PDA

View Full Version : mac + joomla + firewall hosting + ip blacklistato ??

pasticca
27-07-2009, 09:32
non chiedetemi se ho bisogno di uno psichiatra o altro, vi assicuro che sono il primo ad essere incredulo di ciò che accade

ho dei siti hostati su hostingperte.it

utilizzo joomla con cms per tali siti

quando navigo sui siti hostati su tale hostingperte.it utilizzando il mio macbook, il mio indirizzo ip viene blacklistato dal firewall della hosting con la seguente motivazione: troppe connessioni inviate.

in pratica, è come si navigando sulle pagine.. facessi una sorta di strike contro i miei siti e, per sicurezza, il firewall mi blocca temporaneamente l'indirizzo ip assegnatomi in quel momento.

a quel punto sono costretto a spengere il router, attendere che alice mi assegni un altro ip pubblico e riconnettermi.

navigo per qualche minuto e zacccc.. di nuovo blacklistato.

ho fatto diverse prove... e con il mio pc windows non accade, o meglio accadeva solo quando usavo filezilla settato in un certo modo, ora ho risolto.

dopo varie ore smadonnando con il tecnico della hosting, siamo giunti alla conclusione che potrebbe esserci qualcosa che non va sul mio mac... che ne so, un qualche programmino strano che gira a mia insaputa... credo proprio sia impossibile, visto che questo macbook lo uso per lavoro e difficilmente lo espongo a rischi (apparte qualche programmino non licenziato correttamente :rolleyes: )

vi può sembrar vera sta storia?

vi linko uno dei tanti siti che mi crea il problema... magari qualcuno di voi con mac os può navigarlo per qualche minuto e vedere se riscontra il mio stesso problema? sto diventando pazzo...

www.blubar.org (http://www.blubar.org)
MacNeo
27-07-2009, 10:54
sul mio sembra in regola, e mi sono pure impegnato a fare parecchi click in successione per cercare di farlo saltare.

fai così… tanto per iniziare, usa un altro browser (se usavi safari prova firefox, se usavi firefox prova safari) così magari capiamo dove sta il problema.
pasticca
27-07-2009, 12:02
usato firefox (ultima versione)
stesso problema

sto davvero temendo di aver preso qualche strano worm.. anche se mi sembra fantascienza per l'utilizzo che ne faccio
pasticca
27-07-2009, 12:03
altro report: appena il mio ip viene blacklistato, tutti i siti ospitati sulla stessa hosting mi risultano irrangiugibili...
MacNeo
27-07-2009, 12:47
che ti blocchino su tutti i siti è comprensibile: se ritengono che il tuo IP sia l'origine di un ddos è normale che ti impediscano l'accesso a tutto.

prova a creare temporaneamente un nuovo utente (da preferenze di sistema > utenti), entra con quello e vedi se si comporta allo stesso modo.

poi puoi provare a mettere LittleSnitch, così verifichi tutte le connessioni in uscita e vedi se ti salta qualcosa all'occhio.
Chivens
27-07-2009, 13:15
non chiedetemi se ho bisogno di uno psichiatra o altro, vi assicuro che sono il primo ad essere incredulo di ciò che accade

ho dei siti hostati su hostingperte.it

utilizzo joomla con cms per tali siti

quando navigo sui siti hostati su tale hostingperte.it utilizzando il mio macbook, il mio indirizzo ip viene blacklistato dal firewall della hosting con la seguente motivazione: troppe connessioni inviate.

in pratica, è come si navigando sulle pagine.. facessi una sorta di strike contro i miei siti e, per sicurezza, il firewall mi blocca temporaneamente l'indirizzo ip assegnatomi in quel momento.

a quel punto sono costretto a spengere il router, attendere che alice mi assegni un altro ip pubblico e riconnettermi.

navigo per qualche minuto e zacccc.. di nuovo blacklistato.

ho fatto diverse prove... e con il mio pc windows non accade, o meglio accadeva solo quando usavo filezilla settato in un certo modo, ora ho risolto.

dopo varie ore smadonnando con il tecnico della hosting, siamo giunti alla conclusione che potrebbe esserci qualcosa che non va sul mio mac... che ne so, un qualche programmino strano che gira a mia insaputa... credo proprio sia impossibile, visto che questo macbook lo uso per lavoro e difficilmente lo espongo a rischi (apparte qualche programmino non licenziato correttamente :rolleyes: )

vi può sembrar vera sta storia?

vi linko uno dei tanti siti che mi crea il problema... magari qualcuno di voi con mac os può navigarlo per qualche minuto e vedere se riscontra il mio stesso problema? sto diventando pazzo...

www.blubar.org (http://www.blubar.org)probabile che installando come hai tu stesso scritto un programma non licenziato correttamente preso dalla rete ti si sia instalato assieme a quello un malware che ora effettua attacchi in uscita dal tuo computer Apple .Altro non potrebbe essere se dici che solo col computer Windows connesso al router questa cosa non accade dopo che hai pure rinnovato l'Ip sconnettendo e ricconnettendo il router di Alice prendendo nuovo indirizzo Ip di uscita su Internet ( Ip dinamico)

Fossi in te se con LittleSnitch non risolvi farei una scansione con qualche tool antimalware

un saluto
MacNeo
27-07-2009, 13:27
Le cose strane sono che:
a- non mi pare ci siano ancora malware con un comportamento simile
b- sarebbe ben strano un malware che agisce solo quando si collega ai suoi stessi siti… perché non lo dovrebbe fare anche con gli altri?

insomma, è una situazione un po' strana
Gennarino
27-07-2009, 13:39
Le cose strane sono che:
a- non mi pare ci siano ancora malware con un comportamento simile
b- sarebbe ben strano un malware che agisce solo quando si collega ai suoi stessi siti… perché non lo dovrebbe fare anche con gli altri?

insomma, è una situazione un po' strana

Concordo, se uno degli hosting e' http://www.blubar.org, dal Belgio funziona perfettamente. Ho provato anche a generare un po di richieste a raffica (guarda il log, se trovi un indirizzo "belga" sono io), senza ricevere alcun blocco da parte dell'hosting.
E' curioso che lo faccia solo con il macbook, presumo tu abbia provato con altre piattaforme e non abbia riscontrato alcun problema, sempre usando la stessa connessione e lo stesso router.
Chivens
27-07-2009, 13:43
Concordo, se uno degli hosting e' http://www.blubar.org, dal Belgio funziona perfettamente. Ho provato anche a generare un po di richieste a raffica (guarda il log, se trovi un indirizzo "belga" sono io), senza ricevere alcun blocco da parte dell'hosting.
E' curioso che lo faccia solo con il macbook, presumo tu abbia provato con altre piattaforme e non abbia riscontrato alcun problema, sempre usando la stessa connessione e lo stesso router.Pasticca nel suo primo post ha gia' detto che ha provato con computer windows sempre da stessa connessione Internet dietro router Alice rinnovando pure l' IP con uno ex novo e con quello non glielo fa.IMHO ha qualche magagna sull'Apple
AlexSwitch
27-07-2009, 14:45
Pasticca prova a postare uno screenshot del tuo monitor attività.... se c'è qualche applicazione che rompe, li dovrebbe comparire...
pasticca
27-07-2009, 19:39
vi aggiorno dopo un'altra giornata di lavoro: oggi ho usato tranquillamente il portale sia lato front end sia lato administrator.

ho lavorato su macbook con firefox e filezilla

ora il cerchio si sta stringendo: il problema può essere riconducibile o a safari o a little snich (che ho disinstallato proprio questa mattina per vedere se il problema potesse essere riconducibile al firewall)
Mailor
27-07-2009, 22:31
epperdinci com'è noioso, ho fatto un semplcie synscan su un migliao di porte e mi ha blacklistato all'istante.

comunque per sicurezza e capire magari che succede, fai un tcpdump del traffico in uscita verso quell'ip, porta 80, con solo il flag SYN attivo e vedi quanti te ne escono per sessione.
pasticca
28-07-2009, 02:02
epperdinci com'è noioso, ho fatto un semplcie synscan su un migliao di porte e mi ha blacklistato all'istante.

comunque per sicurezza e capire magari che succede, fai un tcpdumo del traffico in uscita verso quell'ip, porta 80, con solo il flag SYN attivo e vedi quanti te ne escono per sessione.

hai little snich installato su mac?
Mailor
28-07-2009, 08:05
hai little snich installato su mac?

no, perché?
pasticca
28-07-2009, 09:48
no, perché?

sto cercando di venirne a capo... ma non riesco a capire da cosa possa dipendere, possibile che lavorando su windows non mi capita la stessa cosa?
Mailor
28-07-2009, 10:01
sto cercando di venirne a capo... ma non riesco a capire da cosa possa dipendere, possibile che lavorando su windows non mi capita la stessa cosa?

non sono certo il problema sia del sistema operativo.

connettendomi al dominio che hai indicato, sia su osx che su seven partono un bel botto di pacchetti SYN.

