 > ns8.sci.fi.domain: 4970+ PTR? 116.132.215.54.in-addr.arpa. (45)
11:23:24.815282 IP 10.175.110.58.35470 > ns8.sci.fi.domain: 15181+ PTR? 116.132.215.54.in-addr.arpa. (45)
11:23:24.901086 IP ns8.sci.fi.domain > 10.175.110.58.35470: 15181 1/0/0 PTR ec2-54-215-132-116.us-west-1.compute.amazonaws.com. (109)
11:23:24.901185 IP ns8.sci.fi.domain > 10.175.110.58.57039: 4970 1/0/0 PTR ec2-54-215-132-116.us-west-1.compute.amazonaws.com. (109)
11:23:24.951076 IP ns8.sci.fi.domain > 10.175.110.58.53211: 2534 NXDomain 0/1/0 (148)
11:23:24.991059 IP ns8.sci.fi.domain > 10.175.110.58.45932: 60624 NXDomain 0/1/0 (160)
11:23:24.991456 IP 10.175.110.58.40272 > ns8.sci.fi.domain: 49765+ PTR? 116.132.215.54.in-addr.arpa. (45)
11:23:25.021105 IP ns8.sci.fi.domain > 10.175.110.58.40272: 49765 1/0/0 PTR ec2-54-215-132-116.us-west-1.compute.amazonaws.com. (109)
11:23:25.050730 IP ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http > 10.175.110.58.36233: Flags [S.], seq 351169569, ack 2939257711, win 14480, options [mss 1400,sackOK,TS val 173771263 ecr 7447574,nop,wscale 8], length 0
11:23:25.218363 IP 10.175.110.58.36233 > ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http: Flags [.], ack 1, win 229, options [nop,nop,TS val 7447615 ecr 173771263], length 0
11:23:25.223491 IP 10.175.110.58.36233 > ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http: Flags [P.], seq 1:179, ack 1, win 229, options [nop,nop,TS val 7447615 ecr 173771263], length 178
11:23:25.341456 IP 10.175.110.58.60411 > ns8.sci.fi.domain: 59115+ AAAA? daisy.ubuntu.com. (34)
11:23:25.371051 IP ns8.sci.fi.domain > 10.175.110.58.60411: 59115 0/1/0 (95)
11:23:25.371217 IP 10.175.110.58.52579 > ns8.sci.fi.domain: 49862+ AAAA? daisy.ubuntu.com. (34)
11:23:25.400776 IP ns8.sci.fi.domain > 10.175.110.58.52579: 49862 0/1/0 (95)
11:23:25.400935 IP 10.175.110.58.50610 > ns8.sci.fi.domain: 9582+ A? daisy.ubuntu.com. (34)
11:23:25.430796 IP ns8.sci.fi.domain > 10.175.110.58.50610: 9582 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:23:25.430868 IP ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http > 10.175.110.58.36233: Flags [.], ack 179, win 61, options [nop,nop,TS val 173771360 ecr 7447615], length 0
11:23:25.471195 IP ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http > 10.175.110.58.36233: Flags [.], seq 1:1389, ack 179, win 61, options [nop,nop,TS val 173771361 ecr 7447615], length 1388
11:23:25.471197 IP ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http > 10.175.110.58.36233: Flags [P.], seq 1389:1411, ack 179, win 61, options [nop,nop,TS val 173771361 ecr 7447615], length 22
11:23:25.471340 IP ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http > 10.175.110.58.36233: Flags [P.], seq 1411:1523, ack 179, win 61, options [nop,nop,TS val 173771361 ecr 7447615], length 112
11:23:25.471459 IP ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http > 10.175.110.58.36233: Flags [F.], seq 1523, ack 179, win 61, options [nop,nop,TS val 173771361 ecr 7447615], length 0
11:23:25.629914 IP 10.175.110.58.36233 > ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http: Flags [.], ack 1389, win 272, options [nop,nop,TS val 7447656 ecr 173771361], length 0
11:23:25.630269 IP 10.175.110.58.36233 > ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http: Flags [.], ack 1411, win 272, options [nop,nop,TS val 7447656 ecr 173771361], length 0
11:23:25.630735 IP 10.175.110.58.36233 > ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http: Flags [.], ack 1523, win 272, options [nop,nop,TS val 7447656 ecr 173771361], length 0
11:23:25.665225 IP 10.175.110.58.36233 > ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http: Flags [.], ack 1524, win 272, options [nop,nop,TS val 7447660 ecr 173771361], length 0
11:23:26.338166 IP 10.175.110.58.34193 > ns8.sci.fi.domain: 56846+ PTR? 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.0.0.0.1.0.0.8.1.4.1.1.0.0.2.ip6.arpa. (90)
11:23:26.338499 IP 10.175.110.58.38227 > ns8.sci.fi.domain: 1871+ AAAA? daisy.ubuntu.com. (34)
11:23:26.410875 IP ns8.sci.fi.domain > 10.175.110.58.38227: 1871 0/1/0 (95)
11:23:26.411071 IP 10.175.110.58.33973 > ns8.sci.fi.domain: 31542+ AAAA? daisy.ubuntu.com. (34)
11:23:26.430787 IP ns8.sci.fi.domain > 10.175.110.58.34193: 56846 1/0/0 PTR frejus.ITgate.net. (121)
11:23:26.461047 IP ns8.sci.fi.domain > 10.175.110.58.33973: 31542 0/1/0 (95)
11:23:26.461230 IP 10.175.110.58.40941 > ns8.sci.fi.domain: 60916+ A? daisy.ubuntu.com. (34)
11:23:26.490798 IP ns8.sci.fi.domain > 10.175.110.58.40941: 60916 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:23:26.968682 IP 10.175.110.58.44168 > kerberos3.Stanford.EDU.0: Flags [S], seq 2891511757, win 14600, options [mss 1460,sackOK,TS val 276740116 ecr 0,nop,wscale 7], length 0
11:23:26.968722 IP 10.175.110.58.44167 > kerberos3.Stanford.EDU.0: Flags [S], seq 1360986281, win 14600, options [mss 1460,sackOK,TS val 276740116 ecr 0,nop,wscale 7], length 0
11:23:26.968736 IP 10.175.110.58.44166 > kerberos3.Stanford.EDU.0: Flags [S], seq 2628450710, win 14600, options [mss 1460,sackOK,TS val 276740116 ecr 0,nop,wscale 7], length 0
11:23:26.968747 IP 10.175.110.58.44170 > kerberos3.Stanford.EDU.0: Flags [S], seq 3345751102, win 14600, options [mss 1460,sackOK,TS val 276740116 ecr 0,nop,wscale 7], length 0
11:23:26.984658 IP 10.175.110.58.44171 > kerberos3.Stanford.EDU.0: Flags [S], seq 2762631443, win 14600, options [mss 1460,sackOK,TS val 276740120 ecr 0,nop,wscale 7], length 0
11:23:27.032646 IP 10.175.110.58.44172 > kerberos3.Stanford.EDU.0: Flags [S], seq 3204808245, win 14600, options [mss 1460,sackOK,TS val 276740132 ecr 0,nop,wscale 7], length 0
11:23:27.032686 IP 10.175.110.58.44173 > kerberos3.Stanford.EDU.0: Flags [S], seq 3035560638, win 14600, options [mss 1460,sackOK,TS val 276740132 ecr 0,nop,wscale 7], length 0
11:23:27.144985 IP 10.175.110.58.41793 > ns8.sci.fi.domain: 60064+ PTR? 9.1.4.5.0.9.f.f.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa. (90)
11:23:27.145021 IP 10.175.110.58.40535 > ns8.sci.fi.domain: 36480+ PTR? 9.1.4.5.0.9.f.f.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa. (90)
11:23:27.220855 IP ns8.sci.fi.domain > 10.175.110.58.40535: 36480 NXDomain 0/1/0 (160)
11:23:27.301003 IP ns8.sci.fi.domain > 10.175.110.58.41793: 60064 NXDomain 0/1/0 (160)
11:23:27.341600 IP 10.175.110.58.39897 > ns8.sci.fi.domain: 22623+ AAAA? daisy.ubuntu.com. (34)
11:23:27.342452 IP 10.175.110.58.11591 > decker.sci.fi.domain: 43877+ AAAA? daisy.ubuntu.com. (34)
11:23:27.342752 IP 10.175.110.58.33230 > ns8.sci.fi.domain: 45703+ PTR? 47.0.74.195.in-addr.arpa. (42)
11:23:27.342796 IP 10.175.110.58.56907 > ns8.sci.fi.domain: 23084+ PTR? 47.0.74.195.in-addr.arpa. (42)
11:23:27.370784 IP ns8.sci.fi.domain > 10.175.110.58.39897: 22623 0/1/0 (95)
11:23:27.370880 IP decker.sci.fi.domain > 10.175.110.58.11591: 43877 0/1/0 (95)
11:23:27.371055 IP 10.175.110.58.48478 > ns8.sci.fi.domain: 1170+ AAAA? daisy.ubuntu.com. (34)
11:23:27.381076 IP ns8.sci.fi.domain > 10.175.110.58.33230: 45703 1/0/0 PTR decker.sci.fi. (69)
11:23:27.381156 IP ns8.sci.fi.domain > 10.175.110.58.56907: 23084 1/0/0 PTR decker.sci.fi. (69)
11:23:27.400762 IP ns8.sci.fi.domain > 10.175.110.58.48478: 1170 0/1/0 (95)
11:23:27.400984 IP 10.175.110.58.57648 > ns8.sci.fi.domain: 51596+ A? daisy.ubuntu.com. (34)
11:23:27.430705 IP ns8.sci.fi.domain > 10.175.110.58.57648: 51596 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:23:27.468669 IP 10.175.110.58.44169 > kerberos3.Stanford.EDU.0: Flags [S], seq 4004033096, win 14600, options [mss 1460,sackOK,TS val 276740241 ecr 0,nop,wscale 7], length 0
11:23:28.204143 IP 10.175.110.58.56558 > ns8.sci.fi.domain: 46585+ PTR? 9.3.0.1.6.3.f.f.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa. (90)
11:23:28.204194 IP 10.175.110.58.54144 > ns8.sci.fi.domain: 60888+ PTR? 9.3.0.1.6.3.f.f.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa. (90)
11:23:28.281041 IP ns8.sci.fi.domain > 10.175.110.58.56558: 46585 NXDomain 0/1/0 (160)
11:23:28.281124 IP ns8.sci.fi.domain > 10.175.110.58.54144: 60888 NXDomain 0/1/0 (160)
11:23:28.281386 IP 10.175.110.58.32893 > ns8.sci.fi.domain: 6914+ PTR? 9.3.0.1.6.3.e.f.f.f.4.f.f.5.e.b.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
11:23:28.281434 IP 10.175.110.58.48640 > ns8.sci.fi.domain: 11759+ PTR? 9.3.0.1.6.3.e.f.f.f.4.f.f.5.e.b.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
11:23:28.338024 IP 10.175.110.58.27646 > ns8.sci.fi.domain: 27987+ [1au] AAAA? daisy.ubuntu.com. (45)
11:23:28.351000 IP ns8.sci.fi.domain > 10.175.110.58.32893: 6914 NXDomain 0/1/0 (160)
11:23:28.361147 IP ns8.sci.fi.domain > 10.175.110.58.48640: 11759 NXDomain 0/1/0 (160)
11:23:28.370736 IP ns8.sci.fi.domain > 10.175.110.58.27646: 27987 0/1/0 (95)
11:23:28.456894 IP 10.175.110.58.56514 > ns8.sci.fi.domain: 57323+ PTR? b.f.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa. (90)
11:23:28.456946 IP 10.175.110.58.47184 > ns8.sci.fi.domain: 6447+ PTR? b.f.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa. (90)
11:23:28.481024 IP ns8.sci.fi.domain > 10.175.110.58.56514: 57323 NXDomain 0/1/0 (160)
11:23:28.481346 IP 10.175.110.58.38360 > ns8.sci.fi.domain: 17851+ PTR? 9.1.0.1.6.3.e.f.f.f.4.f.f.5.e.b.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
11:23:28.490763 IP ns8.sci.fi.domain > 10.175.110.58.47184: 6447 NXDomain 0/1/0 (160)
11:23:28.491089 IP 10.175.110.58.50790 > ns8.sci.fi.domain: 36224+ PTR? 9.1.0.1.6.3.e.f.f.f.4.f.f.5.e.b.0.0.0.0.0.0.0.0.0.0.0.0.0.8.e.f.ip6.arpa. (90)
11:23:28.841079 IP ns8.sci.fi.domain > 10.175.110.58.50790: 36224 NXDomain 0/1/0 (160)
11:23:28.841178 IP ns8.sci.fi.domain > 10.175.110.58.38360: 17851 NXDomain 0/1/0 (160)
11:23:28.856672 IP 10.175.110.58.44174 > kerberos3.Stanford.EDU.0: Flags [S], seq 2793365912, win 14600, options [mss 1460,sackOK,TS val 276740588 ecr 0,nop,wscale 7], length 0
11:23:28.872655 IP 10.175.110.58.44175 > kerberos3.Stanford.EDU.0: Flags [S], seq 2003290526, win 14600, options [mss 1460,sackOK,TS val 276740592 ecr 0,nop,wscale 7], length 0
11:23:28.888655 IP 10.175.110.58.44176 > kerberos3.Stanford.EDU.0: Flags [S], seq 552970481, win 14600, options [mss 1460,sackOK,TS val 276740596 ecr 0,nop,wscale 7], length 0
11:23:28.904594 IP 10.175.110.58.44177 > kerberos3.Stanford.EDU.0: Flags [S], seq 3952815760, win 14600, options [mss 1460,sackOK,TS val 276740600 ecr 0,nop,wscale 7], length 0
11:23:28.920698 IP 10.175.110.58.44178 > kerberos3.Stanford.EDU.0: Flags [S], seq 2222681174, win 14600, options [mss 1460,sackOK,TS val 276740604 ecr 0,nop,wscale 7], length 0
11:23:28.936680 IP 10.175.110.58.44179 > kerberos3.Stanford.EDU.0: Flags [S], seq 413257585, win 14600, options [mss 1460,sackOK,TS val 276740608 ecr 0,nop,wscale 7], length 0
11:23:28.936724 IP 10.175.110.58.44180 > kerberos3.Stanford.EDU.0: Flags [S], seq 404137372, win 14600, options [mss 1460,sackOK,TS val 276740608 ecr 0,nop,wscale 7], length 0
11:23:28.984602 IP 10.175.110.58.44181 > kerberos3.Stanford.EDU.0: Flags [S], seq 3650200003, win 14600, options [mss 1460,sackOK,TS val 276740620 ecr 0,nop,wscale 7], length 0
11:23:29.000673 IP strix.canonical.com.http > 10.175.110.58.59620: Flags [.], ack 1849544010, win 1024, length 0
11:23:29.000791 IP 10.175.110.58.59620 > strix.canonical.com.http: Flags [.], ack 1, win 123, options [nop,nop,TS val 276740624 ecr 1188179407], length 0
11:23:29.000954 IP 10.175.110.58.41253 > ns8.sci.fi.domain: 8779+ PTR? 152.92.189.91.in-addr.arpa. (44)
11:23:29.040735 IP strix.canonical.com.http > 10.175.110.58.59620: Flags [R], seq 4215568570, win 0, length 0
11:23:29.070774 IP strix.canonical.com.http > 10.175.110.58.59620: Flags [R], seq 4215568571, win 0, length 0
11:23:29.070874 IP ns8.sci.fi.domain > 10.175.110.58.41253: 8779 1/0/0 PTR strix.canonical.com. (77)
11:23:29.149124 IP 10.175.110.58.36993 > ns8.sci.fi.domain: 59925+ PTR? 3.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.c.8.0.6.3.1.c.7.6.0.1.0.0.2.ip6.arpa. (90)
11:23:29.149488 IP 10.175.110.58.39142 > ns8.sci.fi.domain: 47697+ AAAA? daisy.ubuntu.com. (34)
11:23:29.181066 IP ns8.sci.fi.domain > 10.175.110.58.39142: 47697 0/1/0 (95)
11:23:29.181263 IP 10.175.110.58.55128 > ns8.sci.fi.domain: 55794+ AAAA? daisy.ubuntu.com. (34)
11:23:29.210700 IP ns8.sci.fi.domain > 10.175.110.58.55128: 55794 0/1/0 (95)
11:23:29.210895 IP 10.175.110.58.36799 > ns8.sci.fi.domain: 71+ A? daisy.ubuntu.com. (34)
11:23:29.240724 IP ns8.sci.fi.domain > 10.175.110.58.36799: 71 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:23:29.300979 IP ns8.sci.fi.domain > 10.175.110.58.36993: 59925 1/0/0 PTR danava.canonical.com. (124)
11:23:29.724305 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1181:1207, ack 64, win 245, options [nop,nop,TS val 7448065 ecr 39435420], length 26
11:23:29.729266 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1207:1233, ack 64, win 245, options [nop,nop,TS val 7448065 ecr 39435420], length 26
11:23:29.730307 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1233:1260, ack 64, win 245, options [nop,nop,TS val 7448066 ecr 39435420], length 27
11:23:29.736743 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1260:1302, ack 64, win 245, options [nop,nop,TS val 7448067 ecr 39435420], length 42
11:23:29.738106 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1302:1329, ack 64, win 245, options [nop,nop,TS val 7448067 ecr 39435420], length 27
11:23:29.739130 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1329:1374, ack 64, win 245, options [nop,nop,TS val 7448067 ecr 39435420], length 45
11:23:29.879096 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 320:346, ack 2133, win 646, options [nop,nop,TS val 262796760 ecr 3049720228], length 26
11:23:29.879130 IP 10.175.110.58.59409 > xmpp-shv-05-prn2.facebook.com.xmpp-client: Flags [P.], seq 85:362, ack 411, win 331, options [nop,nop,TS val 262796760 ecr 3197170635], length 277
11:23:29.891001 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.52731: Flags [.], ack 1207, win 91, options [nop,nop,TS val 39453367 ecr 7448065], length 0
11:23:29.891201 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.52731: Flags [.], ack 1233, win 91, options [nop,nop,TS val 39453371 ecr 7448065], length 0
11:23:29.891202 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.52731: Flags [.], ack 1260, win 91, options [nop,nop,TS val 39453373 ecr 7448066], length 0
11:23:29.901000 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.52731: Flags [.], ack 1302, win 91, options [nop,nop,TS val 39453379 ecr 7448067], length 0
11:23:29.901113 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.52731: Flags [.], ack 1329, win 91, options [nop,nop,TS val 39453381 ecr 7448067], length 0
11:23:29.901271 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.52731: Flags [.], ack 1374, win 91, options [nop,nop,TS val 39453383 ecr 7448067], length 0
11:23:29.901359 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.52731: Flags [P.], seq 64:93, ack 1374, win 91, options [nop,nop,TS val 39453384 ecr 7448067], length 29
11:23:29.909611 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [.], ack 93, win 245, options [nop,nop,TS val 7448084 ecr 39453384], length 0
11:23:29.940728 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [.], ack 346, win 661, options [nop,nop,TS val 3049737624 ecr 262796760], length 0
11:23:29.970585 IP arn06s02-in-f14.1e100.net.https > 10.175.110.58.38740: Flags [F.], seq 2276077832, ack 868675713, win 661, length 0
11:23:29.970948 IP 10.175.110.58.38046 > ns8.sci.fi.domain: 44603+ PTR? 46.32.194.173.in-addr.arpa. (44)
11:23:29.970979 IP 10.175.110.58.44936 > ns8.sci.fi.domain: 50691+ PTR? 46.32.194.173.in-addr.arpa. (44)
11:23:29.970992 IP 10.175.110.58.41864 > ns8.sci.fi.domain: 14442+ PTR? 46.32.194.173.in-addr.arpa. (44)
11:23:29.972738 IP 10.175.110.58.38740 > arn06s02-in-f14.1e100.net.https: Flags [R], seq 868675713, win 0, length 0
11:23:30.001051 IP ns8.sci.fi.domain > 10.175.110.58.38046: 44603 1/0/0 PTR arn06s02-in-f14.1e100.net. (83)
11:23:30.001200 IP ns8.sci.fi.domain > 10.175.110.58.44936: 50691 1/0/0 PTR arn06s02-in-f14.1e100.net. (83)
11:23:30.001312 IP ns8.sci.fi.domain > 10.175.110.58.41864: 14442 1/0/0 PTR arn06s02-in-f14.1e100.net. (83)
11:23:30.100793 IP xmpp-shv-05-prn2.facebook.com.xmpp-client > 10.175.110.58.59409: Flags [.], ack 362, win 120, options [nop,nop,TS val 3197199838 ecr 262796760], length 0
11:23:30.152716 IP 10.175.110.58.53643 > ns8.sci.fi.domain: 40568+ AAAA? daisy.ubuntu.com. (34)
11:23:30.183047 IP ns8.sci.fi.domain > 10.175.110.58.53643: 40568 0/1/0 (95)
11:23:30.183237 IP 10.175.110.58.33658 > ns8.sci.fi.domain: 52040+ AAAA? daisy.ubuntu.com. (34)
11:23:30.210761 IP ns8.sci.fi.domain > 10.175.110.58.33658: 52040 0/1/0 (95)
11:23:30.210952 IP 10.175.110.58.54005 > ns8.sci.fi.domain: 47541+ A? daisy.ubuntu.com. (34)
11:23:30.240745 IP ns8.sci.fi.domain > 10.175.110.58.54005: 47541 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:23:30.366847 IP 10.175.110.58.47870 > ns8.sci.fi.domain: 52594+ PTR? 9.0.0.224.in-addr.arpa. (40)
11:23:30.367177 IP 10.175.110.58.60386 > ns8.sci.fi.domain: 21982+ PTR? 9.0.0.224.in-addr.arpa. (40)
11:23:30.431004 IP ns8.sci.fi.domain > 10.175.110.58.60386: 21982 1/0/0 PTR rip2-routers.mcast.net. (76)
11:23:30.431080 IP ns8.sci.fi.domain > 10.175.110.58.47870: 52594 1/0/0 PTR rip2-routers.mcast.net. (76)
11:23:30.431338 IP 10.175.110.58.55529 > ns8.sci.fi.domain: 57736+ PTR? 254.0.168.192.in-addr.arpa. (44)
11:23:30.431380 IP 10.175.110.58.38215 > ns8.sci.fi.domain: 64019+ PTR? 254.0.168.192.in-addr.arpa. (44)
11:23:30.461014 IP ns8.sci.fi.domain > 10.175.110.58.55529: 57736 NXDomain 0/1/0 (93)
11:23:30.461110 IP ns8.sci.fi.domain > 10.175.110.58.38215: 64019 NXDomain 0/1/0 (93)
11:23:30.461364 IP 10.175.110.58.51518 > ns8.sci.fi.domain: 11894+ PTR? 9.1.0.1.6.3.f.f.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa. (90)
11:23:30.461441 IP 10.175.110.58.58430 > ns8.sci.fi.domain: 33544+ PTR? 9.1.0.1.6.3.f.f.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.0.f.f.ip6.arpa. (90)
11:23:30.531013 IP ns8.sci.fi.domain > 10.175.110.58.58430: 33544 NXDomain 0/1/0 (160)
11:23:30.531092 IP ns8.sci.fi.domain > 10.175.110.58.51518: 11894 NXDomain 0/1/0 (160)
11:23:31.428513 IP 10.175.110.58.52899 > ns8.sci.fi.domain: 58247+ AAAA? daisy.ubuntu.com. (34)
11:23:31.500729 IP ns8.sci.fi.domain > 10.175.110.58.52899: 58247 0/1/0 (95)
11:23:31.500942 IP 10.175.110.58.49350 > ns8.sci.fi.domain: 64239+ AAAA? daisy.ubuntu.com. (34)
11:23:31.541000 IP ns8.sci.fi.domain > 10.175.110.58.49350: 64239 0/1/0 (95)
11:23:31.541231 IP 10.175.110.58.41737 > ns8.sci.fi.domain: 56196+ A? daisy.ubuntu.com. (34)
11:23:31.591003 IP ns8.sci.fi.domain > 10.175.110.58.41737: 56196 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:23:36.361786 IP 10.175.110.58.41198 > ns8.sci.fi.domain: 49582+ AAAA? daisy.ubuntu.com. (34)
11:23:37.532704 IP ns8.sci.fi.domain > 10.175.110.58.41198: 49582 0/1/0 (95)
11:23:37.532916 IP 10.175.110.58.41265 > ns8.sci.fi.domain: 37630+ AAAA? daisy.ubuntu.com. (34)
11:23:37.872071 IP ns8.sci.fi.domain > 10.175.110.58.41265: 37630 0/1/0 (95)
11:23:37.872351 IP 10.175.110.58.34969 > ns8.sci.fi.domain: 10029+ A? daisy.ubuntu.com. (34)
11:23:38.222096 IP ns8.sci.fi.domain > 10.175.110.58.34969: 10029 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:23:38.223124 IP 10.175.110.58.49885 > ns8.sci.fi.domain: 47148+ AAAA? daisy.ubuntu.com. (34)
11:23:38.552104 IP ns8.sci.fi.domain > 10.175.110.58.49885: 47148 0/1/0 (95)
11:23:38.552320 IP 10.175.110.58.49849 > ns8.sci.fi.domain: 56383+ AAAA? daisy.ubuntu.com. (34)
11:23:38.892250 IP ns8.sci.fi.domain > 10.175.110.58.49849: 56383 0/1/0 (95)
11:23:38.892477 IP 10.175.110.58.37713 > ns8.sci.fi.domain: 8245+ A? daisy.ubuntu.com. (34)
11:23:39.222078 IP ns8.sci.fi.domain > 10.175.110.58.37713: 8245 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:23:39.225954 IP 10.175.110.58.56296 > ns8.sci.fi.domain: 52554+ AAAA? daisy.ubuntu.com. (34)
11:23:39.562077 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.43820: Flags [P.], seq 4657:4815, ack 783, win 661, options [nop,nop,TS val 559421808 ecr 7446246], length 158
11:23:39.602014 IP ns8.sci.fi.domain > 10.175.110.58.56296: 52554 0/1/0 (95)
11:23:39.602228 IP 10.175.110.58.56646 > ns8.sci.fi.domain: 15760+ AAAA? daisy.ubuntu.com. (34)
11:23:39.982081 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.43820: Flags [P.], seq 4657:4815, ack 783, win 661, options [nop,nop,TS val 559421808 ecr 7446246], length 158
11:23:40.022013 IP ns8.sci.fi.domain > 10.175.110.58.56646: 15760 0/1/0 (95)
11:23:40.022237 IP 10.175.110.58.37124 > ns8.sci.fi.domain: 55279+ A? daisy.ubuntu.com. (34)
11:23:40.412213 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.43820: Flags [P.], seq 4657:4815, ack 783, win 661, options [nop,nop,TS val 559422634 ecr 7446246], length 158
11:23:40.451980 IP ns8.sci.fi.domain > 10.175.110.58.37124: 55279 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:23:41.222067 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.43820: Flags [P.], seq 4657:4815, ack 783, win 661, options [nop,nop,TS val 559423472 ecr 7446246], length 158
11:23:41.226936 IP 10.175.110.58.43820 > lb-in-f188.1e100.net.5228: Flags [R], seq 1594270410, win 0, length 0
11:23:41.871969 IP ec2-23-23-226-176.compute-1.amazonaws.com.https > 10.175.110.58.40810: Flags [P.], seq 1346298500:1346298523, ack 3858220455, win 71, options [nop,nop,TS val 10214021 ecr 7443623], length 23
11:23:41.872251 IP 10.175.110.58.53302 > ns8.sci.fi.domain: 36070+ PTR? 176.226.23.23.in-addr.arpa. (44)
11:23:41.872295 IP 10.175.110.58.57104 > ns8.sci.fi.domain: 35148+ PTR? 176.226.23.23.in-addr.arpa. (44)
11:23:41.872332 IP 10.175.110.58.37606 > ns8.sci.fi.domain: 54817+ PTR? 176.226.23.23.in-addr.arpa. (44)
11:23:42.232081 IP ns8.sci.fi.domain > 10.175.110.58.53302: 36070 1/0/0 PTR ec2-23-23-226-176.compute-1.amazonaws.com. (99)
11:23:42.261947 IP ec2-23-23-226-176.compute-1.amazonaws.com.https > 10.175.110.58.40810: Flags [P.], seq 0:23, ack 1, win 71, options [nop,nop,TS val 10214120 ecr 7443623], length 23
11:23:42.342010 IP ns8.sci.fi.domain > 10.175.110.58.57104: 35148 1/0/0 PTR ec2-23-23-226-176.compute-1.amazonaws.com. (99)
11:23:42.471746 IP 10.175.110.58.40810 > ec2-23-23-226-176.compute-1.amazonaws.com.https: Flags [R], seq 3858220455, win 0, length 0
11:23:42.474640 IP 10.175.110.58.40810 > ec2-23-23-226-176.compute-1.amazonaws.com.https: Flags [R], seq 3858220455, win 0, length 0
11:23:42.672028 IP ns8.sci.fi.domain > 10.175.110.58.37606: 54817 1/0/0 PTR ec2-23-23-226-176.compute-1.amazonaws.com. (99)
11:23:44.169369 IP 10.175.110.58.38974 > ns8.sci.fi.domain: 4903+ AAAA? daisy.ubuntu.com. (34)
11:23:44.451957 IP ns8.sci.fi.domain > 10.175.110.58.38974: 4903 0/1/0 (95)
11:23:44.452120 IP 10.175.110.58.47944 > ns8.sci.fi.domain: 28237+ AAAA? daisy.ubuntu.com. (34)
11:23:44.812338 IP ns8.sci.fi.domain > 10.175.110.58.47944: 28237 0/1/0 (95)
11:23:44.812560 IP 10.175.110.58.44086 > ns8.sci.fi.domain: 62013+ A? daisy.ubuntu.com. (34)
11:23:45.152015 IP ns8.sci.fi.domain > 10.175.110.58.44086: 62013 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:23:45.172027 IP 10.175.110.58.60332 > ns8.sci.fi.domain: 65486+ AAAA? daisy.ubuntu.com. (34)
11:23:45.492035 IP ns8.sci.fi.domain > 10.175.110.58.60332: 65486 0/1/0 (95)
11:23:45.492276 IP 10.175.110.58.52469 > ns8.sci.fi.domain: 29269+ AAAA? daisy.ubuntu.com. (34)
11:23:45.842001 IP ns8.sci.fi.domain > 10.175.110.58.52469: 29269 0/1/0 (95)
11:23:45.842238 IP 10.175.110.58.45457 > ns8.sci.fi.domain: 13017+ A? daisy.ubuntu.com. (34)
11:23:46.181976 IP ns8.sci.fi.domain > 10.175.110.58.45457: 13017 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:23:48.477571 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [S], seq 672488421, win 14600, options [mss 1460,sackOK,TS val 7449801 ecr 0,nop,wscale 6], length 0
11:23:48.483402 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [S], seq 3572144655, win 14600, options [mss 1460,sackOK,TS val 7449802 ecr 0,nop,wscale 6], length 0
11:23:48.487227 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [S], seq 1234808786, win 14600, options [mss 1460,sackOK,TS val 7449802 ecr 0,nop,wscale 6], length 0
11:23:48.747685 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [S], seq 2311718732, win 14600, options [mss 1460,sackOK,TS val 7449828 ecr 0,nop,wscale 6], length 0
11:23:48.751274 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [S], seq 3600095889, win 14600, options [mss 1460,sackOK,TS val 7449828 ecr 0,nop,wscale 6], length 0
11:23:48.752528 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [S], seq 4086795516, win 14600, options [mss 1460,sackOK,TS val 7449829 ecr 0,nop,wscale 6], length 0
11:23:48.758435 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [S], seq 3573183868, win 14600, options [mss 1460,sackOK,TS val 7449829 ecr 0,nop,wscale 6], length 0
11:23:48.769766 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [S], seq 1737044094, win 14600, options [mss 1460,sackOK,TS val 7449830 ecr 0,nop,wscale 6], length 0
11:23:48.815053 IP 10.175.110.58.52509 > ns8.sci.fi.domain: 20094+ AAAA? krb5auth3.stanford.edu. (40)
11:23:48.817511 IP 10.175.110.58.52671 > ns8.sci.fi.domain: 1920+ AAAA? krb5auth3.stanford.edu. (40)
11:23:48.824351 IP 10.175.110.58.37418 > ns8.sci.fi.domain: 32956+ AAAA? krb5auth3.stanford.edu. (40)
11:23:48.827806 IP 10.175.110.58.50708 > ns8.sci.fi.domain: 62564+ AAAA? krb5auth3.stanford.edu. (40)
11:23:48.854173 IP 10.175.110.58.58881 > ns8.sci.fi.domain: 24171+ AAAA? krb5auth3.stanford.edu. (40)
11:23:48.865940 IP 10.175.110.58.36178 > ns8.sci.fi.domain: 28664+ AAAA? krb5auth3.stanford.edu. (40)
11:23:48.876595 IP 10.175.110.58.57926 > ns8.sci.fi.domain: 17166+ AAAA? krb5auth3.stanford.edu. (40)
11:23:48.884946 IP 10.175.110.58.55490 > ns8.sci.fi.domain: 58698+ AAAA? krb5auth3.stanford.edu. (40)
11:23:49.487130 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [S], seq 672488421, win 14600, options [mss 1460,sackOK,TS val 7449901 ecr 0,nop,wscale 6], length 0
11:23:49.487275 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [S], seq 3572144655, win 14600, options [mss 1460,sackOK,TS val 7449902 ecr 0,nop,wscale 6], length 0
11:23:49.487316 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [S], seq 1234808786, win 14600, options [mss 1460,sackOK,TS val 7449902 ecr 0,nop,wscale 6], length 0
11:23:49.795073 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [S], seq 2311718732, win 14600, options [mss 1460,sackOK,TS val 7449928 ecr 0,nop,wscale 6], length 0
11:23:49.795249 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [S], seq 3600095889, win 14600, options [mss 1460,sackOK,TS val 7449929 ecr 0,nop,wscale 6], length 0
11:23:49.795596 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [S], seq 4086795516, win 14600, options [mss 1460,sackOK,TS val 7449929 ecr 0,nop,wscale 6], length 0
11:23:49.795632 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [S], seq 3573183868, win 14600, options [mss 1460,sackOK,TS val 7449929 ecr 0,nop,wscale 6], length 0
11:23:49.795830 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [S], seq 1737044094, win 14600, options [mss 1460,sackOK,TS val 7449930 ecr 0,nop,wscale 6], length 0
11:23:49.870711 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [S.], seq 44313405, ack 2311718733, win 4200, options [mss 1400,nop,wscale 0,nop,nop,TS val 2415998811 ecr 7449828,sackOK,eol], length 0
11:23:49.872345 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [.], ack 1, win 229, options [nop,nop,TS val 7449941 ecr 2415998811], length 0
11:23:49.880860 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [S.], seq 3325667584, ack 3600095890, win 4200, options [mss 1400,nop,wscale 0,nop,nop,TS val 2415998813 ecr 7449828,sackOK,eol], length 0
11:23:49.880960 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [S.], seq 3840673894, ack 672488422, win 42540, options [mss 1400,sackOK,TS val 552933777 ecr 7449801,nop,wscale 6], length 0
11:23:49.881086 IP ns8.sci.fi.domain > 10.175.110.58.52509: 20094 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:49.881125 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [P.], seq 1:185, ack 1, win 229, options [nop,nop,TS val 7449941 ecr 2415998811], length 184
11:23:49.881315 IP 10.175.110.58.60939 > ns8.sci.fi.domain: 44542+ A? krb5auth3.stanford.edu. (40)
11:23:49.882450 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [.], ack 1, win 229, options [nop,nop,TS val 7449942 ecr 2415998813], length 0
11:23:49.882980 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [.], ack 1, win 229, options [nop,nop,TS val 7449942 ecr 552933777], length 0
11:23:49.890784 IP ns8.sci.fi.domain > 10.175.110.58.52671: 1920 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:49.890871 IP ns8.sci.fi.domain > 10.175.110.58.37418: 32956 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:49.891017 IP 10.175.110.58.44244 > ns8.sci.fi.domain: 62976+ A? krb5auth3.stanford.edu. (40)
11:23:49.891054 IP 10.175.110.58.54200 > ns8.sci.fi.domain: 18612+ A? krb5auth3.stanford.edu. (40)
11:23:49.891883 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [P.], seq 1:185, ack 1, win 229, options [nop,nop,TS val 7449943 ecr 2415998813], length 184
11:23:49.900293 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [P.], seq 1:185, ack 1, win 229, options [nop,nop,TS val 7449943 ecr 552933777], length 184
11:23:49.900704 IP ns8.sci.fi.domain > 10.175.110.58.50708: 62564 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:49.900905 IP 10.175.110.58.36883 > ns8.sci.fi.domain: 4641+ A? krb5auth3.stanford.edu. (40)
11:23:49.900958 IP ns8.sci.fi.domain > 10.175.110.58.58881: 24171 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:49.901035 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [S.], seq 840888506, ack 1234808787, win 42540, options [mss 1400,sackOK,TS val 1987871215 ecr 7449802,nop,wscale 6], length 0
11:23:49.901062 IP 10.175.110.58.40426 > ns8.sci.fi.domain: 48042+ A? krb5auth3.stanford.edu. (40)
11:23:49.901183 IP ns8.sci.fi.domain > 10.175.110.58.36178: 28664 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:49.901242 IP 10.175.110.58.35635 > ns8.sci.fi.domain: 61720+ A? krb5auth3.stanford.edu. (40)
11:23:49.902720 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 1, win 229, options [nop,nop,TS val 7449944 ecr 1987871215], length 0
11:23:49.905381 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1:115, ack 1, win 229, options [nop,nop,TS val 7449944 ecr 1987871215], length 114
11:23:49.910759 IP ns8.sci.fi.domain > 10.175.110.58.57926: 17166 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:49.910849 IP ns8.sci.fi.domain > 10.175.110.58.55490: 58698 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:49.910984 IP 10.175.110.58.42074 > ns8.sci.fi.domain: 19017+ A? krb5auth3.stanford.edu. (40)
11:23:49.911027 IP 10.175.110.58.36751 > ns8.sci.fi.domain: 16414+ A? krb5auth3.stanford.edu. (40)
11:23:49.920662 IP ns8.sci.fi.domain > 10.175.110.58.60939: 44542 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:49.920762 IP ns8.sci.fi.domain > 10.175.110.58.44244: 62976 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:49.920865 IP 10.175.110.58.49772 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:49.920962 IP 10.175.110.58.50467 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:49.921040 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [S.], seq 3840673894, ack 672488422, win 42540, options [mss 1400,sackOK,TS val 552933818 ecr 7449801,nop,wscale 6], length 0
11:23:49.922400 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [.], ack 1, win 229, options [nop,nop,TS val 7449946 ecr 552933818,nop,nop,sack 1 {0:1}], length 0
11:23:49.942619 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [.], seq 1:1389, ack 185, win 4200, options [nop,nop,TS val 2415998861 ecr 7449941], length 1388
11:23:49.944563 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [.], ack 1389, win 272, options [nop,nop,TS val 7449948 ecr 2415998861], length 0
11:23:49.992952 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [.], seq 1389:2777, ack 185, win 4200, options [nop,nop,TS val 2415998861 ecr 7449941], length 1388
11:23:49.995024 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [.], ack 2777, win 315, options [nop,nop,TS val 7449953 ecr 2415998861], length 0
11:23:50.042795 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [P.], seq 2777:3711, ack 185, win 4200, options [nop,nop,TS val 2415998861 ecr 7449941], length 934
11:23:50.042797 IP ns8.sci.fi.domain > 10.175.110.58.54200: 18612 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:50.043048 IP 10.175.110.58.47839 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:50.043139 IP ns8.sci.fi.domain > 10.175.110.58.36883: 4641 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:50.043320 IP 10.175.110.58.56263 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:50.044720 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [.], ack 3711, win 359, options [nop,nop,TS val 7449958 ecr 2415998861], length 0
11:23:50.070975 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [P.], seq 185:499, ack 3711, win 359, options [nop,nop,TS val 7449960 ecr 2415998861], length 314
11:23:50.092956 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [.], seq 1:1389, ack 185, win 4200, options [nop,nop,TS val 2415998871 ecr 7449943], length 1388
11:23:50.094900 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [.], ack 1389, win 272, options [nop,nop,TS val 7449963 ecr 2415998871], length 0
11:23:50.102839 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [.], seq 1389:2777, ack 185, win 4200, options [nop,nop,TS val 2415998871 ecr 7449943], length 1388
11:23:50.102841 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [P.], seq 2777:3711, ack 185, win 4200, options [nop,nop,TS val 2415998871 ecr 7449943], length 934
11:23:50.102960 IP ns8.sci.fi.domain > 10.175.110.58.40426: 48042 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:50.103122 IP 10.175.110.58.51255 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:50.105388 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [.], ack 2777, win 315, options [nop,nop,TS val 7449964 ecr 2415998871], length 0
11:23:50.105586 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [.], ack 3711, win 359, options [nop,nop,TS val 7449964 ecr 2415998871], length 0
11:23:50.110529 IP ns8.sci.fi.domain > 10.175.110.58.35635: 61720 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:50.110596 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.55346: Flags [S.], seq 2945231820, ack 1737044095, win 14480, options [mss 1400,sackOK,TS val 777694915 ecr 7449830], length 0
11:23:50.110767 IP 10.175.110.58.38965 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:50.110787 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.49590: Flags [S.], seq 1858025261, ack 3573183869, win 14480, options [mss 1400,sackOK,TS val 597286197 ecr 7449829], length 0
11:23:50.112133 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 1, win 14600, options [nop,nop,TS val 7449965 ecr 777694915], length 0
11:23:50.112362 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 1, win 14600, options [nop,nop,TS val 7449965 ecr 597286197], length 0
11:23:50.120949 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 1:185, ack 1, win 14600, options [nop,nop,TS val 7449965 ecr 777694915], length 184
11:23:50.125195 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 1:185, ack 1, win 14600, options [nop,nop,TS val 7449966 ecr 597286197], length 184
11:23:50.131650 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [P.], seq 185:499, ack 3711, win 359, options [nop,nop,TS val 7449967 ecr 2415998871], length 314
11:23:50.142849 IP ns8.sci.fi.domain > 10.175.110.58.42074: 19017 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:50.142922 IP ns8.sci.fi.domain > 10.175.110.58.36751: 16414 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:50.143039 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [S.], seq 840888506, ack 1234808787, win 42540, options [mss 1400,sackOK,TS val 1987871259 ecr 7449802,nop,wscale 6], length 0
11:23:50.143091 IP 10.175.110.58.45422 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:50.143124 IP 10.175.110.58.45798 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:50.143295 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [.], ack 185, win 662, options [nop,nop,TS val 552933844 ecr 7449943], length 0
11:23:50.144307 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 1, win 229, options [nop,nop,TS val 7449968 ecr 1987871259,nop,nop,sack 1 {0:1}], length 0
11:23:50.152756 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [.], seq 1:1389, ack 185, win 662, options [nop,nop,TS val 552933845 ecr 7449943], length 1388
11:23:50.156073 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [.], ack 1389, win 272, options [nop,nop,TS val 7449969 ecr 552933845], length 0
11:23:50.160727 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [.], seq 1389:2777, ack 185, win 662, options [nop,nop,TS val 552933845 ecr 7449943], length 1388
11:23:50.162611 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [.], ack 2777, win 315, options [nop,nop,TS val 7449970 ecr 552933845], length 0
11:23:50.192894 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [P.], seq 2777:4097, ack 185, win 662, options [nop,nop,TS val 552933845 ecr 7449943], length 1320
11:23:50.192973 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [P.], seq 4097:4237, ack 185, win 662, options [nop,nop,TS val 552933845 ecr 7449943], length 140
11:23:50.193223 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.55346: Flags [S.], seq 2945231820, ack 1737044095, win 14480, options [mss 1400,sackOK,TS val 777694947 ecr 7449830], length 0
11:23:50.193224 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.49590: Flags [S.], seq 1858025261, ack 3573183869, win 14480, options [mss 1400,sackOK,TS val 597286230 ecr 7449829], length 0
11:23:50.193303 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [.], ack 115, win 663, options [nop,nop,TS val 1987871289 ecr 7449944], length 0
11:23:50.196945 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [.], ack 4097, win 359, options [nop,nop,TS val 7449973 ecr 552933845], length 0
11:23:50.197189 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [.], ack 4237, win 402, options [nop,nop,TS val 7449973 ecr 552933845], length 0
11:23:50.197222 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 1, win 14600, options [nop,nop,TS val 7449973 ecr 777694947,nop,nop,sack 1 {0:1}], length 0
11:23:50.197424 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 1, win 14600, options [nop,nop,TS val 7449973 ecr 597286230,nop,nop,sack 1 {0:1}], length 0
11:23:50.202687 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 1:139, ack 115, win 663, options [nop,nop,TS val 1987871289 ecr 7449944], length 138
11:23:50.202841 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 139:380, ack 115, win 663, options [nop,nop,TS val 1987871289 ecr 7449944], length 241
11:23:50.202895 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [S.], seq 1405917066, ack 3572144656, win 14480, options [mss 1400,sackOK,TS val 3196620051 ecr 7449802,nop,wscale 9], length 0
11:23:50.203013 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [S.], seq 95896807, ack 4086795517, win 14480, options [mss 1400,sackOK,TS val 468647236 ecr 7449829,nop,wscale 8], length 0
11:23:50.203137 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [S.], seq 1405917066, ack 3572144656, win 14480, options [mss 1400,sackOK,TS val 3196620094 ecr 7449802,nop,wscale 9], length 0
11:23:50.203261 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [S.], seq 95896807, ack 4086795517, win 14480, options [mss 1400,sackOK,TS val 468647274 ecr 7449829,nop,wscale 8], length 0
11:23:50.203393 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [P.], seq 4097:4237, ack 185, win 662, options [nop,nop,TS val 552933845 ecr 7449946], length 140
11:23:50.203526 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 139:380, ack 115, win 663, options [nop,nop,TS val 1987871431 ecr 7449944], length 241
11:23:50.203650 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [P.], seq 3711:3758, ack 499, win 4384, options [nop,nop,TS val 2415999047 ecr 7449960], length 47
11:23:50.203766 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [P.], seq 3758:3836, ack 499, win 4698, options [nop,nop,TS val 2415999055 ecr 7449960], length 78
11:23:50.203864 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [P.], seq 3711:3758, ack 499, win 4384, options [nop,nop,TS val 2415999107 ecr 7449967], length 47
11:23:50.204860 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 139, win 245, options [nop,nop,TS val 7449974 ecr 1987871289], length 0
11:23:50.204913 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 1, win 229, options [nop,nop,TS val 7449974 ecr 3196620051], length 0
11:23:50.205379 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [.], ack 1, win 229, options [nop,nop,TS val 7449974 ecr 468647236], length 0
11:23:50.205791 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 380, win 262, options [nop,nop,TS val 7449974 ecr 1987871289], length 0
11:23:50.206061 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 1, win 229, options [nop,nop,TS val 7449974 ecr 3196620094,nop,nop,sack 1 {0:1}], length 0
11:23:50.206390 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [.], ack 1, win 229, options [nop,nop,TS val 7449974 ecr 468647274,nop,nop,sack 1 {0:1}], length 0
11:23:50.206733 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [.], ack 4237, win 402, options [nop,nop,TS val 7449974 ecr 552933845,nop,nop,sack 1 {4097:4237}], length 0
11:23:50.207076 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 380, win 262, options [nop,nop,TS val 7449974 ecr 1987871431,nop,nop,sack 1 {139:380}], length 0
11:23:50.207961 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 115:166, ack 380, win 262, options [nop,nop,TS val 7449974 ecr 1987871431], length 51
11:23:50.210263 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1:441, ack 1, win 229, options [nop,nop,TS val 7449974 ecr 468647274], length 440
11:23:50.212703 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [P.], seq 3758:3836, ack 499, win 4698, options [nop,nop,TS val 2415999115 ecr 7449967], length 78
11:23:50.212801 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.55346: Flags [.], ack 185, win 15544, options [nop,nop,TS val 777695182 ecr 7449965], length 0
11:23:50.213700 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 1:123, ack 1, win 229, options [nop,nop,TS val 7449975 ecr 3196620094], length 122
11:23:50.220801 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [.], ack 3836, win 359, options [nop,nop,TS val 7449975 ecr 2415999107], length 0
11:23:50.221986 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [P.], seq 499:536, ack 3836, win 359, options [nop,nop,TS val 7449976 ecr 2415999107], length 37
11:23:50.222729 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.55346: Flags [.], seq 1:1389, ack 185, win 15544, options [nop,nop,TS val 777695183 ecr 7449965], length 1388
11:23:50.222846 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.55346: Flags [P.], seq 2777:3439, ack 185, win 15544, options [nop,nop,TS val 777695183 ecr 7449965], length 662
11:23:50.223136 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [.], ack 3836, win 359, options [nop,nop,TS val 7449976 ecr 2415999047], length 0
11:23:50.224354 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [P.], seq 499:536, ack 3836, win 359, options [nop,nop,TS val 7449976 ecr 2415999047], length 37
11:23:50.224925 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 1389, win 16656, options [nop,nop,TS val 7449976 ecr 777695183], length 0
11:23:50.225279 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 1389, win 16656, options [nop,nop,TS val 7449976 ecr 777695183,nop,nop,sack 1 {2777:3439}], length 0
11:23:50.243273 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.55346: Flags [.], seq 1389:2777, ack 185, win 15544, options [nop,nop,TS val 777695183 ecr 7449965], length 1388
11:23:50.243275 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.49590: Flags [.], ack 185, win 15544, options [nop,nop,TS val 597286472 ecr 7449966], length 0
11:23:50.243436 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.49590: Flags [.], seq 1:1389, ack 185, win 15544, options [nop,nop,TS val 597286472 ecr 7449966], length 1388
11:23:50.245446 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 3439, win 19432, options [nop,nop,TS val 7449978 ecr 777695183], length 0
11:23:50.246308 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 1389, win 16656, options [nop,nop,TS val 7449978 ecr 597286472], length 0
11:23:50.252766 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.49590: Flags [.], seq 1389:2777, ack 185, win 15544, options [nop,nop,TS val 597286472 ecr 7449966], length 1388
11:23:50.252768 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.49590: Flags [P.], seq 2777:3439, ack 185, win 15544, options [nop,nop,TS val 597286472 ecr 7449966], length 662
11:23:50.255307 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 2777, win 19432, options [nop,nop,TS val 7449979 ecr 597286472], length 0
11:23:50.255530 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 3439, win 22208, options [nop,nop,TS val 7449979 ecr 597286472], length 0
11:23:50.260596 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [.], ack 536, win 4735, options [nop,nop,TS val 2415999195 ecr 7449976], length 0
11:23:50.260807 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [.], ack 536, win 4735, options [nop,nop,TS val 2415999197 ecr 7449976], length 0
11:23:50.262000 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [P.], seq 536:588, ack 3836, win 359, options [nop,nop,TS val 7449980 ecr 2415999195], length 52
11:23:50.262191 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [P.], seq 536:588, ack 3836, win 359, options [nop,nop,TS val 7449980 ecr 2415999197], length 52
11:23:50.265793 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [P.], seq 185:307, ack 4237, win 402, options [nop,nop,TS val 7449980 ecr 552933845], length 122
11:23:50.270808 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 380:430, ack 166, win 663, options [nop,nop,TS val 1987871588 ecr 7449974], length 50
11:23:50.275339 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 185:499, ack 3439, win 22208, options [nop,nop,TS val 7449981 ecr 597286472], length 314
11:23:50.275616 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 185:499, ack 3439, win 19432, options [nop,nop,TS val 7449981 ecr 777695183], length 314
11:23:50.277640 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 166:350, ack 430, win 262, options [nop,nop,TS val 7449981 ecr 1987871588], length 184
11:23:50.290808 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [.], ack 588, win 4787, options [nop,nop,TS val 2415999230 ecr 7449980], length 0
11:23:50.300604 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [P.], seq 3836:4002, ack 588, win 4787, options [nop,nop,TS val 2415999231 ecr 7449980], length 166
11:23:50.300697 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [.], ack 588, win 4787, options [nop,nop,TS val 2415999232 ecr 7449980], length 0
11:23:50.300813 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [P.], seq 3836:4002, ack 588, win 4787, options [nop,nop,TS val 2415999233 ecr 7449980], length 166
11:23:50.302987 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [P.], seq 588:644, ack 4002, win 402, options [nop,nop,TS val 7449984 ecr 2415999231], length 56
11:23:50.303824 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [P.], seq 588:644, ack 4002, win 402, options [nop,nop,TS val 7449984 ecr 2415999233], length 56
11:23:50.310851 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [P.], seq 4237:4284, ack 307, win 661, options [nop,nop,TS val 552934206 ecr 7449980], length 47
11:23:50.312668 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [.], ack 4284, win 402, options [nop,nop,TS val 7449985 ecr 552934206], length 0
11:23:50.330476 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [.], ack 644, win 4843, options [nop,nop,TS val 2415999271 ecr 7449984], length 0
11:23:50.339624 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [P.], seq 307:333, ack 4284, win 402, options [nop,nop,TS val 7449987 ecr 552934206], length 26
11:23:50.340481 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [.], ack 644, win 4843, options [nop,nop,TS val 2415999273 ecr 7449984], length 0
11:23:50.350796 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 430:1456, ack 350, win 661, options [nop,nop,TS val 1987871669 ecr 7449981], length 1026
11:23:50.362920 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 2844:3506, ack 350, win 661, options [nop,nop,TS val 1987871669 ecr 7449981], length 662
11:23:50.363130 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [.], seq 1456:2844, ack 350, win 661, options [nop,nop,TS val 1987871669 ecr 7449981], length 1388
11:23:50.363131 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 3506:3601, ack 350, win 661, options [nop,nop,TS val 1987871669 ecr 7449981], length 95
11:23:50.364661 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 1456, win 294, options [nop,nop,TS val 7449990 ecr 1987871669,nop,nop,sack 1 {2844:3506}], length 0
11:23:50.364976 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 3506, win 338, options [nop,nop,TS val 7449990 ecr 1987871669], length 0
11:23:50.365243 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 3601, win 338, options [nop,nop,TS val 7449990 ecr 1987871669], length 0
11:23:50.370567 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [P.], seq 4002:4050, ack 644, win 4843, options [nop,nop,TS val 2415999309 ecr 7449984], length 48
11:23:50.370693 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [P.], seq 4002:4050, ack 644, win 4843, options [nop,nop,TS val 2415999309 ecr 7449984], length 48
11:23:50.373414 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [P.], seq 644:693, ack 4050, win 402, options [nop,nop,TS val 7449991 ecr 2415999309], length 49
11:23:50.374174 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [P.], seq 644:688, ack 4050, win 402, options [nop,nop,TS val 7449991 ecr 2415999309], length 44
11:23:50.376475 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 350:660, ack 3601, win 338, options [nop,nop,TS val 7449991 ecr 1987871669], length 310
11:23:50.381141 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 441, win 68, options [nop,nop,TS val 468647608 ecr 7449974], length 0
11:23:50.381143 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [P.], seq 1:134, ack 441, win 68, options [nop,nop,TS val 468647608 ecr 7449974], length 133
11:23:50.381144 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [.], ack 123, win 29, options [nop,nop,TS val 3196620436 ecr 7449975], length 0
11:23:50.381144 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [P.], seq 1:390, ack 123, win 29, options [nop,nop,TS val 3196620436 ecr 7449975], length 389
11:23:50.383376 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [.], ack 134, win 245, options [nop,nop,TS val 7449992 ecr 468647608], length 0
11:23:50.383593 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 390, win 245, options [nop,nop,TS val 7449992 ecr 3196620436], length 0
11:23:50.384399 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 123:174, ack 390, win 245, options [nop,nop,TS val 7449992 ecr 3196620436], length 51
11:23:50.385851 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 441:488, ack 134, win 245, options [nop,nop,TS val 7449992 ecr 468647608], length 47
11:23:50.390781 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.49590: Flags [P.], seq 3439:3486, ack 499, win 16616, options [nop,nop,TS val 597286645 ecr 7449981], length 47
11:23:50.393998 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 488:514, ack 134, win 245, options [nop,nop,TS val 7449993 ecr 468647608], length 26
11:23:50.394239 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 514:540, ack 134, win 245, options [nop,nop,TS val 7449993 ecr 468647608], length 26
11:23:50.394518 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 540:566, ack 134, win 245, options [nop,nop,TS val 7449993 ecr 468647608], length 26
11:23:50.395116 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 566:592, ack 134, win 245, options [nop,nop,TS val 7449993 ecr 468647608], length 26
11:23:50.395357 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 592:618, ack 134, win 245, options [nop,nop,TS val 7449993 ecr 468647608], length 26
11:23:50.395791 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 618:644, ack 134, win 245, options [nop,nop,TS val 7449993 ecr 468647608], length 26
11:23:50.396059 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 644:670, ack 134, win 245, options [nop,nop,TS val 7449993 ecr 468647608], length 26
11:23:50.396352 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 670:696, ack 134, win 245, options [nop,nop,TS val 7449993 ecr 468647608], length 26
11:23:50.396608 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 696:722, ack 134, win 245, options [nop,nop,TS val 7449993 ecr 468647608], length 26
11:23:50.400786 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.55346: Flags [P.], seq 3439:3486, ack 499, win 16616, options [nop,nop,TS val 777695372 ecr 7449981], length 47
11:23:50.410618 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [.], ack 693, win 4892, options [nop,nop,TS val 2415999343 ecr 7449991], length 0
11:23:50.410839 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [P.], seq 4284:4310, ack 333, win 661, options [nop,nop,TS val 552934301 ecr 7449987], length 26
11:23:50.410840 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [.], ack 688, win 4887, options [nop,nop,TS val 2415999345 ecr 7449991], length 0
11:23:50.420673 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [P.], seq 4050:4336, ack 693, win 4892, options [nop,nop,TS val 2415999360 ecr 7449991], length 286
11:23:50.430883 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [P.], seq 4050:4335, ack 688, win 4887, options [nop,nop,TS val 2415999368 ecr 7449991], length 285
11:23:50.431683 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 3486, win 22208, options [nop,nop,TS val 7449997 ecr 597286645], length 0
11:23:50.441344 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 3486, win 19432, options [nop,nop,TS val 7449998 ecr 777695372], length 0
11:23:50.451363 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [.], ack 4310, win 402, options [nop,nop,TS val 7449999 ecr 552934301], length 0
11:23:50.460446 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 3601:3644, ack 660, win 661, options [nop,nop,TS val 1987871766 ecr 7449991], length 43
11:23:50.461625 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [.], ack 4336, win 445, options [nop,nop,TS val 7450000 ecr 2415999360], length 0
11:23:50.468947 IP 10.175.110.58.40000 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 52:78, ack 585, win 331, options [nop,nop,TS val 109103374 ecr 249974664], length 26
11:23:50.468994 IP 10.175.110.58.34161 > xmpp-shv-01-frc3.facebook.com.xmpp-client: Flags [P.], seq 362:415, ack 1, win 331, options [nop,nop,TS val 109103374 ecr 2935870821], length 53
11:23:50.469272 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 660:795, ack 3644, win 338, options [nop,nop,TS val 7450000 ecr 1987871766], length 135
11:23:50.471326 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [.], ack 4335, win 445, options [nop,nop,TS val 7450001 ecr 2415999368], length 0
11:23:50.520631 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.49590: Flags [P.], seq 3486:3771, ack 499, win 16616, options [nop,nop,TS val 597286775 ecr 7449997], length 285
11:23:50.522531 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 3771, win 24984, options [nop,nop,TS val 7450006 ecr 597286775], length 0
11:23:50.525025 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 499:567, ack 3771, win 24984, options [nop,nop,TS val 7450006 ecr 597286775], length 68
11:23:50.530578 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.40000: Flags [.], ack 78, win 670, options [nop,nop,TS val 250004692 ecr 109103374], length 0
11:23:50.530696 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.55346: Flags [P.], seq 3486:3771, ack 499, win 16616, options [nop,nop,TS val 777695503 ecr 7449998], length 285
11:23:50.532006 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 3771, win 22208, options [nop,nop,TS val 7450007 ecr 777695503], length 0
11:23:50.533587 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 499:567, ack 3771, win 22208, options [nop,nop,TS val 7450007 ecr 777695503], length 68
11:23:50.540524 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 3644:3803, ack 795, win 661, options [nop,nop,TS val 1987871851 ecr 7450000], length 159
11:23:50.540686 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 3803:4021, ack 795, win 661, options [nop,nop,TS val 1987871851 ecr 7450000], length 218
11:23:50.542989 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 4021, win 424, options [nop,nop,TS val 7450008 ecr 1987871851], length 0
11:23:50.550500 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [P.], seq 390:440, ack 174, win 29, options [nop,nop,TS val 3196620598 ecr 7449992], length 50
11:23:50.550690 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 488, win 68, options [nop,nop,TS val 468647776 ecr 7449992], length 0
11:23:50.560635 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 514, win 68, options [nop,nop,TS val 468647782 ecr 7449993], length 0
11:23:50.560722 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 540, win 68, options [nop,nop,TS val 468647784 ecr 7449993], length 0
11:23:50.560870 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 566, win 68, options [nop,nop,TS val 468647784 ecr 7449993], length 0
11:23:50.561029 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 592, win 68, options [nop,nop,TS val 468647786 ecr 7449993], length 0
11:23:50.561116 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 795:968, ack 4021, win 424, options [nop,nop,TS val 7450008 ecr 1987871851], length 173
11:23:50.561190 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 618, win 68, options [nop,nop,TS val 468647788 ecr 7449993], length 0
11:23:50.561241 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 644, win 68, options [nop,nop,TS val 468647788 ecr 7449993], length 0
11:23:50.561394 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 670, win 68, options [nop,nop,TS val 468647790 ecr 7449993], length 0
11:23:50.564721 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 722:1677, ack 134, win 245, options [nop,nop,TS val 7450010 ecr 468647776], length 955
11:23:50.567326 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 174:358, ack 440, win 245, options [nop,nop,TS val 7450010 ecr 3196620598], length 184
11:23:50.570794 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 696, win 68, options [nop,nop,TS val 468647792 ecr 7449993], length 0
11:23:50.571057 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 722, win 68, options [nop,nop,TS val 468647792 ecr 7449993], length 0
11:23:50.630517 IP xmpp-shv-01-frc3.facebook.com.xmpp-client > 10.175.110.58.34161: Flags [.], ack 415, win 120, options [nop,nop,TS val 2935900847 ecr 109103374], length 0
11:23:50.650556 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.49590: Flags [.], ack 567, win 16616, options [nop,nop,TS val 597286910 ecr 7450006], length 0
11:23:50.660433 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.55346: Flags [.], ack 567, win 16616, options [nop,nop,TS val 777695633 ecr 7450007], length 0
11:23:50.670710 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [.], ack 968, win 661, options [nop,nop,TS val 1987871981 ecr 7450008], length 0
11:23:50.690552 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 4021:4093, ack 968, win 661, options [nop,nop,TS val 1987872006 ecr 7450008], length 72
11:23:50.693127 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 968:1103, ack 4093, win 424, options [nop,nop,TS val 7450023 ecr 1987872006], length 135
11:23:50.710750 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.49590: Flags [P.], seq 3771:3859, ack 567, win 16616, options [nop,nop,TS val 597286964 ecr 7450006], length 88
11:23:50.712543 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 567:611, ack 3859, win 24984, options [nop,nop,TS val 7450025 ecr 597286964], length 44
11:23:50.743044 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 1677, win 80, options [nop,nop,TS val 468647968 ecr 7450010], length 0
11:23:50.743197 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [.], seq 440:1828, ack 358, win 31, options [nop,nop,TS val 3196620796 ecr 7450010], length 1388
11:23:50.752815 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [.], seq 1828:3216, ack 358, win 31, options [nop,nop,TS val 3196620796 ecr 7450010], length 1388
11:23:50.752817 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [.], seq 3216:4604, ack 358, win 31, options [nop,nop,TS val 3196620796 ecr 7450010], length 1388
11:23:50.755038 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 3216, win 332, options [nop,nop,TS val 7450029 ecr 3196620796], length 0
11:23:50.760596 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [P.], seq 4604:4632, ack 358, win 31, options [nop,nop,TS val 3196620796 ecr 7450010], length 28
11:23:50.760692 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [.], ack 1103, win 661, options [nop,nop,TS val 1987872071 ecr 7450023], length 0
11:23:50.760786 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 4093:4252, ack 1103, win 661, options [nop,nop,TS val 1987872071 ecr 7450023], length 159
11:23:50.761913 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 4632, win 375, options [nop,nop,TS val 7450030 ecr 3196620796], length 0
11:23:50.767600 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [P.], seq 333:508, ack 4310, win 402, options [nop,nop,TS val 7450030 ecr 552934301], length 175
11:23:50.770909 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 4252:4410, ack 1103, win 661, options [nop,nop,TS val 1987872071 ecr 7450023], length 158
11:23:50.773393 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 4410, win 511, options [nop,nop,TS val 7450031 ecr 1987872071], length 0
11:23:50.774793 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1103:1250, ack 4410, win 511, options [nop,nop,TS val 7450031 ecr 1987872071], length 147
11:23:50.779032 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 358:668, ack 4632, win 375, options [nop,nop,TS val 7450031 ecr 3196620796], length 310
11:23:50.780667 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [P.], seq 134:163, ack 1677, win 80, options [nop,nop,TS val 468648004 ecr 7450010], length 29
11:23:50.790694 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.55346: Flags [P.], seq 3771:3859, ack 567, win 16616, options [nop,nop,TS val 777695764 ecr 7450007], length 88
11:23:50.791686 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1677:1703, ack 163, win 245, options [nop,nop,TS val 7450033 ecr 468648004], length 26
11:23:50.792619 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 567:616, ack 3859, win 22208, options [nop,nop,TS val 7450033 ecr 777695764], length 49
11:23:50.792839 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1703:1729, ack 163, win 245, options [nop,nop,TS val 7450033 ecr 468648004], length 26
11:23:50.793139 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1729:1756, ack 163, win 245, options [nop,nop,TS val 7450033 ecr 468648004], length 27
11:23:50.793174 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1756:1783, ack 163, win 245, options [nop,nop,TS val 7450033 ecr 468648004], length 27
11:23:50.793378 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1783:1826, ack 163, win 245, options [nop,nop,TS val 7450033 ecr 468648004], length 43
11:23:50.793653 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1826:1852, ack 163, win 245, options [nop,nop,TS val 7450033 ecr 468648004], length 26
11:23:50.793947 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1852:1879, ack 163, win 245, options [nop,nop,TS val 7450033 ecr 468648004], length 27
11:23:50.793981 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1879:1920, ack 163, win 245, options [nop,nop,TS val 7450033 ecr 468648004], length 41
11:23:50.794219 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1920:1946, ack 163, win 245, options [nop,nop,TS val 7450033 ecr 468648004], length 26
11:23:50.794252 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1946:1973, ack 163, win 245, options [nop,nop,TS val 7450033 ecr 468648004], length 27
11:23:50.794463 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1973:2005, ack 163, win 245, options [nop,nop,TS val 7450033 ecr 468648004], length 32
11:23:50.794727 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 2005:2031, ack 163, win 245, options [nop,nop,TS val 7450033 ecr 468648004], length 26
11:23:50.796171 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 2031:2058, ack 163, win 245, options [nop,nop,TS val 7450033 ecr 468648004], length 27
11:23:50.800743 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.52731: Flags [P.], seq 93:120, ack 1374, win 91, options [nop,nop,TS val 39474281 ecr 7448084], length 27
11:23:50.800840 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.52731: Flags [F.], seq 120, ack 1374, win 91, options [nop,nop,TS val 39474281 ecr 7448084], length 0
11:23:50.800948 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.49590: Flags [.], ack 611, win 16616, options [nop,nop,TS val 597287056 ecr 7450025], length 0
11:23:50.801110 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.49590: Flags [P.], seq 3859:4223, ack 611, win 16616, options [nop,nop,TS val 597287057 ecr 7450025], length 364
11:23:50.802301 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [R], seq 3059274604, win 0, length 0
11:23:50.840757 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 4410:4577, ack 1250, win 661, options [nop,nop,TS val 1987872155 ecr 7450031], length 167
11:23:50.840841 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 4577:4599, ack 1250, win 661, options [nop,nop,TS val 1987872155 ecr 7450031], length 22
11:23:50.841298 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4223, win 27760, options [nop,nop,TS val 7450038 ecr 597287057], length 0