09:59:56.841735 IP 192.168.2.3.58662 > 78.159.112.12.80: Flags [S], seq 2420712007, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322856 ecr 0,sackOK,eol], length 0
09:59:57.363738 IP 192.168.2.3.58663 > 78.159.112.12.80: Flags [S], seq 1998442408, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322862 ecr 0,sackOK,eol], length 0
09:59:57.371563 IP 192.168.2.3.58664 > 78.159.112.12.80: Flags [S], seq 3429949807, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322862 ecr 0,sackOK,eol], length 0
09:59:57.372396 IP 192.168.2.3.58665 > 78.159.112.12.80: Flags [S], seq 3235119563, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322862 ecr 0,sackOK,eol], length 0
09:59:57.373252 IP 192.168.2.3.58666 > 78.159.112.12.80: Flags [S], seq 521044077, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322862 ecr 0,sackOK,eol], length 0
09:59:57.374028 IP 192.168.2.3.58667 > 78.159.112.12.80: Flags [S], seq 2520561211, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322862 ecr 0,sackOK,eol], length 0
09:59:57.374792 IP 192.168.2.3.58668 > 78.159.112.12.80: Flags [S], seq 759673481, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322862 ecr 0,sackOK,eol], length 0
09:59:57.509049 IP 192.168.2.3.58669 > 78.159.112.12.80: Flags [S], seq 3156280997, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322863 ecr 0,sackOK,eol], length 0
09:59:57.521364 IP 192.168.2.3.58670 > 78.159.112.12.80: Flags [S], seq 987144458, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322863 ecr 0,sackOK,eol], length 0
09:59:57.534207 IP 192.168.2.3.58671 > 78.159.112.12.80: Flags [S], seq 1371097450, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322863 ecr 0,sackOK,eol], length 0
09:59:57.669007 IP 192.168.2.3.58672 > 78.159.112.12.80: Flags [S], seq 4106558593, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322865 ecr 0,sackOK,eol], length 0
09:59:57.669837 IP 192.168.2.3.58673 > 78.159.112.12.80: Flags [S], seq 2935887174, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322865 ecr 0,sackOK,eol], length 0
09:59:57.671579 IP 192.168.2.3.58674 > 78.159.112.12.80: Flags [S], seq 2776894024, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322865 ecr 0,sackOK,eol], length 0
09:59:57.696920 IP 192.168.2.3.58675 > 78.159.112.12.80: Flags [S], seq 735572077, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322865 ecr 0,sackOK,eol], length 0
09:59:57.698746 IP 192.168.2.3.58676 > 78.159.112.12.80: Flags [S], seq 352897631, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322865 ecr 0,sackOK,eol], length 0
09:59:57.701484 IP 192.168.2.3.58677 > 78.159.112.12.80: Flags [S], seq 111012471, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322865 ecr 0,sackOK,eol], length 0
09:59:57.815183 IP 192.168.2.3.58678 > 78.159.112.12.80: Flags [S], seq 481298590, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322866 ecr 0,sackOK,eol], length 0
09:59:57.828737 IP 192.168.2.3.58679 > 78.159.112.12.80: Flags [S], seq 2464055572, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322866 ecr 0,sackOK,eol], length 0
09:59:57.842274 IP 192.168.2.3.58680 > 78.159.112.12.80: Flags [S], seq 2681243926, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387322866 ecr 0,sackOK,eol], length 0
09:59:57.861914 IP 192.168.2.3.58681 > 78.159.112.12.80: Flags [S], seq 142263862, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322867 ecr 0,sackOK,eol], length 0
09:59:57.875490 IP 192.168.2.3.58682 > 78.159.112.12.80: Flags [S], seq 4134213764, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322867 ecr 0,sackOK,eol], length 0
09:59:57.884571 IP 192.168.2.3.58683 > 208.43.241.185.80: Flags [S], seq 1878040851, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322867 ecr 0,sackOK,eol], length 0
09:59:57.893973 IP 192.168.2.3.58684 > 78.159.112.12.80: Flags [S], seq 2567009778, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322867 ecr 0,sackOK,eol], length 0
09:59:58.026848 IP 192.168.2.3.58685 > 78.159.112.12.80: Flags [S], seq 3730049338, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322868 ecr 0,sackOK,eol], length 0
09:59:58.041892 IP 192.168.2.3.58686 > 78.159.112.12.80: Flags [S], seq 2875214798, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322868 ecr 0,sackOK,eol], length 0
09:59:58.057197 IP 192.168.2.3.58687 > 78.159.112.12.80: Flags [S], seq 1149276324, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322869 ecr 0,sackOK,eol], length 0
09:59:58.072404 IP 192.168.2.3.58688 > 78.159.112.12.80: Flags [S], seq 3698454519, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322869 ecr 0,sackOK,eol], length 0
09:59:58.086777 IP 192.168.2.3.58689 > 78.159.112.12.80: Flags [S], seq 1393817472, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322869 ecr 0,sackOK,eol], length 0
09:59:58.212209 IP 192.168.2.3.58690 > 78.159.112.12.80: Flags [S], seq 4275528852, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322870 ecr 0,sackOK,eol], length 0
09:59:58.226438 IP 192.168.2.3.58691 > 78.159.112.12.80: Flags [S], seq 4122707588, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322870 ecr 0,sackOK,eol], length 0
09:59:58.227502 IP 192.168.2.3.58692 > 208.43.241.185.80: Flags [S], seq 936301474, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322870 ecr 0,sackOK,eol], length 0
09:59:58.242704 IP 192.168.2.3.58693 > 78.159.112.12.80: Flags [S], seq 311463041, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322870 ecr 0,sackOK,eol], length 0
09:59:58.260170 IP 192.168.2.3.58694 > 78.159.112.12.80: Flags [S], seq 2930827270, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322871 ecr 0,sackOK,eol], length 0
09:59:58.276619 IP 192.168.2.3.58695 > 78.159.112.12.80: Flags [S], seq 1701482301, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322871 ecr 0,sackOK,eol], length 0
09:59:58.291257 IP 192.168.2.3.58696 > 78.159.112.12.80: Flags [S], seq 1282570190, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322871 ecr 0,sackOK,eol], length 0
09:59:58.385844 IP 192.168.2.3.58697 > 78.159.112.12.80: Flags [S], seq 117118189, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322872 ecr 0,sackOK,eol], length 0
09:59:58.397382 IP 192.168.2.3.58698 > 78.159.112.12.80: Flags [S], seq 2466685452, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387322872 ecr 0,sackOK,eol], length 0


non è particolarmente normale.

ps per inciso, il server su cui hai hostato i tuoi domini ha tanti di quei servizi aperti che io mi preoccuperei se qualche tuo sito avesse database sensibili o cose del genere.

in confronto, stesso dump per la connessione ad HW upgrade

sh-3.2# tcpdump -i en1 -n dst port 80 and 'tcp[13] & 2 ==2'
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on en1, link-type EN10MB (Ethernet), capture size 96 bytes
10:08:31.542344 IP 192.168.2.3.58787 > 151.1.244.2.80: Flags [S], seq 3249566250, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387327998 ecr 0,sackOK,eol], length 0
10:08:31.818094 IP 192.168.2.3.58788 > 151.1.244.2.80: Flags [S], seq 2736700493, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387328001 ecr 0,sackOK,eol], length 0
10:08:31.820190 IP 192.168.2.3.58789 > 151.1.244.2.80: Flags [S], seq 2272721615, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387328001 ecr 0,sackOK,eol], length 0
10:08:31.821256 IP 192.168.2.3.58790 > 151.1.244.2.80: Flags [S], seq 1757561414, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387328001 ecr 0,sackOK,eol], length 0
10:08:31.822219 IP 192.168.2.3.58791 > 151.1.244.2.80: Flags [S], seq 803339047, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387328001 ecr 0,sackOK,eol], length 0
10:08:31.823302 IP 192.168.2.3.58792 > 151.1.244.2.80: Flags [S], seq 4074944255, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387328001 ecr 0,sackOK,eol], length 0


aggiungo:

sh-3.2# tcpdump -i en1 -n dst port 80
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on en1, link-type EN10MB (Ethernet), capture size 96 bytes
10:03:39.765609 IP 192.168.2.3.58740 > 78.159.112.12.80: Flags [S], seq 484676835, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325083 ecr 0,sackOK,eol], length 0
10:03:39.832237 IP 192.168.2.3.58740 > 78.159.112.12.80: Flags [.], ack 1927371559, win 33304, options [nop,nop,TS val 387325084 ecr 1975884974], length 0
10:03:39.832439 IP 192.168.2.3.58740 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325084 ecr 1975884974], length 408
10:03:40.103416 IP 192.168.2.3.58740 > 78.159.112.12.80: Flags [.], ack 2897, win 32580, options [nop,nop,TS val 387325087 ecr 1975885240], length 0
10:03:40.105066 IP 192.168.2.3.58740 > 78.159.112.12.80: Flags [.], ack 4345, win 33304, options [nop,nop,TS val 387325087 ecr 1975885240], length 0
10:03:40.171800 IP 192.168.2.3.58740 > 78.159.112.12.80: Flags [.], ack 5793, win 32580, options [nop,nop,TS val 387325087 ecr 1975885312], length 0
10:03:40.173850 IP 192.168.2.3.58740 > 78.159.112.12.80: Flags [.], ack 7241, win 33304, options [nop,nop,TS val 387325087 ecr 1975885312], length 0
10:03:40.176106 IP 192.168.2.3.58740 > 78.159.112.12.80: Flags [.], ack 8689, win 32580, options [nop,nop,TS val 387325087 ecr 1975885312], length 0
10:03:40.177626 IP 192.168.2.3.58740 > 78.159.112.12.80: Flags [.], ack 10137, win 33304, options [nop,nop,TS val 387325087 ecr 1975885313], length 0
10:03:40.183309 IP 192.168.2.3.58740 > 78.159.112.12.80: Flags [.], ack 11585, win 33304, options [nop,nop,TS val 387325087 ecr 1975885313], length 0
10:03:40.212029 IP 192.168.2.3.58741 > 78.159.112.12.80: Flags [S], seq 308959151, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325088 ecr 0,sackOK,eol], length 0
10:03:40.214701 IP 192.168.2.3.58742 > 78.159.112.12.80: Flags [S], seq 2341739050, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325088 ecr 0,sackOK,eol], length 0
10:03:40.215618 IP 192.168.2.3.58743 > 78.159.112.12.80: Flags [S], seq 2472179197, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325088 ecr 0,sackOK,eol], length 0
10:03:40.216517 IP 192.168.2.3.58744 > 78.159.112.12.80: Flags [S], seq 3602957680, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325088 ecr 0,sackOK,eol], length 0
10:03:40.217441 IP 192.168.2.3.58745 > 78.159.112.12.80: Flags [S], seq 2692965256, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325088 ecr 0,sackOK,eol], length 0
10:03:40.218329 IP 192.168.2.3.58746 > 78.159.112.12.80: Flags [S], seq 3024491983, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325088 ecr 0,sackOK,eol], length 0
10:03:40.242698 IP 192.168.2.3.58740 > 78.159.112.12.80: Flags [.], ack 14481, win 33304, options [nop,nop,TS val 387325088 ecr 1975885381], length 0
10:03:40.246699 IP 192.168.2.3.58740 > 78.159.112.12.80: Flags [.], ack 17377, win 33304, options [nop,nop,TS val 387325088 ecr 1975885382], length 0
10:03:40.250329 IP 192.168.2.3.58740 > 78.159.112.12.80: Flags [.], ack 20273, win 33304, options [nop,nop,TS val 387325088 ecr 1975885385], length 0
10:03:40.251673 IP 192.168.2.3.58740 > 78.159.112.12.80: Flags [.], ack 20835, win 33023, options [nop,nop,TS val 387325088 ecr 1975885385], length 0
10:03:40.251802 IP 192.168.2.3.58740 > 78.159.112.12.80: Flags [F.], seq 408, ack 20835, win 33304, options [nop,nop,TS val 387325088 ecr 1975885385], length 0
10:03:40.277463 IP 192.168.2.3.58741 > 78.159.112.12.80: Flags [.], ack 1933017534, win 33304, options [nop,nop,TS val 387325088 ecr 1975885420], length 0
10:03:40.277608 IP 192.168.2.3.58741 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325088 ecr 1975885420], length 506
10:03:40.280164 IP 192.168.2.3.58742 > 78.159.112.12.80: Flags [.], ack 1946417972, win 33304, options [nop,nop,TS val 387325088 ecr 1975885422], length 0
10:03:40.280260 IP 192.168.2.3.58742 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325088 ecr 1975885422], length 503
10:03:40.283061 IP 192.168.2.3.58743 > 78.159.112.12.80: Flags [.], ack 1935930886, win 33304, options [nop,nop,TS val 387325088 ecr 1975885425], length 0
10:03:40.283170 IP 192.168.2.3.58743 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325088 ecr 1975885425], length 523
10:03:40.286482 IP 192.168.2.3.58744 > 78.159.112.12.80: Flags [.], ack 1933199580, win 33304, options [nop,nop,TS val 387325089 ecr 1975885427], length 0
10:03:40.286596 IP 192.168.2.3.58744 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325089 ecr 1975885427], length 524
10:03:40.286651 IP 192.168.2.3.58745 > 78.159.112.12.80: Flags [.], ack 1938864203, win 33304, options [nop,nop,TS val 387325089 ecr 1975885428], length 0
10:03:40.286748 IP 192.168.2.3.58745 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325089 ecr 1975885428], length 542
10:03:40.288400 IP 192.168.2.3.58746 > 78.159.112.12.80: Flags [.], ack 1945161917, win 33304, options [nop,nop,TS val 387325089 ecr 1975885430], length 0
10:03:40.288471 IP 192.168.2.3.58746 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325089 ecr 1975885430], length 538
10:03:40.355092 IP 192.168.2.3.58741 > 78.159.112.12.80: Flags [.], ack 134, win 33237, options [nop,nop,TS val 387325089 ecr 1975885497], length 0
10:03:40.355349 IP 192.168.2.3.58741 > 78.159.112.12.80: Flags [F.], seq 506, ack 134, win 33304, options [nop,nop,TS val 387325089 ecr 1975885497], length 0
10:03:40.355438 IP 192.168.2.3.58741 > 78.159.112.12.80: Flags [F.], seq 506, ack 135, win 33304, options [nop,nop,TS val 387325089 ecr 1975885497], length 0
10:03:40.355591 IP 192.168.2.3.58747 > 78.159.112.12.80: Flags [S], seq 2664293642, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325089 ecr 0,sackOK,eol], length 0
10:03:40.367138 IP 192.168.2.3.58742 > 78.159.112.12.80: Flags [.], ack 132, win 33238, options [nop,nop,TS val 387325089 ecr 1975885509], length 0
10:03:40.367399 IP 192.168.2.3.58742 > 78.159.112.12.80: Flags [F.], seq 503, ack 132, win 33304, options [nop,nop,TS val 387325089 ecr 1975885509], length 0
10:03:40.367644 IP 192.168.2.3.58748 > 78.159.112.12.80: Flags [S], seq 3656866496, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325089 ecr 0,sackOK,eol], length 0
10:03:40.369779 IP 192.168.2.3.58742 > 78.159.112.12.80: Flags [F.], seq 503, ack 133, win 33304, options [nop,nop,TS val 387325089 ecr 1975885509], length 0
10:03:40.380851 IP 192.168.2.3.58743 > 78.159.112.12.80: Flags [.], ack 132, win 33238, options [nop,nop,TS val 387325089 ecr 1975885523], length 0
10:03:40.381046 IP 192.168.2.3.58743 > 78.159.112.12.80: Flags [F.], seq 523, ack 132, win 33304, options [nop,nop,TS val 387325089 ecr 1975885523], length 0
10:03:40.381243 IP 192.168.2.3.58749 > 78.159.112.12.80: Flags [S], seq 1251509118, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325089 ecr 0,sackOK,eol], length 0
10:03:40.382679 IP 192.168.2.3.58743 > 78.159.112.12.80: Flags [F.], seq 523, ack 133, win 33304, options [nop,nop,TS val 387325089 ecr 1975885523], length 0
10:03:40.394304 IP 192.168.2.3.58744 > 78.159.112.12.80: Flags [.], ack 132, win 33238, options [nop,nop,TS val 387325090 ecr 1975885536], length 0
10:03:40.394492 IP 192.168.2.3.58744 > 78.159.112.12.80: Flags [F.], seq 524, ack 132, win 33304, options [nop,nop,TS val 387325090 ecr 1975885536], length 0
10:03:40.396340 IP 192.168.2.3.58744 > 78.159.112.12.80: Flags [F.], seq 524, ack 133, win 33304, options [nop,nop,TS val 387325090 ecr 1975885537], length 0
10:03:40.407063 IP 192.168.2.3.58745 > 78.159.112.12.80: Flags [.], ack 133, win 33238, options [nop,nop,TS val 387325090 ecr 1975885549], length 0
10:03:40.407261 IP 192.168.2.3.58745 > 78.159.112.12.80: Flags [F.], seq 542, ack 133, win 33304, options [nop,nop,TS val 387325090 ecr 1975885549], length 0
10:03:40.409420 IP 192.168.2.3.58745 > 78.159.112.12.80: Flags [F.], seq 542, ack 134, win 33304, options [nop,nop,TS val 387325090 ecr 1975885549], length 0
10:03:40.420112 IP 192.168.2.3.58746 > 78.159.112.12.80: Flags [.], ack 133, win 33238, options [nop,nop,TS val 387325090 ecr 1975885562], length 0
10:03:40.420305 IP 192.168.2.3.58746 > 78.159.112.12.80: Flags [F.], seq 538, ack 133, win 33304, options [nop,nop,TS val 387325090 ecr 1975885562], length 0
10:03:40.421675 IP 192.168.2.3.58746 > 78.159.112.12.80: Flags [F.], seq 538, ack 134, win 33304, options [nop,nop,TS val 387325090 ecr 1975885562], length 0
10:03:40.423524 IP 192.168.2.3.58741 > 78.159.112.12.80: Flags [.], ack 135, win 33304, options [nop,nop,TS val 387325090 ecr 1975885565], length 0
10:03:40.427779 IP 192.168.2.3.58747 > 78.159.112.12.80: Flags [.], ack 1946022682, win 33304, options [nop,nop,TS val 387325090 ecr 1975885569], length 0
10:03:40.427904 IP 192.168.2.3.58747 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325090 ecr 1975885569], length 526
10:03:40.434132 IP 192.168.2.3.58742 > 78.159.112.12.80: Flags [.], ack 133, win 33304, options [nop,nop,TS val 387325090 ecr 1975885576], length 0
10:03:40.436772 IP 192.168.2.3.58748 > 78.159.112.12.80: Flags [.], ack 1943206369, win 33304, options [nop,nop,TS val 387325090 ecr 1975885579], length 0
10:03:40.436865 IP 192.168.2.3.58748 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325090 ecr 1975885579], length 563
10:03:40.448213 IP 192.168.2.3.58743 > 78.159.112.12.80: Flags [.], ack 133, win 33304, options [nop,nop,TS val 387325090 ecr 1975885590], length 0
10:03:40.450856 IP 192.168.2.3.58749 > 78.159.112.12.80: Flags [.], ack 1950406795, win 33304, options [nop,nop,TS val 387325090 ecr 1975885593], length 0
10:03:40.450999 IP 192.168.2.3.58749 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325090 ecr 1975885593], length 544
10:03:40.462931 IP 192.168.2.3.58744 > 78.159.112.12.80: Flags [.], ack 133, win 33304, options [nop,nop,TS val 387325090 ecr 1975885605], length 0
10:03:40.475566 IP 192.168.2.3.58745 > 78.159.112.12.80: Flags [.], ack 134, win 33304, options [nop,nop,TS val 387325090 ecr 1975885618], length 0
10:03:40.488096 IP 192.168.2.3.58746 > 78.159.112.12.80: Flags [.], ack 134, win 33304, options [nop,nop,TS val 387325091 ecr 1975885630], length 0
10:03:40.506646 IP 192.168.2.3.58747 > 78.159.112.12.80: Flags [.], ack 133, win 33238, options [nop,nop,TS val 387325091 ecr 1975885649], length 0
10:03:40.506867 IP 192.168.2.3.58747 > 78.159.112.12.80: Flags [F.], seq 526, ack 133, win 33304, options [nop,nop,TS val 387325091 ecr 1975885649], length 0
10:03:40.508320 IP 192.168.2.3.58747 > 78.159.112.12.80: Flags [F.], seq 526, ack 134, win 33304, options [nop,nop,TS val 387325091 ecr 1975885649], length 0
10:03:40.522076 IP 192.168.2.3.58748 > 78.159.112.12.80: Flags [.], ack 132, win 33238, options [nop,nop,TS val 387325091 ecr 1975885664], length 0
10:03:40.522284 IP 192.168.2.3.58748 > 78.159.112.12.80: Flags [F.], seq 563, ack 132, win 33304, options [nop,nop,TS val 387325091 ecr 1975885664], length 0
10:03:40.523416 IP 192.168.2.3.58748 > 78.159.112.12.80: Flags [F.], seq 563, ack 133, win 33304, options [nop,nop,TS val 387325091 ecr 1975885664], length 0
10:03:40.524869 IP 192.168.2.3.58750 > 78.159.112.12.80: Flags [S], seq 2045669244, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325091 ecr 0,sackOK,eol], length 0
10:03:40.526123 IP 192.168.2.3.58751 > 78.159.112.12.80: Flags [S], seq 2092012633, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325091 ecr 0,sackOK,eol], length 0
10:03:40.527373 IP 192.168.2.3.58752 > 78.159.112.12.80: Flags [S], seq 147942782, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325091 ecr 0,sackOK,eol], length 0
10:03:40.536792 IP 192.168.2.3.58749 > 78.159.112.12.80: Flags [.], ack 132, win 33238, options [nop,nop,TS val 387325091 ecr 1975885679], length 0
10:03:40.536938 IP 192.168.2.3.58749 > 78.159.112.12.80: Flags [F.], seq 544, ack 132, win 33304, options [nop,nop,TS val 387325091 ecr 1975885679], length 0
10:03:40.537983 IP 192.168.2.3.58749 > 78.159.112.12.80: Flags [F.], seq 544, ack 133, win 33304, options [nop,nop,TS val 387325091 ecr 1975885679], length 0
10:03:40.546139 IP 192.168.2.3.58753 > 78.159.112.12.80: Flags [S], seq 3263986071, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325091 ecr 0,sackOK,eol], length 0
10:03:40.546287 IP 192.168.2.3.58754 > 78.159.112.12.80: Flags [S], seq 1097137588, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325091 ecr 0,sackOK,eol], length 0
10:03:40.551091 IP 192.168.2.3.58755 > 78.159.112.12.80: Flags [S], seq 2115467882, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325091 ecr 0,sackOK,eol], length 0
10:03:40.574651 IP 192.168.2.3.58747 > 78.159.112.12.80: Flags [.], ack 134, win 33304, options [nop,nop,TS val 387325091 ecr 1975885717], length 0
10:03:40.590077 IP 192.168.2.3.58748 > 78.159.112.12.80: Flags [.], ack 133, win 33304, options [nop,nop,TS val 387325092 ecr 1975885732], length 0
10:03:40.593479 IP 192.168.2.3.58750 > 78.159.112.12.80: Flags [.], ack 1938426559, win 33304, options [nop,nop,TS val 387325092 ecr 1975885736], length 0
10:03:40.593601 IP 192.168.2.3.58750 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325092 ecr 1975885736], length 563
10:03:40.596212 IP 192.168.2.3.58751 > 78.159.112.12.80: Flags [.], ack 1947109126, win 33304, options [nop,nop,TS val 387325092 ecr 1975885737], length 0
10:03:40.596319 IP 192.168.2.3.58751 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325092 ecr 1975885737], length 560
10:03:40.598654 IP 192.168.2.3.58752 > 78.159.112.12.80: Flags [.], ack 1938936279, win 33304, options [nop,nop,TS val 387325092 ecr 1975885739], length 0
10:03:40.598756 IP 192.168.2.3.58752 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325092 ecr 1975885739], length 563
10:03:40.604892 IP 192.168.2.3.58749 > 78.159.112.12.80: Flags [.], ack 133, win 33304, options [nop,nop,TS val 387325092 ecr 1975885747], length 0