11:23:50.842309 IP 10.175.110.58.52731 > mqtt-shv-06-frc1.facebook.com.https: Flags [R], seq 3059274604, win 0, length 0
11:23:50.843056 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 4599, win 554, options [nop,nop,TS val 7450038 ecr 1987872155], length 0
11:23:50.843337 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1250:1361, ack 4599, win 554, options [nop,nop,TS val 7450038 ecr 1987872155], length 111
11:23:50.850459 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [.], ack 508, win 661, options [nop,nop,TS val 552934748 ecr 7450030], length 0
11:23:50.858624 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [P.], seq 693:726, ack 4336, win 445, options [nop,nop,TS val 7450039 ecr 2415999360], length 33
11:23:50.864074 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [P.], seq 688:743, ack 4335, win 445, options [nop,nop,TS val 7450040 ecr 2415999368], length 55
11:23:50.882725 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [P.], seq 4310:4417, ack 508, win 661, options [nop,nop,TS val 552934769 ecr 7450030], length 107
11:23:50.882851 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [P.], seq 4417:4534, ack 508, win 661, options [nop,nop,TS val 552934770 ecr 7450030], length 117
11:23:50.883126 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [P.], seq 4534:4657, ack 508, win 661, options [nop,nop,TS val 552934771 ecr 7450030], length 123
11:23:50.883127 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [P.], seq 4657:4802, ack 508, win 661, options [nop,nop,TS val 552934771 ecr 7450030], length 145
11:23:50.883280 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.55346: Flags [.], ack 616, win 16616, options [nop,nop,TS val 777695853 ecr 7450033], length 0
11:23:50.883392 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.55346: Flags [P.], seq 3859:4221, ack 616, win 16616, options [nop,nop,TS val 777695854 ecr 7450033], length 362
11:23:50.885012 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [.], ack 4417, win 402, options [nop,nop,TS val 7450042 ecr 552934769], length 0
11:23:50.885240 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [.], ack 4534, win 402, options [nop,nop,TS val 7450042 ecr 552934770], length 0
11:23:50.885511 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [.], ack 4657, win 402, options [nop,nop,TS val 7450042 ecr 552934771], length 0
11:23:50.885908 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [.], ack 4802, win 445, options [nop,nop,TS val 7450042 ecr 552934771], length 0
11:23:50.890794 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [.], ack 726, win 4925, options [nop,nop,TS val 2415999827 ecr 7450039], length 0
11:23:50.891072 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [P.], seq 4336:4402, ack 726, win 4925, options [nop,nop,TS val 2415999828 ecr 7450039], length 66
11:23:50.892600 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [.], ack 4402, win 445, options [nop,nop,TS val 7450043 ecr 2415999828], length 0
11:23:50.900439 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [.], ack 743, win 4942, options [nop,nop,TS val 2415999833 ecr 7450040], length 0
11:23:50.900555 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [P.], seq 4335:4401, ack 743, win 4942, options [nop,nop,TS val 2415999835 ecr 7450040], length 66
11:23:50.902235 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [.], ack 4401, win 445, options [nop,nop,TS val 7450044 ecr 2415999835], length 0
11:23:50.910657 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 4599:4655, ack 1361, win 661, options [nop,nop,TS val 1987872223 ecr 7450038], length 56
11:23:50.915796 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1361:1626, ack 4655, win 554, options [nop,nop,TS val 7450045 ecr 1987872223], length 265
11:23:50.921360 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4221, win 24984, options [nop,nop,TS val 7450046 ecr 777695854], length 0
11:23:50.922063 IP 10.175.110.58.44184 > kerberos3.Stanford.EDU.0: Flags [S], seq 133647231, win 14600, options [mss 1460,sackOK,TS val 276746104 ecr 0,nop,wscale 7], length 0
11:23:50.922161 IP 10.175.110.58.44185 > kerberos3.Stanford.EDU.0: Flags [S], seq 3815584978, win 14600, options [mss 1460,sackOK,TS val 276746104 ecr 0,nop,wscale 7], length 0
11:23:50.947621 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [P.], seq 743:800, ack 4401, win 445, options [nop,nop,TS val 7450048 ecr 2415999835], length 57
11:23:50.950857 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 1703, win 80, options [nop,nop,TS val 468648180 ecr 7450033], length 0
11:23:50.950960 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [P.], seq 4632:4638, ack 668, win 37, options [nop,nop,TS val 3196621008 ecr 7450031], length 6
11:23:50.951059 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [P.], seq 4638:4675, ack 668, win 37, options [nop,nop,TS val 3196621008 ecr 7450031], length 37
11:23:50.952678 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 2058:2857, ack 163, win 245, options [nop,nop,TS val 7450049 ecr 468648180], length 799
11:23:50.953440 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 4675, win 375, options [nop,nop,TS val 7450049 ecr 3196621008], length 0
11:23:50.956133 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [P.], seq 508:647, ack 4802, win 445, options [nop,nop,TS val 7450049 ecr 552934771], length 139
11:23:50.960804 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 1756, win 80, options [nop,nop,TS val 468648184 ecr 7450033], length 0
11:23:50.960904 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 1729, win 80, options [nop,nop,TS val 468648184 ecr 7450033], length 0
11:23:50.961114 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 1783, win 80, options [nop,nop,TS val 468648186 ecr 7450033], length 0
11:23:50.961179 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 1826, win 80, options [nop,nop,TS val 468648188 ecr 7450033], length 0
11:23:50.961328 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 1852, win 80, options [nop,nop,TS val 468648188 ecr 7450033], length 0
11:23:50.961388 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 1879, win 80, options [nop,nop,TS val 468648190 ecr 7450033], length 0
11:23:50.966466 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 668:811, ack 4675, win 375, options [nop,nop,TS val 7450050 ecr 3196621008], length 143
11:23:50.970830 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 1920, win 80, options [nop,nop,TS val 468648192 ecr 7450033], length 0
11:23:50.970924 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 1946, win 80, options [nop,nop,TS val 468648194 ecr 7450033], length 0
11:23:50.971040 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 1973, win 80, options [nop,nop,TS val 468648194 ecr 7450033], length 0
11:23:50.971163 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 2005, win 80, options [nop,nop,TS val 468648196 ecr 7450033], length 0
11:23:50.971373 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 2031, win 80, options [nop,nop,TS val 468648198 ecr 7450033], length 0
11:23:50.971551 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 2058, win 80, options [nop,nop,TS val 468648198 ecr 7450033], length 0
11:23:50.980540 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [.], ack 800, win 4999, options [nop,nop,TS val 2415999918 ecr 7450048], length 0
11:23:50.980675 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [P.], seq 4401:4469, ack 800, win 4999, options [nop,nop,TS val 2415999919 ecr 7450048], length 68
11:23:50.980879 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [P.], seq 4469:4584, ack 800, win 4999, options [nop,nop,TS val 2415999920 ecr 7450048], length 115
11:23:50.981912 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [.], ack 4469, win 445, options [nop,nop,TS val 7450052 ecr 2415999919], length 0
11:23:50.982340 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [.], ack 4584, win 445, options [nop,nop,TS val 7450052 ecr 2415999920], length 0
11:23:51.010632 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [.], ack 647, win 661, options [nop,nop,TS val 552934908 ecr 7450049], length 0
11:23:51.011908 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [P.], seq 647:784, ack 4802, win 445, options [nop,nop,TS val 7450055 ecr 552934908], length 137
11:23:51.030523 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [.], ack 1626, win 661, options [nop,nop,TS val 1987872341 ecr 7450045], length 0
11:23:51.031711 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1626:1724, ack 4655, win 554, options [nop,nop,TS val 7450057 ecr 1987872341], length 98
11:23:51.042632 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [P.], seq 800:833, ack 4584, win 445, options [nop,nop,TS val 7450058 ecr 2415999920], length 33
11:23:51.044265 IP 10.175.110.58.44186 > kerberos3.Stanford.EDU.0: Flags [S], seq 4106022421, win 14600, options [mss 1460,sackOK,TS val 276746134 ecr 0,nop,wscale 7], length 0
11:23:51.044524 IP 10.175.110.58.44187 > kerberos3.Stanford.EDU.0: Flags [S], seq 1642859979, win 14600, options [mss 1460,sackOK,TS val 276746134 ecr 0,nop,wscale 7], length 0
11:23:51.060481 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [.], ack 784, win 661, options [nop,nop,TS val 552934952 ecr 7450055], length 0
11:23:51.080613 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [.], ack 833, win 5032, options [nop,nop,TS val 2416000019 ecr 7450058], length 0
11:23:51.080811 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [P.], seq 4584:4650, ack 833, win 5032, options [nop,nop,TS val 2416000020 ecr 7450058], length 66
11:23:51.082565 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [.], ack 4650, win 445, options [nop,nop,TS val 7450062 ecr 2416000020], length 0
11:23:51.102748 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 2133:2653, ack 346, win 661, options [nop,nop,TS val 3049758783 ecr 262796760], length 520
11:23:51.102859 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 2653:3091, ack 346, win 661, options [nop,nop,TS val 3049758783 ecr 262796760], length 438
11:23:51.103938 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 346:444, ack 3091, win 639, options [nop,nop,TS val 262802066 ecr 3049758783], length 98
11:23:51.104294 IP 10.175.110.58.44188 > kerberos3.Stanford.EDU.0: Flags [S], seq 4077953070, win 14600, options [mss 1460,sackOK,TS val 276746149 ecr 0,nop,wscale 7], length 0
11:23:51.111991 IP 10.175.110.58.44189 > kerberos3.Stanford.EDU.0: Flags [S], seq 1090800750, win 14600, options [mss 1460,sackOK,TS val 276746151 ecr 0,nop,wscale 7], length 0
11:23:51.112679 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.40000: Flags [P.], seq 585:1009, ack 78, win 670, options [nop,nop,TS val 250005266 ecr 109103374], length 424
11:23:51.112867 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.54281: Flags [P.], seq 9008:9442, ack 1827, win 661, options [nop,nop,TS val 497097892 ecr 7446336], length 434
11:23:51.112944 IP 10.175.110.58.40000 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 1009, win 331, options [nop,nop,TS val 109103535 ecr 250005266], length 0
11:23:51.112947 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [.], ack 1724, win 661, options [nop,nop,TS val 1987872427 ecr 7450057], length 0
11:23:51.113120 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 4655:5080, ack 1724, win 661, options [nop,nop,TS val 1987872427 ecr 7450057], length 425
11:23:51.113276 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 5080:5102, ack 1724, win 661, options [nop,nop,TS val 1987872427 ecr 7450057], length 22
11:23:51.114311 IP 10.175.110.58.54281 > bk-in-f125.1e100.net.xmpp-client: Flags [R], seq 3285879342, win 0, length 0
11:23:51.115938 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 5102, win 598, options [nop,nop,TS val 7450065 ecr 1987872427], length 0
11:23:51.122760 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 5102:5555, ack 1724, win 661, options [nop,nop,TS val 1987872427 ecr 7450057], length 453
11:23:51.122861 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 5555:5913, ack 1724, win 661, options [nop,nop,TS val 1987872429 ecr 7450057], length 358
11:23:51.122983 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 6282:6650, ack 1724, win 661, options [nop,nop,TS val 1987872430 ecr 7450057], length 368
11:23:51.123110 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 5913:6282, ack 1724, win 661, options [nop,nop,TS val 1987872430 ecr 7450057], length 369
11:23:51.123231 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 6650:7019, ack 1724, win 661, options [nop,nop,TS val 1987872431 ecr 7450057], length 369
11:23:51.124670 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 5913, win 685, options [nop,nop,TS val 7450066 ecr 1987872427,nop,nop,sack 1 {6282:6650}], length 0
11:23:51.124907 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 6650, win 728, options [nop,nop,TS val 7450066 ecr 1987872430], length 0
11:23:51.124944 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 7019, win 771, options [nop,nop,TS val 7450066 ecr 1987872431], length 0
11:23:51.128558 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1724:1941, ack 7019, win 771, options [nop,nop,TS val 7450066 ecr 1987872431], length 217
11:23:51.131325 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 2857, win 91, options [nop,nop,TS val 468648354 ecr 7450049], length 0
11:23:51.131426 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [P.], seq 163:198, ack 2857, win 91, options [nop,nop,TS val 468648354 ecr 7450049], length 35
11:23:51.131554 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [P.], seq 4675:5034, ack 811, win 39, options [nop,nop,TS val 3196621184 ecr 7450050], length 359
11:23:51.144325 IP 10.175.110.58.44190 > kerberos3.Stanford.EDU.0: Flags [S], seq 2393653340, win 14600, options [mss 1460,sackOK,TS val 276746159 ecr 0,nop,wscale 7], length 0
11:23:51.144359 IP 10.175.110.58.44191 > kerberos3.Stanford.EDU.0: Flags [S], seq 2616541428, win 14600, options [mss 1460,sackOK,TS val 276746159 ecr 0,nop,wscale 7], length 0
11:23:51.152221 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 811:952, ack 5034, win 419, options [nop,nop,TS val 7450069 ecr 3196621184], length 141
11:23:51.170512 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [.], ack 444, win 661, options [nop,nop,TS val 3049758852 ecr 262802066], length 0
11:23:51.171322 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [.], ack 198, win 245, options [nop,nop,TS val 7450071 ecr 468648354], length 0
11:23:51.180629 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 7019:7799, ack 1724, win 661, options [nop,nop,TS val 1987872492 ecr 7450065], length 780
11:23:51.221294 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 7799, win 815, options [nop,nop,TS val 7450076 ecr 1987872492], length 0
11:23:51.230535 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [.], ack 1941, win 661, options [nop,nop,TS val 1987872548 ecr 7450066], length 0
11:23:51.242659 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 7799:8825, ack 1941, win 661, options [nop,nop,TS val 1987872552 ecr 7450066], length 1026
11:23:51.242661 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 8825:8879, ack 1941, win 661, options [nop,nop,TS val 1987872552 ecr 7450066], length 54
11:23:51.244516 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 8825, win 858, options [nop,nop,TS val 7450078 ecr 1987872552], length 0
11:23:51.244742 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 8879, win 858, options [nop,nop,TS val 7450078 ecr 1987872552], length 0
11:23:51.350530 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [.], ack 952, win 41, options [nop,nop,TS val 3196621406 ecr 7450069], length 0
11:23:51.372663 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 3091:3611, ack 444, win 661, options [nop,nop,TS val 3049759058 ecr 262802066], length 520
11:23:51.372790 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 3611:3745, ack 444, win 661, options [nop,nop,TS val 3049759058 ecr 262802066], length 134
11:23:51.372855 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 3745:4265, ack 444, win 661, options [nop,nop,TS val 3049759059 ecr 262802066], length 520
11:23:51.373866 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 444:542, ack 4265, win 633, options [nop,nop,TS val 262802134 ecr 3049759058], length 98
11:23:51.380591 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.40000: Flags [P.], seq 1009:1169, ack 78, win 670, options [nop,nop,TS val 250005540 ecr 109103535], length 160
11:23:51.380859 IP 10.175.110.58.40000 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 1169, win 331, options [nop,nop,TS val 109103602 ecr 250005540], length 0
11:23:51.390590 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 8879:9009, ack 1941, win 661, options [nop,nop,TS val 1987872700 ecr 7450078], length 130
11:23:51.394155 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 9009, win 901, options [nop,nop,TS val 7450093 ecr 1987872700], length 0
11:23:51.440487 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [.], ack 542, win 661, options [nop,nop,TS val 3049759122 ecr 262802134], length 0
11:23:51.440828 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 542:640, ack 4265, win 646, options [nop,nop,TS val 262802150 ecr 3049759122], length 98
11:23:51.500491 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [.], ack 640, win 661, options [nop,nop,TS val 3049759188 ecr 262802150], length 0
11:23:51.704276 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [P.], seq 833:860, ack 4650, win 445, options [nop,nop,TS val 7450121 ecr 2416000020], length 27
11:23:51.705146 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [F.], seq 860, ack 4650, win 445, options [nop,nop,TS val 7450121 ecr 2416000020], length 0
11:23:51.705426 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [P.], seq 726:753, ack 4402, win 445, options [nop,nop,TS val 7450121 ecr 2415999828], length 27
11:23:51.705695 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [F.], seq 753, ack 4402, win 445, options [nop,nop,TS val 7450122 ecr 2415999828], length 0
11:23:51.723625 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [P.], seq 5034:5106, ack 952, win 41, options [nop,nop,TS val 3196621771 ecr 7450069], length 72
11:23:51.733226 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 952:1095, ack 5106, win 419, options [nop,nop,TS val 7450127 ecr 3196621771], length 143
11:23:51.745466 IP 10.175.110.58.42855 > owa.lut.fi.imaps: Flags [S], seq 1284108551, win 14600, options [mss 1460,sackOK,TS val 7450128 ecr 0,nop,wscale 6], length 0
11:23:51.745692 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [S], seq 295993599, win 14600, options [mss 1460,sackOK,TS val 7450128 ecr 0,nop,wscale 6], length 0
11:23:51.750550 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 611:644, ack 4223, win 27760, options [nop,nop,TS val 7450128 ecr 597287057], length 33
11:23:51.770715 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [.], ack 860, win 5059, options [nop,nop,TS val 2416000706 ecr 7450121], length 0
11:23:51.770827 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [F.], seq 4650, ack 860, win 5059, options [nop,nop,TS val 2416000706 ecr 7450121], length 0
11:23:51.770976 IP owa.lut.fi.imaps > 10.175.110.58.58637: Flags [F.], seq 4650, ack 861, win 5059, options [nop,nop,TS val 2416000708 ecr 7450121], length 0
11:23:51.771083 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [.], ack 753, win 4952, options [nop,nop,TS val 2416000710 ecr 7450121], length 0
11:23:51.771236 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [F.], seq 4402, ack 753, win 4952, options [nop,nop,TS val 2416000710 ecr 7450121], length 0
11:23:51.771379 IP owa.lut.fi.imaps > 10.175.110.58.56300: Flags [F.], seq 4402, ack 754, win 4952, options [nop,nop,TS val 2416000710 ecr 7450122], length 0
11:23:51.772443 IP 10.175.110.58.58637 > owa.lut.fi.imaps: Flags [.], ack 4651, win 445, options [nop,nop,TS val 7450131 ecr 2416000706], length 0
11:23:51.772674 IP 10.175.110.58.56300 > owa.lut.fi.imaps: Flags [.], ack 4403, win 445, options [nop,nop,TS val 7450131 ecr 2416000710], length 0
11:23:51.780440 IP owa.lut.fi.imaps > 10.175.110.58.42855: Flags [S.], seq 3434632351, ack 1284108552, win 4200, options [mss 1400,nop,wscale 0,nop,nop,TS val 2416000715 ecr 7450128,sackOK,eol], length 0
11:23:51.780555 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [S.], seq 1602887815, ack 295993600, win 4200, options [mss 1400,nop,wscale 0,nop,nop,TS val 2416000717 ecr 7450128,sackOK,eol], length 0
11:23:51.782372 IP 10.175.110.58.42855 > owa.lut.fi.imaps: Flags [.], ack 1, win 229, options [nop,nop,TS val 7450132 ecr 2416000715], length 0
11:23:51.782636 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [.], ack 1, win 229, options [nop,nop,TS val 7450132 ecr 2416000717], length 0
11:23:51.785163 IP 10.175.110.58.42855 > owa.lut.fi.imaps: Flags [P.], seq 1:185, ack 1, win 229, options [nop,nop,TS val 7450132 ecr 2416000715], length 184
11:23:51.789167 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [P.], seq 1:185, ack 1, win 229, options [nop,nop,TS val 7450132 ecr 2416000717], length 184
11:23:51.795534 IP 10.175.110.58.37455 > ns8.sci.fi.domain: 65170+ AAAA? krb5auth3.stanford.edu. (40)
11:23:51.814395 IP 10.175.110.58.45564 > ns8.sci.fi.domain: 61819+ AAAA? krb5auth3.stanford.edu. (40)
11:23:51.822928 IP owa.lut.fi.imaps > 10.175.110.58.42855: Flags [.], seq 1:1389, ack 185, win 4200, options [nop,nop,TS val 2416000755 ecr 7450132], length 1388
11:23:51.824919 IP 10.175.110.58.42855 > owa.lut.fi.imaps: Flags [.], ack 1389, win 272, options [nop,nop,TS val 7450136 ecr 2416000755], length 0
11:23:51.824959 IP 10.175.110.58.47812 > ns8.sci.fi.domain: 24192+ AAAA? krb5auth3.stanford.edu. (40)
11:23:51.832651 IP owa.lut.fi.imaps > 10.175.110.58.42855: Flags [.], seq 1389:2777, ack 185, win 4200, options [nop,nop,TS val 2416000755 ecr 7450132], length 1388
11:23:51.832745 IP owa.lut.fi.imaps > 10.175.110.58.42855: Flags [P.], seq 2777:3711, ack 185, win 4200, options [nop,nop,TS val 2416000755 ecr 7450132], length 934
11:23:51.835311 IP 10.175.110.58.49933 > ns8.sci.fi.domain: 7601+ AAAA? krb5auth3.stanford.edu. (40)
11:23:51.842758 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [.], seq 1:1389, ack 185, win 4200, options [nop,nop,TS val 2416000759 ecr 7450132], length 1388
11:23:51.842941 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [.], seq 1389:2777, ack 185, win 4200, options [nop,nop,TS val 2416000759 ecr 7450132], length 1388
11:23:51.845194 IP 10.175.110.58.42855 > owa.lut.fi.imaps: Flags [.], ack 2777, win 315, options [nop,nop,TS val 7450138 ecr 2416000755], length 0
11:23:51.845414 IP 10.175.110.58.42855 > owa.lut.fi.imaps: Flags [.], ack 3711, win 359, options [nop,nop,TS val 7450138 ecr 2416000755], length 0
11:23:51.845692 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [.], ack 1389, win 272, options [nop,nop,TS val 7450138 ecr 2416000759], length 0
11:23:51.845755 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [.], ack 2777, win 315, options [nop,nop,TS val 7450138 ecr 2416000759], length 0
11:23:51.852794 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [P.], seq 2777:3711, ack 185, win 4200, options [nop,nop,TS val 2416000759 ecr 7450132], length 934
11:23:51.852796 IP ns8.sci.fi.domain > 10.175.110.58.37455: 65170 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:51.852970 IP ns8.sci.fi.domain > 10.175.110.58.45564: 61819 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:51.853000 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.49590: Flags [P.], seq 4223:4269, ack 644, win 16616, options [nop,nop,TS val 597288100 ecr 7450128], length 46
11:23:51.853189 IP 10.175.110.58.42363 > ns8.sci.fi.domain: 3951+ A? krb5auth3.stanford.edu. (40)
11:23:51.853424 IP ns8.sci.fi.domain > 10.175.110.58.47812: 24192 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:51.853562 IP 10.175.110.58.53846 > ns8.sci.fi.domain: 63793+ A? krb5auth3.stanford.edu. (40)
11:23:51.853793 IP 10.175.110.58.47853 > ns8.sci.fi.domain: 64860+ A? krb5auth3.stanford.edu. (40)
11:23:51.854509 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [.], ack 3711, win 359, options [nop,nop,TS val 7450139 ecr 2416000759], length 0
11:23:51.854743 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4269, win 27760, options [nop,nop,TS val 7450139 ecr 597288100], length 0
11:23:51.857426 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 616:649, ack 4221, win 24984, options [nop,nop,TS val 7450139 ecr 777695854], length 33
11:23:51.858242 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 644:688, ack 4269, win 27760, options [nop,nop,TS val 7450139 ecr 597288100], length 44
11:23:51.859015 IP 10.175.110.58.54083 > ns8.sci.fi.domain: 61961+ AAAA? krb5auth3.stanford.edu. (40)
11:23:51.860758 IP ns8.sci.fi.domain > 10.175.110.58.49933: 7601 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:51.860951 IP 10.175.110.58.36416 > ns8.sci.fi.domain: 40197+ A? krb5auth3.stanford.edu. (40)
11:23:51.864840 IP 10.175.110.58.42855 > owa.lut.fi.imaps: Flags [P.], seq 185:499, ack 3711, win 359, options [nop,nop,TS val 7450140 ecr 2416000755], length 314
11:23:51.880526 IP ns8.sci.fi.domain > 10.175.110.58.42363: 3951 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:51.880717 IP ns8.sci.fi.domain > 10.175.110.58.53846: 63793 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:51.880751 IP 10.175.110.58.51201 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:51.880719 IP ns8.sci.fi.domain > 10.175.110.58.47853: 64860 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:51.880899 IP 10.175.110.58.37806 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:51.880993 IP 10.175.110.58.46631 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:51.881947 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [P.], seq 185:499, ack 3711, win 359, options [nop,nop,TS val 7450141 ecr 2416000759], length 314
11:23:51.884878 IP 10.175.110.58.39399 > ns8.sci.fi.domain: 15498+ AAAA? krb5auth3.stanford.edu. (40)
11:23:51.890652 IP ns8.sci.fi.domain > 10.175.110.58.36416: 40197 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:51.890826 IP 10.175.110.58.37832 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:51.894700 IP 10.175.110.58.46782 > ns8.sci.fi.domain: 43227+ AAAA? krb5auth3.stanford.edu. (40)
11:23:51.900822 IP ns8.sci.fi.domain > 10.175.110.58.54083: 61961 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:51.900991 IP 10.175.110.58.45762 > ns8.sci.fi.domain: 11695+ A? krb5auth3.stanford.edu. (40)
11:23:51.903983 IP 10.175.110.58.45626 > ns8.sci.fi.domain: 40756+ AAAA? krb5auth3.stanford.edu. (40)
11:23:51.910556 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [.], ack 1095, win 43, options [nop,nop,TS val 3196621958 ecr 7450127], length 0
11:23:51.910764 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [P.], seq 5106:5431, ack 1095, win 43, options [nop,nop,TS val 3196621958 ecr 7450127], length 325
11:23:51.910765 IP owa.lut.fi.imaps > 10.175.110.58.42855: Flags [P.], seq 3711:3758, ack 499, win 4384, options [nop,nop,TS val 2416000838 ecr 7450140], length 47
11:23:51.910904 IP owa.lut.fi.imaps > 10.175.110.58.42855: Flags [P.], seq 3758:3836, ack 499, win 4698, options [nop,nop,TS val 2416000847 ecr 7450140], length 78
11:23:51.919535 IP 10.175.110.58.42855 > owa.lut.fi.imaps: Flags [.], ack 3836, win 359, options [nop,nop,TS val 7450145 ecr 2416000838], length 0
11:23:51.919799 IP 10.175.110.58.42855 > owa.lut.fi.imaps: Flags [P.], seq 499:536, ack 3836, win 359, options [nop,nop,TS val 7450145 ecr 2416000838], length 37
11:23:51.923250 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 1095:1242, ack 5431, win 462, options [nop,nop,TS val 7450146 ecr 3196621958], length 147
11:23:51.924584 IP 10.175.110.58.44184 > kerberos3.Stanford.EDU.0: Flags [S], seq 133647231, win 14600, options [mss 1460,sackOK,TS val 276746354 ecr 0,nop,wscale 7], length 0
11:23:51.924665 IP 10.175.110.58.44185 > kerberos3.Stanford.EDU.0: Flags [S], seq 3815584978, win 14600, options [mss 1460,sackOK,TS val 276746355 ecr 0,nop,wscale 7], length 0
11:23:51.930976 IP ns8.sci.fi.domain > 10.175.110.58.39399: 15498 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:51.931085 IP ns8.sci.fi.domain > 10.175.110.58.46782: 43227 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:51.931179 IP 10.175.110.58.58862 > ns8.sci.fi.domain: 59144+ A? krb5auth3.stanford.edu. (40)
11:23:51.931271 IP 10.175.110.58.58119 > ns8.sci.fi.domain: 52954+ A? krb5auth3.stanford.edu. (40)
11:23:51.931407 IP ns8.sci.fi.domain > 10.175.110.58.45762: 11695 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:51.931409 IP ns8.sci.fi.domain > 10.175.110.58.45626: 40756 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:23:51.931523 IP 10.175.110.58.58198 > ns8.sci.fi.domain: 31538+ A? krb5auth3.stanford.edu. (40)
11:23:51.931544 IP 10.175.110.58.58291 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:51.940681 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [P.], seq 3711:3758, ack 499, win 4384, options [nop,nop,TS val 2416000865 ecr 7450141], length 47
11:23:51.940773 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [P.], seq 3758:3836, ack 499, win 4698, options [nop,nop,TS val 2416000875 ecr 7450141], length 78
11:23:51.947089 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [.], ack 3836, win 359, options [nop,nop,TS val 7450148 ecr 2416000865], length 0
11:23:51.947674 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [P.], seq 499:536, ack 3836, win 359, options [nop,nop,TS val 7450148 ecr 2416000865], length 37
11:23:51.950645 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.55346: Flags [P.], seq 4221:4267, ack 649, win 16616, options [nop,nop,TS val 777696920 ecr 7450139], length 46
11:23:51.950868 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.49590: Flags [P.], seq 4269:4633, ack 688, win 16616, options [nop,nop,TS val 597288204 ecr 7450139], length 364
11:23:51.952129 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4267, win 24984, options [nop,nop,TS val 7450149 ecr 777696920], length 0
11:23:51.952587 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 649:698, ack 4267, win 24984, options [nop,nop,TS val 7450149 ecr 777696920], length 49
11:23:51.960531 IP owa.lut.fi.imaps > 10.175.110.58.42855: Flags [.], ack 536, win 4735, options [nop,nop,TS val 2416000891 ecr 7450145], length 0
11:23:51.960647 IP ns8.sci.fi.domain > 10.175.110.58.58862: 59144 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:51.960885 IP ns8.sci.fi.domain > 10.175.110.58.58119: 52954 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:51.960886 IP ns8.sci.fi.domain > 10.175.110.58.58198: 31538 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:23:51.960944 IP 10.175.110.58.37958 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:51.961059 IP 10.175.110.58.59640 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:51.961166 IP 10.175.110.58.39651 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:51.961823 IP 10.175.110.58.42855 > owa.lut.fi.imaps: Flags [P.], seq 536:588, ack 3836, win 359, options [nop,nop,TS val 7450150 ecr 2416000891], length 52
11:23:51.980551 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [.], ack 536, win 4735, options [nop,nop,TS val 2416000918 ecr 7450148], length 0
11:23:51.981830 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [P.], seq 536:588, ack 3836, win 359, options [nop,nop,TS val 7450152 ecr 2416000918], length 52
11:23:51.991289 IP 10.175.110.58.49590 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4633, win 30536, options [nop,nop,TS val 7450153 ecr 597288204], length 0
11:23:52.010850 IP owa.lut.fi.imaps > 10.175.110.58.42855: Flags [.], ack 588, win 4787, options [nop,nop,TS val 2416000943 ecr 7450150], length 0
11:23:52.010951 IP owa.lut.fi.imaps > 10.175.110.58.42855: Flags [P.], seq 3836:4002, ack 588, win 4787, options [nop,nop,TS val 2416000945 ecr 7450150], length 166
11:23:52.011119 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [.], ack 588, win 4787, options [nop,nop,TS val 2416000950 ecr 7450152], length 0
11:23:52.013570 IP 10.175.110.58.42855 > owa.lut.fi.imaps: Flags [P.], seq 588:644, ack 4002, win 402, options [nop,nop,TS val 7450155 ecr 2416000945], length 56
11:23:52.020560 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [P.], seq 3836:4002, ack 588, win 4787, options [nop,nop,TS val 2416000951 ecr 7450152], length 166
11:23:52.023037 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [P.], seq 588:644, ack 4002, win 402, options [nop,nop,TS val 7450156 ecr 2416000951], length 56
11:23:52.035575 IP 10.175.110.58.27000 > ns8.sci.fi.domain: 31223+ [1au] A? android.clients.google.com. (55)
11:23:52.040559 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.55346: Flags [P.], seq 4267:4629, ack 698, win 16616, options [nop,nop,TS val 777697015 ecr 7450149], length 362
11:23:52.040652 IP 10.175.110.58.44187 > kerberos3.Stanford.EDU.0: Flags [S], seq 1642859979, win 14600, options [mss 1460,sackOK,TS val 276746384 ecr 0,nop,wscale 7], length 0
11:23:52.040685 IP 10.175.110.58.44186 > kerberos3.Stanford.EDU.0: Flags [S], seq 4106022421, win 14600, options [mss 1460,sackOK,TS val 276746384 ecr 0,nop,wscale 7], length 0