10:03:40.611347 IP 192.168.2.3.58753 > 78.159.112.12.80: Flags [.], ack 1946147052, win 33304, options [nop,nop,TS val 387325092 ecr 1975885754], length 0
10:03:40.611478 IP 192.168.2.3.58753 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325092 ecr 1975885754], length 616
10:03:40.613526 IP 192.168.2.3.58754 > 78.159.112.12.80: Flags [.], ack 1944039763, win 33304, options [nop,nop,TS val 387325092 ecr 1975885755], length 0
10:03:40.613621 IP 192.168.2.3.58754 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325092 ecr 1975885755], length 610
10:03:40.617650 IP 192.168.2.3.58755 > 78.159.112.12.80: Flags [.], ack 1942902185, win 33304, options [nop,nop,TS val 387325092 ecr 1975885760], length 0
10:03:40.617846 IP 192.168.2.3.58755 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325092 ecr 1975885760], length 620
10:03:40.673603 IP 192.168.2.3.58750 > 78.159.112.12.80: Flags [.], ack 131, win 33239, options [nop,nop,TS val 387325092 ecr 1975885815], length 0
10:03:40.673771 IP 192.168.2.3.58750 > 78.159.112.12.80: Flags [.], ack 132, win 33304, options [nop,nop,TS val 387325092 ecr 1975885815], length 0
10:03:40.673898 IP 192.168.2.3.58750 > 78.159.112.12.80: Flags [F.], seq 563, ack 132, win 33304, options [nop,nop,TS val 387325092 ecr 1975885815], length 0
10:03:40.674075 IP 192.168.2.3.58756 > 78.159.112.12.80: Flags [S], seq 2254122071, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325092 ecr 0,sackOK,eol], length 0
10:03:40.686440 IP 192.168.2.3.58751 > 78.159.112.12.80: Flags [.], ack 131, win 33239, options [nop,nop,TS val 387325093 ecr 1975885828], length 0
10:03:40.686639 IP 192.168.2.3.58751 > 78.159.112.12.80: Flags [F.], seq 560, ack 131, win 33304, options [nop,nop,TS val 387325093 ecr 1975885828], length 0
10:03:40.687164 IP 192.168.2.3.58757 > 78.159.112.12.80: Flags [S], seq 4227314544, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325093 ecr 0,sackOK,eol], length 0
10:03:40.689097 IP 192.168.2.3.58751 > 78.159.112.12.80: Flags [F.], seq 560, ack 132, win 33304, options [nop,nop,TS val 387325093 ecr 1975885829], length 0
10:03:40.696208 IP 192.168.2.3.58758 > 208.43.241.185.80: Flags [S], seq 1392849505, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325093 ecr 0,sackOK,eol], length 0
10:03:40.700113 IP 192.168.2.3.58752 > 78.159.112.12.80: Flags [.], ack 131, win 33239, options [nop,nop,TS val 387325093 ecr 1975885843], length 0
10:03:40.700305 IP 192.168.2.3.58752 > 78.159.112.12.80: Flags [F.], seq 563, ack 131, win 33304, options [nop,nop,TS val 387325093 ecr 1975885843], length 0
10:03:40.700840 IP 192.168.2.3.58759 > 78.159.112.12.80: Flags [S], seq 3140997824, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325093 ecr 0,sackOK,eol], length 0
10:03:40.701113 IP 192.168.2.3.58485 > 216.239.59.100.80: Flags [.], ack 1158263109, win 65535, options [nop,nop,TS val 387325093 ecr 992563418], length 1418
10:03:40.701205 IP 192.168.2.3.58752 > 78.159.112.12.80: Flags [F.], seq 563, ack 132, win 33304, options [nop,nop,TS val 387325093 ecr 1975885843], length 0
10:03:40.717326 IP 192.168.2.3.58753 > 78.159.112.12.80: Flags [.], ack 131, win 33239, options [nop,nop,TS val 387325093 ecr 1975885859], length 0
10:03:40.717530 IP 192.168.2.3.58753 > 78.159.112.12.80: Flags [F.], seq 616, ack 131, win 33304, options [nop,nop,TS val 387325093 ecr 1975885859], length 0
10:03:40.718036 IP 192.168.2.3.58760 > 78.159.112.12.80: Flags [S], seq 1902661520, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325093 ecr 0,sackOK,eol], length 0
10:03:40.719574 IP 192.168.2.3.58753 > 78.159.112.12.80: Flags [F.], seq 616, ack 132, win 33304, options [nop,nop,TS val 387325093 ecr 1975885859], length 0
10:03:40.731481 IP 192.168.2.3.58754 > 78.159.112.12.80: Flags [.], ack 132, win 33238, options [nop,nop,TS val 387325093 ecr 1975885874], length 0
10:03:40.731718 IP 192.168.2.3.58754 > 78.159.112.12.80: Flags [F.], seq 610, ack 132, win 33304, options [nop,nop,TS val 387325093 ecr 1975885874], length 0
10:03:40.732606 IP 192.168.2.3.58761 > 78.159.112.12.80: Flags [S], seq 3122137943, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325093 ecr 0,sackOK,eol], length 0
10:03:40.735578 IP 192.168.2.3.58754 > 78.159.112.12.80: Flags [F.], seq 610, ack 133, win 33304, options [nop,nop,TS val 387325093 ecr 1975885874], length 0
10:03:40.746332 IP 192.168.2.3.58755 > 78.159.112.12.80: Flags [.], ack 131, win 33239, options [nop,nop,TS val 387325093 ecr 1975885888], length 0
10:03:40.746497 IP 192.168.2.3.58755 > 78.159.112.12.80: Flags [F.], seq 620, ack 131, win 33304, options [nop,nop,TS val 387325093 ecr 1975885888], length 0
10:03:40.746892 IP 192.168.2.3.58762 > 78.159.112.12.80: Flags [S], seq 712604846, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325093 ecr 0,sackOK,eol], length 0
10:03:40.746991 IP 192.168.2.3.58755 > 78.159.112.12.80: Flags [F.], seq 620, ack 132, win 33304, options [nop,nop,TS val 387325093 ecr 1975885888], length 0
10:03:40.752797 IP 192.168.2.3.58756 > 78.159.112.12.80: Flags [.], ack 1948284854, win 33304, options [nop,nop,TS val 387325093 ecr 1975885895], length 0
10:03:40.752900 IP 192.168.2.3.58756 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325093 ecr 1975885895], length 548
10:03:40.756134 IP 192.168.2.3.58751 > 78.159.112.12.80: Flags [.], ack 132, win 33304, options [nop,nop,TS val 387325093 ecr 1975885898], length 0
10:03:40.757881 IP 192.168.2.3.58757 > 78.159.112.12.80: Flags [.], ack 1941294064, win 33304, options [nop,nop,TS val 387325093 ecr 1975885900], length 0
10:03:40.757984 IP 192.168.2.3.58757 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325093 ecr 1975885900], length 605
10:03:40.768509 IP 192.168.2.3.58752 > 78.159.112.12.80: Flags [.], ack 132, win 33304, options [nop,nop,TS val 387325093 ecr 1975885910], length 0
10:03:40.770438 IP 192.168.2.3.58759 > 78.159.112.12.80: Flags [.], ack 1953228646, win 33304, options [nop,nop,TS val 387325093 ecr 1975885912], length 0
10:03:40.770581 IP 192.168.2.3.58759 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325093 ecr 1975885912], length 614
10:03:40.803054 IP 192.168.2.3.58753 > 78.159.112.12.80: Flags [.], ack 132, win 33304, options [nop,nop,TS val 387325094 ecr 1975885945], length 0
10:03:40.804890 IP 192.168.2.3.58760 > 78.159.112.12.80: Flags [.], ack 1947357593, win 33304, options [nop,nop,TS val 387325094 ecr 1975885947], length 0
10:03:40.805048 IP 192.168.2.3.58760 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325094 ecr 1975885947], length 608
10:03:40.809862 IP 192.168.2.3.58754 > 78.159.112.12.80: Flags [.], ack 133, win 33304, options [nop,nop,TS val 387325094 ecr 1975885952], length 0
10:03:40.811707 IP 192.168.2.3.58485 > 216.239.59.100.80: Flags [.], ack 1, win 65535, options [nop,nop,TS val 387325094 ecr 992575128], length 1418
10:03:40.811738 IP 192.168.2.3.58485 > 216.239.59.100.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387325094 ecr 992575128], length 413
10:03:40.813260 IP 192.168.2.3.58761 > 78.159.112.12.80: Flags [.], ack 1940777210, win 33304, options [nop,nop,TS val 387325094 ecr 1975885954], length 0
10:03:40.813367 IP 192.168.2.3.58761 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325094 ecr 1975885954], length 561
10:03:40.819187 IP 192.168.2.3.58755 > 78.159.112.12.80: Flags [.], ack 132, win 33304, options [nop,nop,TS val 387325094 ecr 1975885959], length 0
10:03:40.819359 IP 192.168.2.3.58762 > 78.159.112.12.80: Flags [.], ack 1946759439, win 33304, options [nop,nop,TS val 387325094 ecr 1975885961], length 0
10:03:40.819544 IP 192.168.2.3.58762 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325094 ecr 1975885961], length 519
10:03:40.833116 IP 192.168.2.3.58758 > 208.43.241.185.80: Flags [.], ack 954934710, win 33304, options [nop,nop,TS val 387325094 ecr 1755675145], length 0
10:03:40.833292 IP 192.168.2.3.58758 > 208.43.241.185.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325094 ecr 1755675145], length 528
10:03:40.835712 IP 192.168.2.3.58756 > 78.159.112.12.80: Flags [.], ack 134, win 33237, options [nop,nop,TS val 387325094 ecr 1975885977], length 0
10:03:40.835941 IP 192.168.2.3.58756 > 78.159.112.12.80: Flags [F.], seq 548, ack 134, win 33304, options [nop,nop,TS val 387325094 ecr 1975885977], length 0
10:03:40.836482 IP 192.168.2.3.58763 > 78.159.112.12.80: Flags [S], seq 188678117, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325094 ecr 0,sackOK,eol], length 0
10:03:40.838576 IP 192.168.2.3.58756 > 78.159.112.12.80: Flags [F.], seq 548, ack 135, win 33304, options [nop,nop,TS val 387325094 ecr 1975885977], length 0
10:03:40.851036 IP 192.168.2.3.58757 > 78.159.112.12.80: Flags [.], ack 131, win 33239, options [nop,nop,TS val 387325094 ecr 1975885993], length 0
10:03:40.851303 IP 192.168.2.3.58757 > 78.159.112.12.80: Flags [F.], seq 605, ack 131, win 33304, options [nop,nop,TS val 387325094 ecr 1975885993], length 0
10:03:40.851862 IP 192.168.2.3.58757 > 78.159.112.12.80: Flags [F.], seq 605, ack 132, win 33304, options [nop,nop,TS val 387325094 ecr 1975885993], length 0
10:03:40.852183 IP 192.168.2.3.58764 > 78.159.112.12.80: Flags [S], seq 3191451865, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325094 ecr 0,sackOK,eol], length 0
10:03:40.867282 IP 192.168.2.3.58759 > 78.159.112.12.80: Flags [.], ack 132, win 33238, options [nop,nop,TS val 387325094 ecr 1975886009], length 0
10:03:40.867671 IP 192.168.2.3.58759 > 78.159.112.12.80: Flags [F.], seq 614, ack 132, win 33304, options [nop,nop,TS val 387325094 ecr 1975886009], length 0
10:03:40.867816 IP 192.168.2.3.58759 > 78.159.112.12.80: Flags [F.], seq 614, ack 133, win 33304, options [nop,nop,TS val 387325094 ecr 1975886010], length 0
10:03:40.868473 IP 192.168.2.3.58765 > 78.159.112.12.80: Flags [S], seq 473885773, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325094 ecr 0,sackOK,eol], length 0
10:03:40.884216 IP 192.168.2.3.58760 > 78.159.112.12.80: Flags [.], ack 132, win 33238, options [nop,nop,TS val 387325095 ecr 1975886026], length 0
10:03:40.884667 IP 192.168.2.3.58760 > 78.159.112.12.80: Flags [F.], seq 608, ack 132, win 33304, options [nop,nop,TS val 387325095 ecr 1975886026], length 0
10:03:40.885444 IP 192.168.2.3.58766 > 78.159.112.12.80: Flags [S], seq 3707543039, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325095 ecr 0,sackOK,eol], length 0
10:03:40.886412 IP 192.168.2.3.58760 > 78.159.112.12.80: Flags [F.], seq 608, ack 133, win 33304, options [nop,nop,TS val 387325095 ecr 1975886026], length 0
10:03:40.935625 IP 192.168.2.3.58761 > 78.159.112.12.80: Flags [.], ack 131, win 33239, options [nop,nop,TS val 387325095 ecr 1975886077], length 0
10:03:40.935882 IP 192.168.2.3.58761 > 78.159.112.12.80: Flags [F.], seq 561, ack 131, win 33304, options [nop,nop,TS val 387325095 ecr 1975886077], length 0
10:03:40.936029 IP 192.168.2.3.58761 > 78.159.112.12.80: Flags [F.], seq 561, ack 132, win 33304, options [nop,nop,TS val 387325095 ecr 1975886077], length 0
10:03:40.936578 IP 192.168.2.3.58767 > 78.159.112.12.80: Flags [S], seq 642876330, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325095 ecr 0,sackOK,eol], length 0
10:03:40.951302 IP 192.168.2.3.58762 > 78.159.112.12.80: Flags [.], ack 133, win 33238, options [nop,nop,TS val 387325095 ecr 1975886094], length 0
10:03:40.951494 IP 192.168.2.3.58762 > 78.159.112.12.80: Flags [F.], seq 519, ack 133, win 33304, options [nop,nop,TS val 387325095 ecr 1975886094], length 0
10:03:40.951832 IP 192.168.2.3.58762 > 78.159.112.12.80: Flags [F.], seq 519, ack 134, win 33304, options [nop,nop,TS val 387325095 ecr 1975886094], length 0
10:03:40.952160 IP 192.168.2.3.58768 > 78.159.112.12.80: Flags [S], seq 1060993841, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325095 ecr 0,sackOK,eol], length 0
10:03:40.966697 IP 192.168.2.3.58756 > 78.159.112.12.80: Flags [.], ack 135, win 33304, options [nop,nop,TS val 387325095 ecr 1975886109], length 0
10:03:40.969166 IP 192.168.2.3.58763 > 78.159.112.12.80: Flags [.], ack 1944091702, win 33304, options [nop,nop,TS val 387325095 ecr 1975886111], length 0
10:03:40.969316 IP 192.168.2.3.58763 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325095 ecr 1975886111], length 613
10:03:40.973742 IP 192.168.2.3.58757 > 78.159.112.12.80: Flags [.], ack 132, win 33304, options [nop,nop,TS val 387325095 ecr 1975886116], length 0
10:03:40.977138 IP 192.168.2.3.58764 > 78.159.112.12.80: Flags [.], ack 1955352267, win 33304, options [nop,nop,TS val 387325095 ecr 1975886119], length 0
10:03:40.977263 IP 192.168.2.3.58764 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325095 ecr 1975886119], length 613
10:03:40.980600 IP 192.168.2.3.58759 > 78.159.112.12.80: Flags [.], ack 133, win 33304, options [nop,nop,TS val 387325095 ecr 1975886123], length 0
10:03:40.984059 IP 192.168.2.3.58765 > 78.159.112.12.80: Flags [.], ack 1958026063, win 33304, options [nop,nop,TS val 387325096 ecr 1975886126], length 0
10:03:40.984185 IP 192.168.2.3.58765 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325096 ecr 1975886126], length 604
10:03:40.987515 IP 192.168.2.3.58760 > 78.159.112.12.80: Flags [.], ack 133, win 33304, options [nop,nop,TS val 387325096 ecr 1975886130], length 0
10:03:40.989203 IP 192.168.2.3.58766 > 78.159.112.12.80: Flags [.], ack 1946618395, win 33304, options [nop,nop,TS val 387325096 ecr 1975886131], length 0
10:03:40.989342 IP 192.168.2.3.58766 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325096 ecr 1975886131], length 608
10:03:41.007545 IP 192.168.2.3.58767 > 78.159.112.12.80: Flags [.], ack 1944394112, win 33304, options [nop,nop,TS val 387325096 ecr 1975886150], length 0