11:23:52.050521 IP owa.lut.fi.imaps > 10.175.110.58.42855: Flags [.], ack 644, win 4843, options [nop,nop,TS val 2416000983 ecr 7450155], length 0
11:23:52.050829 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [.], ack 644, win 4843, options [nop,nop,TS val 2416000990 ecr 7450156], length 0
11:23:52.060509 IP ns8.sci.fi.domain > 10.175.110.58.27000: 31223 12/0/0 CNAME android.l.google.com., A 74.125.232.100, A 74.125.232.96, A 74.125.232.104, A 74.125.232.105, A 74.125.232.103, A 74.125.232.102, A 74.125.232.97, A 74.125.232.99, A 74.125.232.98, A 74.125.232.110, A 74.125.232.101 (244)
11:23:52.061339 IP 10.175.110.58.47739 > ns8.sci.fi.domain: 595+ [1au] A? android.l.google.com. (49)
11:23:52.080651 IP owa.lut.fi.imaps > 10.175.110.58.42855: Flags [P.], seq 4002:4050, ack 644, win 4843, options [nop,nop,TS val 2416001017 ecr 7450155], length 48
11:23:52.081624 IP 10.175.110.58.55346 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4629, win 27760, options [nop,nop,TS val 7450162 ecr 777697015], length 0
11:23:52.082164 IP 10.175.110.58.42855 > owa.lut.fi.imaps: Flags [P.], seq 644:693, ack 4050, win 402, options [nop,nop,TS val 7450162 ecr 2416001017], length 49
11:23:52.090655 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [P.], seq 5431:5631, ack 1242, win 45, options [nop,nop,TS val 3196622138 ecr 7450146], length 200
11:23:52.090754 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [P.], seq 4002:4050, ack 644, win 4843, options [nop,nop,TS val 2416001024 ecr 7450156], length 48
11:23:52.090915 IP ns8.sci.fi.domain > 10.175.110.58.47739: 595 11/0/0 A 74.125.232.110, A 74.125.232.99, A 74.125.232.103, A 74.125.232.101, A 74.125.232.97, A 74.125.232.104, A 74.125.232.98, A 74.125.232.96, A 74.125.232.105, A 74.125.232.100, A 74.125.232.102 (214)
11:23:52.095082 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [P.], seq 644:688, ack 4050, win 402, options [nop,nop,TS val 7450163 ecr 2416001024], length 44
11:23:52.096549 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [S], seq 1426424313, win 14600, options [mss 1460,sackOK,TS val 7450163 ecr 0,nop,wscale 6], length 0
11:23:52.096782 IP 10.175.110.58.33392 > ns8.sci.fi.domain: 16571+ PTR? 110.232.125.74.in-addr.arpa. (45)
11:23:52.096820 IP 10.175.110.58.40593 > ns8.sci.fi.domain: 31855+ PTR? 110.232.125.74.in-addr.arpa. (45)
11:23:52.096850 IP 10.175.110.58.42720 > ns8.sci.fi.domain: 42815+ PTR? 110.232.125.74.in-addr.arpa. (45)
11:23:52.097638 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 1242:1353, ack 5631, win 506, options [nop,nop,TS val 7450163 ecr 3196622138], length 111
11:23:52.100620 IP 10.175.110.58.44188 > kerberos3.Stanford.EDU.0: Flags [S], seq 4077953070, win 14600, options [mss 1460,sackOK,TS val 276746399 ecr 0,nop,wscale 7], length 0
11:23:52.108667 IP 10.175.110.58.44189 > kerberos3.Stanford.EDU.0: Flags [S], seq 1090800750, win 14600, options [mss 1460,sackOK,TS val 276746401 ecr 0,nop,wscale 7], length 0
11:23:52.120432 IP owa.lut.fi.imaps > 10.175.110.58.42855: Flags [.], ack 693, win 4892, options [nop,nop,TS val 2416001053 ecr 7450162], length 0
11:23:52.130519 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [.], ack 688, win 4887, options [nop,nop,TS val 2416001063 ecr 7450163], length 0
11:23:52.130601 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [S.], seq 1703732876, ack 1426424314, win 42540, options [mss 1400,sackOK,TS val 1176934291 ecr 7450163,nop,wscale 6], length 0
11:23:52.130740 IP owa.lut.fi.imaps > 10.175.110.58.42855: Flags [P.], seq 4050:4336, ack 693, win 4892, options [nop,nop,TS val 2416001070 ecr 7450162], length 286
11:23:52.132692 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [.], ack 1, win 229, options [nop,nop,TS val 7450167 ecr 1176934291], length 0
11:23:52.140664 IP 10.175.110.58.44191 > kerberos3.Stanford.EDU.0: Flags [S], seq 2616541428, win 14600, options [mss 1460,sackOK,TS val 276746409 ecr 0,nop,wscale 7], length 0
11:23:52.140691 IP 10.175.110.58.44190 > kerberos3.Stanford.EDU.0: Flags [S], seq 2393653340, win 14600, options [mss 1460,sackOK,TS val 276746409 ecr 0,nop,wscale 7], length 0
11:23:52.150791 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [P.], seq 4050:4335, ack 688, win 4887, options [nop,nop,TS val 2416001085 ecr 7450163], length 285
11:23:52.162789 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [P.], seq 1:185, ack 1, win 229, options [nop,nop,TS val 7450170 ecr 1176934291], length 184
11:23:52.170554 IP ns8.sci.fi.domain > 10.175.110.58.33392: 16571 1/0/0 PTR arn02s05-in-f14.1e100.net. (84)
11:23:52.170638 IP ns8.sci.fi.domain > 10.175.110.58.40593: 31855 1/0/0 PTR arn02s05-in-f14.1e100.net. (84)
11:23:52.170757 IP ns8.sci.fi.domain > 10.175.110.58.42720: 42815 1/0/0 PTR arn02s05-in-f14.1e100.net. (84)
11:23:52.171315 IP 10.175.110.58.42855 > owa.lut.fi.imaps: Flags [.], ack 4336, win 445, options [nop,nop,TS val 7450171 ecr 2416001070], length 0
11:23:52.191467 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [.], ack 4335, win 445, options [nop,nop,TS val 7450173 ecr 2416001085], length 0
11:23:52.202775 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [.], ack 185, win 662, options [nop,nop,TS val 1176934359 ecr 7450170], length 0
11:23:52.202978 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [.], seq 1:1389, ack 185, win 662, options [nop,nop,TS val 1176934360 ecr 7450170], length 1388
11:23:52.206226 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [.], ack 1389, win 272, options [nop,nop,TS val 7450174 ecr 1176934360], length 0
11:23:52.208515 IP 10.175.110.58.42855 > owa.lut.fi.imaps: Flags [P.], seq 693:726, ack 4336, win 445, options [nop,nop,TS val 7450174 ecr 2416001070], length 33
11:23:52.212740 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [.], seq 1389:2777, ack 185, win 662, options [nop,nop,TS val 1176934360 ecr 7450170], length 1388
11:23:52.212873 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [P.], seq 2777:4097, ack 185, win 662, options [nop,nop,TS val 1176934360 ecr 7450170], length 1320
11:23:52.214652 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [P.], seq 688:743, ack 4335, win 445, options [nop,nop,TS val 7450175 ecr 2416001085], length 55
11:23:52.214695 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [.], ack 2777, win 315, options [nop,nop,TS val 7450175 ecr 1176934360], length 0
11:23:52.214832 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [.], ack 4097, win 359, options [nop,nop,TS val 7450175 ecr 1176934360], length 0
11:23:52.220615 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [P.], seq 4097:4237, ack 185, win 662, options [nop,nop,TS val 1176934360 ecr 7450170], length 140
11:23:52.222252 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [.], ack 4237, win 402, options [nop,nop,TS val 7450176 ecr 1176934360], length 0
11:23:52.240472 IP owa.lut.fi.imaps > 10.175.110.58.42855: Flags [.], ack 726, win 4925, options [nop,nop,TS val 2416001176 ecr 7450174], length 0
11:23:52.240561 IP owa.lut.fi.imaps > 10.175.110.58.42855: Flags [P.], seq 4336:4402, ack 726, win 4925, options [nop,nop,TS val 2416001177 ecr 7450174], length 66
11:23:52.242964 IP 10.175.110.58.42855 > owa.lut.fi.imaps: Flags [.], ack 4402, win 445, options [nop,nop,TS val 7450178 ecr 2416001177], length 0
11:23:52.250462 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [.], ack 743, win 4942, options [nop,nop,TS val 2416001183 ecr 7450175], length 0
11:23:52.250638 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [P.], seq 4335:4401, ack 743, win 4942, options [nop,nop,TS val 2416001184 ecr 7450175], length 66
11:23:52.252301 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [.], ack 4401, win 445, options [nop,nop,TS val 7450179 ecr 2416001184], length 0
11:23:52.266888 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [P.], seq 743:800, ack 4401, win 445, options [nop,nop,TS val 7450180 ecr 2416001184], length 57
11:23:52.269932 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [P.], seq 185:307, ack 4237, win 402, options [nop,nop,TS val 7450180 ecr 1176934360], length 122
11:23:52.300661 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [.], ack 800, win 4999, options [nop,nop,TS val 2416001234 ecr 7450180], length 0
11:23:52.300749 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [P.], seq 4401:4469, ack 800, win 4999, options [nop,nop,TS val 2416001235 ecr 7450180], length 68
11:23:52.300974 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [P.], seq 4469:4584, ack 800, win 4999, options [nop,nop,TS val 2416001236 ecr 7450180], length 115
11:23:52.303361 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [.], ack 4584, win 445, options [nop,nop,TS val 7450184 ecr 2416001235], length 0
11:23:52.310557 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [P.], seq 5631:5770, ack 1353, win 45, options [nop,nop,TS val 3196622358 ecr 7450163], length 139
11:23:52.310653 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [P.], seq 4237:4284, ack 307, win 661, options [nop,nop,TS val 1176934467 ecr 7450180], length 47
11:23:52.312117 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [.], ack 4284, win 402, options [nop,nop,TS val 7450185 ecr 1176934467], length 0
11:23:52.316769 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 1353:1618, ack 5770, win 549, options [nop,nop,TS val 7450185 ecr 3196622358], length 265
11:23:52.351228 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [P.], seq 307:1033, ack 4284, win 402, options [nop,nop,TS val 7450188 ecr 1176934467], length 726
11:23:52.384734 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [P.], seq 800:833, ack 4584, win 445, options [nop,nop,TS val 7450192 ecr 2416001235], length 33
11:23:52.420461 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [.], ack 833, win 5032, options [nop,nop,TS val 2416001352 ecr 7450192], length 0
11:23:52.420582 IP owa.lut.fi.imaps > 10.175.110.58.57861: Flags [P.], seq 4584:4650, ack 833, win 5032, options [nop,nop,TS val 2416001354 ecr 7450192], length 66
11:23:52.440340 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [.], ack 1033, win 661, options [nop,nop,TS val 1176934599 ecr 7450188], length 0
11:23:52.461259 IP 10.175.110.58.57861 > owa.lut.fi.imaps: Flags [.], ack 4650, win 445, options [nop,nop,TS val 7450200 ecr 2416001354], length 0
11:23:52.480636 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [P.], seq 5770:6000, ack 1618, win 47, options [nop,nop,TS val 3196622536 ecr 7450185], length 230
11:23:52.482339 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 1618:1716, ack 6000, win 592, options [nop,nop,TS val 7450202 ecr 3196622536], length 98
11:23:52.653059 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [.], seq 6000:7388, ack 1716, win 47, options [nop,nop,TS val 3196622699 ecr 7450202], length 1388
11:23:52.662718 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [.], seq 7388:8776, ack 1716, win 47, options [nop,nop,TS val 3196622699 ecr 7450202], length 1388
11:23:52.662846 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [.], seq 8776:10164, ack 1716, win 47, options [nop,nop,TS val 3196622699 ecr 7450202], length 1388
11:23:52.665197 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 8776, win 679, options [nop,nop,TS val 7450220 ecr 3196622699], length 0
11:23:52.670454 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.43627: Flags [P.], seq 10164:10274, ack 1716, win 47, options [nop,nop,TS val 3196622699 ecr 7450202], length 110
11:23:52.671753 IP 10.175.110.58.43627 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 10274, win 722, options [nop,nop,TS val 7450221 ecr 3196622699], length 0
11:23:52.850648 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [P.], seq 4284:4741, ack 1033, win 661, options [nop,nop,TS val 1176935011 ecr 7450188], length 457
11:23:52.850870 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [P.], seq 4741:4981, ack 1033, win 661, options [nop,nop,TS val 1176935011 ecr 7450188], length 240
11:23:52.850975 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [P.], seq 4981:5011, ack 1033, win 661, options [nop,nop,TS val 1176935011 ecr 7450188], length 30
11:23:52.881950 IP 10.175.110.58.44193 > kerberos3.Stanford.EDU.0: Flags [S], seq 949640491, win 14600, options [mss 1460,sackOK,TS val 276746594 ecr 0,nop,wscale 7], length 0
11:23:52.881987 IP 10.175.110.58.44194 > kerberos3.Stanford.EDU.0: Flags [S], seq 503690496, win 14600, options [mss 1460,sackOK,TS val 276746594 ecr 0,nop,wscale 7], length 0
11:23:52.882102 IP 10.175.110.58.44195 > kerberos3.Stanford.EDU.0: Flags [S], seq 601875961, win 14600, options [mss 1460,sackOK,TS val 276746594 ecr 0,nop,wscale 7], length 0
11:23:52.891268 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [.], ack 5011, win 489, options [nop,nop,TS val 7450243 ecr 1176935011], length 0
11:23:52.892005 IP 10.175.110.58.44196 > kerberos3.Stanford.EDU.0: Flags [S], seq 2828470496, win 14600, options [mss 1460,sackOK,TS val 276746596 ecr 0,nop,wscale 7], length 0
11:23:52.932682 IP 10.175.110.58.44197 > kerberos3.Stanford.EDU.0: Flags [S], seq 608192116, win 14600, options [mss 1460,sackOK,TS val 276746607 ecr 0,nop,wscale 7], length 0
11:23:52.962130 IP 10.175.110.58.44198 > kerberos3.Stanford.EDU.0: Flags [S], seq 3360263540, win 14600, options [mss 1460,sackOK,TS val 276746614 ecr 0,nop,wscale 7], length 0
11:23:52.962256 IP 10.175.110.58.44199 > kerberos3.Stanford.EDU.0: Flags [S], seq 3524617902, win 14600, options [mss 1460,sackOK,TS val 276746614 ecr 0,nop,wscale 7], length 0
11:23:52.962325 IP 10.175.110.58.44200 > kerberos3.Stanford.EDU.0: Flags [S], seq 4044635290, win 14600, options [mss 1460,sackOK,TS val 276746614 ecr 0,nop,wscale 7], length 0
11:23:53.073018 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [P.], seq 1033:1815, ack 5011, win 489, options [nop,nop,TS val 7450261 ecr 1176935011], length 782
11:23:53.120484 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [.], ack 1815, win 661, options [nop,nop,TS val 1176935279 ecr 7450261], length 0
11:23:53.880586 IP 10.175.110.58.44193 > kerberos3.Stanford.EDU.0: Flags [S], seq 949640491, win 14600, options [mss 1460,sackOK,TS val 276746844 ecr 0,nop,wscale 7], length 0
11:23:53.880635 IP 10.175.110.58.44194 > kerberos3.Stanford.EDU.0: Flags [S], seq 503690496, win 14600, options [mss 1460,sackOK,TS val 276746844 ecr 0,nop,wscale 7], length 0
11:23:53.880677 IP 10.175.110.58.44195 > kerberos3.Stanford.EDU.0: Flags [S], seq 601875961, win 14600, options [mss 1460,sackOK,TS val 276746844 ecr 0,nop,wscale 7], length 0
11:23:53.888576 IP 10.175.110.58.44196 > kerberos3.Stanford.EDU.0: Flags [S], seq 2828470496, win 14600, options [mss 1460,sackOK,TS val 276746846 ecr 0,nop,wscale 7], length 0
11:23:53.924619 IP 10.175.110.58.49772 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:53.924653 IP 10.175.110.58.44184 > kerberos3.Stanford.EDU.0: Flags [S], seq 133647231, win 14600, options [mss 1460,sackOK,TS val 276746855 ecr 0,nop,wscale 7], length 0
11:23:53.924689 IP 10.175.110.58.50467 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:53.928635 IP 10.175.110.58.44185 > kerberos3.Stanford.EDU.0: Flags [S], seq 3815584978, win 14600, options [mss 1460,sackOK,TS val 276746856 ecr 0,nop,wscale 7], length 0
11:23:53.932626 IP 10.175.110.58.44197 > kerberos3.Stanford.EDU.0: Flags [S], seq 608192116, win 14600, options [mss 1460,sackOK,TS val 276746857 ecr 0,nop,wscale 7], length 0
11:23:53.960580 IP 10.175.110.58.44198 > kerberos3.Stanford.EDU.0: Flags [S], seq 3360263540, win 14600, options [mss 1460,sackOK,TS val 276746864 ecr 0,nop,wscale 7], length 0
11:23:53.960632 IP 10.175.110.58.44200 > kerberos3.Stanford.EDU.0: Flags [S], seq 4044635290, win 14600, options [mss 1460,sackOK,TS val 276746864 ecr 0,nop,wscale 7], length 0
11:23:53.960664 IP 10.175.110.58.44199 > kerberos3.Stanford.EDU.0: Flags [S], seq 3524617902, win 14600, options [mss 1460,sackOK,TS val 276746864 ecr 0,nop,wscale 7], length 0
11:23:54.044654 IP 10.175.110.58.44186 > kerberos3.Stanford.EDU.0: Flags [S], seq 4106022421, win 14600, options [mss 1460,sackOK,TS val 276746885 ecr 0,nop,wscale 7], length 0
11:23:54.044688 IP 10.175.110.58.44187 > kerberos3.Stanford.EDU.0: Flags [S], seq 1642859979, win 14600, options [mss 1460,sackOK,TS val 276746885 ecr 0,nop,wscale 7], length 0
11:23:54.045501 IP 10.175.110.58.47839 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:54.047977 IP 10.175.110.58.56263 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:54.104644 IP 10.175.110.58.44188 > kerberos3.Stanford.EDU.0: Flags [S], seq 4077953070, win 14600, options [mss 1460,sackOK,TS val 276746900 ecr 0,nop,wscale 7], length 0
11:23:54.107526 IP 10.175.110.58.51255 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:54.112640 IP 10.175.110.58.44189 > kerberos3.Stanford.EDU.0: Flags [S], seq 1090800750, win 14600, options [mss 1460,sackOK,TS val 276746902 ecr 0,nop,wscale 7], length 0
11:23:54.114762 IP 10.175.110.58.38965 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:54.144678 IP 10.175.110.58.44190 > kerberos3.Stanford.EDU.0: Flags [S], seq 2393653340, win 14600, options [mss 1460,sackOK,TS val 276746910 ecr 0,nop,wscale 7], length 0
11:23:54.144712 IP 10.175.110.58.44191 > kerberos3.Stanford.EDU.0: Flags [S], seq 2616541428, win 14600, options [mss 1460,sackOK,TS val 276746910 ecr 0,nop,wscale 7], length 0
11:23:54.144805 IP 10.175.110.58.45798 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:54.147548 IP 10.175.110.58.45422 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:54.370679 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [P.], seq 5011:5392, ack 1815, win 661, options [nop,nop,TS val 1176936526 ecr 7450261], length 381
11:23:54.380613 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [P.], seq 5392:6766, ack 1815, win 661, options [nop,nop,TS val 1176936526 ecr 7450261], length 1374
11:23:54.390508 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [P.], seq 6766:6796, ack 1815, win 661, options [nop,nop,TS val 1176936526 ecr 7450261], length 30
11:23:54.437872 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [.], ack 5392, win 532, options [nop,nop,TS val 7450397 ecr 1176936526], length 0
11:23:54.438365 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [.], ack 6766, win 576, options [nop,nop,TS val 7450397 ecr 1176936526], length 0
11:23:54.438636 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [.], ack 6796, win 576, options [nop,nop,TS val 7450397 ecr 1176936526], length 0
11:23:54.470466 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [P.], seq 6766:6796, ack 1815, win 661, options [nop,nop,TS val 1176936526 ecr 7450261], length 30
11:23:54.471718 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [.], ack 6796, win 576, options [nop,nop,TS val 7450401 ecr 1176936526,nop,nop,sack 1 {6766:6796}], length 0
11:23:55.884593 IP 10.175.110.58.44193 > kerberos3.Stanford.EDU.0: Flags [S], seq 949640491, win 14600, options [mss 1460,sackOK,TS val 276747345 ecr 0,nop,wscale 7], length 0
11:23:55.884640 IP 10.175.110.58.44194 > kerberos3.Stanford.EDU.0: Flags [S], seq 503690496, win 14600, options [mss 1460,sackOK,TS val 276747345 ecr 0,nop,wscale 7], length 0
11:23:55.884685 IP 10.175.110.58.44195 > kerberos3.Stanford.EDU.0: Flags [S], seq 601875961, win 14600, options [mss 1460,sackOK,TS val 276747345 ecr 0,nop,wscale 7], length 0
11:23:55.884751 IP 10.175.110.58.46631 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:55.885210 IP 10.175.110.58.37806 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:55.885320 IP 10.175.110.58.51201 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:55.892577 IP 10.175.110.58.44196 > kerberos3.Stanford.EDU.0: Flags [S], seq 2828470496, win 14600, options [mss 1460,sackOK,TS val 276747347 ecr 0,nop,wscale 7], length 0
11:23:55.894698 IP 10.175.110.58.37832 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:55.935858 IP 10.175.110.58.58291 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:55.936594 IP 10.175.110.58.44197 > kerberos3.Stanford.EDU.0: Flags [S], seq 608192116, win 14600, options [mss 1460,sackOK,TS val 276747358 ecr 0,nop,wscale 7], length 0
11:23:55.964581 IP 10.175.110.58.44199 > kerberos3.Stanford.EDU.0: Flags [S], seq 3524617902, win 14600, options [mss 1460,sackOK,TS val 276747365 ecr 0,nop,wscale 7], length 0
11:23:55.964621 IP 10.175.110.58.44200 > kerberos3.Stanford.EDU.0: Flags [S], seq 4044635290, win 14600, options [mss 1460,sackOK,TS val 276747365 ecr 0,nop,wscale 7], length 0
11:23:55.964651 IP 10.175.110.58.44198 > kerberos3.Stanford.EDU.0: Flags [S], seq 3360263540, win 14600, options [mss 1460,sackOK,TS val 276747365 ecr 0,nop,wscale 7], length 0
11:23:55.964770 IP 10.175.110.58.37958 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:55.964872 IP 10.175.110.58.59640 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:55.965476 IP 10.175.110.58.39651 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:57.928638 IP 10.175.110.58.44184 > kerberos3.Stanford.EDU.0: Flags [S], seq 133647231, win 14600, options [mss 1460,sackOK,TS val 276747856 ecr 0,nop,wscale 7], length 0
11:23:57.940604 IP 10.175.110.58.44185 > kerberos3.Stanford.EDU.0: Flags [S], seq 3815584978, win 14600, options [mss 1460,sackOK,TS val 276747858 ecr 0,nop,wscale 7], length 0
11:23:58.056629 IP 10.175.110.58.44186 > kerberos3.Stanford.EDU.0: Flags [S], seq 4106022421, win 14600, options [mss 1460,sackOK,TS val 276747888 ecr 0,nop,wscale 7], length 0
11:23:58.056680 IP 10.175.110.58.44187 > kerberos3.Stanford.EDU.0: Flags [S], seq 1642859979, win 14600, options [mss 1460,sackOK,TS val 276747888 ecr 0,nop,wscale 7], length 0
11:23:58.112655 IP 10.175.110.58.44188 > kerberos3.Stanford.EDU.0: Flags [S], seq 4077953070, win 14600, options [mss 1460,sackOK,TS val 276747902 ecr 0,nop,wscale 7], length 0
11:23:58.120692 IP 10.175.110.58.44189 > kerberos3.Stanford.EDU.0: Flags [S], seq 1090800750, win 14600, options [mss 1460,sackOK,TS val 276747904 ecr 0,nop,wscale 7], length 0
11:23:58.152673 IP 10.175.110.58.44190 > kerberos3.Stanford.EDU.0: Flags [S], seq 2393653340, win 14600, options [mss 1460,sackOK,TS val 276747912 ecr 0,nop,wscale 7], length 0
11:23:58.152712 IP 10.175.110.58.44191 > kerberos3.Stanford.EDU.0: Flags [S], seq 2616541428, win 14600, options [mss 1460,sackOK,TS val 276747912 ecr 0,nop,wscale 7], length 0
11:23:58.928668 IP 10.175.110.58.50467 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:58.928717 IP 10.175.110.58.49772 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:59.050765 IP 10.175.110.58.47839 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:59.053127 IP 10.175.110.58.56263 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:59.108700 IP 10.175.110.58.51255 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:59.116693 IP 10.175.110.58.38965 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:59.150123 IP 10.175.110.58.45798 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:59.152769 IP 10.175.110.58.45422 > kerberos3.Stanford.EDU.0: UDP, length 179
11:23:59.884927 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 640:666, ack 4265, win 646, options [nop,nop,TS val 262804261 ecr 3049759188], length 26
11:23:59.885002 IP 10.175.110.58.59409 > xmpp-shv-05-prn2.facebook.com.xmpp-client: Flags [P.], seq 362:559, ack 411, win 331, options [nop,nop,TS val 262804261 ecr 3197199838], length 197
11:23:59.896625 IP 10.175.110.58.44193 > kerberos3.Stanford.EDU.0: Flags [S], seq 949640491, win 14600, options [mss 1460,sackOK,TS val 276748348 ecr 0,nop,wscale 7], length 0
11:23:59.896657 IP 10.175.110.58.44194 > kerberos3.Stanford.EDU.0: Flags [S], seq 503690496, win 14600, options [mss 1460,sackOK,TS val 276748348 ecr 0,nop,wscale 7], length 0
11:23:59.896703 IP 10.175.110.58.44195 > kerberos3.Stanford.EDU.0: Flags [S], seq 601875961, win 14600, options [mss 1460,sackOK,TS val 276748348 ecr 0,nop,wscale 7], length 0
11:23:59.896715 IP 10.175.110.58.44196 > kerberos3.Stanford.EDU.0: Flags [S], seq 2828470496, win 14600, options [mss 1460,sackOK,TS val 276748348 ecr 0,nop,wscale 7], length 0
11:23:59.944597 IP 10.175.110.58.44197 > kerberos3.Stanford.EDU.0: Flags [S], seq 608192116, win 14600, options [mss 1460,sackOK,TS val 276748360 ecr 0,nop,wscale 7], length 0
11:23:59.950361 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [.], ack 666, win 661, options [nop,nop,TS val 3049767630 ecr 262804261], length 0
11:23:59.976637 IP 10.175.110.58.44199 > kerberos3.Stanford.EDU.0: Flags [S], seq 3524617902, win 14600, options [mss 1460,sackOK,TS val 276748368 ecr 0,nop,wscale 7], length 0
11:23:59.976673 IP 10.175.110.58.44200 > kerberos3.Stanford.EDU.0: Flags [S], seq 4044635290, win 14600, options [mss 1460,sackOK,TS val 276748368 ecr 0,nop,wscale 7], length 0
11:23:59.976706 IP 10.175.110.58.44198 > kerberos3.Stanford.EDU.0: Flags [S], seq 3360263540, win 14600, options [mss 1460,sackOK,TS val 276748368 ecr 0,nop,wscale 7], length 0
11:24:00.100380 IP xmpp-shv-05-prn2.facebook.com.xmpp-client > 10.175.110.58.59409: Flags [.], ack 559, win 120, options [nop,nop,TS val 3197229842 ecr 262804261], length 0
11:24:00.484928 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 2857:2883, ack 198, win 245, options [nop,nop,TS val 7451002 ecr 468648354], length 26
11:24:00.485257 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 2883:2909, ack 198, win 245, options [nop,nop,TS val 7451002 ecr 468648354], length 26
11:24:00.650803 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 2883, win 91, options [nop,nop,TS val 468657872 ecr 7451002], length 0
11:24:00.650910 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [.], ack 2909, win 91, options [nop,nop,TS val 468657874 ecr 7451002], length 0
11:24:00.650982 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.40097: Flags [P.], seq 198:225, ack 2909, win 91, options [nop,nop,TS val 468657874 ecr 7451002], length 27
11:24:00.658624 IP 10.175.110.58.40097 > mqtt-shv-06-frc1.facebook.com.https: Flags [.], ack 225, win 245, options [nop,nop,TS val 7451019 ecr 468657874], length 0
11:24:00.887481 IP 10.175.110.58.51201 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:00.887646 IP 10.175.110.58.37806 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:00.888683 IP 10.175.110.58.46631 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:00.897227 IP 10.175.110.58.37832 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:00.940673 IP 10.175.110.58.58291 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:00.968646 IP 10.175.110.58.39651 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:00.969478 IP 10.175.110.58.59640 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:00.969517 IP 10.175.110.58.37958 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:03.628322 IP 10.175.110.58.32022 > ns8.sci.fi.domain: 9823+ [1au] A? playmemories-api-1260927008.us-west-1.elb.amazonaws.com. (84)
11:24:03.870367 IP ns8.sci.fi.domain > 10.175.110.58.32022: 9823 2/0/0 A 54.215.132.116, A 54.219.157.63 (105)
11:24:04.035031 IP 10.175.110.58.42719 > ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http: Flags [S], seq 3456122937, win 14600, options [mss 1460,sackOK,TS val 7451357 ecr 0,nop,wscale 6], length 0
11:24:04.240343 IP ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http > 10.175.110.58.42719: Flags [S.], seq 209466408, ack 3456122938, win 14480, options [mss 1400,sackOK,TS val 173781062 ecr 7451357,nop,wscale 8], length 0
11:24:04.432965 IP 10.175.110.58.42719 > ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http: Flags [.], ack 1, win 229, options [nop,nop,TS val 7451397 ecr 173781062], length 0
11:24:04.438088 IP 10.175.110.58.42719 > ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http: Flags [P.], seq 1:179, ack 1, win 229, options [nop,nop,TS val 7451397 ecr 173781062], length 178
11:24:04.650885 IP ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http > 10.175.110.58.42719: Flags [.], ack 179, win 61, options [nop,nop,TS val 173781164 ecr 7451397], length 0
11:24:04.660558 IP ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http > 10.175.110.58.42719: Flags [.], seq 1:1389, ack 179, win 61, options [nop,nop,TS val 173781165 ecr 7451397], length 1388
11:24:04.660561 IP ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http > 10.175.110.58.42719: Flags [P.], seq 1389:1411, ack 179, win 61, options [nop,nop,TS val 173781165 ecr 7451397], length 22
11:24:04.661009 IP ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http > 10.175.110.58.42719: Flags [F.], seq 1523, ack 179, win 61, options [nop,nop,TS val 173781165 ecr 7451397], length 0
11:24:04.661010 IP ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http > 10.175.110.58.42719: Flags [P.], seq 1411:1523, ack 179, win 61, options [nop,nop,TS val 173781165 ecr 7451397], length 112
11:24:04.849508 IP 10.175.110.58.42719 > ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http: Flags [.], ack 1389, win 272, options [nop,nop,TS val 7451438 ecr 173781165], length 0
11:24:04.850189 IP 10.175.110.58.42719 > ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http: Flags [.], ack 1411, win 272, options [nop,nop,TS val 7451438 ecr 173781165], length 0
11:24:04.850457 IP 10.175.110.58.42719 > ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http: Flags [.], ack 1411, win 272, options [nop,nop,TS val 7451438 ecr 173781165,nop,nop,sack 1 {1523:1524}], length 0
11:24:04.850995 IP 10.175.110.58.42719 > ec2-54-215-132-116.us-west-1.compute.amazonaws.com.http: Flags [.], ack 1524, win 272, options [nop,nop,TS val 7451438 ecr 173781165], length 0
11:24:05.944654 IP 10.175.110.58.44184 > kerberos3.Stanford.EDU.0: Flags [S], seq 133647231, win 14600, options [mss 1460,sackOK,TS val 276749860 ecr 0,nop,wscale 7], length 0
11:24:05.964642 IP 10.175.110.58.44185 > kerberos3.Stanford.EDU.0: Flags [S], seq 3815584978, win 14600, options [mss 1460,sackOK,TS val 276749865 ecr 0,nop,wscale 7], length 0
11:24:06.072693 IP 10.175.110.58.44187 > kerberos3.Stanford.EDU.0: Flags [S], seq 1642859979, win 14600, options [mss 1460,sackOK,TS val 276749892 ecr 0,nop,wscale 7], length 0
11:24:06.072737 IP 10.175.110.58.44186 > kerberos3.Stanford.EDU.0: Flags [S], seq 4106022421, win 14600, options [mss 1460,sackOK,TS val 276749892 ecr 0,nop,wscale 7], length 0
11:24:06.120657 IP 10.175.110.58.44188 > kerberos3.Stanford.EDU.0: Flags [S], seq 4077953070, win 14600, options [mss 1460,sackOK,TS val 276749904 ecr 0,nop,wscale 7], length 0
11:24:06.130397 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.58793: Flags [P.], seq 4802:4960, ack 784, win 661, options [nop,nop,TS val 552950025 ecr 7450055], length 158
11:24:06.134559 IP 10.175.110.58.58793 > lb-in-f188.1e100.net.5228: Flags [.], ack 4960, win 489, options [nop,nop,TS val 7451567 ecr 552950025], length 0
11:24:06.136669 IP 10.175.110.58.44189 > kerberos3.Stanford.EDU.0: Flags [S], seq 1090800750, win 14600, options [mss 1460,sackOK,TS val 276749908 ecr 0,nop,wscale 7], length 0
11:24:06.168638 IP 10.175.110.58.44191 > kerberos3.Stanford.EDU.0: Flags [S], seq 2616541428, win 14600, options [mss 1460,sackOK,TS val 276749916 ecr 0,nop,wscale 7], length 0
11:24:06.168672 IP 10.175.110.58.44190 > kerberos3.Stanford.EDU.0: Flags [S], seq 2393653340, win 14600, options [mss 1460,sackOK,TS val 276749916 ecr 0,nop,wscale 7], length 0
11:24:06.313891 IP 10.175.110.58.36893 > ns8.sci.fi.domain: 17580+ AAAA? daisy.ubuntu.com. (34)
11:24:06.340448 IP ns8.sci.fi.domain > 10.175.110.58.36893: 17580 0/1/0 (95)
11:24:06.340691 IP 10.175.110.58.60136 > ns8.sci.fi.domain: 54601+ AAAA? daisy.ubuntu.com. (34)
11:24:06.370365 IP ns8.sci.fi.domain > 10.175.110.58.60136: 54601 0/1/0 (95)
11:24:06.370564 IP 10.175.110.58.55591 > ns8.sci.fi.domain: 14670+ A? daisy.ubuntu.com. (34)
11:24:06.400240 IP ns8.sci.fi.domain > 10.175.110.58.55591: 14670 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:24:06.518125 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [P.], seq 1815:2573, ack 6796, win 576, options [nop,nop,TS val 7451605 ecr 1176936526], length 758
11:24:06.560231 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [.], ack 2573, win 661, options [nop,nop,TS val 1176948721 ecr 7451605], length 0
11:24:06.956938 IP 10.175.110.58.57274 > ns8.sci.fi.domain: 59706+ A? lut.fi. (24)
11:24:06.990288 IP ns8.sci.fi.domain > 10.175.110.58.57274: 59706 1/0/0 A 157.24.2.14 (40)
11:24:06.990686 IP 10.175.110.58 > www.lut.fi: ICMP echo request, id 27415, seq 1, length 64
11:24:06.990928 IP 10.175.110.58.36009 > ns8.sci.fi.domain: 45252+ PTR? 14.2.24.157.in-addr.arpa. (42)
11:24:07.020440 IP ns8.sci.fi.domain > 10.175.110.58.36009: 45252 1/0/0 PTR www.lut.fi. (66)
11:24:07.020509 IP www.lut.fi > 10.175.110.58: ICMP echo reply, id 27415, seq 1, length 64
11:24:07.020894 IP 10.175.110.58.40586 > ns8.sci.fi.domain: 1415+ PTR? 14.2.24.157.in-addr.arpa. (42)
11:24:07.090345 IP ns8.sci.fi.domain > 10.175.110.58.40586: 1415 1/0/0 PTR www.lut.fi. (66)
11:24:07.316830 IP 10.175.110.58.42645 > ns8.sci.fi.domain: 16165+ AAAA? daisy.ubuntu.com. (34)
11:24:07.340412 IP ns8.sci.fi.domain > 10.175.110.58.42645: 16165 0/1/0 (95)
11:24:07.340634 IP 10.175.110.58.54264 > ns8.sci.fi.domain: 29857+ AAAA? daisy.ubuntu.com. (34)
11:24:07.370370 IP ns8.sci.fi.domain > 10.175.110.58.54264: 29857 0/1/0 (95)
11:24:07.370562 IP 10.175.110.58.55088 > ns8.sci.fi.domain: 56815+ A? daisy.ubuntu.com. (34)
11:24:07.400286 IP ns8.sci.fi.domain > 10.175.110.58.55088: 56815 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:24:07.750521 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [P.], seq 6796:7342, ack 2573, win 661, options [nop,nop,TS val 1176949910 ecr 7451605], length 546
11:24:07.750523 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [P.], seq 7342:7372, ack 2573, win 661, options [nop,nop,TS val 1176949910 ecr 7451605], length 30
11:24:07.880328 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [P.], seq 7342:7372, ack 2573, win 661, options [nop,nop,TS val 1176949910 ecr 7451605], length 30
11:24:07.912270 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [.], ack 7342, win 619, options [nop,nop,TS val 7451745 ecr 1176949910], length 0
11:24:07.912476 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [.], ack 7372, win 619, options [nop,nop,TS val 7451745 ecr 1176949910], length 0
11:24:07.912606 IP 10.175.110.58.44194 > kerberos3.Stanford.EDU.0: Flags [S], seq 503690496, win 14600, options [mss 1460,sackOK,TS val 276750352 ecr 0,nop,wscale 7], length 0
11:24:07.912629 IP 10.175.110.58.44193 > kerberos3.Stanford.EDU.0: Flags [S], seq 949640491, win 14600, options [mss 1460,sackOK,TS val 276750352 ecr 0,nop,wscale 7], length 0
11:24:07.912670 IP 10.175.110.58.44195 > kerberos3.Stanford.EDU.0: Flags [S], seq 601875961, win 14600, options [mss 1460,sackOK,TS val 276750352 ecr 0,nop,wscale 7], length 0
11:24:07.912694 IP 10.175.110.58.44196 > kerberos3.Stanford.EDU.0: Flags [S], seq 2828470496, win 14600, options [mss 1460,sackOK,TS val 276750352 ecr 0,nop,wscale 7], length 0
11:24:07.912738 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [.], ack 7372, win 619, options [nop,nop,TS val 7451745 ecr 1176949910,nop,nop,sack 1 {7342:7372}], length 0
11:24:07.960631 IP 10.175.110.58.44197 > kerberos3.Stanford.EDU.0: Flags [S], seq 608192116, win 14600, options [mss 1460,sackOK,TS val 276750364 ecr 0,nop,wscale 7], length 0
11:24:07.991518 IP 10.175.110.58 > www.lut.fi: ICMP echo request, id 27415, seq 2, length 64
11:24:07.992590 IP 10.175.110.58.44198 > kerberos3.Stanford.EDU.0: Flags [S], seq 3360263540, win 14600, options [mss 1460,sackOK,TS val 276750372 ecr 0,nop,wscale 7], length 0
11:24:07.992656 IP 10.175.110.58.44200 > kerberos3.Stanford.EDU.0: Flags [S], seq 4044635290, win 14600, options [mss 1460,sackOK,TS val 276750372 ecr 0,nop,wscale 7], length 0
11:24:07.992689 IP 10.175.110.58.44199 > kerberos3.Stanford.EDU.0: Flags [S], seq 3524617902, win 14600, options [mss 1460,sackOK,TS val 276750372 ecr 0,nop,wscale 7], length 0
11:24:08.020321 IP www.lut.fi > 10.175.110.58: ICMP echo reply, id 27415, seq 2, length 64
11:24:08.020625 IP 10.175.110.58.55951 > ns8.sci.fi.domain: 17465+ PTR? 14.2.24.157.in-addr.arpa. (42)
11:24:08.050343 IP ns8.sci.fi.domain > 10.175.110.58.55951: 17465 1/0/0 PTR www.lut.fi. (66)
11:24:08.081177 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [P.], seq 2573:3355, ack 7372, win 619, options [nop,nop,TS val 7451761 ecr 1176949910], length 782
11:24:08.120319 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [.], ack 3355, win 661, options [nop,nop,TS val 1176950283 ecr 7451761], length 0
11:24:08.200426 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 4265:4603, ack 666, win 661, options [nop,nop,TS val 3049775887 ecr 262804261], length 338
11:24:08.200560 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 4603:4941, ack 666, win 661, options [nop,nop,TS val 3049775889 ecr 262804261], length 338
11:24:08.202161 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 666:877, ack 4941, win 641, options [nop,nop,TS val 262806341 ecr 3049775887], length 211
11:24:08.210475 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 4941:5278, ack 666, win 661, options [nop,nop,TS val 3049775891 ecr 262804261], length 337
11:24:08.220367 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 9009:9343, ack 1941, win 661, options [nop,nop,TS val 1987889529 ecr 7450093], length 334
11:24:08.221924 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 9343, win 945, options [nop,nop,TS val 7451776 ecr 1987889529], length 0
11:24:08.249140 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 5278, win 646, options [nop,nop,TS val 262806353 ecr 3049775891], length 0
11:24:08.310526 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 9343:9677, ack 1941, win 661, options [nop,nop,TS val 1987889531 ecr 7450093], length 334
11:24:08.310643 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 9677:10010, ack 1941, win 661, options [nop,nop,TS val 1987889533 ecr 7450093], length 333
11:24:08.310830 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [.], ack 877, win 661, options [nop,nop,TS val 3049775950 ecr 262806341], length 0
11:24:08.311104 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 877:1411, ack 5278, win 646, options [nop,nop,TS val 262806368 ecr 3049775950], length 534
11:24:08.312531 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 9677, win 988, options [nop,nop,TS val 7451785 ecr 1987889531], length 0
11:24:08.312810 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 10010, win 1032, options [nop,nop,TS val 7451785 ecr 1987889533], length 0
11:24:08.380195 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [.], ack 1411, win 661, options [nop,nop,TS val 3049776062 ecr 262806368], length 0
11:24:08.550513 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 5278:6304, ack 1411, win 661, options [nop,nop,TS val 3049776232 ecr 262806368], length 1026
11:24:08.550843 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 6304, win 638, options [nop,nop,TS val 262806428 ecr 3049776232], length 0
11:24:08.600649 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [.], seq 6304:7692, ack 1411, win 661, options [nop,nop,TS val 3049776232 ecr 262806368], length 1388
11:24:08.600999 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 7692, win 638, options [nop,nop,TS val 262806440 ecr 3049776232], length 0
11:24:08.610500 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 7692:8354, ack 1411, win 661, options [nop,nop,TS val 3049776232 ecr 262806368], length 662
11:24:08.610788 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 8354, win 638, options [nop,nop,TS val 262806443 ecr 3049776232], length 0
11:24:08.652591 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 8354:9034, ack 1411, win 661, options [nop,nop,TS val 3049776232 ecr 262806368], length 680
11:24:08.652594 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 9034:9372, ack 1411, win 661, options [nop,nop,TS val 3049776234 ecr 262806368], length 338
11:24:08.652916 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 9034, win 638, options [nop,nop,TS val 262806453 ecr 3049776232], length 0
11:24:08.652963 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 9372, win 636, options [nop,nop,TS val 262806453 ecr 3049776234], length 0
11:24:08.662458 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 9372:9710, ack 1411, win 661, options [nop,nop,TS val 3049776236 ecr 262806368], length 338
11:24:08.662562 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 9710:10047, ack 1411, win 661, options [nop,nop,TS val 3049776239 ecr 262806368], length 337
11:24:08.662660 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 10010:10344, ack 1941, win 661, options [nop,nop,TS val 1987889882 ecr 7451785], length 334
11:24:08.662754 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 9710, win 638, options [nop,nop,TS val 262806456 ecr 3049776236], length 0
11:24:08.662802 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 10047, win 636, options [nop,nop,TS val 262806456 ecr 3049776239], length 0
11:24:08.662804 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 10344:10678, ack 1941, win 661, options [nop,nop,TS val 1987889882 ecr 7451785], length 334
11:24:08.670312 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 10678:11011, ack 1941, win 661, options [nop,nop,TS val 1987889882 ecr 7451785], length 333
11:24:08.760428 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 10678:11011, ack 1941, win 661, options [nop,nop,TS val 1987890076 ecr 7451785], length 333
11:24:08.841557 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 10344, win 1075, options [nop,nop,TS val 7451837 ecr 1987889882], length 0
11:24:08.842250 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 10678, win 1118, options [nop,nop,TS val 7451837 ecr 1987889882], length 0
11:24:08.842701 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 11011, win 1162, options [nop,nop,TS val 7451837 ecr 1987889882], length 0
11:24:08.843138 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 11011, win 1162, options [nop,nop,TS val 7451837 ecr 1987890076,nop,nop,sack 1 {10678:11011}], length 0
11:24:08.991542 IP 10.175.110.58 > www.lut.fi: ICMP echo request, id 27415, seq 3, length 64
11:24:09.020451 IP www.lut.fi > 10.175.110.58: ICMP echo reply, id 27415, seq 3, length 64
11:24:09.020880 IP 10.175.110.58.43594 > ns8.sci.fi.domain: 41034+ PTR? 14.2.24.157.in-addr.arpa. (42)
11:24:09.050324 IP ns8.sci.fi.domain > 10.175.110.58.43594: 41034 1/0/0 PTR www.lut.fi. (66)
11:24:09.412611 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [P.], seq 7372:8760, ack 3355, win 661, options [nop,nop,TS val 1176951571 ecr 7451761], length 1388
11:24:09.422518 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [P.], seq 8760:10097, ack 3355, win 661, options [nop,nop,TS val 1176951571 ecr 7451761], length 1337
11:24:09.422520 IP arn02s05-in-f14.1e100.net.https > 10.175.110.58.45961: Flags [P.], seq 10097:10127, ack 3355, win 661, options [nop,nop,TS val 1176951571 ecr 7451761], length 30
11:24:09.557942 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [.], ack 8760, win 662, options [nop,nop,TS val 7451909 ecr 1176951571], length 0
11:24:09.558605 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [.], ack 10097, win 706, options [nop,nop,TS val 7451909 ecr 1176951571], length 0
11:24:09.559040 IP 10.175.110.58.45961 > arn02s05-in-f14.1e100.net.https: Flags [.], ack 10127, win 706, options [nop,nop,TS val 7451909 ecr 1176951571], length 0
11:24:09.718453 IP 10.175.110.58.36421 > ns8.sci.fi.domain: 535+ [1au] AAAA? daisy.ubuntu.com. (45)
11:24:09.750452 IP ns8.sci.fi.domain > 10.175.110.58.36421: 535 0/1/0 (95)
11:24:09.992479 IP 10.175.110.58 > www.lut.fi: ICMP echo request, id 27415, seq 4, length 64
11:24:10.020318 IP www.lut.fi > 10.175.110.58: ICMP echo reply, id 27415, seq 4, length 64
11:24:10.020446 IP 10.175.110.58.57542 > ns8.sci.fi.domain: 9484+ PTR? 14.2.24.157.in-addr.arpa. (42)
11:24:10.050310 IP ns8.sci.fi.domain > 10.175.110.58.57542: 9484 1/0/0 PTR www.lut.fi. (66)
11:24:10.720685 IP 10.175.110.58.53725 > ns8.sci.fi.domain: 30667+ [1au] AAAA? daisy.ubuntu.com. (45)
11:24:10.750372 IP ns8.sci.fi.domain > 10.175.110.58.53725: 30667 0/1/0 (95)
11:24:17.362528 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 10047:10073, ack 1411, win 661, options [nop,nop,TS val 3049783823 ecr 262806456], length 26
11:24:17.362704 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 10047:10073, ack 1411, win 661, options [nop,nop,TS val 3049784168 ecr 262806456], length 26
11:24:17.362705 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 10047:10073, ack 1411, win 661, options [nop,nop,TS val 3049784513 ecr 262806456], length 26
11:24:17.362840 IP xmpp-shv-01-frc3.facebook.com.xmpp-client > 10.175.110.58.34161: Flags [P.], seq 1:246, ack 415, win 120, options [nop,nop,TS val 2935927343 ecr 109103374], length 245
11:24:17.362859 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 10073, win 642, options [nop,nop,TS val 262808631 ecr 3049783823], length 0
11:24:17.362911 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 10073, win 642, options [nop,nop,TS val 262808631 ecr 3049784168,nop,nop,sack 1 {10047:10073}], length 0
11:24:17.362951 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 10073, win 642, options [nop,nop,TS val 262808631 ecr 3049784513,nop,nop,sack 1 {10047:10073}], length 0
11:24:17.362981 IP xmpp-shv-01-frc3.facebook.com.xmpp-client > 10.175.110.58.34161: Flags [P.], seq 246:411, ack 415, win 120, options [nop,nop,TS val 2935927344 ecr 109103374], length 165
11:24:17.363049 IP 10.175.110.58.34161 > xmpp-shv-01-frc3.facebook.com.xmpp-client: Flags [.], ack 246, win 331, options [nop,nop,TS val 109110098 ecr 2935927343], length 0
11:24:17.363117 IP 10.175.110.58.34161 > xmpp-shv-01-frc3.facebook.com.xmpp-client: Flags [.], ack 411, win 330, options [nop,nop,TS val 109110098 ecr 2935927344], length 0
11:24:17.370171 IP xmpp-shv-01-frc3.facebook.com.xmpp-client > 10.175.110.58.34161: Flags [P.], seq 411:656, ack 415, win 120, options [nop,nop,TS val 2935927346 ecr 109103374], length 245
11:24:17.370276 IP xmpp-shv-01-frc3.facebook.com.xmpp-client > 10.175.110.58.34161: Flags [P.], seq 656:901, ack 415, win 120, options [nop,nop,TS val 2935927348 ecr 109103374], length 245
11:24:17.370386 IP 10.175.110.58.34161 > xmpp-shv-01-frc3.facebook.com.xmpp-client: Flags [.], ack 656, win 331, options [nop,nop,TS val 109110100 ecr 2935927346], length 0
11:24:17.370513 IP 10.175.110.58.34161 > xmpp-shv-01-frc3.facebook.com.xmpp-client: Flags [.], ack 901, win 331, options [nop,nop,TS val 109110100 ecr 2935927348], length 0
11:24:17.520371 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 10047:10073, ack 1411, win 661, options [nop,nop,TS val 3049785203 ecr 262806456], length 26
11:24:17.520668 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 10073, win 646, options [nop,nop,TS val 262808670 ecr 3049785203,nop,nop,sack 1 {10047:10073}], length 0
11:24:19.660752 IP 10.175.110.58.40341 > cs116p2.us1.msg.gq1.yahoo.com.mmcc: Flags [P.], seq 46:92, ack 1, win 140, options [nop,nop,TS val 262809205 ecr 1458639075], length 46
11:24:19.970170 IP cs116p2.us1.msg.gq1.yahoo.com.mmcc > 10.175.110.58.40341: Flags [.], ack 92, win 2082, options [nop,nop,TS val 1458700045 ecr 262809205], length 0
11:24:20.469984 IP 10.175.110.58.40000 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 78:104, ack 1169, win 331, options [nop,nop,TS val 109110875 ecr 250005540], length 26
11:24:20.470047 IP 10.175.110.58.34161 > xmpp-shv-01-frc3.facebook.com.xmpp-client: Flags [P.], seq 415:628, ack 901, win 331, options [nop,nop,TS val 109110875 ecr 2935927348], length 213
11:24:20.530105 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.40000: Flags [.], ack 104, win 670, options [nop,nop,TS val 250034694 ecr 109110875], length 0
11:24:20.630076 IP xmpp-shv-01-frc3.facebook.com.xmpp-client > 10.175.110.58.34161: Flags [.], ack 628, win 120, options [nop,nop,TS val 2935930851 ecr 109110875], length 0
11:24:20.720326 IP grape.canonical.com.https > 10.175.110.58.44373: Flags [P.], seq 2972059489:2972059542, ack 4026542026, win 155, options [nop,nop,TS val 379749273 ecr 262779442], length 53
11:24:20.720689 IP 10.175.110.58.32772 > ns8.sci.fi.domain: 946+ PTR? 76.89.189.91.in-addr.arpa. (43)
11:24:20.720722 IP 10.175.110.58.60606 > ns8.sci.fi.domain: 6840+ PTR? 76.89.189.91.in-addr.arpa. (43)
11:24:20.720735 IP 10.175.110.58.42918 > ns8.sci.fi.domain: 35791+ PTR? 76.89.189.91.in-addr.arpa. (43)
11:24:20.721505 IP 10.175.110.58.44373 > grape.canonical.com.https: Flags [P.], seq 1:107, ack 53, win 225, options [nop,nop,TS val 262809471 ecr 379749273], length 106
11:24:20.800374 IP grape.canonical.com.https > 10.175.110.58.44373: Flags [.], ack 107, win 155, options [nop,nop,TS val 379749292 ecr 262809471], length 0
11:24:20.800457 IP ns8.sci.fi.domain > 10.175.110.58.60606: 6840 1/0/0 PTR grape.canonical.com. (76)
11:24:20.830114 IP ns8.sci.fi.domain > 10.175.110.58.32772: 946 1/0/0 PTR grape.canonical.com. (76)
11:24:20.920409 IP ns8.sci.fi.domain > 10.175.110.58.42918: 35791 1/0/0 PTR grape.canonical.com. (76)
11:24:27.635459 IP 10.175.110.58.37650 > ns8.sci.fi.domain: 57234+ AAAA? krb5auth3.stanford.edu. (40)
11:24:28.481382 IP ns8.sci.fi.domain > 10.175.110.58.37650: 57234 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:24:28.481643 IP 10.175.110.58.50059 > ns8.sci.fi.domain: 55434+ A? krb5auth3.stanford.edu. (40)
11:24:28.811887 IP ns8.sci.fi.domain > 10.175.110.58.50059: 55434 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:24:28.812142 IP 10.175.110.58.46486 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:29.205866 IP 10.175.110.58.50029 > ns8.sci.fi.domain: 8998+ PTR? 9.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.c.8.0.6.3.1.c.7.6.0.1.0.0.2.ip6.arpa. (90)
11:24:29.206191 IP 10.175.110.58.59292 > ns8.sci.fi.domain: 10677+ AAAA? daisy.ubuntu.com. (34)
11:24:29.631466 IP ns8.sci.fi.domain > 10.175.110.58.50029: 8998 1/0/0 PTR urayuli.canonical.com. (125)
11:24:29.691619 IP ns8.sci.fi.domain > 10.175.110.58.59292: 10677 0/1/0 (95)
11:24:29.691842 IP 10.175.110.58.37767 > ns8.sci.fi.domain: 26208+ AAAA? daisy.ubuntu.com. (34)
11:24:29.813380 IP 10.175.110.58.44203 > kerberos3.Stanford.EDU.0: Flags [S], seq 3447137310, win 14600, options [mss 1460,sackOK,TS val 276755827 ecr 0,nop,wscale 7], length 0
11:24:29.886304 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1411:1437, ack 10073, win 646, options [nop,nop,TS val 262811762 ecr 3049785203], length 26
11:24:29.886362 IP 10.175.110.58.59409 > xmpp-shv-05-prn2.facebook.com.xmpp-client: Flags [P.], seq 559:676, ack 411, win 331, options [nop,nop,TS val 262811762 ecr 3197229842], length 117
11:24:30.041392 IP ns8.sci.fi.domain > 10.175.110.58.37767: 26208 0/1/0 (95)
11:24:30.041637 IP 10.175.110.58.45130 > ns8.sci.fi.domain: 19373+ A? daisy.ubuntu.com. (34)
11:24:30.341454 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [.], ack 1437, win 661, options [nop,nop,TS val 3049797932 ecr 262811762], length 0
11:24:30.701471 IP ns8.sci.fi.domain > 10.175.110.58.45130: 19373 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:24:30.704015 IP 10.175.110.58.59126 > ns8.sci.fi.domain: 53263+ AAAA? daisy.ubuntu.com. (34)
11:24:30.812686 IP 10.175.110.58.44203 > kerberos3.Stanford.EDU.0: Flags [S], seq 3447137310, win 14600, options [mss 1460,sackOK,TS val 276756077 ecr 0,nop,wscale 7], length 0
11:24:30.821479 IP xmpp-shv-05-prn2.facebook.com.xmpp-client > 10.175.110.58.59409: Flags [.], ack 676, win 120, options [nop,nop,TS val 3197260448 ecr 262811762], length 0
11:24:31.101434 IP ns8.sci.fi.domain > 10.175.110.58.59126: 53263 0/1/0 (95)
11:24:31.101679 IP 10.175.110.58.56454 > ns8.sci.fi.domain: 5636+ AAAA? daisy.ubuntu.com. (34)
11:24:31.461380 IP ns8.sci.fi.domain > 10.175.110.58.56454: 5636 0/1/0 (95)
11:24:31.461634 IP 10.175.110.58.40739 > ns8.sci.fi.domain: 11989+ A? daisy.ubuntu.com. (34)
11:24:31.781415 IP ns8.sci.fi.domain > 10.175.110.58.40739: 11989 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:24:32.815807 IP 10.175.110.58.46486 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:32.816671 IP 10.175.110.58.44203 > kerberos3.Stanford.EDU.0: Flags [S], seq 3447137310, win 14600, options [mss 1460,sackOK,TS val 276756578 ecr 0,nop,wscale 7], length 0
11:24:36.393487 IP 10.175.110.58.52079 > ns8.sci.fi.domain: 59574+ AAAA? daisy.ubuntu.com. (34)
11:24:36.824678 IP 10.175.110.58.44203 > kerberos3.Stanford.EDU.0: Flags [S], seq 3447137310, win 14600, options [mss 1460,sackOK,TS val 276757580 ecr 0,nop,wscale 7], length 0
11:24:37.021356 IP ns8.sci.fi.domain > 10.175.110.58.52079: 59574 0/1/0 (95)
11:24:37.021585 IP 10.175.110.58.35628 > ns8.sci.fi.domain: 21437+ AAAA? daisy.ubuntu.com. (34)
11:24:37.381324 IP ns8.sci.fi.domain > 10.175.110.58.35628: 21437 0/1/0 (95)
11:24:37.381554 IP 10.175.110.58.48790 > ns8.sci.fi.domain: 24443+ A? daisy.ubuntu.com. (34)
11:24:37.504780 IP 10.175.110.58.ntp > ns2.posiona.net.ntp: NTPv4, Client, length 48
11:24:37.505033 IP 10.175.110.58.45592 > ns8.sci.fi.domain: 61848+ PTR? 71.120.236.62.in-addr.arpa. (44)
11:24:37.505130 IP 10.175.110.58.42564 > ns8.sci.fi.domain: 25344+ PTR? 71.120.236.62.in-addr.arpa. (44)
11:24:37.505409 IP 10.175.110.58.57126 > ns8.sci.fi.domain: 12272+ PTR? 71.120.236.62.in-addr.arpa. (44)
11:24:37.701261 IP ns8.sci.fi.domain > 10.175.110.58.48790: 24443 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:24:37.701970 IP 10.175.110.58.56198 > ns8.sci.fi.domain: 44541+ AAAA? daisy.ubuntu.com. (34)
11:24:37.820800 IP 10.175.110.58.46486 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:37.831318 IP ns2.posiona.net.ntp > 10.175.110.58.ntp: NTPv4, Server, length 48
11:24:38.401334 IP ns8.sci.fi.domain > 10.175.110.58.56198: 44541 0/1/0 (95)
11:24:38.401558 IP 10.175.110.58.56208 > ns8.sci.fi.domain: 55380+ AAAA? daisy.ubuntu.com. (34)
11:24:38.891402 IP ns8.sci.fi.domain > 10.175.110.58.56208: 55380 0/1/0 (95)
11:24:38.891625 IP 10.175.110.58.49488 > ns8.sci.fi.domain: 60983+ A? daisy.ubuntu.com. (34)
11:24:39.201286 IP ns8.sci.fi.domain > 10.175.110.58.49488: 60983 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:24:39.531485 IP ns8.sci.fi.domain > 10.175.110.58.45592: 61848 1/0/0 PTR ns2.posiona.net. (73)
11:24:39.631383 IP ns8.sci.fi.domain > 10.175.110.58.42564: 25344 1/0/0 PTR ns2.posiona.net. (73)
11:24:39.661232 IP ns8.sci.fi.domain > 10.175.110.58.57126: 12272 1/0/0 PTR ns2.posiona.net. (73)
11:24:39.669892 IP 10.175.110.58.21759 > ns8.sci.fi.domain: 38658+ [1au] AAAA? daisy.ubuntu.com. (45)
11:24:40.031281 IP ns8.sci.fi.domain > 10.175.110.58.21759: 38658 0/1/0 (95)
11:24:40.672825 IP 10.175.110.58.46137 > ns8.sci.fi.domain: 1829+ [1au] AAAA? daisy.ubuntu.com. (45)
11:24:40.951282 IP ns8.sci.fi.domain > 10.175.110.58.46137: 1829 0/1/0 (95)
11:24:44.233380 IP 10.175.110.58.44343 > ns8.sci.fi.domain: 15286+ AAAA? daisy.ubuntu.com. (34)
11:24:44.840699 IP 10.175.110.58.44203 > kerberos3.Stanford.EDU.0: Flags [S], seq 3447137310, win 14600, options [mss 1460,sackOK,TS val 276759584 ecr 0,nop,wscale 7], length 0
11:24:44.971431 IP ns8.sci.fi.domain > 10.175.110.58.44343: 15286 0/1/0 (95)
11:24:44.971614 IP 10.175.110.58.35820 > ns8.sci.fi.domain: 60064+ AAAA? daisy.ubuntu.com. (34)

its time restart aiccu

11:24:45.331319 IP ns8.sci.fi.domain > 10.175.110.58.35820: 60064 0/1/0 (95)
11:24:45.331549 IP 10.175.110.58.33373 > ns8.sci.fi.domain: 53086+ A? daisy.ubuntu.com. (34)
11:24:45.681170 IP ns8.sci.fi.domain > 10.175.110.58.33373: 53086 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:24:45.683590 IP 10.175.110.58.41837 > ns8.sci.fi.domain: 3135+ AAAA? daisy.ubuntu.com. (34)
11:24:46.001216 IP ns8.sci.fi.domain > 10.175.110.58.41837: 3135 0/1/0 (95)
11:24:46.001443 IP 10.175.110.58.39838 > ns8.sci.fi.domain: 35057+ AAAA? daisy.ubuntu.com. (34)
11:24:46.331429 IP ns8.sci.fi.domain > 10.175.110.58.39838: 35057 0/1/0 (95)
11:24:46.331652 IP 10.175.110.58.55258 > ns8.sci.fi.domain: 32708+ A? daisy.ubuntu.com. (34)
11:24:46.661280 IP ns8.sci.fi.domain > 10.175.110.58.55258: 32708 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:24:47.536511 IP 10.175.110.58.ntp > kivimaa.fi.ntp: NTPv4, Client, length 48
11:24:47.536740 IP 10.175.110.58.53788 > ns8.sci.fi.domain: 54098+ PTR? 65.86.108.87.in-addr.arpa. (43)
11:24:47.536773 IP 10.175.110.58.54612 > ns8.sci.fi.domain: 45666+ PTR? 65.86.108.87.in-addr.arpa. (43)
11:24:47.536832 IP 10.175.110.58.44883 > ns8.sci.fi.domain: 36191+ PTR? 65.86.108.87.in-addr.arpa. (43)
11:24:47.761198 IP kivimaa.fi.ntp > 10.175.110.58.ntp: NTPv4, Server, length 48
11:24:48.651702 IP ns8.sci.fi.domain > 10.175.110.58.53788: 54098 1/0/0 PTR kivimaa.fi. (67)
11:24:49.551191 IP ns8.sci.fi.domain > 10.175.110.58.44883: 36191 1/0/0 PTR kivimaa.fi. (67)
11:24:49.581119 IP ns8.sci.fi.domain > 10.175.110.58.54612: 45666 1/0/0 PTR kivimaa.fi. (67)
11:24:50.498003 IP 10.175.110.58.40000 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 104:130, ack 1169, win 331, options [nop,nop,TS val 109118382 ecr 250034694], length 26
11:24:50.498213 IP 10.175.110.58.34161 > xmpp-shv-01-frc3.facebook.com.xmpp-client: Flags [P.], seq 628:697, ack 901, win 331, options [nop,nop,TS val 109118382 ecr 2935930851], length 69
11:24:50.781179 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.40000: Flags [.], ack 130, win 670, options [nop,nop,TS val 250064837 ecr 109118382], length 0
11:24:50.896124 IP 10.175.110.58.34161 > xmpp-shv-01-frc3.facebook.com.xmpp-client: Flags [P.], seq 628:697, ack 901, win 331, options [nop,nop,TS val 109118482 ecr 2935930851], length 69
11:24:51.191132 IP xmpp-shv-01-frc3.facebook.com.xmpp-client > 10.175.110.58.34161: Flags [.], ack 697, win 120, options [nop,nop,TS val 2935961308 ecr 109118382], length 0
11:24:51.451831 IP xmpp-shv-01-frc3.facebook.com.xmpp-client > 10.175.110.58.34161: Flags [.], ack 697, win 120, options [nop,nop,TS val 2935961553 ecr 109118482], length 0
11:24:51.541772 IP 10.175.110.58.41970 > lb-in-f188.1e100.net.5228: Flags [S], seq 2534070634, win 14600, options [mss 1460,sackOK,TS val 7454747 ecr 0,nop,wscale 6], length 0
11:24:51.566775 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [S], seq 1802237592, win 14600, options [mss 1460,sackOK,TS val 7454750 ecr 0,nop,wscale 6], length 0
11:24:51.576303 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [S], seq 2149856575, win 14600, options [mss 1460,sackOK,TS val 7454751 ecr 0,nop,wscale 6], length 0
11:24:51.811171 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.41970: Flags [S.], seq 2184284860, ack 2534070635, win 42540, options [mss 1400,sackOK,TS val 541277152 ecr 7454747,nop,wscale 6], length 0
11:24:51.812418 IP 10.175.110.58.41970 > lb-in-f188.1e100.net.5228: Flags [.], ack 1, win 229, options [nop,nop,TS val 7454775 ecr 541277152], length 0
11:24:51.824796 IP 10.175.110.58.41970 > lb-in-f188.1e100.net.5228: Flags [P.], seq 1:185, ack 1, win 229, options [nop,nop,TS val 7454776 ecr 541277152], length 184
11:24:51.991269 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [S.], seq 3149869161, ack 2149856576, win 42540, options [mss 1400,sackOK,TS val 1029776091 ecr 7454751,nop,wscale 6], length 0
11:24:52.001268 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 1, win 229, options [nop,nop,TS val 7454793 ecr 1029776091], length 0
11:24:52.002985 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1:115, ack 1, win 229, options [nop,nop,TS val 7454794 ecr 1029776091], length 114
11:24:52.031167 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [S.], seq 2877845205, ack 1802237593, win 14480, options [mss 1400,sackOK,TS val 1681724342 ecr 7454750,nop,wscale 9], length 0
11:24:52.032384 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 1, win 229, options [nop,nop,TS val 7454797 ecr 1681724342], length 0
11:24:52.033953 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 1:123, ack 1, win 229, options [nop,nop,TS val 7454797 ecr 1681724342], length 122
11:24:52.123803 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [S], seq 727397443, win 14600, options [mss 1460,sackOK,TS val 7454806 ecr 0,nop,wscale 6], length 0
11:24:52.185437 IP 10.175.110.58.35151 > ns8.sci.fi.domain: 5984+ AAAA? krb5auth3.stanford.edu. (40)
11:24:52.186467 IP 10.175.110.58.60748 > ns8.sci.fi.domain: 56064+ AAAA? krb5auth3.stanford.edu. (40)
11:24:52.189250 IP 10.175.110.58.39471 > ns8.sci.fi.domain: 51419+ AAAA? krb5auth3.stanford.edu. (40)
11:24:52.195957 IP 10.175.110.58.43145 > ns8.sci.fi.domain: 59646+ AAAA? krb5auth3.stanford.edu. (40)
11:24:52.214429 IP 10.175.110.58.46350 > ns8.sci.fi.domain: 29258+ AAAA? krb5auth3.stanford.edu. (40)
11:24:52.415203 IP 10.175.110.58.20169 > ns8.sci.fi.domain: 28977+ [1au] A? imap4.mail.eu.am0.yahoodns.net. (59)
11:24:52.422841 IP 10.175.110.58.46497 > owa.lut.fi.imaps: Flags [S], seq 1588352002, win 14600, options [mss 1460,sackOK,TS val 7454836 ecr 0,nop,wscale 6], length 0
11:24:52.423056 IP 10.175.110.58.32789 > owa.lut.fi.imaps: Flags [S], seq 1761046279, win 14600, options [mss 1460,sackOK,TS val 7454836 ecr 0,nop,wscale 6], length 0
11:24:52.495099 IP 10.175.110.58.33852 > ns8.sci.fi.domain: 31513+ AAAA? krb5auth3.stanford.edu. (40)
11:24:52.500418 IP 10.175.110.58.55064 > ns8.sci.fi.domain: 15796+ AAAA? krb5auth3.stanford.edu. (40)
11:24:52.514420 IP 10.175.110.58.34131 > ns8.sci.fi.domain: 16548+ AAAA? krb5auth3.stanford.edu. (40)
11:24:52.661847 IP 10.175.110.58.41970 > lb-in-f188.1e100.net.5228: Flags [P.], seq 1:185, ack 1, win 229, options [nop,nop,TS val 7454860 ecr 541277152], length 184
11:24:53.131336 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [S], seq 727397443, win 14600, options [mss 1460,sackOK,TS val 7454906 ecr 0,nop,wscale 6], length 0
11:24:53.155980 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [S.], seq 2877845205, ack 1802237593, win 14480, options [mss 1400,sackOK,TS val 1681724342 ecr 7454750,nop,wscale 9], length 0
11:24:53.157673 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 1, win 229, options [nop,nop,TS val 7454909 ecr 1681724342,nop,nop,sack 1 {0:1}], length 0
11:24:53.165459 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [S.], seq 3149869161, ack 2149856576, win 42540, options [mss 1400,sackOK,TS val 1029776545 ecr 7454751,nop,wscale 6], length 0
11:24:53.167018 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 1, win 229, options [nop,nop,TS val 7454910 ecr 1029776545,nop,nop,sack 1 {0:1}], length 0
11:24:53.275849 IP ns8.sci.fi.domain > 10.175.110.58.35151: 5984 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:24:53.275943 IP ns8.sci.fi.domain > 10.175.110.58.60748: 56064 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:24:53.276121 IP 10.175.110.58.60091 > ns8.sci.fi.domain: 64021+ A? krb5auth3.stanford.edu. (40)
11:24:53.276158 IP 10.175.110.58.33979 > ns8.sci.fi.domain: 10578+ A? krb5auth3.stanford.edu. (40)
11:24:53.287836 IP ns8.sci.fi.domain > 10.175.110.58.39471: 51419 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:24:53.287911 IP ns8.sci.fi.domain > 10.175.110.58.43145: 59646 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:24:53.288017 IP ns8.sci.fi.domain > 10.175.110.58.20169: 28977 1/0/0 A 188.125.69.43 (64)
11:24:53.288074 IP 10.175.110.58.51892 > ns8.sci.fi.domain: 16267+ A? krb5auth3.stanford.edu. (40)
11:24:53.288175 IP ns8.sci.fi.domain > 10.175.110.58.46350: 29258 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:24:53.288193 IP 10.175.110.58.54858 > ns8.sci.fi.domain: 28861+ A? krb5auth3.stanford.edu. (40)
11:24:53.288509 IP 10.175.110.58.33532 > ns8.sci.fi.domain: 44778+ A? krb5auth3.stanford.edu. (40)
11:24:53.288984 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.41970: Flags [.], ack 185, win 662, options [nop,nop,TS val 541278739 ecr 7454776], length 0
11:24:53.288986 IP ns8.sci.fi.domain > 10.175.110.58.33852: 31513 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:24:53.289174 IP 10.175.110.58.50786 > ns8.sci.fi.domain: 16791+ A? krb5auth3.stanford.edu. (40)
11:24:53.293989 IP 10.175.110.58.45112 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [S], seq 2192540259, win 14600, options [mss 1460,sackOK,TS val 7454923 ecr 0,nop,wscale 6], length 0
11:24:53.294238 IP 10.175.110.58.35270 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [S], seq 1212372381, win 14600, options [mss 1460,sackOK,TS val 7454923 ecr 0,nop,wscale 6], length 0
11:24:53.348035 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.41970: Flags [.], seq 1:1389, ack 185, win 662, options [nop,nop,TS val 541278741 ecr 7454776], length 1388
11:24:53.350052 IP 10.175.110.58.41970 > lb-in-f188.1e100.net.5228: Flags [.], ack 1389, win 272, options [nop,nop,TS val 7454928 ecr 541278741], length 0
11:24:53.421575 IP 10.175.110.58.46497 > owa.lut.fi.imaps: Flags [S], seq 1588352002, win 14600, options [mss 1460,sackOK,TS val 7454936 ecr 0,nop,wscale 6], length 0
11:24:53.421801 IP 10.175.110.58.32789 > owa.lut.fi.imaps: Flags [S], seq 1761046279, win 14600, options [mss 1460,sackOK,TS val 7454936 ecr 0,nop,wscale 6], length 0
11:24:53.441642 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 1:123, ack 1, win 229, options [nop,nop,TS val 7454938 ecr 1681724342], length 122
11:24:53.477972 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.41970: Flags [.], seq 1389:2777, ack 185, win 662, options [nop,nop,TS val 541278741 ecr 7454776], length 1388
11:24:53.480086 IP 10.175.110.58.41970 > lb-in-f188.1e100.net.5228: Flags [.], ack 2777, win 315, options [nop,nop,TS val 7454941 ecr 541278741], length 0
11:24:53.528069 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.41970: Flags [P.], seq 2777:4097, ack 185, win 662, options [nop,nop,TS val 541278741 ecr 7454776], length 1320
11:24:53.528071 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.41970: Flags [P.], seq 4097:4237, ack 185, win 662, options [nop,nop,TS val 541278741 ecr 7454776], length 140
11:24:53.528226 IP ns8.sci.fi.domain > 10.175.110.58.55064: 15796 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:24:53.528496 IP ns8.sci.fi.domain > 10.175.110.58.34131: 16548 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:24:53.528497 IP owa.lut.fi.imaps > 10.175.110.58.32789: Flags [S.], seq 1998036329, ack 1761046280, win 4200, options [mss 1400,nop,wscale 0,nop,nop,TS val 2416062225 ecr 7454836,sackOK,eol], length 0
11:24:53.528688 IP 10.175.110.58.50671 > ns8.sci.fi.domain: 106+ A? krb5auth3.stanford.edu. (40)
11:24:53.528749 IP 10.175.110.58.52940 > ns8.sci.fi.domain: 23856+ A? krb5auth3.stanford.edu. (40)