10:03:41.007703 IP 192.168.2.3.58767 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325096 ecr 1975886150], length 537
10:03:41.023332 IP 192.168.2.3.58768 > 78.159.112.12.80: Flags [.], ack 1954990666, win 33304, options [nop,nop,TS val 387325096 ecr 1975886165], length 0
10:03:41.023501 IP 192.168.2.3.58768 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325096 ecr 1975886165], length 620
10:03:41.035700 IP 192.168.2.3.58758 > 208.43.241.185.80: Flags [.], ack 225, win 33192, options [nop,nop,TS val 387325096 ecr 1755675346], length 0
10:03:41.046118 IP 192.168.2.3.58769 > 208.43.241.185.80: Flags [S], seq 1582136555, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325096 ecr 0,sackOK,eol], length 0
10:03:41.049059 IP 192.168.2.3.58763 > 78.159.112.12.80: Flags [.], ack 132, win 33238, options [nop,nop,TS val 387325096 ecr 1975886191], length 0
10:03:41.049322 IP 192.168.2.3.58763 > 78.159.112.12.80: Flags [F.], seq 613, ack 132, win 33304, options [nop,nop,TS val 387325096 ecr 1975886191], length 0
10:03:41.049935 IP 192.168.2.3.58770 > 78.159.112.12.80: Flags [S], seq 1353765283, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325096 ecr 0,sackOK,eol], length 0
10:03:41.050010 IP 192.168.2.3.58763 > 78.159.112.12.80: Flags [F.], seq 613, ack 133, win 33304, options [nop,nop,TS val 387325096 ecr 1975886191], length 0
10:03:41.065526 IP 192.168.2.3.58764 > 78.159.112.12.80: Flags [.], ack 132, win 33238, options [nop,nop,TS val 387325096 ecr 1975886208], length 0
10:03:41.065728 IP 192.168.2.3.58764 > 78.159.112.12.80: Flags [F.], seq 613, ack 132, win 33304, options [nop,nop,TS val 387325096 ecr 1975886208], length 0
10:03:41.066288 IP 192.168.2.3.58771 > 78.159.112.12.80: Flags [S], seq 2345889474, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325096 ecr 0,sackOK,eol], length 0
10:03:41.066478 IP 192.168.2.3.58764 > 78.159.112.12.80: Flags [F.], seq 613, ack 133, win 33304, options [nop,nop,TS val 387325096 ecr 1975886208], length 0
10:03:41.082347 IP 192.168.2.3.58765 > 78.159.112.12.80: Flags [.], ack 131, win 33239, options [nop,nop,TS val 387325096 ecr 1975886225], length 0
10:03:41.082539 IP 192.168.2.3.58765 > 78.159.112.12.80: Flags [F.], seq 604, ack 131, win 33304, options [nop,nop,TS val 387325096 ecr 1975886225], length 0
10:03:41.083007 IP 192.168.2.3.58772 > 78.159.112.12.80: Flags [S], seq 95030079, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325096 ecr 0,sackOK,eol], length 0
10:03:41.084124 IP 192.168.2.3.58765 > 78.159.112.12.80: Flags [F.], seq 604, ack 132, win 33304, options [nop,nop,TS val 387325097 ecr 1975886225], length 0
10:03:41.097650 IP 192.168.2.3.58766 > 78.159.112.12.80: Flags [.], ack 131, win 33239, options [nop,nop,TS val 387325097 ecr 1975886240], length 0
10:03:41.097810 IP 192.168.2.3.58766 > 78.159.112.12.80: Flags [F.], seq 608, ack 131, win 33304, options [nop,nop,TS val 387325097 ecr 1975886240], length 0
10:03:41.098258 IP 192.168.2.3.58773 > 78.159.112.12.80: Flags [S], seq 654043376, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325097 ecr 0,sackOK,eol], length 0
10:03:41.099578 IP 192.168.2.3.58766 > 78.159.112.12.80: Flags [F.], seq 608, ack 132, win 33304, options [nop,nop,TS val 387325097 ecr 1975886240], length 0
10:03:41.106055 IP 192.168.2.3.58485 > 216.239.59.100.80: Flags [.], ack 1269, win 65424, options [nop,nop,TS val 387325097 ecr 992575420], length 0
10:03:41.110462 IP 192.168.2.3.58767 > 78.159.112.12.80: Flags [.], ack 133, win 33238, options [nop,nop,TS val 387325097 ecr 1975886253], length 0
10:03:41.110796 IP 192.168.2.3.58767 > 78.159.112.12.80: Flags [F.], seq 537, ack 133, win 33304, options [nop,nop,TS val 387325097 ecr 1975886253], length 0
10:03:41.111316 IP 192.168.2.3.58774 > 78.159.112.12.80: Flags [S], seq 1499989749, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325097 ecr 0,sackOK,eol], length 0
10:03:41.112652 IP 192.168.2.3.58767 > 78.159.112.12.80: Flags [F.], seq 537, ack 134, win 33304, options [nop,nop,TS val 387325097 ecr 1975886253], length 0
10:03:41.126796 IP 192.168.2.3.58768 > 78.159.112.12.80: Flags [.], ack 132, win 33238, options [nop,nop,TS val 387325097 ecr 1975886268], length 0
10:03:41.127203 IP 192.168.2.3.58768 > 78.159.112.12.80: Flags [F.], seq 620, ack 132, win 33304, options [nop,nop,TS val 387325097 ecr 1975886268], length 0
10:03:41.127238 IP 192.168.2.3.58768 > 78.159.112.12.80: Flags [F.], seq 620, ack 133, win 33304, options [nop,nop,TS val 387325097 ecr 1975886268], length 0
10:03:41.127769 IP 192.168.2.3.58775 > 78.159.112.12.80: Flags [S], seq 1405916205, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325097 ecr 0,sackOK,eol], length 0
10:03:41.132916 IP 192.168.2.3.58763 > 78.159.112.12.80: Flags [.], ack 133, win 33304, options [nop,nop,TS val 387325097 ecr 1975886275], length 0
10:03:41.134605 IP 192.168.2.3.58770 > 78.159.112.12.80: Flags [.], ack 1948171021, win 33304, options [nop,nop,TS val 387325097 ecr 1975886277], length 0
10:03:41.134728 IP 192.168.2.3.58770 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325097 ecr 1975886277], length 546
10:03:41.139776 IP 192.168.2.3.58764 > 78.159.112.12.80: Flags [.], ack 133, win 33304, options [nop,nop,TS val 387325097 ecr 1975886282], length 0
10:03:41.141739 IP 192.168.2.3.58771 > 78.159.112.12.80: Flags [.], ack 1954931199, win 33304, options [nop,nop,TS val 387325097 ecr 1975886284], length 0
10:03:41.141895 IP 192.168.2.3.58771 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325097 ecr 1975886284], length 533
10:03:41.150385 IP 192.168.2.3.58765 > 78.159.112.12.80: Flags [.], ack 132, win 33304, options [nop,nop,TS val 387325097 ecr 1975886293], length 0
10:03:41.152207 IP 192.168.2.3.58772 > 78.159.112.12.80: Flags [.], ack 1949103679, win 33304, options [nop,nop,TS val 387325097 ecr 1975886294], length 0
10:03:41.152377 IP 192.168.2.3.58772 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325097 ecr 1975886294], length 558
10:03:41.166237 IP 192.168.2.3.58766 > 78.159.112.12.80: Flags [.], ack 132, win 33304, options [nop,nop,TS val 387325097 ecr 1975886308], length 0
10:03:41.168064 IP 192.168.2.3.58773 > 78.159.112.12.80: Flags [.], ack 1959075153, win 33304, options [nop,nop,TS val 387325097 ecr 1975886310], length 0
10:03:41.168228 IP 192.168.2.3.58773 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325097 ecr 1975886310], length 562
10:03:41.178693 IP 192.168.2.3.58767 > 78.159.112.12.80: Flags [.], ack 134, win 33304, options [nop,nop,TS val 387325097 ecr 1975886321], length 0
10:03:41.180660 IP 192.168.2.3.58774 > 78.159.112.12.80: Flags [.], ack 1953173142, win 33304, options [nop,nop,TS val 387325097 ecr 1975886323], length 0
10:03:41.180783 IP 192.168.2.3.58774 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325097 ecr 1975886323], length 605
10:03:41.194747 IP 192.168.2.3.58768 > 78.159.112.12.80: Flags [.], ack 133, win 33304, options [nop,nop,TS val 387325098 ecr 1975886337], length 0
10:03:41.199140 IP 192.168.2.3.58775 > 78.159.112.12.80: Flags [.], ack 1951457159, win 33304, options [nop,nop,TS val 387325098 ecr 1975886341], length 0
10:03:41.199268 IP 192.168.2.3.58775 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325098 ecr 1975886341], length 609
10:03:41.201303 IP 192.168.2.3.58769 > 208.43.241.185.80: Flags [.], ack 952694120, win 33304, options [nop,nop,TS val 387325098 ecr 1755675511], length 0
10:03:41.201398 IP 192.168.2.3.58769 > 208.43.241.185.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325098 ecr 1755675511], length 420
10:03:41.214577 IP 192.168.2.3.58770 > 78.159.112.12.80: Flags [.], ack 133, win 33238, options [nop,nop,TS val 387325098 ecr 1975886356], length 0
10:03:41.214755 IP 192.168.2.3.58770 > 78.159.112.12.80: Flags [F.], seq 546, ack 133, win 33304, options [nop,nop,TS val 387325098 ecr 1975886356], length 0
10:03:41.215127 IP 192.168.2.3.58770 > 78.159.112.12.80: Flags [F.], seq 546, ack 134, win 33304, options [nop,nop,TS val 387325098 ecr 1975886356], length 0
10:03:41.215294 IP 192.168.2.3.58776 > 78.159.112.12.80: Flags [S], seq 2799364113, win 65535, options [mss 1460,nop,wscale 1,nop,nop,TS val 387325098 ecr 0,sackOK,eol], length 0
10:03:41.229215 IP 192.168.2.3.58771 > 78.159.112.12.80: Flags [.], ack 133, win 33238, options [nop,nop,TS val 387325098 ecr 1975886371], length 0
10:03:41.229460 IP 192.168.2.3.58771 > 78.159.112.12.80: Flags [F.], seq 533, ack 133, win 33304, options [nop,nop,TS val 387325098 ecr 1975886371], length 0
10:03:41.229771 IP 192.168.2.3.58771 > 78.159.112.12.80: Flags [F.], seq 533, ack 134, win 33304, options [nop,nop,TS val 387325098 ecr 1975886371], length 0
10:03:41.244983 IP 192.168.2.3.58772 > 78.159.112.12.80: Flags [.], ack 132, win 33238, options [nop,nop,TS val 387325098 ecr 1975886387], length 0
10:03:41.245144 IP 192.168.2.3.58772 > 78.159.112.12.80: Flags [F.], seq 558, ack 132, win 33304, options [nop,nop,TS val 387325098 ecr 1975886387], length 0
10:03:41.245589 IP 192.168.2.3.58772 > 78.159.112.12.80: Flags [F.], seq 558, ack 133, win 33304, options [nop,nop,TS val 387325098 ecr 1975886387], length 0
10:03:41.259650 IP 192.168.2.3.58773 > 78.159.112.12.80: Flags [.], ack 132, win 33238, options [nop,nop,TS val 387325098 ecr 1975886401], length 0
10:03:41.259778 IP 192.168.2.3.58773 > 78.159.112.12.80: Flags [F.], seq 562, ack 132, win 33304, options [nop,nop,TS val 387325098 ecr 1975886401], length 0
10:03:41.260486 IP 192.168.2.3.58773 > 78.159.112.12.80: Flags [F.], seq 562, ack 133, win 33304, options [nop,nop,TS val 387325098 ecr 1975886401], length 0
10:03:41.275299 IP 192.168.2.3.58774 > 78.159.112.12.80: Flags [.], ack 132, win 33238, options [nop,nop,TS val 387325098 ecr 1975886417], length 0
10:03:41.275436 IP 192.168.2.3.58774 > 78.159.112.12.80: Flags [F.], seq 605, ack 132, win 33304, options [nop,nop,TS val 387325098 ecr 1975886417], length 0
10:03:41.276504 IP 192.168.2.3.58774 > 78.159.112.12.80: Flags [F.], seq 605, ack 133, win 33304, options [nop,nop,TS val 387325098 ecr 1975886417], length 0
10:03:41.290677 IP 192.168.2.3.58775 > 78.159.112.12.80: Flags [.], ack 132, win 33238, options [nop,nop,TS val 387325099 ecr 1975886433], length 0
10:03:41.290842 IP 192.168.2.3.58775 > 78.159.112.12.80: Flags [F.], seq 609, ack 132, win 33304, options [nop,nop,TS val 387325099 ecr 1975886433], length 0
10:03:41.293603 IP 192.168.2.3.58775 > 78.159.112.12.80: Flags [F.], seq 609, ack 133, win 33304, options [nop,nop,TS val 387325099 ecr 1975886433], length 0
10:03:41.306103 IP 192.168.2.3.58770 > 78.159.112.12.80: Flags [.], ack 134, win 33304, options [nop,nop,TS val 387325099 ecr 1975886448], length 0
10:03:41.309294 IP 192.168.2.3.58776 > 78.159.112.12.80: Flags [.], ack 1956384777, win 33304, options [nop,nop,TS val 387325099 ecr 1975886452], length 0
10:03:41.309407 IP 192.168.2.3.58776 > 78.159.112.12.80: Flags [P.], ack 1, win 33304, options [nop,nop,TS val 387325099 ecr 1975886452], length 608
10:03:41.312994 IP 192.168.2.3.58771 > 78.159.112.12.80: Flags [.], ack 134, win 33304, options [nop,nop,TS val 387325099 ecr 1975886455], length 0
10:03:41.318700 IP 192.168.2.3.58772 > 78.159.112.12.80: Flags [.], ack 133, win 33304, options [nop,nop,TS val 387325099 ecr 1975886461], length 0
10:03:41.327815 IP 192.168.2.3.58773 > 78.159.112.12.80: Flags [.], ack 133, win 33304, options [nop,nop,TS val 387325099 ecr 1975886470], length 0
10:03:41.343350 IP 192.168.2.3.58774 > 78.159.112.12.80: Flags [.], ack 133, win 33304, options [nop,nop,TS val 387325099 ecr 1975886486], length 0
10:03:41.359709 IP 192.168.2.3.58775 > 78.159.112.12.80: Flags [.], ack 133, win 33304, options [nop,nop,TS val 387325099 ecr 1975886502], length 0
10:03:41.373526 IP 192.168.2.3.58769 > 208.43.241.185.80: Flags [.], ack 266, win 33171, options [nop,nop,TS val 387325099 ecr 1755675685], length 0
10:03:41.388031 IP 192.168.2.3.58776 > 78.159.112.12.80: Flags [.], ack 132, win 33238, options [nop,nop,TS val 387325100 ecr 1975886530], length 0
10:03:41.388192 IP 192.168.2.3.58776 > 78.159.112.12.80: Flags [F.], seq 608, ack 132, win 33304, options [nop,nop,TS val 387325100 ecr 1975886530], length 0
10:03:41.389129 IP 192.168.2.3.58776 > 78.159.112.12.80: Flags [F.], seq 608, ack 133, win 33304, options [nop,nop,TS val 387325100 ecr 1975886530], length 0
10:03:41.456489 IP 192.168.2.3.58776 > 78.159.112.12.80: Flags [.], ack 133, win 33304, options [nop,nop,TS val 387325100 ecr 1975886599], length 0
10:03:41.738322 IP 192.168.2.3.58776 > 78.159.112.12.80: Flags [.], ack 132, win 0, length 0
10:03:41.738379 IP 192.168.2.3.58775 > 78.159.112.12.80: Flags [.], ack 132, win 0, length 0
10:03:41.738404 IP 192.168.2.3.58774 > 78.159.112.12.80: Flags [.], ack 132, win 0, length 0
10:03:41.738428 IP 192.168.2.3.58773 > 78.159.112.12.80: Flags [.], ack 132, win 0, length 0
10:03:41.738456 IP 192.168.2.3.58772 > 78.159.112.12.80: Flags [.], ack 132, win 0, length 0
10:03:41.738480 IP 192.168.2.3.58771 > 78.159.112.12.80: Flags [.], ack 133, win 0, length 0
10:03:41.738489 IP 192.168.2.3.58770 > 78.159.112.12.80: Flags [.], ack 133, win 0, length 0
10:03:41.738497 IP 192.168.2.3.58768 > 78.159.112.12.80: Flags [.], ack 132, win 0, length 0
10:03:41.738506 IP 192.168.2.3.58767 > 78.159.112.12.80: Flags [.], ack 133, win 0, length 0
10:03:41.738514 IP 192.168.2.3.58766 > 78.159.112.12.80: Flags [.], ack 131, win 0, length 0
10:03:41.738521 IP 192.168.2.3.58765 > 78.159.112.12.80: Flags [.], ack 131, win 0, length 0
10:03:41.738529 IP 192.168.2.3.58764 > 78.159.112.12.80: Flags [.], ack 132, win 0, length 0
10:03:41.738537 IP 192.168.2.3.58763 > 78.159.112.12.80: Flags [.], ack 132, win 0, length 0
10:03:41.738618 IP 192.168.2.3.58776 > 78.159.112.12.80: Flags [.], ack 133, win 33304, options [nop,nop,TS val 387325103 ecr 1975886599], length 0