11:24:53.528836 IP owa.lut.fi.imaps > 10.175.110.58.46497: Flags [S.], seq 1936929932, ack 1588352003, win 4200, options [mss 1400,nop,wscale 0,nop,nop,TS val 2416062225 ecr 7454836,sackOK,eol], length 0
11:24:53.528838 IP ns8.sci.fi.domain > 10.175.110.58.60091: 64021 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:24:53.528838 IP ns8.sci.fi.domain > 10.175.110.58.33979: 10578 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:24:53.529002 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [.], ack 115, win 663, options [nop,nop,TS val 1029777506 ecr 7454794], length 0
11:24:53.529124 IP 10.175.110.58.47561 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:53.529164 IP 10.175.110.58.42059 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:53.529195 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 1:139, ack 115, win 663, options [nop,nop,TS val 1029777506 ecr 7454794], length 138
11:24:53.531895 IP 10.175.110.58.41970 > lb-in-f188.1e100.net.5228: Flags [.], ack 4097, win 359, options [nop,nop,TS val 7454946 ecr 541278741], length 0
11:24:53.532143 IP 10.175.110.58.41970 > lb-in-f188.1e100.net.5228: Flags [.], ack 4237, win 402, options [nop,nop,TS val 7454946 ecr 541278741], length 0
11:24:53.532417 IP 10.175.110.58.32789 > owa.lut.fi.imaps: Flags [.], ack 1, win 229, options [nop,nop,TS val 7454946 ecr 2416062225], length 0
11:24:53.532431 IP 10.175.110.58.46497 > owa.lut.fi.imaps: Flags [.], ack 1, win 229, options [nop,nop,TS val 7454946 ecr 2416062225], length 0
11:24:53.535128 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 139, win 245, options [nop,nop,TS val 7454947 ecr 1029777506], length 0
11:24:53.536108 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 139:380, ack 115, win 663, options [nop,nop,TS val 1029777506 ecr 7454794], length 241
11:24:53.537405 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 380, win 262, options [nop,nop,TS val 7454947 ecr 1029777506], length 0
11:24:53.540312 IP 10.175.110.58.32789 > owa.lut.fi.imaps: Flags [P.], seq 1:185, ack 1, win 229, options [nop,nop,TS val 7454947 ecr 2416062225], length 184
11:24:53.541748 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 115:166, ack 380, win 262, options [nop,nop,TS val 7454948 ecr 1029777506], length 51
11:24:53.545455 IP 10.175.110.58.46497 > owa.lut.fi.imaps: Flags [P.], seq 1:185, ack 1, win 229, options [nop,nop,TS val 7454948 ecr 2416062225], length 184
11:24:53.565829 IP 10.175.110.58.41970 > lb-in-f188.1e100.net.5228: Flags [P.], seq 185:307, ack 4237, win 402, options [nop,nop,TS val 7454950 ecr 541278741], length 122
11:24:53.578107 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.41970: Flags [.], ack 185, win 662, options [nop,nop,TS val 541278763 ecr 7454860,nop,nop,sack 1 {1:185}], length 0
11:24:53.578227 IP ns8.sci.fi.domain > 10.175.110.58.33532: 44778 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:24:53.578450 IP 10.175.110.58.57530 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:53.578535 IP ns8.sci.fi.domain > 10.175.110.58.54858: 28861 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:24:53.578536 IP ns8.sci.fi.domain > 10.175.110.58.51892: 16267 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:24:53.578599 IP ns8.sci.fi.domain > 10.175.110.58.50786: 16791 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:24:53.578755 IP 10.175.110.58.32831 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:53.578763 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [S.], seq 2877845205, ack 1802237593, win 14480, options [mss 1400,sackOK,TS val 1681725728 ecr 7454750,nop,wscale 9], length 0
11:24:53.578827 IP 10.175.110.58.45660 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:53.578918 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.35270: Flags [S.], seq 2415097598, ack 1212372382, win 14480, options [mss 1400,sackOK,TS val 3699707571 ecr 7454923], length 0
11:24:53.578928 IP 10.175.110.58.60902 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:53.579090 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.45112: Flags [S.], seq 3877852095, ack 2192540260, win 14480, options [mss 1400,sackOK,TS val 3699781937 ecr 7454923], length 0
11:24:53.579091 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [.], ack 123, win 29, options [nop,nop,TS val 1681725818 ecr 7454797], length 0
11:24:53.579347 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [P.], seq 1:390, ack 123, win 29, options [nop,nop,TS val 1681725818 ecr 7454797], length 389
11:24:53.579531 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [S.], seq 696664418, ack 727397444, win 14480, options [mss 1400,sackOK,TS val 6126119 ecr 7454806,nop,wscale 8], length 0
11:24:53.579717 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [S.], seq 696664418, ack 727397444, win 14480, options [mss 1400,sackOK,TS val 6126137 ecr 7454806,nop,wscale 8], length 0
11:24:53.579912 IP ns8.sci.fi.domain > 10.175.110.58.52940: 23856 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:24:53.580036 IP 10.175.110.58.56940 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:53.580042 IP ns8.sci.fi.domain > 10.175.110.58.50671: 106 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:24:53.580175 IP 10.175.110.58.44393 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:53.581010 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 1, win 229, options [nop,nop,TS val 7454951 ecr 1681725728,nop,nop,sack 1 {0:1}], length 0
11:24:53.581694 IP 10.175.110.58.35270 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 1, win 14600, options [nop,nop,TS val 7454951 ecr 3699707571], length 0
11:24:53.581953 IP 10.175.110.58.45112 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 1, win 14600, options [nop,nop,TS val 7454951 ecr 3699781937], length 0
11:24:53.582252 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 390, win 245, options [nop,nop,TS val 7454951 ecr 1681725818], length 0
11:24:53.582274 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [.], ack 1, win 229, options [nop,nop,TS val 7454952 ecr 6126119], length 0
11:24:53.582496 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [.], ack 1, win 229, options [nop,nop,TS val 7454952 ecr 6126137,nop,nop,sack 1 {0:1}], length 0
11:24:53.583030 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 123:174, ack 390, win 245, options [nop,nop,TS val 7454952 ecr 1681725818], length 51
11:24:53.584275 IP 10.175.110.58.35270 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 1:185, ack 1, win 14600, options [nop,nop,TS val 7454952 ecr 3699707571], length 184
11:24:53.586553 IP 10.175.110.58.45112 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 1:185, ack 1, win 14600, options [nop,nop,TS val 7454952 ecr 3699781937], length 184
11:24:53.586942 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 1:441, ack 1, win 229, options [nop,nop,TS val 7454952 ecr 6126137], length 440
11:24:53.588147 IP owa.lut.fi.imaps > 10.175.110.58.32789: Flags [.], seq 1:1389, ack 185, win 4200, options [nop,nop,TS val 2416062513 ecr 7454947], length 1388
11:24:53.589717 IP 10.175.110.58.32789 > owa.lut.fi.imaps: Flags [.], ack 1389, win 272, options [nop,nop,TS val 7454952 ecr 2416062513], length 0
11:24:53.626364 IP 10.175.110.58.60191 > ns8.sci.fi.domain: 58152+ A? tic.sixxs.net. (31)
11:24:53.628374 IP owa.lut.fi.imaps > 10.175.110.58.32789: Flags [.], seq 1389:2777, ack 185, win 4200, options [nop,nop,TS val 2416062513 ecr 7454947], length 1388
11:24:53.630625 IP 10.175.110.58.32789 > owa.lut.fi.imaps: Flags [.], ack 2777, win 315, options [nop,nop,TS val 7454956 ecr 2416062513], length 0
11:24:53.637870 IP owa.lut.fi.imaps > 10.175.110.58.32789: Flags [P.], seq 2777:3711, ack 185, win 4200, options [nop,nop,TS val 2416062513 ecr 7454947], length 934
11:24:53.639598 IP 10.175.110.58.32789 > owa.lut.fi.imaps: Flags [.], ack 3711, win 359, options [nop,nop,TS val 7454957 ecr 2416062513], length 0
11:24:53.647861 IP owa.lut.fi.imaps > 10.175.110.58.46497: Flags [.], seq 1:1389, ack 185, win 4200, options [nop,nop,TS val 2416062517 ecr 7454948], length 1388
11:24:53.649762 IP 10.175.110.58.46497 > owa.lut.fi.imaps: Flags [.], ack 1389, win 272, options [nop,nop,TS val 7454958 ecr 2416062517], length 0
11:24:53.657975 IP owa.lut.fi.imaps > 10.175.110.58.46497: Flags [.], seq 1389:2777, ack 185, win 4200, options [nop,nop,TS val 2416062517 ecr 7454948], length 1388
11:24:53.657977 IP owa.lut.fi.imaps > 10.175.110.58.46497: Flags [P.], seq 2777:3711, ack 185, win 4200, options [nop,nop,TS val 2416062517 ecr 7454948], length 934
11:24:53.658092 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [.], ack 123, win 29, options [nop,nop,TS val 1681726012 ecr 7454938], length 0
11:24:53.658415 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.41970: Flags [.], ack 307, win 661, options [nop,nop,TS val 541279063 ecr 7454950], length 0
11:24:53.658417 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 380:430, ack 166, win 663, options [nop,nop,TS val 1029777808 ecr 7454948], length 50
11:24:53.659917 IP 10.175.110.58.46497 > owa.lut.fi.imaps: Flags [.], ack 2777, win 315, options [nop,nop,TS val 7454959 ecr 2416062517], length 0
11:24:53.660323 IP 10.175.110.58.46497 > owa.lut.fi.imaps: Flags [.], ack 3711, win 359, options [nop,nop,TS val 7454959 ecr 2416062517], length 0
11:24:53.665960 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.41970: Flags [P.], seq 4237:4284, ack 307, win 661, options [nop,nop,TS val 541279063 ecr 7454950], length 47
11:24:53.667271 IP 10.175.110.58.41970 > lb-in-f188.1e100.net.5228: Flags [.], ack 4284, win 402, options [nop,nop,TS val 7454960 ecr 541279063], length 0
11:24:53.677827 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.35270: Flags [.], ack 185, win 15544, options [nop,nop,TS val 3699707866 ecr 7454952], length 0
11:24:53.677924 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.45112: Flags [.], ack 185, win 15544, options [nop,nop,TS val 3699782232 ecr 7454952], length 0
11:24:53.678399 IP 10.175.110.58.32789 > owa.lut.fi.imaps: Flags [P.], seq 185:499, ack 3711, win 359, options [nop,nop,TS val 7454961 ecr 2416062513], length 314
11:24:53.680128 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 166:350, ack 430, win 262, options [nop,nop,TS val 7454961 ecr 1029777808], length 184
11:24:53.687717 IP 10.175.110.58.46497 > owa.lut.fi.imaps: Flags [P.], seq 185:499, ack 3711, win 359, options [nop,nop,TS val 7454962 ecr 2416062517], length 314
11:24:53.687978 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.45112: Flags [.], seq 1:1389, ack 185, win 15544, options [nop,nop,TS val 3699782232 ecr 7454952], length 1388
11:24:53.688113 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.45112: Flags [.], seq 1389:2777, ack 185, win 15544, options [nop,nop,TS val 3699782232 ecr 7454952], length 1388
11:24:53.690183 IP 10.175.110.58.45112 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 1389, win 16656, options [nop,nop,TS val 7454962 ecr 3699782232], length 0
11:24:53.690443 IP 10.175.110.58.45112 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 2777, win 19432, options [nop,nop,TS val 7454962 ecr 3699782232], length 0
11:24:53.697985 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.45112: Flags [P.], seq 2777:3439, ack 185, win 15544, options [nop,nop,TS val 3699782232 ecr 7454952], length 662
11:24:53.698119 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.35270: Flags [.], seq 1:1389, ack 185, win 15544, options [nop,nop,TS val 3699707889 ecr 7454952], length 1388
11:24:53.699457 IP 10.175.110.58.45112 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 3439, win 22208, options [nop,nop,TS val 7454963 ecr 3699782232], length 0
11:24:53.700031 IP 10.175.110.58.35270 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 1389, win 16656, options [nop,nop,TS val 7454963 ecr 3699707889], length 0
11:24:53.700303 IP 10.175.110.58.41970 > lb-in-f188.1e100.net.5228: Flags [P.], seq 307:333, ack 4284, win 402, options [nop,nop,TS val 7454963 ecr 541279063], length 26
11:24:53.707962 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.35270: Flags [.], seq 1389:2777, ack 185, win 15544, options [nop,nop,TS val 3699707889 ecr 7454952], length 1388
11:24:53.708078 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.35270: Flags [P.], seq 2777:3439, ack 185, win 15544, options [nop,nop,TS val 3699707889 ecr 7454952], length 662
11:24:53.709822 IP 10.175.110.58.35270 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 2777, win 19432, options [nop,nop,TS val 7454964 ecr 3699707889], length 0
11:24:53.710042 IP 10.175.110.58.35270 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 3439, win 22208, options [nop,nop,TS val 7454964 ecr 3699707889], length 0
11:24:53.712829 IP 10.175.110.58.45112 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 185:499, ack 3439, win 22208, options [nop,nop,TS val 7454965 ecr 3699782232], length 314
11:24:53.721897 IP 10.175.110.58.35270 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 185:499, ack 3439, win 22208, options [nop,nop,TS val 7454966 ecr 3699707889], length 314
11:24:53.727841 IP owa.lut.fi.imaps > 10.175.110.58.32789: Flags [P.], seq 3711:3758, ack 499, win 4384, options [nop,nop,TS val 2416062650 ecr 7454961], length 47
11:24:53.727949 IP owa.lut.fi.imaps > 10.175.110.58.46497: Flags [P.], seq 3711:3758, ack 499, win 4384, options [nop,nop,TS val 2416062657 ecr 7454962], length 47
11:24:53.728055 IP owa.lut.fi.imaps > 10.175.110.58.32789: Flags [P.], seq 3758:3836, ack 499, win 4698, options [nop,nop,TS val 2416062665 ecr 7454961], length 78
11:24:53.729089 IP 10.175.110.58.32789 > owa.lut.fi.imaps: Flags [.], ack 3758, win 359, options [nop,nop,TS val 7454966 ecr 2416062650], length 0
11:24:53.729300 IP 10.175.110.58.32789 > owa.lut.fi.imaps: Flags [.], ack 3836, win 359, options [nop,nop,TS val 7454966 ecr 2416062665], length 0
11:24:53.735588 IP owa.lut.fi.imaps > 10.175.110.58.46497: Flags [P.], seq 3758:3836, ack 499, win 4698, options [nop,nop,TS val 2416062666 ecr 7454962], length 78
11:24:53.737009 IP 10.175.110.58.46497 > owa.lut.fi.imaps: Flags [.], ack 3836, win 359, options [nop,nop,TS val 7454967 ecr 2416062657], length 0
11:24:53.737272 IP 10.175.110.58.46497 > owa.lut.fi.imaps: Flags [P.], seq 499:536, ack 3836, win 359, options [nop,nop,TS val 7454967 ecr 2416062657], length 37
11:24:53.737973 IP 10.175.110.58.32789 > owa.lut.fi.imaps: Flags [P.], seq 499:536, ack 3836, win 359, options [nop,nop,TS val 7454967 ecr 2416062665], length 37
11:24:53.748363 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 430:1456, ack 350, win 661, options [nop,nop,TS val 1029777942 ecr 7454961], length 1026
11:24:53.748500 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [.], seq 1456:2844, ack 350, win 661, options [nop,nop,TS val 1029777942 ecr 7454961], length 1388
11:24:53.750490 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 2844, win 338, options [nop,nop,TS val 7454968 ecr 1029777942], length 0
11:24:53.757920 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 2844:3506, ack 350, win 661, options [nop,nop,TS val 1029777942 ecr 7454961], length 662
11:24:53.757922 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 3506:3601, ack 350, win 661, options [nop,nop,TS val 1029777942 ecr 7454961], length 95
11:24:53.758036 IP ns8.sci.fi.domain > 10.175.110.58.60191: 58152 2/0/0 A 38.229.76.3, A 213.197.27.252 (63)
11:24:53.758193 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [.], ack 174, win 29, options [nop,nop,TS val 1681726156 ecr 7454952], length 0
11:24:53.758371 IP 10.175.110.58 > uschi03.sixxs.net: ICMP echo request, id 27469, seq 1, length 64
11:24:53.758456 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [P.], seq 390:440, ack 174, win 29, options [nop,nop,TS val 1681726157 ecr 7454952], length 50
11:24:53.758550 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [.], ack 441, win 68, options [nop,nop,TS val 6126461 ecr 7454952], length 0
11:24:53.758610 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [P.], seq 1:134, ack 441, win 68, options [nop,nop,TS val 6126462 ecr 7454952], length 133
11:24:53.758614 IP 10.175.110.58.54005 > ns8.sci.fi.domain: 56442+ PTR? 3.76.229.38.in-addr.arpa. (42)
11:24:53.760685 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [.], ack 134, win 245, options [nop,nop,TS val 7454969 ecr 6126462], length 0
11:24:53.761939 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 3601, win 381, options [nop,nop,TS val 7454970 ecr 1029777942], length 0
11:24:53.762319 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 441:488, ack 134, win 245, options [nop,nop,TS val 7454970 ecr 6126462], length 47
11:24:53.767573 IP lb-in-f188.1e100.net.5228 > 10.175.110.58.41970: Flags [P.], seq 4284:4310, ack 333, win 661, options [nop,nop,TS val 541279221 ecr 7454963], length 26
11:24:53.767657 IP owa.lut.fi.imaps > 10.175.110.58.32789: Flags [.], ack 536, win 4735, options [nop,nop,TS val 2416062705 ecr 7454967], length 0
11:24:53.767679 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 488:514, ack 134, win 245, options [nop,nop,TS val 7454970 ecr 6126462], length 26
11:24:53.767776 IP owa.lut.fi.imaps > 10.175.110.58.46497: Flags [.], ack 536, win 4735, options [nop,nop,TS val 2416062705 ecr 7454967], length 0
11:24:53.768134 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 514:540, ack 134, win 245, options [nop,nop,TS val 7454970 ecr 6126462], length 26
11:24:53.768163 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 540:566, ack 134, win 245, options [nop,nop,TS val 7454970 ecr 6126462], length 26
11:24:53.768963 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 566:592, ack 134, win 245, options [nop,nop,TS val 7454970 ecr 6126462], length 26
11:24:53.769001 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 592:618, ack 134, win 245, options [nop,nop,TS val 7454970 ecr 6126462], length 26
11:24:53.769195 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 618:644, ack 134, win 245, options [nop,nop,TS val 7454970 ecr 6126462], length 26
11:24:53.769542 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 644:670, ack 134, win 245, options [nop,nop,TS val 7454970 ecr 6126462], length 26
11:24:53.769813 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 670:696, ack 134, win 245, options [nop,nop,TS val 7454970 ecr 6126462], length 26
11:24:53.770112 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 696:722, ack 134, win 245, options [nop,nop,TS val 7454970 ecr 6126462], length 26
11:24:53.770143 IP 10.175.110.58.32789 > owa.lut.fi.imaps: Flags [P.], seq 536:588, ack 3836, win 359, options [nop,nop,TS val 7454970 ecr 2416062705], length 52
11:24:53.770359 IP 10.175.110.58.46497 > owa.lut.fi.imaps: Flags [P.], seq 536:588, ack 3836, win 359, options [nop,nop,TS val 7454970 ecr 2416062705], length 52
11:24:53.775834 IP 10.175.110.58.41970 > lb-in-f188.1e100.net.5228: Flags [P.], seq 333:582, ack 4310, win 402, options [nop,nop,TS val 7454971 ecr 541279221], length 249
11:24:53.785404 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 350:660, ack 3601, win 381, options [nop,nop,TS val 7454972 ecr 1029777942], length 310
11:24:53.791631 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 440, win 245, options [nop,nop,TS val 7454973 ecr 1681726157], length 0
11:24:53.792473 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 174:358, ack 440, win 245, options [nop,nop,TS val 7454973 ecr 1681726157], length 184
11:24:53.807855 IP owa.lut.fi.imaps > 10.175.110.58.32789: Flags [.], ack 588, win 4787, options [nop,nop,TS val 2416062738 ecr 7454970], length 0
11:24:53.807948 IP owa.lut.fi.imaps > 10.175.110.58.46497: Flags [.], ack 588, win 4787, options [nop,nop,TS val 2416062738 ecr 7454970], length 0
11:24:53.808042 IP owa.lut.fi.imaps > 10.175.110.58.32789: Flags [P.], seq 3836:4002, ack 588, win 4787, options [nop,nop,TS val 2416062739 ecr 7454970], length 166
11:24:53.808187 IP owa.lut.fi.imaps > 10.175.110.58.46497: Flags [P.], seq 3836:4002, ack 588, win 4787, options [nop,nop,TS val 2416062739 ecr 7454970], length 166
11:24:53.810615 IP 10.175.110.58.46497 > owa.lut.fi.imaps: Flags [P.], seq 588:644, ack 4002, win 402, options [nop,nop,TS val 7454974 ecr 2416062739], length 56
11:24:54.251021 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 4599, win 598, options [nop,nop,TS val 7455018 ecr 1029778440], length 0
11:24:54.252122 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1250:1361, ack 4599, win 598, options [nop,nop,TS val 7455019 ecr 1029778440], length 111
11:24:54.265819 IP owa.lut.fi.imaps > 10.175.110.58.32789: Flags [.], ack 833, win 5032, options [nop,nop,TS val 2416063197 ecr 7455016], length 0
11:24:54.265959 IP owa.lut.fi.imaps > 10.175.110.58.32789: Flags [P.], seq 4584:4650, ack 833, win 5032, options [nop,nop,TS val 2416063198 ecr 7455016], length 66
11:24:54.271206 IP 10.175.110.58.39213 > ns8.sci.fi.domain: 18885+ A? tic.sixxs.net. (31)
11:24:54.296170 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.45112: Flags [.], ack 616, win 16616, options [nop,nop,TS val 3699782846 ecr 7455012], length 0
11:24:54.301552 IP 10.175.110.58.32789 > owa.lut.fi.imaps: Flags [.], ack 4650, win 445, options [nop,nop,TS val 7455024 ecr 2416063198], length 0
11:24:54.305891 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.35270: Flags [P.], seq 3771:3859, ack 567, win 16616, options [nop,nop,TS val 3699708495 ecr 7454993], length 88
11:24:54.308321 IP 10.175.110.58.35270 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 567:611, ack 3859, win 24984, options [nop,nop,TS val 7455024 ecr 3699708495], length 44
11:24:54.315522 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 4599:4655, ack 1361, win 661, options [nop,nop,TS val 1029778514 ecr 7455019], length 56
11:24:54.321683 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1361:1626, ack 4655, win 598, options [nop,nop,TS val 7455025 ecr 1029778514], length 265
11:24:54.337852 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [.], ack 1703, win 80, options [nop,nop,TS val 6127039 ecr 7455010], length 0
11:24:54.337946 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [.], ack 1729, win 80, options [nop,nop,TS val 6127039 ecr 7455010], length 0
11:24:54.338026 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [.], ack 1756, win 80, options [nop,nop,TS val 6127041 ecr 7455010], length 0
11:24:54.338238 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [.], ack 1783, win 80, options [nop,nop,TS val 6127041 ecr 7455011], length 0
11:24:54.338315 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.45112: Flags [P.], seq 3859:4221, ack 616, win 16616, options [nop,nop,TS val 3699782895 ecr 7455012], length 362
11:24:54.340538 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [P.], seq 2058:2676, ack 163, win 245, options [nop,nop,TS val 7455027 ecr 6127039], length 618
11:24:54.348113 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [.], ack 1826, win 80, options [nop,nop,TS val 6127044 ecr 7455011], length 0
11:24:54.348222 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [.], ack 1852, win 80, options [nop,nop,TS val 6127045 ecr 7455011], length 0
11:24:54.348329 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [.], ack 1879, win 80, options [nop,nop,TS val 6127047 ecr 7455011], length 0
11:24:54.348473 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [.], ack 1920, win 80, options [nop,nop,TS val 6127049 ecr 7455011], length 0
11:24:54.348609 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [.], ack 1973, win 80, options [nop,nop,TS val 6127051 ecr 7455011], length 0
11:24:54.348718 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [.], ack 1946, win 80, options [nop,nop,TS val 6127051 ecr 7455011], length 0
11:24:54.348843 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [.], ack 1973, win 80, options [nop,nop,TS val 6127053 ecr 7455011,nop,nop,sack 1 {2005:2031}], length 0
11:24:54.349067 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [.], ack 2031, win 80, options [nop,nop,TS val 6127053 ecr 7455011], length 0
11:24:54.349094 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [.], ack 2058, win 80, options [nop,nop,TS val 6127053 ecr 7455012], length 0
11:24:54.365854 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [P.], seq 4675:5034, ack 811, win 39, options [nop,nop,TS val 1681726776 ecr 7455013], length 359
11:24:54.371805 IP 10.175.110.58.45112 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4221, win 27760, options [nop,nop,TS val 7455031 ecr 3699782895], length 0
11:24:54.385114 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 811:952, ack 5034, win 419, options [nop,nop,TS val 7455032 ecr 1681726776], length 141
11:24:54.385853 IP ns8.sci.fi.domain > 10.175.110.58.39213: 18885 2/0/0 A 38.229.76.3, A 213.197.27.252 (63)
11:24:54.397802 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.35270: Flags [.], ack 611, win 16616, options [nop,nop,TS val 3699708585 ecr 7455024], length 0
11:24:54.397906 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.35270: Flags [P.], seq 3859:4223, ack 611, win 16616, options [nop,nop,TS val 3699708586 ecr 7455024], length 364
11:24:54.406761 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [S], seq 1818488989, win 14600, options [mss 1460,sackOK,TS val 276761975 ecr 0,nop,wscale 7], length 0
11:24:54.425822 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [.], ack 1626, win 661, options [nop,nop,TS val 1029778626 ecr 7455025], length 0
11:24:54.427075 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1626:1724, ack 4655, win 598, options [nop,nop,TS val 7455036 ecr 1029778626], length 98
11:24:54.431494 IP 10.175.110.58.35270 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4223, win 27760, options [nop,nop,TS val 7455037 ecr 3699708586], length 0
11:24:54.497806 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [.], ack 1724, win 661, options [nop,nop,TS val 1029778690 ecr 7455036], length 0
11:24:54.497991 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 10073:10593, ack 1437, win 661, options [nop,nop,TS val 3049822185 ecr 262811762], length 520
11:24:54.498053 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 10593:11031, ack 1437, win 661, options [nop,nop,TS val 3049822185 ecr 262811762], length 438
11:24:54.498275 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 10593, win 642, options [nop,nop,TS val 262817915 ecr 3049822185], length 0
11:24:54.498328 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 11031, win 639, options [nop,nop,TS val 262817915 ecr 3049822185], length 0
11:24:54.499070 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1437:1535, ack 11031, win 639, options [nop,nop,TS val 262817915 ecr 3049822185], length 98
11:24:54.507742 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.40000: Flags [P.], seq 1169:1593, ack 130, win 670, options [nop,nop,TS val 250068669 ecr 109118382], length 424
11:24:54.508002 IP 10.175.110.58.40000 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 1593, win 331, options [nop,nop,TS val 109119385 ecr 250068669], length 0
11:24:54.517903 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.37505: Flags [P.], seq 11011:11445, ack 1941, win 661, options [nop,nop,TS val 1987935828 ecr 7451837], length 434
11:24:54.518021 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 4655:5080, ack 1724, win 661, options [nop,nop,TS val 1029778713 ecr 7455036], length 425
11:24:54.518114 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 5080:5102, ack 1724, win 661, options [nop,nop,TS val 1029778713 ecr 7455036], length 22
11:24:54.518271 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 5102:5555, ack 1724, win 661, options [nop,nop,TS val 1029778713 ecr 7455036], length 453
11:24:54.518401 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 5555:5913, ack 1724, win 661, options [nop,nop,TS val 1029778713 ecr 7455036], length 358
11:24:54.518539 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 5913:6282, ack 1724, win 661, options [nop,nop,TS val 1029778717 ecr 7455036], length 369
11:24:54.520265 IP 10.175.110.58.37505 > bk-in-f125.1e100.net.xmpp-client: Flags [R], seq 1234810727, win 0, length 0
11:24:54.520505 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 6282, win 771, options [nop,nop,TS val 7455045 ecr 1029778713], length 0
11:24:54.527800 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 6282:6651, ack 1724, win 661, options [nop,nop,TS val 1029778717 ecr 7455036], length 369
11:24:54.527916 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 6651:7060, ack 1724, win 661, options [nop,nop,TS val 1029778718 ecr 7455036], length 409
11:24:54.528068 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [.], ack 2676, win 91, options [nop,nop,TS val 6127230 ecr 7455027], length 0
11:24:54.530299 IP 10.175.110.58.44206 > kerberos3.Stanford.EDU.0: Flags [S], seq 2813275649, win 14600, options [mss 1460,sackOK,TS val 276762006 ecr 0,nop,wscale 7], length 0
11:24:54.530361 IP 10.175.110.58.44207 > kerberos3.Stanford.EDU.0: Flags [S], seq 1242698822, win 14600, options [mss 1460,sackOK,TS val 276762006 ecr 0,nop,wscale 7], length 0
11:24:54.533556 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 7060, win 858, options [nop,nop,TS val 7455047 ecr 1029778717], length 0
11:24:54.535492 IP mqtt-shv-06-frc1.facebook.com.https > 10.175.110.58.46446: Flags [P.], seq 163:196, ack 2676, win 91, options [nop,nop,TS val 6127234 ecr 7455027], length 33
11:24:54.538131 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1724:1941, ack 7060, win 858, options [nop,nop,TS val 7455047 ecr 1029778717], length 217
11:24:54.555494 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [.], ack 1535, win 661, options [nop,nop,TS val 3049822246 ecr 262817915], length 0
11:24:54.565778 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [S.], seq 3113892188, ack 1818488990, win 14480, options [mss 1400,sackOK,TS val 41159931 ecr 276761975,nop,wscale 4], length 0
11:24:54.565857 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [.], ack 1, win 115, options [nop,nop,TS val 276762015 ecr 41159931], length 0
11:24:54.571671 IP 10.175.110.58.46446 > mqtt-shv-06-frc1.facebook.com.https: Flags [.], ack 196, win 245, options [nop,nop,TS val 7455051 ecr 6127234], length 0
11:24:54.579619 IP 10.175.110.58.44208 > kerberos3.Stanford.EDU.0: Flags [S], seq 2532205229, win 14600, options [mss 1460,sackOK,TS val 276762018 ecr 0,nop,wscale 7], length 0
11:24:54.579922 IP 10.175.110.58.44209 > kerberos3.Stanford.EDU.0: Flags [S], seq 1427084257, win 14600, options [mss 1460,sackOK,TS val 276762018 ecr 0,nop,wscale 7], length 0
11:24:54.579971 IP 10.175.110.58.44210 > kerberos3.Stanford.EDU.0: Flags [S], seq 1699260042, win 14600, options [mss 1460,sackOK,TS val 276762018 ecr 0,nop,wscale 7], length 0
11:24:54.580003 IP 10.175.110.58.44211 > kerberos3.Stanford.EDU.0: Flags [S], seq 67703071, win 14600, options [mss 1460,sackOK,TS val 276762018 ecr 0,nop,wscale 7], length 0
11:24:54.580700 IP 10.175.110.58.44212 > kerberos3.Stanford.EDU.0: Flags [S], seq 1597501871, win 14600, options [mss 1460,sackOK,TS val 276762019 ecr 0,nop,wscale 7], length 0
11:24:54.580732 IP 10.175.110.58.44213 > kerberos3.Stanford.EDU.0: Flags [S], seq 1894033556, win 14600, options [mss 1460,sackOK,TS val 276762019 ecr 0,nop,wscale 7], length 0
11:24:54.587852 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 7060:7799, ack 1724, win 661, options [nop,nop,TS val 1029778782 ecr 7455045], length 739
11:24:54.587945 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [.], ack 952, win 41, options [nop,nop,TS val 1681726996 ecr 7455032], length 0
11:24:54.621672 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 7799, win 901, options [nop,nop,TS val 7455056 ecr 1029778782], length 0
11:24:54.645835 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [.], ack 1941, win 661, options [nop,nop,TS val 1029778842 ecr 7455047], length 0
11:24:54.688672 IP 10.175.110.58.32789 > owa.lut.fi.imaps: Flags [P.], seq 833:860, ack 4650, win 445, options [nop,nop,TS val 7455062 ecr 2416063198], length 27
11:24:54.689113 IP 10.175.110.58.32789 > owa.lut.fi.imaps: Flags [F.], seq 860, ack 4650, win 445, options [nop,nop,TS val 7455062 ecr 2416063198], length 0
11:24:54.690006 IP 10.175.110.58.46497 > owa.lut.fi.imaps: Flags [P.], seq 726:753, ack 4402, win 445, options [nop,nop,TS val 7455062 ecr 2416063002], length 27
11:24:54.690245 IP 10.175.110.58.46497 > owa.lut.fi.imaps: Flags [F.], seq 753, ack 4402, win 445, options [nop,nop,TS val 7455062 ecr 2416063002], length 0
11:24:54.725848 IP owa.lut.fi.imaps > 10.175.110.58.32789: Flags [.], ack 860, win 5059, options [nop,nop,TS val 2416063657 ecr 7455062], length 0
11:24:54.726094 IP owa.lut.fi.imaps > 10.175.110.58.32789: Flags [F.], seq 4650, ack 860, win 5059, options [nop,nop,TS val 2416063657 ecr 7455062], length 0
11:24:54.726172 IP owa.lut.fi.imaps > 10.175.110.58.32789: Flags [F.], seq 4650, ack 861, win 5059, options [nop,nop,TS val 2416063657 ecr 7455062], length 0
11:24:54.726236 IP owa.lut.fi.imaps > 10.175.110.58.46497: Flags [.], ack 753, win 4952, options [nop,nop,TS val 2416063658 ecr 7455062], length 0
11:24:54.726331 IP owa.lut.fi.imaps > 10.175.110.58.46497: Flags [F.], seq 4402, ack 753, win 4952, options [nop,nop,TS val 2416063658 ecr 7455062], length 0
11:24:54.726438 IP owa.lut.fi.imaps > 10.175.110.58.46497: Flags [F.], seq 4402, ack 754, win 4952, options [nop,nop,TS val 2416063658 ecr 7455062], length 0
11:24:54.727851 IP 10.175.110.58.32789 > owa.lut.fi.imaps: Flags [.], ack 4651, win 445, options [nop,nop,TS val 7455066 ecr 2416063657], length 0
11:24:54.728279 IP 10.175.110.58.46497 > owa.lut.fi.imaps: Flags [.], ack 4403, win 445, options [nop,nop,TS val 7455066 ecr 2416063658], length 0
11:24:54.744923 IP 10.175.110.58.50300 > owa.lut.fi.imaps: Flags [S], seq 685513061, win 14600, options [mss 1460,sackOK,TS val 7455068 ecr 0,nop,wscale 6], length 0
11:24:54.748055 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 11031:11551, ack 1535, win 661, options [nop,nop,TS val 3049822436 ecr 262817915], length 520
11:24:54.748156 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 11551:11685, ack 1535, win 661, options [nop,nop,TS val 3049822436 ecr 262817915], length 134
11:24:54.749228 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1535:1633, ack 11685, win 642, options [nop,nop,TS val 262817978 ecr 3049822436], length 98
11:24:54.752524 IP 10.175.110.58.47858 > owa.lut.fi.imaps: Flags [S], seq 1138044056, win 14600, options [mss 1460,sackOK,TS val 7455069 ecr 0,nop,wscale 6], length 0
11:24:54.753369 IP 10.175.110.58.45112 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 616:649, ack 4221, win 27760, options [nop,nop,TS val 7455069 ecr 3699782895], length 33
11:24:54.757910 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [P.], seq 11685:12205, ack 1535, win 661, options [nop,nop,TS val 3049822437 ecr 262817915], length 520
11:24:54.758047 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.40000: Flags [P.], seq 1593:1753, ack 130, win 670, options [nop,nop,TS val 250068919 ecr 109119385], length 160
11:24:54.758258 IP 10.175.110.58.40000 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 1753, win 331, options [nop,nop,TS val 109119447 ecr 250068919], length 0
11:24:54.767920 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 7799:8825, ack 1941, win 661, options [nop,nop,TS val 1029778959 ecr 7455056], length 1026
11:24:54.768019 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 8825:8879, ack 1941, win 661, options [nop,nop,TS val 1029778959 ecr 7455056], length 54
11:24:54.768140 IP bk-in-f125.1e100.net.xmpp-client > 10.175.110.58.50999: Flags [P.], seq 8879:9009, ack 1941, win 661, options [nop,nop,TS val 1029778962 ecr 7455056], length 130
11:24:54.770009 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 8825, win 945, options [nop,nop,TS val 7455070 ecr 1029778959], length 0
11:24:54.770062 IP 10.175.110.58.50999 > bk-in-f125.1e100.net.xmpp-client: Flags [.], ack 9009, win 988, options [nop,nop,TS val 7455070 ecr 1029778959], length 0
11:24:54.775515 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [S.], seq 1281116721, ack 685513062, win 4200, options [mss 1400,nop,wscale 0,nop,nop,TS val 2416063713 ecr 7455068,sackOK,eol], length 0
11:24:54.778614 IP 10.175.110.58.50300 > owa.lut.fi.imaps: Flags [.], ack 1, win 229, options [nop,nop,TS val 7455071 ecr 2416063713], length 0
11:24:54.784191 IP 10.175.110.58.50300 > owa.lut.fi.imaps: Flags [P.], seq 1:185, ack 1, win 229, options [nop,nop,TS val 7455072 ecr 2416063713], length 184
11:24:54.785440 IP owa.lut.fi.imaps > 10.175.110.58.47858: Flags [S.], seq 907127532, ack 1138044057, win 4200, options [mss 1400,nop,wscale 0,nop,nop,TS val 2416063719 ecr 7455069,sackOK,eol], length 0
11:24:54.786917 IP 10.175.110.58.47858 > owa.lut.fi.imaps: Flags [.], ack 1, win 229, options [nop,nop,TS val 7455072 ecr 2416063719], length 0
11:24:54.790647 IP 10.175.110.58.47858 > owa.lut.fi.imaps: Flags [P.], seq 1:185, ack 1, win 229, options [nop,nop,TS val 7455072 ecr 2416063719], length 184
11:24:54.796687 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [.], ack 12205, win 646, options [nop,nop,TS val 262817990 ecr 3049822437], length 0
11:24:54.804947 IP 10.175.110.58.43058 > ns8.sci.fi.domain: 11273+ AAAA? krb5auth3.stanford.edu. (40)
11:24:54.805958 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [.], ack 1633, win 661, options [nop,nop,TS val 3049822496 ecr 262817978], length 0
11:24:54.806291 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1633:1731, ack 12205, win 646, options [nop,nop,TS val 262817992 ecr 3049822496], length 98
11:24:54.813999 IP 10.175.110.58.50089 > ns8.sci.fi.domain: 64733+ AAAA? krb5auth3.stanford.edu. (40)
11:24:54.817841 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [.], seq 1:1389, ack 185, win 4200, options [nop,nop,TS val 2416063753 ecr 7455072], length 1388
11:24:54.820183 IP 10.175.110.58.50300 > owa.lut.fi.imaps: Flags [.], ack 1389, win 272, options [nop,nop,TS val 7455075 ecr 2416063753], length 0
11:24:54.825988 IP 10.175.110.58.49996 > ns8.sci.fi.domain: 54395+ AAAA? krb5auth3.stanford.edu. (40)
11:24:54.828096 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [.], seq 1389:2777, ack 185, win 4200, options [nop,nop,TS val 2416063753 ecr 7455072], length 1388
11:24:54.828221 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [P.], seq 2777:3711, ack 185, win 4200, options [nop,nop,TS val 2416063753 ecr 7455072], length 934
11:24:54.828324 IP owa.lut.fi.imaps > 10.175.110.58.47858: Flags [.], seq 1:1389, ack 185, win 4200, options [nop,nop,TS val 2416063758 ecr 7455072], length 1388
11:24:54.830790 IP 10.175.110.58.50300 > owa.lut.fi.imaps: Flags [.], ack 2777, win 315, options [nop,nop,TS val 7455076 ecr 2416063753], length 0
11:24:54.831066 IP 10.175.110.58.50300 > owa.lut.fi.imaps: Flags [.], ack 3711, win 359, options [nop,nop,TS val 7455076 ecr 2416063753], length 0
11:24:54.831099 IP 10.175.110.58.47858 > owa.lut.fi.imaps: Flags [.], ack 1389, win 272, options [nop,nop,TS val 7455076 ecr 2416063758], length 0
11:24:54.837989 IP owa.lut.fi.imaps > 10.175.110.58.47858: Flags [.], seq 1389:2777, ack 185, win 4200, options [nop,nop,TS val 2416063758 ecr 7455072], length 1388
11:24:54.838132 IP owa.lut.fi.imaps > 10.175.110.58.47858: Flags [P.], seq 2777:3711, ack 185, win 4200, options [nop,nop,TS val 2416063758 ecr 7455072], length 934
11:24:54.838133 IP ns8.sci.fi.domain > 10.175.110.58.43058: 11273 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:24:54.838325 IP 10.175.110.58.45446 > ns8.sci.fi.domain: 34263+ A? krb5auth3.stanford.edu. (40)
11:24:54.839817 IP 10.175.110.58.47858 > owa.lut.fi.imaps: Flags [.], ack 2777, win 315, options [nop,nop,TS val 7455077 ecr 2416063758], length 0
11:24:54.840096 IP 10.175.110.58.47858 > owa.lut.fi.imaps: Flags [.], ack 3711, win 359, options [nop,nop,TS val 7455077 ecr 2416063758], length 0
11:24:54.845957 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.45112: Flags [.], ack 649, win 16616, options [nop,nop,TS val 3699783397 ecr 7455069], length 0
11:24:54.846231 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.45112: Flags [P.], seq 4221:4267, ack 649, win 16616, options [nop,nop,TS val 3699783400 ecr 7455069], length 46
11:24:54.847446 IP 10.175.110.58.45112 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4267, win 27760, options [nop,nop,TS val 7455078 ecr 3699783400], length 0
11:24:54.847993 IP 10.175.110.58.35270 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 611:644, ack 4223, win 27760, options [nop,nop,TS val 7455078 ecr 3699708586], length 33
11:24:54.848276 IP 10.175.110.58.45112 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 649:693, ack 4267, win 27760, options [nop,nop,TS val 7455078 ecr 3699783400], length 44
11:24:54.851457 IP 10.175.110.58.50300 > owa.lut.fi.imaps: Flags [P.], seq 185:499, ack 3711, win 359, options [nop,nop,TS val 7455078 ecr 2416063753], length 314
11:24:54.855984 IP ns8.sci.fi.domain > 10.175.110.58.50089: 64733 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:24:54.856178 IP 10.175.110.58.50173 > ns8.sci.fi.domain: 7192+ A? krb5auth3.stanford.edu. (40)
11:24:54.856239 IP ns8.sci.fi.domain > 10.175.110.58.49996: 54395 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:24:54.856336 IP 10.175.110.58.41142 > ns8.sci.fi.domain: 14703+ A? krb5auth3.stanford.edu. (40)
11:24:54.856963 IP 10.175.110.58.51298 > ns8.sci.fi.domain: 48058+ AAAA? krb5auth3.stanford.edu. (40)
11:24:54.864436 IP 10.175.110.58.35904 > ns8.sci.fi.domain: 26587+ AAAA? krb5auth3.stanford.edu. (40)
11:24:54.865989 IP ns8.sci.fi.domain > 10.175.110.58.45446: 34263 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:24:54.866072 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [.], ack 1731, win 661, options [nop,nop,TS val 3049822554 ecr 262817992], length 0
11:24:54.866157 IP 10.175.110.58.48838 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:54.888133 IP 10.175.110.58.47858 > owa.lut.fi.imaps: Flags [P.], seq 185:499, ack 3711, win 359, options [nop,nop,TS val 7455082 ecr 2416063758], length 314
11:24:54.896686 IP ns8.sci.fi.domain > 10.175.110.58.50173: 7192 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:24:54.896688 IP ns8.sci.fi.domain > 10.175.110.58.41142: 14703 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:24:54.896689 IP ns8.sci.fi.domain > 10.175.110.58.51298: 48058 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:24:54.896689 IP ns8.sci.fi.domain > 10.175.110.58.35904: 26587 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:24:54.896690 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [P.], seq 3711:3758, ack 499, win 4384, options [nop,nop,TS val 2416063821 ecr 7455078], length 47
11:24:54.896691 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [P.], seq 3758:3836, ack 499, win 4698, options [nop,nop,TS val 2416063829 ecr 7455078], length 78
11:24:54.896892 IP 10.175.110.58.49176 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:54.897003 IP 10.175.110.58.48325 > ns8.sci.fi.domain: 27605+ A? krb5auth3.stanford.edu. (40)
11:24:54.897248 IP 10.175.110.58.35100 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:54.897544 IP 10.175.110.58.52634 > ns8.sci.fi.domain: 30746+ A? krb5auth3.stanford.edu. (40)
11:24:54.897868 IP 10.175.110.58.38936 > ns8.sci.fi.domain: 43656+ AAAA? krb5auth3.stanford.edu. (40)
11:24:54.899426 IP 10.175.110.58.52845 > ns8.sci.fi.domain: 65279+ AAAA? krb5auth3.stanford.edu. (40)
11:24:54.903483 IP 10.175.110.58.50300 > owa.lut.fi.imaps: Flags [.], ack 3836, win 359, options [nop,nop,TS val 7455084 ecr 2416063821], length 0
11:24:54.903892 IP 10.175.110.58.50300 > owa.lut.fi.imaps: Flags [P.], seq 499:536, ack 3836, win 359, options [nop,nop,TS val 7455084 ecr 2416063821], length 37
11:24:54.927960 IP ns8.sci.fi.domain > 10.175.110.58.48325: 27605 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:24:54.928031 IP ns8.sci.fi.domain > 10.175.110.58.52634: 30746 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:24:54.928153 IP 10.175.110.58.50437 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:54.928176 IP ns8.sci.fi.domain > 10.175.110.58.52845: 65279 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:24:54.928202 IP 10.175.110.58.40420 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:54.928413 IP ns8.sci.fi.domain > 10.175.110.58.38936: 43656 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:24:54.928463 IP owa.lut.fi.imaps > 10.175.110.58.47858: Flags [P.], seq 3711:3758, ack 499, win 4384, options [nop,nop,TS val 2416063858 ecr 7455082], length 47
11:24:54.928541 IP 10.175.110.58.38101 > ns8.sci.fi.domain: 60301+ A? krb5auth3.stanford.edu. (40)
11:24:54.928673 IP 10.175.110.58.35957 > ns8.sci.fi.domain: 25142+ A? krb5auth3.stanford.edu. (40)
11:24:54.929423 IP 10.175.110.58.47858 > owa.lut.fi.imaps: Flags [.], ack 3758, win 359, options [nop,nop,TS val 7455086 ecr 2416063858], length 0
11:24:54.935788 IP owa.lut.fi.imaps > 10.175.110.58.47858: Flags [P.], seq 3758:3836, ack 499, win 4698, options [nop,nop,TS val 2416063869 ecr 7455082], length 78
11:24:54.935989 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [.], ack 536, win 4735, options [nop,nop,TS val 2416063870 ecr 7455084], length 0
11:24:54.936039 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.35270: Flags [P.], seq 4223:4269, ack 644, win 16616, options [nop,nop,TS val 3699709131 ecr 7455078], length 46
11:24:54.937304 IP 10.175.110.58.47858 > owa.lut.fi.imaps: Flags [.], ack 3836, win 359, options [nop,nop,TS val 7455087 ecr 2416063869], length 0
11:24:54.937868 IP 10.175.110.58.50300 > owa.lut.fi.imaps: Flags [P.], seq 536:588, ack 3836, win 359, options [nop,nop,TS val 7455087 ecr 2416063870], length 52
11:24:54.938300 IP 10.175.110.58.35270 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4269, win 27760, options [nop,nop,TS val 7455087 ecr 3699709131], length 0
11:24:54.939587 IP 10.175.110.58.35270 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [P.], seq 644:693, ack 4269, win 27760, options [nop,nop,TS val 7455087 ecr 3699709131], length 49
11:24:54.940449 IP 10.175.110.58.47858 > owa.lut.fi.imaps: Flags [P.], seq 499:536, ack 3836, win 359, options [nop,nop,TS val 7455087 ecr 2416063869], length 37
11:24:54.945825 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.45112: Flags [P.], seq 4267:4631, ack 693, win 16616, options [nop,nop,TS val 3699783503 ecr 7455078], length 364
11:24:54.955795 IP ns8.sci.fi.domain > 10.175.110.58.38101: 60301 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:24:54.955884 IP ns8.sci.fi.domain > 10.175.110.58.35957: 25142 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:24:54.955993 IP 10.175.110.58.41172 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:54.956053 IP 10.175.110.58.44878 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:54.965996 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [.], ack 588, win 4787, options [nop,nop,TS val 2416063905 ecr 7455087], length 0
11:24:54.975800 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [P.], seq 3836:4002, ack 588, win 4787, options [nop,nop,TS val 2416063906 ecr 7455087], length 166
11:24:54.975905 IP owa.lut.fi.imaps > 10.175.110.58.47858: Flags [.], ack 536, win 4735, options [nop,nop,TS val 2416063906 ecr 7455087], length 0
11:24:54.977609 IP 10.175.110.58.47858 > owa.lut.fi.imaps: Flags [P.], seq 536:588, ack 3836, win 359, options [nop,nop,TS val 7455091 ecr 2416063906], length 52
11:24:54.979882 IP 10.175.110.58.50300 > owa.lut.fi.imaps: Flags [P.], seq 588:644, ack 4002, win 402, options [nop,nop,TS val 7455091 ecr 2416063906], length 56
11:24:54.981595 IP 10.175.110.58.45112 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4631, win 30536, options [nop,nop,TS val 7455092 ecr 3699783503], length 0
11:24:55.005989 IP owa.lut.fi.imaps > 10.175.110.58.47858: Flags [.], ack 588, win 4787, options [nop,nop,TS val 2416063945 ecr 7455091], length 0
11:24:55.015784 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [.], ack 644, win 4843, options [nop,nop,TS val 2416063946 ecr 7455091], length 0
11:24:55.015889 IP owa.lut.fi.imaps > 10.175.110.58.47858: Flags [P.], seq 3836:4002, ack 588, win 4787, options [nop,nop,TS val 2416063946 ecr 7455091], length 166
11:24:55.019740 IP 10.175.110.58.47858 > owa.lut.fi.imaps: Flags [P.], seq 588:644, ack 4002, win 402, options [nop,nop,TS val 7455095 ecr 2416063946], length 56
11:24:55.027793 IP imap4.mail.vip.ir2.yahoo.com.imaps > 10.175.110.58.35270: Flags [P.], seq 4269:4631, ack 693, win 16616, options [nop,nop,TS val 3699709218 ecr 7455087], length 362
11:24:55.046035 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [P.], seq 4002:4050, ack 644, win 4843, options [nop,nop,TS val 2416063981 ecr 7455091], length 48
11:24:55.048176 IP 10.175.110.58.50300 > owa.lut.fi.imaps: Flags [P.], seq 644:688, ack 4050, win 402, options [nop,nop,TS val 7455098 ecr 2416063981], length 44
11:24:55.055453 IP owa.lut.fi.imaps > 10.175.110.58.47858: Flags [.], ack 644, win 4843, options [nop,nop,TS val 2416063986 ecr 7455095], length 0
11:24:55.061496 IP 10.175.110.58.35270 > imap4.mail.vip.ir2.yahoo.com.imaps: Flags [.], ack 4631, win 30536, options [nop,nop,TS val 7455100 ecr 3699709218], length 0
11:24:55.086009 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [.], ack 688, win 4887, options [nop,nop,TS val 2416064016 ecr 7455098], length 0
11:24:55.107825 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [P.], seq 4050:4335, ack 688, win 4887, options [nop,nop,TS val 2416064035 ecr 7455098], length 285
11:24:55.107947 IP owa.lut.fi.imaps > 10.175.110.58.47858: Flags [P.], seq 4002:4050, ack 644, win 4843, options [nop,nop,TS val 2416064035 ecr 7455095], length 48
11:24:55.113120 IP 10.175.110.58.47858 > owa.lut.fi.imaps: Flags [P.], seq 644:693, ack 4050, win 402, options [nop,nop,TS val 7455105 ecr 2416064035], length 49
11:24:55.125293 IP 10.175.110.58.50300 > owa.lut.fi.imaps: Flags [P.], seq 688:743, ack 4335, win 445, options [nop,nop,TS val 7455106 ecr 2416064035], length 55
11:24:55.145462 IP owa.lut.fi.imaps > 10.175.110.58.47858: Flags [.], ack 693, win 4892, options [nop,nop,TS val 2416064080 ecr 7455105], length 0
11:24:55.146451 IP 10.175.110.58.58837 > ns8.sci.fi.domain: 64014+ AAAA? krb5auth3.stanford.edu. (40)
11:24:55.155519 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [.], ack 743, win 4942, options [nop,nop,TS val 2416064093 ecr 7455106], length 0
11:24:55.167868 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [P.], seq 4335:4401, ack 743, win 4942, options [nop,nop,TS val 2416064098 ecr 7455106], length 66
11:24:55.167975 IP owa.lut.fi.imaps > 10.175.110.58.47858: Flags [P.], seq 4050:4336, ack 693, win 4892, options [nop,nop,TS val 2416064101 ecr 7455105], length 286
11:24:55.175534 IP ns8.sci.fi.domain > 10.175.110.58.58837: 64014 1/1/0 CNAME kerberos3.stanford.edu. (117)
11:24:55.175736 IP 10.175.110.58.45530 > ns8.sci.fi.domain: 40526+ A? krb5auth3.stanford.edu. (40)
11:24:55.201303 IP 10.175.110.58.50300 > owa.lut.fi.imaps: Flags [P.], seq 743:800, ack 4401, win 445, options [nop,nop,TS val 7455113 ecr 2416064098], length 57
11:24:55.201505 IP 10.175.110.58.47858 > owa.lut.fi.imaps: Flags [.], ack 4336, win 445, options [nop,nop,TS val 7455114 ecr 2416064101], length 0
11:24:55.205542 IP ns8.sci.fi.domain > 10.175.110.58.45530: 40526 2/0/0 CNAME kerberos3.stanford.edu., A 171.67.218.7 (80)
11:24:55.205738 IP 10.175.110.58.44688 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:55.235901 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [.], ack 800, win 4999, options [nop,nop,TS val 2416064168 ecr 7455113], length 0
11:24:55.236000 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [P.], seq 4401:4469, ack 800, win 4999, options [nop,nop,TS val 2416064169 ecr 7455113], length 68
11:24:55.236132 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [P.], seq 4469:4584, ack 800, win 4999, options [nop,nop,TS val 2416064170 ecr 7455113], length 115
11:24:55.238753 IP 10.175.110.58.50300 > owa.lut.fi.imaps: Flags [.], ack 4584, win 445, options [nop,nop,TS val 7455117 ecr 2416064169], length 0
11:24:55.300970 IP 10.175.110.58.50300 > owa.lut.fi.imaps: Flags [P.], seq 800:833, ack 4584, win 445, options [nop,nop,TS val 7455123 ecr 2416064169], length 33
11:24:55.335550 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [.], ack 833, win 5032, options [nop,nop,TS val 2416064269 ecr 7455123], length 0
11:24:55.335650 IP owa.lut.fi.imaps > 10.175.110.58.50300: Flags [P.], seq 4584:4650, ack 833, win 5032, options [nop,nop,TS val 2416064270 ecr 7455123], length 66
11:24:55.371895 IP 10.175.110.58.50300 > owa.lut.fi.imaps: Flags [.], ack 4650, win 445, options [nop,nop,TS val 7455131 ecr 2416064270], length 0
11:24:55.374849 IP 10.175.110.58.47858 > owa.lut.fi.imaps: Flags [P.], seq 693:726, ack 4336, win 445, options [nop,nop,TS val 7455131 ecr 2416064101], length 33
11:24:55.405506 IP owa.lut.fi.imaps > 10.175.110.58.47858: Flags [.], ack 726, win 4925, options [nop,nop,TS val 2416064342 ecr 7455131], length 0
11:24:55.405812 IP owa.lut.fi.imaps > 10.175.110.58.47858: Flags [P.], seq 4336:4402, ack 726, win 4925, options [nop,nop,TS val 2416064344 ecr 7455131], length 66
11:24:55.407301 IP 10.175.110.58.47858 > owa.lut.fi.imaps: Flags [.], ack 4402, win 445, options [nop,nop,TS val 7455134 ecr 2416064344], length 0
11:24:55.528664 IP 10.175.110.58.44207 > kerberos3.Stanford.EDU.0: Flags [S], seq 1242698822, win 14600, options [mss 1460,sackOK,TS val 276762256 ecr 0,nop,wscale 7], length 0
11:24:55.528714 IP 10.175.110.58.44206 > kerberos3.Stanford.EDU.0: Flags [S], seq 2813275649, win 14600, options [mss 1460,sackOK,TS val 276762256 ecr 0,nop,wscale 7], length 0
11:24:55.576594 IP 10.175.110.58.44211 > kerberos3.Stanford.EDU.0: Flags [S], seq 67703071, win 14600, options [mss 1460,sackOK,TS val 276762268 ecr 0,nop,wscale 7], length 0
11:24:55.576645 IP 10.175.110.58.44210 > kerberos3.Stanford.EDU.0: Flags [S], seq 1699260042, win 14600, options [mss 1460,sackOK,TS val 276762268 ecr 0,nop,wscale 7], length 0
11:24:55.576689 IP 10.175.110.58.44208 > kerberos3.Stanford.EDU.0: Flags [S], seq 2532205229, win 14600, options [mss 1460,sackOK,TS val 276762268 ecr 0,nop,wscale 7], length 0
11:24:55.576704 IP 10.175.110.58.44209 > kerberos3.Stanford.EDU.0: Flags [S], seq 1427084257, win 14600, options [mss 1460,sackOK,TS val 276762268 ecr 0,nop,wscale 7], length 0
11:24:55.580651 IP 10.175.110.58.44212 > kerberos3.Stanford.EDU.0: Flags [S], seq 1597501871, win 14600, options [mss 1460,sackOK,TS val 276762269 ecr 0,nop,wscale 7], length 0
11:24:55.580688 IP 10.175.110.58.44213 > kerberos3.Stanford.EDU.0: Flags [S], seq 1894033556, win 14600, options [mss 1460,sackOK,TS val 276762269 ecr 0,nop,wscale 7], length 0
11:24:55.805857 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [P.], seq 5034:5106, ack 952, win 41, options [nop,nop,TS val 1681728212 ecr 7455032], length 72
11:24:55.867348 IP 10.175.110.58.44214 > kerberos3.Stanford.EDU.0: Flags [S], seq 3821355476, win 14600, options [mss 1460,sackOK,TS val 276762340 ecr 0,nop,wscale 7], length 0
11:24:55.898116 IP 10.175.110.58.44215 > kerberos3.Stanford.EDU.0: Flags [S], seq 2311644666, win 14600, options [mss 1460,sackOK,TS val 276762348 ecr 0,nop,wscale 7], length 0
11:24:55.898463 IP 10.175.110.58.44216 > kerberos3.Stanford.EDU.0: Flags [S], seq 3323242045, win 14600, options [mss 1460,sackOK,TS val 276762348 ecr 0,nop,wscale 7], length 0
11:24:55.929370 IP 10.175.110.58.44217 > kerberos3.Stanford.EDU.0: Flags [S], seq 605510631, win 14600, options [mss 1460,sackOK,TS val 276762356 ecr 0,nop,wscale 7], length 0
11:24:55.929405 IP 10.175.110.58.44218 > kerberos3.Stanford.EDU.0: Flags [S], seq 4152662857, win 14600, options [mss 1460,sackOK,TS val 276762356 ecr 0,nop,wscale 7], length 0
11:24:55.957212 IP 10.175.110.58.44219 > kerberos3.Stanford.EDU.0: Flags [S], seq 2599462581, win 14600, options [mss 1460,sackOK,TS val 276762363 ecr 0,nop,wscale 7], length 0
11:24:55.957248 IP 10.175.110.58.44220 > kerberos3.Stanford.EDU.0: Flags [S], seq 2936883038, win 14600, options [mss 1460,sackOK,TS val 276762363 ecr 0,nop,wscale 7], length 0
11:24:56.206934 IP 10.175.110.58.44221 > kerberos3.Stanford.EDU.0: Flags [S], seq 2046802481, win 14600, options [mss 1460,sackOK,TS val 276762425 ecr 0,nop,wscale 7], length 0
11:24:56.265554 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 952:1095, ack 5106, win 419, options [nop,nop,TS val 7455220 ecr 1681728212], length 143
11:24:56.477794 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [.], ack 1095, win 43, options [nop,nop,TS val 1681728878 ecr 7455220], length 0
11:24:56.485455 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [P.], seq 5106:5431, ack 1095, win 43, options [nop,nop,TS val 1681728878 ecr 7455220], length 325
11:24:56.861063 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 1095:1242, ack 5431, win 462, options [nop,nop,TS val 7455279 ecr 1681728878], length 147
11:24:56.864635 IP 10.175.110.58.44214 > kerberos3.Stanford.EDU.0: Flags [S], seq 3821355476, win 14600, options [mss 1460,sackOK,TS val 276762590 ecr 0,nop,wscale 7], length 0
11:24:56.896640 IP 10.175.110.58.44216 > kerberos3.Stanford.EDU.0: Flags [S], seq 3323242045, win 14600, options [mss 1460,sackOK,TS val 276762598 ecr 0,nop,wscale 7], length 0
11:24:56.896674 IP 10.175.110.58.44215 > kerberos3.Stanford.EDU.0: Flags [S], seq 2311644666, win 14600, options [mss 1460,sackOK,TS val 276762598 ecr 0,nop,wscale 7], length 0
11:24:56.928616 IP 10.175.110.58.44217 > kerberos3.Stanford.EDU.0: Flags [S], seq 605510631, win 14600, options [mss 1460,sackOK,TS val 276762606 ecr 0,nop,wscale 7], length 0
11:24:56.928652 IP 10.175.110.58.44218 > kerberos3.Stanford.EDU.0: Flags [S], seq 4152662857, win 14600, options [mss 1460,sackOK,TS val 276762606 ecr 0,nop,wscale 7], length 0
11:24:56.956648 IP 10.175.110.58.44220 > kerberos3.Stanford.EDU.0: Flags [S], seq 2936883038, win 14600, options [mss 1460,sackOK,TS val 276762613 ecr 0,nop,wscale 7], length 0
11:24:56.956684 IP 10.175.110.58.44219 > kerberos3.Stanford.EDU.0: Flags [S], seq 2599462581, win 14600, options [mss 1460,sackOK,TS val 276762613 ecr 0,nop,wscale 7], length 0
11:24:57.065899 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [P.], seq 5431:5631, ack 1242, win 45, options [nop,nop,TS val 1681729468 ecr 7455279], length 200
11:24:57.136682 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 1242:1353, ack 5631, win 506, options [nop,nop,TS val 7455307 ecr 1681729468], length 111
11:24:57.204659 IP 10.175.110.58.44221 > kerberos3.Stanford.EDU.0: Flags [S], seq 2046802481, win 14600, options [mss 1460,sackOK,TS val 276762675 ecr 0,nop,wscale 7], length 0
11:24:57.315501 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [P.], seq 5631:5770, ack 1353, win 45, options [nop,nop,TS val 1681729710 ecr 7455307], length 139
11:24:57.321915 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 1353:1618, ack 5770, win 549, options [nop,nop,TS val 7455325 ecr 1681729710], length 265
11:24:57.495825 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [P.], seq 5770:6000, ack 1618, win 47, options [nop,nop,TS val 1681729898 ecr 7455325], length 230
11:24:57.497291 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [P.], seq 1618:1716, ack 6000, win 592, options [nop,nop,TS val 7455343 ecr 1681729898], length 98
11:24:57.532651 IP 10.175.110.58.44207 > kerberos3.Stanford.EDU.0: Flags [S], seq 1242698822, win 14600, options [mss 1460,sackOK,TS val 276762757 ecr 0,nop,wscale 7], length 0
11:24:57.532686 IP 10.175.110.58.44206 > kerberos3.Stanford.EDU.0: Flags [S], seq 2813275649, win 14600, options [mss 1460,sackOK,TS val 276762757 ecr 0,nop,wscale 7], length 0
11:24:57.532705 IP 10.175.110.58.47561 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:57.532769 IP 10.175.110.58.42059 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:57.580588 IP 10.175.110.58.44208 > kerberos3.Stanford.EDU.0: Flags [S], seq 2532205229, win 14600, options [mss 1460,sackOK,TS val 276762769 ecr 0,nop,wscale 7], length 0
11:24:57.580604 IP 10.175.110.58.44209 > kerberos3.Stanford.EDU.0: Flags [S], seq 1427084257, win 14600, options [mss 1460,sackOK,TS val 276762769 ecr 0,nop,wscale 7], length 0
11:24:57.580623 IP 10.175.110.58.44211 > kerberos3.Stanford.EDU.0: Flags [S], seq 67703071, win 14600, options [mss 1460,sackOK,TS val 276762769 ecr 0,nop,wscale 7], length 0
11:24:57.580652 IP 10.175.110.58.44210 > kerberos3.Stanford.EDU.0: Flags [S], seq 1699260042, win 14600, options [mss 1460,sackOK,TS val 276762769 ecr 0,nop,wscale 7], length 0
11:24:57.581711 IP 10.175.110.58.57530 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:57.581758 IP 10.175.110.58.45660 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:57.582806 IP 10.175.110.58.60902 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:57.582843 IP 10.175.110.58.32831 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:57.582860 IP 10.175.110.58.56940 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:57.583892 IP 10.175.110.58.44393 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:57.584587 IP 10.175.110.58.44212 > kerberos3.Stanford.EDU.0: Flags [S], seq 1597501871, win 14600, options [mss 1460,sackOK,TS val 276762770 ecr 0,nop,wscale 7], length 0
11:24:57.584630 IP 10.175.110.58.44213 > kerberos3.Stanford.EDU.0: Flags [S], seq 1894033556, win 14600, options [mss 1460,sackOK,TS val 276762770 ecr 0,nop,wscale 7], length 0
11:24:57.677891 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [.], seq 6000:7388, ack 1716, win 47, options [nop,nop,TS val 1681730073 ecr 7455343], length 1388
11:24:57.687791 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [.], seq 7388:8776, ack 1716, win 47, options [nop,nop,TS val 1681730073 ecr 7455343], length 1388
11:24:57.689659 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 8776, win 679, options [nop,nop,TS val 7455362 ecr 1681730073], length 0
11:24:57.697815 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [.], seq 8776:10164, ack 1716, win 47, options [nop,nop,TS val 1681730073 ecr 7455343], length 1388
11:24:57.697920 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.45346: Flags [P.], seq 10164:10274, ack 1716, win 47, options [nop,nop,TS val 1681730073 ecr 7455343], length 110
11:24:57.699976 IP 10.175.110.58.45346 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [.], ack 10274, win 722, options [nop,nop,TS val 7455363 ecr 1681730073], length 0
11:24:58.868673 IP 10.175.110.58.44214 > kerberos3.Stanford.EDU.0: Flags [S], seq 3821355476, win 14600, options [mss 1460,sackOK,TS val 276763091 ecr 0,nop,wscale 7], length 0
11:24:58.870098 IP 10.175.110.58.48838 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:58.900279 IP 10.175.110.58.49176 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:58.900613 IP 10.175.110.58.44216 > kerberos3.Stanford.EDU.0: Flags [S], seq 3323242045, win 14600, options [mss 1460,sackOK,TS val 276763099 ecr 0,nop,wscale 7], length 0
11:24:58.900647 IP 10.175.110.58.35100 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:58.900681 IP 10.175.110.58.44215 > kerberos3.Stanford.EDU.0: Flags [S], seq 2311644666, win 14600, options [mss 1460,sackOK,TS val 276763099 ecr 0,nop,wscale 7], length 0
11:24:58.931989 IP 10.175.110.58.40420 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:58.932610 IP 10.175.110.58.44217 > kerberos3.Stanford.EDU.0: Flags [S], seq 605510631, win 14600, options [mss 1460,sackOK,TS val 276763107 ecr 0,nop,wscale 7], length 0
11:24:58.932647 IP 10.175.110.58.44218 > kerberos3.Stanford.EDU.0: Flags [S], seq 4152662857, win 14600, options [mss 1460,sackOK,TS val 276763107 ecr 0,nop,wscale 7], length 0
11:24:58.932721 IP 10.175.110.58.50437 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:58.960427 IP 10.175.110.58.44878 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:58.960465 IP 10.175.110.58.41172 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:58.960604 IP 10.175.110.58.44220 > kerberos3.Stanford.EDU.0: Flags [S], seq 2936883038, win 14600, options [mss 1460,sackOK,TS val 276763114 ecr 0,nop,wscale 7], length 0
11:24:58.960625 IP 10.175.110.58.44219 > kerberos3.Stanford.EDU.0: Flags [S], seq 2599462581, win 14600, options [mss 1460,sackOK,TS val 276763114 ecr 0,nop,wscale 7], length 0
11:24:59.208670 IP 10.175.110.58.44221 > kerberos3.Stanford.EDU.0: Flags [S], seq 2046802481, win 14600, options [mss 1460,sackOK,TS val 276763176 ecr 0,nop,wscale 7], length 0
11:24:59.208752 IP 10.175.110.58.44688 > kerberos3.Stanford.EDU.0: UDP, length 179
11:24:59.845803 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [P.], seq 1:73, ack 1, win 905, options [nop,nop,TS val 41161251 ecr 276762015], length 72
11:24:59.845933 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [.], ack 73, win 115, options [nop,nop,TS val 276763335 ecr 41161251], length 0
11:24:59.846026 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [P.], seq 1:75, ack 73, win 115, options [nop,nop,TS val 276763335 ecr 41161251], length 74
11:24:59.889845 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1731:1757, ack 12205, win 646, options [nop,nop,TS val 262819263 ecr 3049822554], length 26
11:24:59.889923 IP 10.175.110.58.59409 > xmpp-shv-05-prn2.facebook.com.xmpp-client: Flags [P.], seq 676:825, ack 411, win 331, options [nop,nop,TS val 262819263 ecr 3197260448], length 149
11:24:59.945464 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.60289: Flags [.], ack 1757, win 661, options [nop,nop,TS val 3049827636 ecr 262819263], length 0
11:24:59.995505 IP 213.199.179.153.40021 > 10.175.110.58.59614: Flags [.], ack 3603220613, win 1024, length 0
11:24:59.995602 IP 10.175.110.58.59614 > 213.199.179.153.40021: Flags [R], seq 3603220613, win 0, length 0
11:24:59.995801 IP 10.175.110.58.40647 > ns8.sci.fi.domain: 4364+ PTR? 153.179.199.213.in-addr.arpa. (46)
11:25:00.005391 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [.], ack 75, win 905, options [nop,nop,TS val 41161291 ecr 276763335], length 0
11:25:00.025704 IP ns8.sci.fi.domain > 10.175.110.58.40647: 4364 NXDomain 0/1/0 (114)
11:25:00.025809 IP 213.199.179.153.40021 > 10.175.110.58.59614: Flags [R], seq 864503098, win 0, length 0
11:25:00.035440 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [P.], seq 73:102, ack 75, win 905, options [nop,nop,TS val 41161297 ecr 276763335], length 29
11:25:00.035545 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [P.], seq 75:88, ack 102, win 115, options [nop,nop,TS val 276763382 ecr 41161297], length 13