il client manda parecchi FIN al server, forzando il caricamento su diverse sessioni, che causano il "flood" di pacchetti SYN.

Che contiene quella pagina? Includi javascript o script di vario genere che provengono da altri domini? carichi contenuto remoto?


aggiungo di nuovo: seven da virtual machine dà lo stesso problema, quindi il problema NON è il browser su mac. Il problema è a livello più basso, probabilmente sotto al system call interface dello unix. Magari netfilter si incaxxa per qualche pacchetto malformato che parte dal server e termina la connessione, sebbene a questo punto mi aspetterei un RST, non un FIN..
Mailor
28-07-2009, 11:07
faccio un altro post perché l'altro è già troppo pieno, e spoilero perché è lungo assai

Last login: Tue Jul 28 10:58:30 on ttys001
mac-2:~ Jarod$ su
Password:
sh-3.2#
sh-3.2# tcpdump -n -r Desktop/dump.fpcap -A -s0
reading from file Desktop/dump.fpcap, link-type EN10MB (Ethernet)
10:35:31.433019 IP 192.168.2.3.59268 > 78.159.112.12.80: Flags [S], seq 3149620572, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344181 ecr 0,sackOK,eol], length 0
E..@..@[email protected]\.........p.............
..g5........
10:35:31.499617 IP 192.168.2.3.59268 > 78.159.112.12.80: Flags [.], ack 1845739880, win 65535, options [nop,nop,TS val 387344182 ecr 1977796628], length 0
E..4%.@[email protected]]n..h...........
..g6u...
10:35:31.499785 IP 192.168.2.3.59268 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344182 ecr 1977796628], length 441
E...}.@[email protected]]n..h...........
..g6u...GET /portal/ HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/
Cache-Control: max-age=0