11:25:00.105455 IP xmpp-shv-05-prn2.facebook.com.xmpp-client > 10.175.110.58.59409: Flags [.], ack 825, win 120, options [nop,nop,TS val 3197289848 ecr 262819263], length 0
11:25:00.195497 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [P.], seq 102:117, ack 88, win 905, options [nop,nop,TS val 41161338 ecr 276763382], length 15
11:25:00.195655 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [P.], seq 88:97, ack 117, win 115, options [nop,nop,TS val 276763422 ecr 41161338], length 9
11:25:00.355767 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [P.], seq 117:159, ack 97, win 905, options [nop,nop,TS val 41161378 ecr 276763422], length 42
11:25:00.356507 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [P.], seq 97:221, ack 159, win 115, options [nop,nop,TS val 276763462 ecr 41161378], length 124
11:25:00.527832 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [.], seq 159:1547, ack 221, win 905, options [nop,nop,TS val 41161418 ecr 276763462], length 1388
11:25:00.537752 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [.], seq 1547:2935, ack 221, win 905, options [nop,nop,TS val 41161418 ecr 276763462], length 1388
11:25:00.537807 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [.], ack 2935, win 160, options [nop,nop,TS val 276763508 ecr 41161418], length 0
11:25:00.547805 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [P.], seq 2935:3803, ack 221, win 905, options [nop,nop,TS val 41161418 ecr 276763462], length 868
11:25:00.559259 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [P.], seq 221:488, ack 3803, win 181, options [nop,nop,TS val 276763513 ecr 41161418], length 267
11:25:00.765496 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [.], ack 488, win 972, options [nop,nop,TS val 41161480 ecr 276763513], length 0
11:25:00.765617 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [P.], seq 488:595, ack 3803, win 181, options [nop,nop,TS val 276763565 ecr 41161480], length 107
11:25:00.925515 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [.], ack 595, win 972, options [nop,nop,TS val 41161521 ecr 276763565], length 0
11:25:01.085423 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [P.], seq 3803:3862, ack 595, win 972, options [nop,nop,TS val 41161557 ecr 276763565], length 59
11:25:01.086160 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [P.], seq 595:664, ack 3862, win 181, options [nop,nop,TS val 276763645 ecr 41161557], length 69
11:25:01.245828 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [.], ack 664, win 972, options [nop,nop,TS val 41161601 ecr 276763645], length 0
11:25:01.245925 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [P.], seq 3862:4000, ack 664, win 972, options [nop,nop,TS val 41161601 ecr 276763645], length 138
11:25:01.246319 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [P.], seq 664:765, ack 4000, win 203, options [nop,nop,TS val 276763685 ecr 41161601], length 101
11:25:01.405755 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [P.], seq 4000:4106, ack 765, win 972, options [nop,nop,TS val 41161641 ecr 276763685], length 106
11:25:01.406212 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [P.], seq 765:1010, ack 4106, win 203, options [nop,nop,TS val 276763725 ecr 41161641], length 245
11:25:01.544598 IP 10.175.110.58.44207 > kerberos3.Stanford.EDU.0: Flags [S], seq 1242698822, win 14600, options [mss 1460,sackOK,TS val 276763760 ecr 0,nop,wscale 7], length 0
11:25:01.544656 IP 10.175.110.58.44206 > kerberos3.Stanford.EDU.0: Flags [S], seq 2813275649, win 14600, options [mss 1460,sackOK,TS val 276763760 ecr 0,nop,wscale 7], length 0
11:25:01.592648 IP 10.175.110.58.44208 > kerberos3.Stanford.EDU.0: Flags [S], seq 2532205229, win 14600, options [mss 1460,sackOK,TS val 276763772 ecr 0,nop,wscale 7], length 0
11:25:01.592695 IP 10.175.110.58.44211 > kerberos3.Stanford.EDU.0: Flags [S], seq 67703071, win 14600, options [mss 1460,sackOK,TS val 276763772 ecr 0,nop,wscale 7], length 0
11:25:01.592739 IP 10.175.110.58.44210 > kerberos3.Stanford.EDU.0: Flags [S], seq 1699260042, win 14600, options [mss 1460,sackOK,TS val 276763772 ecr 0,nop,wscale 7], length 0
11:25:01.592769 IP 10.175.110.58.44213 > kerberos3.Stanford.EDU.0: Flags [S], seq 1894033556, win 14600, options [mss 1460,sackOK,TS val 276763772 ecr 0,nop,wscale 7], length 0
11:25:01.592781 IP 10.175.110.58.44209 > kerberos3.Stanford.EDU.0: Flags [S], seq 1427084257, win 14600, options [mss 1460,sackOK,TS val 276763772 ecr 0,nop,wscale 7], length 0
11:25:01.592797 IP 10.175.110.58.44212 > kerberos3.Stanford.EDU.0: Flags [S], seq 1597501871, win 14600, options [mss 1460,sackOK,TS val 276763772 ecr 0,nop,wscale 7], length 0
11:25:01.605491 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [.], ack 1010, win 1039, options [nop,nop,TS val 41161691 ecr 276763725], length 0
11:25:02.037664 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [P.], seq 4106:4244, ack 1010, win 1039, options [nop,nop,TS val 41161797 ecr 276763725], length 138
11:25:02.038106 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [P.], seq 1010:1111, ack 4244, win 225, options [nop,nop,TS val 276763883 ecr 41161797], length 101
11:25:02.195497 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [.], ack 1111, win 1039, options [nop,nop,TS val 41161839 ecr 276763883], length 0
11:25:02.536651 IP 10.175.110.58.42059 > kerberos3.Stanford.EDU.0: UDP, length 179
11:25:02.537551 IP 10.175.110.58.47561 > kerberos3.Stanford.EDU.0: UDP, length 179
11:25:02.584617 IP 10.175.110.58.56940 > kerberos3.Stanford.EDU.0: UDP, length 179
11:25:02.584666 IP 10.175.110.58.57530 > kerberos3.Stanford.EDU.0: UDP, length 179
11:25:02.584711 IP 10.175.110.58.45660 > kerberos3.Stanford.EDU.0: UDP, length 179
11:25:02.584728 IP 10.175.110.58.32831 > kerberos3.Stanford.EDU.0: UDP, length 179
11:25:02.584743 IP 10.175.110.58.60902 > kerberos3.Stanford.EDU.0: UDP, length 179
11:25:02.588740 IP 10.175.110.58.44393 > kerberos3.Stanford.EDU.0: UDP, length 179
11:25:02.872633 IP 10.175.110.58.44214 > kerberos3.Stanford.EDU.0: Flags [S], seq 3821355476, win 14600, options [mss 1460,sackOK,TS val 276764092 ecr 0,nop,wscale 7], length 0
11:25:02.904642 IP 10.175.110.58.44216 > kerberos3.Stanford.EDU.0: Flags [S], seq 3323242045, win 14600, options [mss 1460,sackOK,TS val 276764100 ecr 0,nop,wscale 7], length 0
11:25:02.904675 IP 10.175.110.58.44215 > kerberos3.Stanford.EDU.0: Flags [S], seq 2311644666, win 14600, options [mss 1460,sackOK,TS val 276764100 ecr 0,nop,wscale 7], length 0
11:25:02.936648 IP 10.175.110.58.44217 > kerberos3.Stanford.EDU.0: Flags [S], seq 605510631, win 14600, options [mss 1460,sackOK,TS val 276764108 ecr 0,nop,wscale 7], length 0
11:25:02.936685 IP 10.175.110.58.44218 > kerberos3.Stanford.EDU.0: Flags [S], seq 4152662857, win 14600, options [mss 1460,sackOK,TS val 276764108 ecr 0,nop,wscale 7], length 0
11:25:02.968650 IP 10.175.110.58.44220 > kerberos3.Stanford.EDU.0: Flags [S], seq 2936883038, win 14600, options [mss 1460,sackOK,TS val 276764116 ecr 0,nop,wscale 7], length 0
11:25:02.968685 IP 10.175.110.58.44219 > kerberos3.Stanford.EDU.0: Flags [S], seq 2599462581, win 14600, options [mss 1460,sackOK,TS val 276764116 ecr 0,nop,wscale 7], length 0
11:25:03.216648 IP 10.175.110.58.44221 > kerberos3.Stanford.EDU.0: Flags [S], seq 2046802481, win 14600, options [mss 1460,sackOK,TS val 276764178 ecr 0,nop,wscale 7], length 0
11:25:03.745543 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [P.], seq 4244:4350, ack 1111, win 1039, options [nop,nop,TS val 41162224 ecr 276763883], length 106
11:25:03.778027 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [.], seq 4350:5738, ack 1111, win 1039, options [nop,nop,TS val 41162231 ecr 276763883], length 1388
11:25:03.778147 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [.], ack 5738, win 247, options [nop,nop,TS val 276764318 ecr 41162224], length 0
11:25:03.874099 IP 10.175.110.58.48838 > kerberos3.Stanford.EDU.0: UDP, length 179
11:25:03.905526 IP 10.175.110.58.49176 > kerberos3.Stanford.EDU.0: UDP, length 179
11:25:03.905835 IP 10.175.110.58.35100 > kerberos3.Stanford.EDU.0: UDP, length 179
11:25:03.937238 IP 10.175.110.58.40420 > kerberos3.Stanford.EDU.0: UDP, length 179
11:25:03.937914 IP 10.175.110.58.50437 > kerberos3.Stanford.EDU.0: UDP, length 179
11:25:03.955478 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [P.], seq 5738:5748, ack 1111, win 1039, options [nop,nop,TS val 41162277 ecr 276764318], length 10
11:25:03.956105 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [P.], seq 1111:1292, ack 5748, win 247, options [nop,nop,TS val 276764362 ecr 41162277], length 181
11:25:03.964694 IP 10.175.110.58.41172 > kerberos3.Stanford.EDU.0: UDP, length 179
11:25:03.965669 IP 10.175.110.58.44878 > kerberos3.Stanford.EDU.0: UDP, length 179
11:25:04.135469 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [.], ack 1292, win 1106, options [nop,nop,TS val 41162324 ecr 276764362], length 0
11:25:04.135615 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [P.], seq 1292:1441, ack 5748, win 247, options [nop,nop,TS val 276764407 ecr 41162324], length 149
11:25:04.145436 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [P.], seq 5748:5854, ack 1292, win 1106, options [nop,nop,TS val 41162324 ecr 276764362], length 106
11:25:04.196648 IP 10.175.110.58.54187 > uschi03.sixxs.net.3874: Flags [.], ack 5854, win 247, options [nop,nop,TS val 276764423 ecr 41162324], length 0
11:25:04.212701 IP 10.175.110.58.44688 > kerberos3.Stanford.EDU.0: UDP, length 179
11:25:04.335448 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [.], ack 1441, win 1173, options [nop,nop,TS val 41162373 ecr 276764407], length 0
11:25:04.365714 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [F.], seq 5854, ack 1441, win 1173, options [nop,nop,TS val 41162379 ecr 276764423], length 0
11:25:04.365791 IP uschi03.sixxs.net.3874 > 10.175.110.58.54187: Flags [R.], seq 5855, ack 1441, win 1173, options [nop,nop,TS val 41162379 ecr 276764423], length 0
11:25:04.396337 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 44
11:25:04.396673 IP 10.175.110.58.35306 > ns8.sci.fi.domain: 15006+ PTR? 38.96.78.62.in-addr.arpa. (42)
11:25:04.396711 IP 10.175.110.58.35991 > ns8.sci.fi.domain: 10309+ AAAA? daisy.ubuntu.com. (34)
11:25:04.396964 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 44
11:25:04.397007 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 44
11:25:04.397118 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 120
11:25:04.425770 IP ns8.sci.fi.domain > 10.175.110.58.35991: 10309 0/1/0 (95)
11:25:04.425978 IP 10.175.110.58.60933 > ns8.sci.fi.domain: 41712+ AAAA? daisy.ubuntu.com. (34)
11:25:04.455729 IP ns8.sci.fi.domain > 10.175.110.58.60933: 41712 0/1/0 (95)
11:25:04.455908 IP 10.175.110.58.44877 > ns8.sci.fi.domain: 63388+ A? daisy.ubuntu.com. (34)
11:25:04.465737 IP ns8.sci.fi.domain > 10.175.110.58.35306: 15006 1/0/0 PTR fihel01.sixxs.net. (73)
11:25:04.485446 IP ns8.sci.fi.domain > 10.175.110.58.44877: 63388 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:25:05.399158 IP 10.175.110.58.42544 > ns8.sci.fi.domain: 42134+ AAAA? daisy.ubuntu.com. (34)
11:25:05.465785 IP ns8.sci.fi.domain > 10.175.110.58.42544: 42134 0/1/0 (95)
11:25:05.466011 IP 10.175.110.58.32874 > ns8.sci.fi.domain: 40618+ AAAA? daisy.ubuntu.com. (34)
11:25:05.515696 IP ns8.sci.fi.domain > 10.175.110.58.32874: 40618 0/1/0 (95)
11:25:05.515924 IP 10.175.110.58.37252 > ns8.sci.fi.domain: 34902+ A? daisy.ubuntu.com. (34)
11:25:05.565741 IP ns8.sci.fi.domain > 10.175.110.58.37252: 34902 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:25:05.724821 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 120
11:25:06.697861 IP 10.175.110.58.49020 > ns8.sci.fi.domain: 41906+ [1au] A? playmemories-api-1260927008.us-west-1.elb.amazonaws.com. (84)
11:25:06.915714 IP ns8.sci.fi.domain > 10.175.110.58.49020: 41906 2/0/0 A 54.219.157.63, A 54.215.132.116 (105)
11:25:07.113513 IP 10.175.110.58.37612 > ec2-54-219-157-63.us-west-1.compute.amazonaws.com.http: Flags [S], seq 3153026122, win 14600, options [mss 1460,sackOK,TS val 7456304 ecr 0,nop,wscale 6], length 0
11:25:07.113831 IP 10.175.110.58.37408 > ns8.sci.fi.domain: 38982+ PTR? 63.157.219.54.in-addr.arpa. (44)
11:25:07.145742 IP ns8.sci.fi.domain > 10.175.110.58.37408: 38982 1/0/0 PTR ec2-54-219-157-63.us-west-1.compute.amazonaws.com. (107)
11:25:07.325432 IP ec2-54-219-157-63.us-west-1.compute.amazonaws.com.http > 10.175.110.58.37612: Flags [S.], seq 2760831677, ack 3153026123, win 14480, options [mss 1400,sackOK,TS val 173794831 ecr 7456304,nop,wscale 8], length 0
11:25:07.511036 IP 10.175.110.58.37612 > ec2-54-219-157-63.us-west-1.compute.amazonaws.com.http: Flags [.], ack 1, win 229, options [nop,nop,TS val 7456344 ecr 173794831], length 0
11:25:07.516986 IP 10.175.110.58.37612 > ec2-54-219-157-63.us-west-1.compute.amazonaws.com.http: Flags [P.], seq 1:179, ack 1, win 229, options [nop,nop,TS val 7456345 ecr 173794831], length 178
11:25:07.725680 IP ec2-54-219-157-63.us-west-1.compute.amazonaws.com.http > 10.175.110.58.37612: Flags [.], ack 179, win 61, options [nop,nop,TS val 173794932 ecr 7456345], length 0
11:25:07.747749 IP ec2-54-219-157-63.us-west-1.compute.amazonaws.com.http > 10.175.110.58.37612: Flags [.], seq 1:1389, ack 179, win 61, options [nop,nop,TS val 173794933 ecr 7456345], length 1388
11:25:07.747751 IP ec2-54-219-157-63.us-west-1.compute.amazonaws.com.http > 10.175.110.58.37612: Flags [P.], seq 1389:1523, ack 179, win 61, options [nop,nop,TS val 173794933 ecr 7456345], length 134
11:25:07.755417 IP ec2-54-219-157-63.us-west-1.compute.amazonaws.com.http > 10.175.110.58.37612: Flags [F.], seq 1523, ack 179, win 61, options [nop,nop,TS val 173794933 ecr 7456345], length 0
11:25:07.926147 IP 10.175.110.58.37612 > ec2-54-219-157-63.us-west-1.compute.amazonaws.com.http: Flags [.], ack 1389, win 272, options [nop,nop,TS val 7456386 ecr 173794933], length 0
11:25:07.926490 IP 10.175.110.58.37612 > ec2-54-219-157-63.us-west-1.compute.amazonaws.com.http: Flags [.], ack 1523, win 315, options [nop,nop,TS val 7456386 ecr 173794933], length 0
11:25:07.962106 IP 10.175.110.58.37612 > ec2-54-219-157-63.us-west-1.compute.amazonaws.com.http: Flags [.], ack 1524, win 315, options [nop,nop,TS val 7456390 ecr 173794933], length 0
11:25:09.560697 IP 10.175.110.58.44207 > kerberos3.Stanford.EDU.0: Flags [S], seq 1242698822, win 14600, options [mss 1460,sackOK,TS val 276765764 ecr 0,nop,wscale 7], length 0
11:25:09.560750 IP 10.175.110.58.44206 > kerberos3.Stanford.EDU.0: Flags [S], seq 2813275649, win 14600, options [mss 1460,sackOK,TS val 276765764 ecr 0,nop,wscale 7], length 0
11:25:09.608641 IP 10.175.110.58.44211 > kerberos3.Stanford.EDU.0: Flags [S], seq 67703071, win 14600, options [mss 1460,sackOK,TS val 276765776 ecr 0,nop,wscale 7], length 0
11:25:09.608677 IP 10.175.110.58.44208 > kerberos3.Stanford.EDU.0: Flags [S], seq 2532205229, win 14600, options [mss 1460,sackOK,TS val 276765776 ecr 0,nop,wscale 7], length 0
11:25:09.608774 IP 10.175.110.58.44209 > kerberos3.Stanford.EDU.0: Flags [S], seq 1427084257, win 14600, options [mss 1460,sackOK,TS val 276765776 ecr 0,nop,wscale 7], length 0
11:25:09.608963 IP 10.175.110.58.44212 > kerberos3.Stanford.EDU.0: Flags [S], seq 1597501871, win 14600, options [mss 1460,sackOK,TS val 276765776 ecr 0,nop,wscale 7], length 0
11:25:09.612611 IP 10.175.110.58.44210 > kerberos3.Stanford.EDU.0: Flags [S], seq 1699260042, win 14600, options [mss 1460,sackOK,TS val 276765777 ecr 0,nop,wscale 7], length 0
11:25:09.612663 IP 10.175.110.58.44213 > kerberos3.Stanford.EDU.0: Flags [S], seq 1894033556, win 14600, options [mss 1460,sackOK,TS val 276765777 ecr 0,nop,wscale 7], length 0
11:25:10.888680 IP 10.175.110.58.44214 > kerberos3.Stanford.EDU.0: Flags [S], seq 3821355476, win 14600, options [mss 1460,sackOK,TS val 276766096 ecr 0,nop,wscale 7], length 0
11:25:10.920669 IP 10.175.110.58.44216 > kerberos3.Stanford.EDU.0: Flags [S], seq 3323242045, win 14600, options [mss 1460,sackOK,TS val 276766104 ecr 0,nop,wscale 7], length 0
11:25:10.920708 IP 10.175.110.58.44215 > kerberos3.Stanford.EDU.0: Flags [S], seq 2311644666, win 14600, options [mss 1460,sackOK,TS val 276766104 ecr 0,nop,wscale 7], length 0
11:25:10.952671 IP 10.175.110.58.44217 > kerberos3.Stanford.EDU.0: Flags [S], seq 605510631, win 14600, options [mss 1460,sackOK,TS val 276766112 ecr 0,nop,wscale 7], length 0
11:25:10.952711 IP 10.175.110.58.44218 > kerberos3.Stanford.EDU.0: Flags [S], seq 4152662857, win 14600, options [mss 1460,sackOK,TS val 276766112 ecr 0,nop,wscale 7], length 0
11:25:10.984669 IP 10.175.110.58.44219 > kerberos3.Stanford.EDU.0: Flags [S], seq 2599462581, win 14600, options [mss 1460,sackOK,TS val 276766120 ecr 0,nop,wscale 7], length 0
11:25:10.984702 IP 10.175.110.58.44220 > kerberos3.Stanford.EDU.0: Flags [S], seq 2936883038, win 14600, options [mss 1460,sackOK,TS val 276766120 ecr 0,nop,wscale 7], length 0
11:25:11.240676 IP 10.175.110.58.44221 > kerberos3.Stanford.EDU.0: Flags [S], seq 2046802481, win 14600, options [mss 1460,sackOK,TS val 276766184 ecr 0,nop,wscale 7], length 0
11:25:13.933170 IP 10.175.110.58.52721 > ns8.sci.fi.domain: 16566+ AAAA? ipv6.google.com. (33)
11:25:13.995667 IP ns8.sci.fi.domain > 10.175.110.58.52721: 16566 2/0/0 CNAME ipv6.l.google.com., AAAA 2a00:1450:400f:800::1013 (82)
11:25:13.996192 IP 10.175.110.58.55977 > ns8.sci.fi.domain: 47174+ PTR? 3.1.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.0.f.0.0.4.0.5.4.1.0.0.a.2.ip6.arpa. (90)
11:25:13.996699 IP 10.175.110.58.53731 > ns8.sci.fi.domain: 61514+ AAAA? daisy.ubuntu.com. (34)
11:25:14.055584 IP ns8.sci.fi.domain > 10.175.110.58.53731: 61514 0/1/0 (95)
11:25:14.055757 IP 10.175.110.58.45853 > ns8.sci.fi.domain: 28229+ AAAA? daisy.ubuntu.com. (34)
11:25:14.085519 IP ns8.sci.fi.domain > 10.175.110.58.55977: 47174 1/0/0 PTR arn06s01-in-x13.1e100.net. (129)
11:25:14.086154 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 148
11:25:14.087041 IP 10.175.110.58.60507 > ns8.sci.fi.domain: 49538+ PTR? 3.1.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.0.f.0.0.4.0.5.4.1.0.0.a.2.ip6.arpa. (90)
11:25:14.107525 IP ns8.sci.fi.domain > 10.175.110.58.45853: 28229 0/1/0 (95)
11:25:14.107702 IP 10.175.110.58.42817 > ns8.sci.fi.domain: 60625+ A? daisy.ubuntu.com. (34)
11:25:14.155683 IP ns8.sci.fi.domain > 10.175.110.58.42817: 60625 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:25:14.155771 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 148
11:25:14.156003 IP 10.175.110.58.37376 > ns8.sci.fi.domain: 44916+ PTR? 3.1.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.0.f.0.0.4.0.5.4.1.0.0.a.2.ip6.arpa. (90)
11:25:14.175313 IP ns8.sci.fi.domain > 10.175.110.58.60507: 49538 1/0/0 PTR arn06s01-in-x13.1e100.net. (129)
11:25:14.175673 IP 10.175.110.58.47703 > ns8.sci.fi.domain: 7045+ PTR? 2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.3.6.3.0.0.0.1.0.8.b.4.1.1.0.0.2.ip6.arpa. (90)
11:25:14.187305 IP ns8.sci.fi.domain > 10.175.110.58.37376: 44916 1/0/0 PTR arn06s01-in-x13.1e100.net. (129)
11:25:14.895376 IP ns8.sci.fi.domain > 10.175.110.58.47703: 7045 1/0/0 PTR cl-868.hel-01.fi.sixxs.net. (130)
11:25:14.999779 IP 10.175.110.58.54715 > ns8.sci.fi.domain: 17388+ AAAA? daisy.ubuntu.com. (34)
11:25:15.025603 IP ns8.sci.fi.domain > 10.175.110.58.54715: 17388 0/1/0 (95)
11:25:15.025807 IP 10.175.110.58.35843 > ns8.sci.fi.domain: 48303+ AAAA? daisy.ubuntu.com. (34)
11:25:15.055563 IP ns8.sci.fi.domain > 10.175.110.58.35843: 48303 0/1/0 (95)
11:25:15.055778 IP 10.175.110.58.50015 > ns8.sci.fi.domain: 17000+ A? daisy.ubuntu.com. (34)
11:25:15.085251 IP ns8.sci.fi.domain > 10.175.110.58.50015: 17000 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:25:15.087703 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 148
11:25:15.125498 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 148
11:25:15.125899 IP 10.175.110.58.45101 > ns8.sci.fi.domain: 10117+ PTR? 3.1.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.0.f.0.0.4.0.5.4.1.0.0.a.2.ip6.arpa. (90)
11:25:15.155241 IP ns8.sci.fi.domain > 10.175.110.58.45101: 10117 1/0/0 PTR arn06s01-in-x13.1e100.net. (129)
11:25:15.835603 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.42678: Flags [P.], seq 4121864872:4121865021, ack 2810637924, win 47, options [nop,nop,TS val 376027621 ecr 7443969], length 149
11:25:16.088850 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 148
11:25:16.135330 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 148
11:25:16.135744 IP 10.175.110.58.45356 > ns8.sci.fi.domain: 3010+ PTR? 3.1.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.0.f.0.0.4.0.5.4.1.0.0.a.2.ip6.arpa. (90)
11:25:16.225568 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.42678: Flags [P.], seq 0:149, ack 1, win 47, options [nop,nop,TS val 376028007 ecr 7443969], length 149
11:25:16.245318 IP ns8.sci.fi.domain > 10.175.110.58.45356: 3010 1/0/0 PTR arn06s01-in-x13.1e100.net. (129)
11:25:16.995578 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.42678: Flags [P.], seq 0:149, ack 1, win 47, options [nop,nop,TS val 376028780 ecr 7443969], length 149
11:25:17.090048 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 148
11:25:17.135245 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 148
11:25:17.135637 IP 10.175.110.58.53366 > ns8.sci.fi.domain: 17177+ PTR? 3.1.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.0.f.0.0.4.0.5.4.1.0.0.a.2.ip6.arpa. (90)
11:25:17.165540 IP ns8.sci.fi.domain > 10.175.110.58.53366: 17177 1/0/0 PTR arn06s01-in-x13.1e100.net. (129)
11:25:18.091933 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 148
11:25:18.135484 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 148
11:25:18.135853 IP 10.175.110.58.39495 > ns8.sci.fi.domain: 41981+ PTR? 3.1.0.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.0.f.0.0.4.0.5.4.1.0.0.a.2.ip6.arpa. (90)
11:25:18.165515 IP ns8.sci.fi.domain > 10.175.110.58.39495: 41981 1/0/0 PTR arn06s01-in-x13.1e100.net. (129)
11:25:18.535565 IP xmpp-shv-04-frc3.facebook.com.xmpp-client > 10.175.110.58.42678: Flags [P.], seq 0:149, ack 1, win 47, options [nop,nop,TS val 376030324 ecr 7443969], length 149
11:25:18.725126 IP 10.175.110.58.35206 > ns8.sci.fi.domain: 46727+ AAAA? daisy.ubuntu.com. (34)
11:25:18.734128 IP 10.175.110.58.42678 > xmpp-shv-04-frc3.facebook.com.xmpp-client: Flags [R], seq 2810637924, win 0, length 0
11:25:18.755612 IP ns8.sci.fi.domain > 10.175.110.58.35206: 46727 0/1/0 (95)
11:25:18.755827 IP 10.175.110.58.40185 > ns8.sci.fi.domain: 51160+ AAAA? daisy.ubuntu.com. (34)
11:25:18.785516 IP ns8.sci.fi.domain > 10.175.110.58.40185: 51160 0/1/0 (95)
11:25:18.785719 IP 10.175.110.58.47237 > ns8.sci.fi.domain: 50052+ A? daisy.ubuntu.com. (34)
11:25:18.815226 IP ns8.sci.fi.domain > 10.175.110.58.47237: 50052 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:25:19.698615 IP 10.175.110.58.40341 > cs116p2.us1.msg.gq1.yahoo.com.mmcc: Flags [P.], seq 92:138, ack 1, win 140, options [nop,nop,TS val 262824215 ecr 1458700045], length 46
11:25:19.819017 IP 10.175.110.58.40371 > ns8.sci.fi.domain: 39352+ AAAA? daisy.ubuntu.com. (34)
11:25:19.845588 IP ns8.sci.fi.domain > 10.175.110.58.40371: 39352 0/1/0 (95)
11:25:19.845792 IP 10.175.110.58.60751 > ns8.sci.fi.domain: 12441+ AAAA? daisy.ubuntu.com. (34)
11:25:19.875540 IP ns8.sci.fi.domain > 10.175.110.58.60751: 12441 0/1/0 (95)
11:25:19.875747 IP 10.175.110.58.44247 > ns8.sci.fi.domain: 47268+ A? daisy.ubuntu.com. (34)
11:25:19.905258 IP ns8.sci.fi.domain > 10.175.110.58.44247: 47268 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:25:20.015235 IP cs116p2.us1.msg.gq1.yahoo.com.mmcc > 10.175.110.58.40341: Flags [.], ack 138, win 2082, options [nop,nop,TS val 1458761010 ecr 262824215], length 0
11:25:20.521835 IP 10.175.110.58.40000 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 130:156, ack 1753, win 331, options [nop,nop,TS val 109125888 ecr 250068919], length 26
11:25:20.521906 IP 10.175.110.58.34161 > xmpp-shv-01-frc3.facebook.com.xmpp-client: Flags [P.], seq 697:894, ack 901, win 331, options [nop,nop,TS val 109125888 ecr 2935961553], length 197
11:25:20.585225 IP fa-in-f125.1e100.net.xmpp-client > 10.175.110.58.40000: Flags [.], ack 156, win 670, options [nop,nop,TS val 250094746 ecr 109125888], length 0
11:25:20.685261 IP xmpp-shv-01-frc3.facebook.com.xmpp-client > 10.175.110.58.34161: Flags [.], ack 894, win 120, options [nop,nop,TS val 2935990903 ecr 109125888], length 0
11:25:23.369350 IP 10.175.110.58.45253 > ns8.sci.fi.domain: 32018+ AAAA? daisy.ubuntu.com. (34)
11:25:23.395622 IP ns8.sci.fi.domain > 10.175.110.58.45253: 32018 0/1/0 (95)
11:25:23.395821 IP 10.175.110.58.36843 > ns8.sci.fi.domain: 64171+ AAAA? daisy.ubuntu.com. (34)
11:25:23.425226 IP ns8.sci.fi.domain > 10.175.110.58.36843: 64171 0/1/0 (95)
11:25:23.425420 IP 10.175.110.58.49205 > ns8.sci.fi.domain: 31540+ A? daisy.ubuntu.com. (34)
11:25:23.455219 IP ns8.sci.fi.domain > 10.175.110.58.49205: 31540 2/0/0 A 91.189.95.54, A 91.189.95.55 (66)
11:25:24.372737 IP 10.175.110.58.48508 > ns8.sci.fi.domain: 15465+ AAAA? daisy.ubuntu.com. (34)
11:25:24.405488 IP ns8.sci.fi.domain > 10.175.110.58.48508: 15465 0/1/0 (95)
11:25:24.405706 IP 10.175.110.58.36817 > ns8.sci.fi.domain: 64039+ AAAA? daisy.ubuntu.com. (34)
11:25:24.435471 IP ns8.sci.fi.domain > 10.175.110.58.36817: 64039 0/1/0 (95)
11:25:24.435674 IP 10.175.110.58.46437 > ns8.sci.fi.domain: 58845+ A? daisy.ubuntu.com. (34)
11:25:24.465153 IP ns8.sci.fi.domain > 10.175.110.58.46437: 58845 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:25:27.775805 IP 10.175.110.58.4121 > ns8.sci.fi.domain: 28987+ [1au] AAAA? daisy.ubuntu.com. (45)
11:25:27.835495 IP ns8.sci.fi.domain > 10.175.110.58.4121: 28987 0/1/0 (95)
11:25:29.266027 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 124
11:25:29.266147 IP 10.175.110.58.58925 > ns8.sci.fi.domain: 35577+ PTR? 8.1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.c.8.0.6.3.1.c.7.6.0.1.0.0.2.ip6.arpa. (90)
11:25:29.266464 IP 10.175.110.58.36733 > ns8.sci.fi.domain: 49279+ AAAA? daisy.ubuntu.com. (34)
11:25:29.375153 IP ns8.sci.fi.domain > 10.175.110.58.36733: 49279 0/1/0 (95)
11:25:29.375352 IP 10.175.110.58.42073 > ns8.sci.fi.domain: 40345+ AAAA? daisy.ubuntu.com. (34)
11:25:29.405416 IP ns8.sci.fi.domain > 10.175.110.58.58925: 35577 1/0/0 PTR obake.canonical.com. (123)
11:25:29.435458 IP ns8.sci.fi.domain > 10.175.110.58.42073: 40345 0/1/0 (95)
11:25:29.435669 IP 10.175.110.58.41803 > ns8.sci.fi.domain: 34446+ A? daisy.ubuntu.com. (34)
11:25:29.445118 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 124
11:25:29.445421 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:29.445578 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 347
11:25:29.446384 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 124
11:25:29.446589 IP 10.175.110.58.52730 > ns8.sci.fi.domain: 10431+ PTR? 3.2.0.0.0.0.0.0.0.0.0.0.0.0.0.0.1.0.c.8.0.6.3.1.c.7.6.0.1.0.0.2.ip6.arpa. (90)
11:25:29.465123 IP ns8.sci.fi.domain > 10.175.110.58.41803: 34446 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:25:29.466110 IP 10.175.110.58.38632 > ns8.sci.fi.domain: 49541+ AAAA? daisy.ubuntu.com. (34)
11:25:29.495443 IP ns8.sci.fi.domain > 10.175.110.58.52730: 10431 1/0/0 PTR danava.canonical.com. (124)
11:25:29.495518 IP ns8.sci.fi.domain > 10.175.110.58.38632: 49541 0/1/0 (95)
11:25:29.495695 IP 10.175.110.58.52480 > ns8.sci.fi.domain: 15558+ AAAA? daisy.ubuntu.com. (34)
11:25:29.525425 IP ns8.sci.fi.domain > 10.175.110.58.52480: 15558 0/1/0 (95)
11:25:29.525617 IP 10.175.110.58.38678 > ns8.sci.fi.domain: 59104+ A? daisy.ubuntu.com. (34)
11:25:29.555127 IP ns8.sci.fi.domain > 10.175.110.58.38678: 59104 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:25:29.617372 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 116
11:25:29.617487 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 704
11:25:29.617710 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:29.625057 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 124
11:25:29.625383 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:29.625465 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 341
11:25:29.625598 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 124
11:25:29.625742 IP 10.175.110.58.45884 > ns8.sci.fi.domain: 48155+ PTR? 5.0.0.0.0.2.0.0.0.0.0.0.0.0.0.0.9.0.0.0.0.1.0.0.8.0.7.0.1.0.0.2.ip6.arpa. (90)
11:25:29.626187 IP 10.175.110.58.54627 > ns8.sci.fi.domain: 53472+ AAAA? daisy.ubuntu.com. (34)
11:25:29.665384 IP ns8.sci.fi.domain > 10.175.110.58.54627: 53472 0/1/0 (95)
11:25:29.665464 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 128
11:25:29.665573 IP 10.175.110.58.54498 > ns8.sci.fi.domain: 63351+ AAAA? daisy.ubuntu.com. (34)
11:25:29.665736 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:29.665804 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 408
11:25:29.665989 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 124
11:25:29.695146 IP ns8.sci.fi.domain > 10.175.110.58.54498: 63351 0/1/0 (95)
11:25:29.695265 IP 10.175.110.58.41860 > ns8.sci.fi.domain: 26759+ A? daisy.ubuntu.com. (34)
11:25:29.707372 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 116
11:25:29.707462 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 425
11:25:29.707557 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 128
11:25:29.707639 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:29.707702 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:29.707865 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 398
11:25:29.708328 IP 10.175.110.58.33351 > bignay.canonical.com.http: Flags [S], seq 3930185527, win 14600, options [mss 1460,sackOK,TS val 276770800 ecr 0,nop,wscale 7], length 0
11:25:29.708556 IP 10.175.110.58.48610 > ns8.sci.fi.domain: 65142+ PTR? 36.95.189.91.in-addr.arpa. (43)
11:25:29.725368 IP ns8.sci.fi.domain > 10.175.110.58.41860: 26759 2/0/0 A 91.189.95.55, A 91.189.95.54 (66)
11:25:29.745146 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 1324
11:25:29.745379 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:29.787551 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 1324
11:25:29.787781 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:29.837531 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 1324
11:25:29.837756 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:29.887613 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 1324
11:25:29.887615 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 116
11:25:29.887695 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 482
11:25:29.887826 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:29.887927 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:29.897388 IP 10.175.110.58.60289 > fa-in-f125.1e100.net.xmpp-client: Flags [P.], seq 1757:1783, ack 12205, win 646, options [nop,nop,TS val 262826765 ecr 3049827636], length 26
11:25:29.897437 IP 10.175.110.58.59409 > xmpp-shv-05-prn2.facebook.com.xmpp-client: Flags [P.], seq 825:894, ack 411, win 331, options [nop,nop,TS val 262826765 ecr 3197289848], length 69
11:25:29.897461 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 1324
11:25:29.897682 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:29.947592 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 1324
11:25:29.947594 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 116
11:25:29.947866 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:29.957422 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 698
11:25:29.957482 IP bignay.canonical.com.http > 10.175.110.58.33351: Flags [S.], seq 1905781450, ack 3930185528, win 14480, options [mss 1400,sackOK,TS val 4080266202 ecr 276770800,nop,wscale 7], length 0
11:25:29.957546 IP 10.175.110.58.33351 > bignay.canonical.com.http: Flags [.], ack 1, win 115, options [nop,nop,TS val 276770863 ecr 4080266202], length 0
11:25:29.957652 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:29.957658 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 1324
11:25:29.957681 IP 10.175.110.58.33351 > bignay.canonical.com.http: Flags [P.], seq 1:246, ack 1, win 115, options [nop,nop,TS val 276770863 ecr 4080266202], length 245
11:25:29.957951 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:29.958203 IP 10.175.110.58.59484 > mirrors.nic.funet.fi.http: Flags [P.], seq 2508582917:2508583141, ack 1598987853, win 167, options [nop,nop,TS val 276770863 ecr 700691113], length 224
11:25:29.958261 IP 10.175.110.58.59484 > mirrors.nic.funet.fi.http: Flags [F.], seq 224, ack 1, win 167, options [nop,nop,TS val 276770863 ecr 700691113], length 0
11:25:29.958975 IP 10.175.110.58.42851 > ns8.sci.fi.domain: 28610+ AAAA? daisy.ubuntu.com. (34)
11:25:29.968247 IP 10.175.110.58.59092 > ns8.sci.fi.domain: 62604+ PTR? 5.3.166.193.in-addr.arpa. (42)
11:25:29.977623 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 1324
11:25:29.977849 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:29.997546 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 1324
11:25:29.997643 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 1324
11:25:29.997799 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:29.997847 IP 10.175.110.58.53305 > fihel01.sixxs.net.5072: UDP, length 116
11:25:30.007499 IP fihel01.sixxs.net.5072 > 10.175.110.58.53305: UDP, length 1324