10:35:31.738788 IP 192.168.2.3.59268 > 78.159.112.12.80: Flags [.], ack 2897, win 65522, options [nop,nop,TS val 387344184 ecr 1977796863], length 0
E..4..@[email protected]..............
..g8u...
10:35:31.808723 IP 192.168.2.3.59268 > 78.159.112.12.80: Flags [.], ack 5793, win 65522, options [nop,nop,TS val 387344185 ecr 1977796934], length 0
E..4..@[email protected].....
..g9u..F
10:35:31.857594 IP 192.168.2.3.59268 > 78.159.112.12.80: Flags [.], ack 7241, win 65535, options [nop,nop,TS val 387344185 ecr 1977796934], length 0
E..4..@[email protected]..............
..g9u..F
10:35:31.873813 IP 192.168.2.3.59269 > 78.159.112.12.80: Flags [S], seq 4143695710, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344186 ecr 0,sackOK,eol], length 0
E..@..@[email protected]...^.........'.............
..g:........
10:35:31.878256 IP 192.168.2.3.59268 > 78.159.112.12.80: Flags [.], ack 10137, win 65522, options [nop,nop,TS val 387344186 ecr 1977797003], length 0
E..4..@[email protected]........ .....
..g:u...
10:35:31.882568 IP 192.168.2.3.59270 > 78.159.112.12.80: Flags [S], seq 842999160, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344186 ecr 0,sackOK,eol], length 0
E..@..@[email protected]?%x.......................
..g:........
10:35:31.883543 IP 192.168.2.3.59271 > 78.159.112.12.80: Flags [S], seq 3433126804, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344186 ecr 0,sackOK,eol], length 0
E..@..@[email protected]..[.........'J.............
..g:........
10:35:31.884400 IP 192.168.2.3.59272 > 78.159.112.12.80: Flags [S], seq 1085456611, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344186 ecr 0,sackOK,eol], length 0
E..@p.@[email protected]@...........M..............
..g:........
10:35:31.885413 IP 192.168.2.3.59273 > 78.159.112.12.80: Flags [S], seq 548241557, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344186 ecr 0,sackOK,eol], length 0
E..@J.@[email protected] ............;.............
..g:........
10:35:31.886280 IP 192.168.2.3.59274 > 78.159.112.12.80: Flags [S], seq 747079722, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344186 ecr 0,sackOK,eol], length 0
E..@..@[email protected],..*.......................
..g:........
10:35:31.925874 IP 192.168.2.3.59268 > 78.159.112.12.80: Flags [.], ack 13033, win 65535, options [nop,nop,TS val 387344186 ecr 1977797003], length 0
E..4r.@[email protected]...........
..g:u...
10:35:31.939349 IP 192.168.2.3.59269 > 78.159.112.12.80: Flags [.], ack 1850781426, win 65535, options [nop,nop,TS val 387344186 ecr 1977797068], length 0
E..4..@[email protected]..._nP......s......
..g:u...
10:35:31.939489 IP 192.168.2.3.59269 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344186 ecr 1977797068], length 506
E...z.@.@.<.....N.p....P..._nP.............
..g:u...GET /portal/media/system/js/mootools.js HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Mon, 04 Feb 2008 09:32:50 GMT
If-None-Match: "2ef0d74-122a4-cebcf480"
Cache-Control: max-age=0


10:35:31.947497 IP 192.168.2.3.59268 > 78.159.112.12.80: Flags [.], ack 15929, win 65535, options [nop,nop,TS val 387344186 ecr 1977797052], length 0
E..4D.@[email protected]........+.....
..g:u...
10:35:31.951877 IP 192.168.2.3.59268 > 78.159.112.12.80: Flags [.], ack 18825, win 65535, options [nop,nop,TS val 387344186 ecr 1977797074], length 0
E..4..@[email protected].
............
..g:u...
10:35:31.953377 IP 192.168.2.3.59270 > 78.159.112.12.80: Flags [.], ack 1840566305, win 65535, options [nop,nop,TS val 387344186 ecr 1977797077], length 0
E..4..@.@.$.....N.p....P2?%ym..!...........
..g:u...
10:35:31.953522 IP 192.168.2.3.59270 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344186 ecr 1977797077], length 503
E..+..@[email protected]?%ym..!....P......
..g:u...GET /portal/media/system/js/caption.js HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Mon, 27 Jul 2009 14:08:54 GMT
If-None-Match: "2ef0d6f-6b9-7e7ea980"
Cache-Control: max-age=0


10:35:31.953617 IP 192.168.2.3.59271 > 78.159.112.12.80: Flags [.], ack 1843351479, win 65535, options [nop,nop,TS val 387344186 ecr 1977797080], length 0
E..4..@[email protected]..[.m.O.....i......
..g:u...
10:35:31.953712 IP 192.168.2.3.59271 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344186 ecr 1977797080], length 523
E..?..@[email protected]..[.m.O.....QY.....
..g:u...GET /portal/templates/system/css/system.css HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Mon, 27 Jul 2009 14:15:51 GMT
If-None-Match: "2ef43d8-569-975993c0"
Cache-Control: max-age=0


10:35:31.955255 IP 192.168.2.3.59272 > 78.159.112.12.80: Flags [.], ack 1848404100, win 65535, options [nop,nop,TS val 387344186 ecr 1977797081], length 0
E..4..@.@[email protected],h.....w9.....
..g:u...
10:35:31.955373 IP 192.168.2.3.59272 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344186 ecr 1977797081], length 524
E..@|.@.@.:[email protected],h............
..g:u...GET /portal/templates/system/css/general.css HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Mon, 18 Aug 2008 17:17:32 GMT
If-None-Match: "2ef43d5-925-25880300"
Cache-Control: max-age=0


10:35:31.958356 IP 192.168.2.3.59273 > 78.159.112.12.80: Flags [.], ack 1838679287, win 65535, options [nop,nop,TS val 387344187 ecr 1977797083], length 0
E..4E.@[email protected] ...m.......;......
..g;u...
10:35:31.958827 IP 192.168.2.3.59273 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344187 ecr 1977797083], length 542
E..R..@.@..[....N.p....P ...m........E.....
..g;u...GET /portal/templates/ja_barite_1.5_template/css/template.css HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Sat, 28 Jun 2008 12:22:48 GMT
If-None-Match: "2ef43fb-5724-15937600"
Cache-Control: max-age=0


10:35:31.959110 IP 192.168.2.3.59274 > 78.159.112.12.80: Flags [.], ack 1837874053, win 65535, options [nop,nop,TS val 387344187 ecr 1977797085], length 0
E..4,.@[email protected],..+m.......q......
..g;u...
10:35:31.959203 IP 192.168.2.3.59274 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344187 ecr 1977797085], length 538
E..N..@.@.._....N.p....P,..+m.......\......
..g;u...GET /portal/templates/ja_barite_1.5_template/css/typo.css HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Thu, 07 Feb 2008 14:15:37 GMT
If-None-Match: "2ef43fa-1472-1b92f440"
Cache-Control: max-age=0


10:35:31.996336 IP 192.168.2.3.59268 > 78.159.112.12.80: Flags [.], ack 20848, win 65535, options [nop,nop,TS val 387344187 ecr 1977797122], length 0
E..4X.@.@.`.....N.p....P..g.n..............
..g;u...
10:35:31.996523 IP 192.168.2.3.59268 > 78.159.112.12.80: Flags [F.], seq 441, ack 20848, win 65535, options [nop,nop,TS val 387344187 ecr 1977797122], length 0
E..4..@[email protected]..............
..g;u...
10:35:32.016651 IP 192.168.2.3.59269 > 78.159.112.12.80: Flags [.], ack 134, win 65535, options [nop,nop,TS val 387344187 ecr 1977797145], length 0
E..4..@[email protected]%.....
..g;u...
10:35:32.016863 IP 192.168.2.3.59269 > 78.159.112.12.80: Flags [F.], seq 506, ack 134, win 65535, options [nop,nop,TS val 387344187 ecr 1977797145], length 0
E..4I.@[email protected]$.....
..g;u...
10:35:32.017091 IP 192.168.2.3.59275 > 78.159.112.12.80: Flags [S], seq 2714510065, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344187 ecr 0,sackOK,eol], length 0
E..@..@[email protected].."........................
..g;........
10:35:32.020436 IP 192.168.2.3.59269 > 78.159.112.12.80: Flags [F.], seq 506, ack 135, win 65535, options [nop,nop,TS val 387344187 ecr 1977797145], length 0
E..4b.@[email protected]#.....
..g;u...
10:35:32.033253 IP 192.168.2.3.59270 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344187 ecr 1977797162], length 0
E..4..@[email protected]?'pm........(.....
..g;u..*
10:35:32.033494 IP 192.168.2.3.59270 > 78.159.112.12.80: Flags [F.], seq 503, ack 132, win 65535, options [nop,nop,TS val 387344187 ecr 1977797162], length 0
E..4..@[email protected]?'pm........'.....
..g;u..*
10:35:32.033737 IP 192.168.2.3.59276 > 78.159.112.12.80: Flags [S], seq 3749569206, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344187 ecr 0,sackOK,eol], length 0
E..@..@[email protected].}...........E.............
..g;........
10:35:32.035808 IP 192.168.2.3.59270 > 78.159.112.12.80: Flags [F.], seq 503, ack 133, win 65535, options [nop,nop,TS val 387344187 ecr 1977797162], length 0
E..4..@[email protected]?'pm........&.....
..g;u..*
10:35:32.045869 IP 192.168.2.3.59271 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344187 ecr 1977797175], length 0
E..4?.@[email protected]..].m.P:....f......
..g;u..7
10:35:32.046114 IP 192.168.2.3.59271 > 78.159.112.12.80: Flags [F.], seq 523, ack 132, win 65535, options [nop,nop,TS val 387344187 ecr 1977797175], length 0
E..4..@.@.(.....N.p....P..].m.P:....f......
..g;u..7
10:35:32.046328 IP 192.168.2.3.59277 > 78.159.112.12.80: Flags [S], seq 234684852, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344187 ecr 0,sackOK,eol], length 0
...........?..............
..g;........
10:35:32.048047 IP 192.168.2.3.59271 > 78.159.112.12.80: Flags [F.], seq 523, ack 133, win 65535, options [nop,nop,TS val 387344187 ecr 1977797175], length 0
E..4{.@.@.=n....N.p....P..].m.P;....f......
..g;u..7
10:35:32.059370 IP 192.168.2.3.59272 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344188 ecr 1977797188], length 0
E..4..@[email protected]@...n,i.....t=.....
..g<u..D
10:35:32.059523 IP 192.168.2.3.59272 > 78.159.112.12.80: Flags [F.], seq 524, ack 132, win 65535, options [nop,nop,TS val 387344188 ecr 1977797188], length 0
E..44.@[email protected]@...n,i.....t<.....
..g<u..D
10:35:32.060812 IP 192.168.2.3.59272 > 78.159.112.12.80: Flags [F.], seq 524, ack 133, win 65535, options [nop,nop,TS val 387344188 ecr 1977797188], length 0
E..4M.@[email protected]@...n,i.....t;.....
..g<u..D
10:35:32.072140 IP 192.168.2.3.59273 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344188 ecr 1977797201], length 0
E..4%.@[email protected] ...m..{....8......
..g<u..Q
10:35:32.072290 IP 192.168.2.3.59273 > 78.159.112.12.80: Flags [F.], seq 542, ack 133, win 65535, options [nop,nop,TS val 387344188 ecr 1977797201], length 0
E..4..@[email protected] ...m..{....8......
..g<u..Q
10:35:32.074634 IP 192.168.2.3.59273 > 78.159.112.12.80: Flags [F.], seq 542, ack 134, win 65535, options [nop,nop,TS val 387344188 ecr 1977797201], length 0
E..4..@.@..|....N.p....P ...m..|....8......
..g<u..Q
10:35:32.085542 IP 192.168.2.3.59274 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344188 ecr 1977797214], length 0
E..4..@[email protected],..Em.. ....n......
..g<u..^
10:35:32.085711 IP 192.168.2.3.59274 > 78.159.112.12.80: Flags [F.], seq 538, ack 133, win 65535, options [nop,nop,TS val 387344188 ecr 1977797214], length 0
E..4%.@[email protected],..Em.. ....n......
..g<u..^
10:35:32.086905 IP 192.168.2.3.59274 > 78.159.112.12.80: Flags [F.], seq 538, ack 134, win 65535, options [nop,nop,TS val 387344188 ecr 1977797215], length 0
E..4..@[email protected],..Em..
....n......
..g<u.._
10:35:32.092854 IP 192.168.2.3.59269 > 78.159.112.12.80: Flags [.], ack 135, win 65535, options [nop,nop,TS val 387344188 ecr 1977797221], length 0
E..4..@[email protected]......
..g<u..e
10:35:32.094476 IP 192.168.2.3.59275 > 78.159.112.12.80: Flags [.], ack 1842609222, win 65535, options [nop,nop,TS val 387344188 ecr 1977797223], length 0
E..4..@[email protected]..".m..F.... ......
..g<u..g
10:35:32.094608 IP 192.168.2.3.59275 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344188 ecr 1977797223], length 526
E..Bi.@[email protected]`....N.p....P..".m..F....k......
..g<u..gGET /portal/templates/ja_barite_1.5_template/js/ja.script.js HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Thu, 07 Feb 2008 14:15:56 GMT
If-None-Match: "2ef44b3-1d75-1cb4df00"
Cache-Control: max-age=0


10:35:32.102635 IP 192.168.2.3.59270 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344188 ecr 1977797230], length 0
E..4..@[email protected]?'qm..............
..g<u..n
10:35:32.103505 IP 192.168.2.3.59276 > 78.159.112.12.80: Flags [.], ack 1849102811, win 65535, options [nop,nop,TS val 387344188 ecr 1977797232], length 0
E..4W.@[email protected].}..n7.............
..g<u..p
10:35:32.103637 IP 192.168.2.3.59276 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344188 ecr 1977797232], length 563
E..g..@[email protected].}..n7......-%.....
..g<u..pGET /portal/templates/ja_barite_1.5_template/ja_menus/ja_splitmenu/ja.splitmenu.css HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Thu, 07 Feb 2008 14:16:09 GMT
If-None-Match: "2ef44ae-b55-1d7b3c40"
Cache-Control: max-age=0


10:35:32.115455 IP 192.168.2.3.59271 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344188 ecr 1977797244], length 0
E..47.@[email protected]..].m.P;....f......
..g<u..|
10:35:32.116994 IP 192.168.2.3.59277 > 78.159.112.12.80: Flags [.], ack 1845967434, win 65535, options [nop,nop,TS val 387344188 ecr 1977797246], length 0
...n.:J...........p....P
..g<u..~
10:35:32.117212 IP 192.168.2.3.59277 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344188 ecr 1977797246], length 544
...n.:J.....<.....p....P
..g<u..~GET /portal/templates/ja_barite_1.5_template/css/colors/blue.css HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Thu, 07 Feb 2008 14:15:57 GMT
If-None-Match: "2ef43fe-fb2-1cc42140"
Cache-Control: max-age=0


10:35:32.127707 IP 192.168.2.3.59272 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344188 ecr 1977797256], length 0
E..4m.@[email protected]@...n,i.....s......
..g<u...
10:35:32.139366 IP 192.168.2.3.59273 > 78.159.112.12.80: Flags [.], ack 134, win 65535, options [nop,nop,TS val 387344188 ecr 1977797268], length 0
E..4A.@[email protected] ...m..|....8L.....
..g<u...
10:35:32.154412 IP 192.168.2.3.59274 > 78.159.112.12.80: Flags [.], ack 134, win 65535, options [nop,nop,TS val 387344188 ecr 1977797283], length 0
E..4..@.@.!.....N.p....P,..Fm..
....nO.....
..g<u...
10:35:32.174329 IP 192.168.2.3.59275 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344189 ecr 1977797303], length 0
E..4..@[email protected]..%.m........2.....
..g=u...
10:35:32.174538 IP 192.168.2.3.59275 > 78.159.112.12.80: Flags [F.], seq 526, ack 133, win 65535, options [nop,nop,TS val 387344189 ecr 1977797303], length 0
E..4(.@[email protected]..%.m........1.....
..g=u...
10:35:32.175411 IP 192.168.2.3.59275 > 78.159.112.12.80: Flags [F.], seq 526, ack 134, win 65535, options [nop,nop,TS val 387344189 ecr 1977797303], length 0
E..4..@[email protected]..%.m........0.....
..g=u...
10:35:32.183546 IP 192.168.2.3.59278 > 78.159.112.12.80: Flags [S], seq 3617359278, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344189 ecr 0,sackOK,eol], length 0
E..@..@.@.#v....N.p....P.............*.............
..g=........
10:35:32.184486 IP 192.168.2.3.59279 > 78.159.112.12.80: Flags [S], seq 2117335464, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344189 ecr 0,sackOK,eol], length 0
E..@i.@[email protected]~3.........................
..g=........
10:35:32.185587 IP 192.168.2.3.59280 > 78.159.112.12.80: Flags [S], seq 644835804, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344189 ecr 0,sackOK,eol], length 0
E..@{.@.@.=.....N.p....P&oi..........(.............
..g=........
10:35:32.189619 IP 192.168.2.3.59276 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344189 ecr 1977797318], length 0
E..4..@.@. .....N.p....P.}..n7.^.... ......
..g=u...
10:35:32.189796 IP 192.168.2.3.59276 > 78.159.112.12.80: Flags [F.], seq 563, ack 132, win 65535, options [nop,nop,TS val 387344189 ecr 1977797318], length 0
E..4..@[email protected].}..n7.^.... ......
..g=u...
10:35:32.190922 IP 192.168.2.3.59276 > 78.159.112.12.80: Flags [F.], seq 563, ack 133, win 65535, options [nop,nop,TS val 387344189 ecr 1977797319], length 0
E..4..@[email protected].}..n7._.... ......
..g=u...
10:35:32.207977 IP 192.168.2.3.59277 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344189 ecr 1977797334], length 0
...n.:............p....P
..g=u...
10:35:32.208183 IP 192.168.2.3.59277 > 78.159.112.12.80: Flags [F.], seq 544, ack 132, win 65535, options [nop,nop,TS val 387344189 ecr 1977797334], length 0
...n.:............p....P
..g=u...
10:35:32.208329 IP 192.168.2.3.59277 > 78.159.112.12.80: Flags [F.], seq 544, ack 133, win 65535, options [nop,nop,TS val 387344189 ecr 1977797334], length 0
...n.:............p....P
..g=u...
10:35:32.221801 IP 192.168.2.3.59281 > 78.159.112.12.80: Flags [S], seq 4244688383, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344189 ecr 0,sackOK,eol], length 0
E..@..@[email protected].............
..g=........
10:35:32.234507 IP 192.168.2.3.59282 > 78.159.112.12.80: Flags [S], seq 3765706670, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344189 ecr 0,sackOK,eol], length 0
E..@^.@[email protected].............
..g=........
10:35:32.234688 IP 192.168.2.3.59283 > 78.159.112.12.80: Flags [S], seq 633011477, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344189 ecr 0,sackOK,eol], length 0
E..@..@[email protected]%...........,..............
..g=........
10:35:32.243167 IP 192.168.2.3.59275 > 78.159.112.12.80: Flags [.], ack 134, win 65535, options [nop,nop,TS val 387344189 ecr 1977797372], length 0
E..4u.@[email protected]..%.m..............
..g=u...
10:35:32.249895 IP 192.168.2.3.59278 > 78.159.112.12.80: Flags [.], ack 1850430786, win 65535, options [nop,nop,TS val 387344189 ecr 1977797378], length 0
E..4..@[email protected].....
..g=u...
10:35:32.250048 IP 192.168.2.3.59278 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344189 ecr 1977797378], length 563
E..g..@[email protected]...........
..g=u...GET /portal/templates/ja_barite_1.5_template/images/user-increase.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Thu, 07 Feb 2008 14:15:51 GMT
If-None-Match: "2ef4474-6c-1c6893c0"
Cache-Control: max-age=0


10:35:32.252725 IP 192.168.2.3.59279 > 78.159.112.12.80: Flags [.], ack 1856225946, win 65535, options [nop,nop,TS val 387344189 ecr 1977797381], length 0
E..4V.@[email protected]~3..n......../.....
..g=u...
10:35:32.252841 IP 192.168.2.3.59279 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344189 ecr 1977797381], length 560
E..d..@[email protected]~3..n.......A......
..g=u...GET /portal/templates/ja_barite_1.5_template/images/user-reset.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Thu, 07 Feb 2008 14:15:51 GMT
If-None-Match: "2ef4476-6a-1c6893c0"
Cache-Control: max-age=0


10:35:32.254117 IP 192.168.2.3.59280 > 78.159.112.12.80: Flags [.], ack 1846017237, win 65535, options [nop,nop,TS val 387344189 ecr 1977797382], length 0
E..4B.@[email protected]&oi.n.......S......
..g=u...
10:35:32.254297 IP 192.168.2.3.59280 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344189 ecr 1977797382], length 563
E..gJ.@[email protected]&oi.n..............
..g=u...GET /portal/templates/ja_barite_1.5_template/images/user-decrease.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Thu, 07 Feb 2008 14:15:51 GMT
If-None-Match: "2ef4472-6b-1c6893c0"
Cache-Control: max-age=0


10:35:32.258423 IP 192.168.2.3.59276 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344190 ecr 1977797387], length 0
E..4..@[email protected].}..n7._.... G.....
..g>u...
10:35:32.275903 IP 192.168.2.3.59277 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344190 ecr 1977797405], length 0
...n.:............p....P
..g>u...
10:35:32.287455 IP 192.168.2.3.59281 > 78.159.112.12.80: Flags [.], ack 1848689326, win 65535, options [nop,nop,TS val 387344190 ecr 1977797416], length 0
E..4I.@[email protected].....
..g>u..(
10:35:32.287561 IP 192.168.2.3.59281 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344190 ecr 1977797416], length 616
E.....@[email protected]....... .....
..g>u..(GET /portal/templates/ja_barite_1.5_template/images/blue/header-bg.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/templates/ja_barite_1.5_template/css/colors/blue.css
If-Modified-Since: Wed, 26 Mar 2008 09:40:38 GMT
If-None-Match: "2ef4485-be-dc8a3180"
Cache-Control: max-age=0


10:35:32.300481 IP 192.168.2.3.59282 > 78.159.112.12.80: Flags [.], ack 1847593179, win 65535, options [nop,nop,TS val 387344190 ecr 1977797429], length 0
E..4..@[email protected] .............
..g>u..5
10:35:32.300611 IP 192.168.2.3.59282 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344190 ecr 1977797429], length 610
E.....@[email protected] .............
..g>u..5GET /portal/templates/ja_barite_1.5_template/images/search-tab.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/templates/ja_barite_1.5_template/css/template.css
If-Modified-Since: Thu, 07 Feb 2008 14:15:50 GMT
If-None-Match: "2ef4468-301-1c595180"
Cache-Control: max-age=0


10:35:32.302773 IP 192.168.2.3.59283 > 78.159.112.12.80: Flags [.], ack 1845814508, win 65535, options [nop,nop,TS val 387344190 ecr 1977797431], length 0
E..4..@[email protected]%...n........Q.....
..g>u..7
10:35:32.302864 IP 192.168.2.3.59283 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344190 ecr 1977797431], length 620
E.....@[email protected]%...n.......o-.....
..g>u..7GET /portal/templates/ja_barite_1.5_template/images/blue/tab-active-bg.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/templates/ja_barite_1.5_template/css/colors/blue.css
If-Modified-Since: Thu, 07 Feb 2008 14:16:03 GMT
If-None-Match: "2ef448b-dd-1d1faec0"
Cache-Control: max-age=0


10:35:32.329936 IP 192.168.2.3.59278 > 78.159.112.12.80: Flags [.], ack 131, win 65535, options [nop,nop,TS val 387344190 ecr 1977797459], length 0
E..4Q.@[email protected].....*n.....
..g>u..S
10:35:32.330146 IP 192.168.2.3.59278 > 78.159.112.12.80: Flags [F.], seq 563, ack 131, win 65535, options [nop,nop,TS val 387344190 ecr 1977797459], length 0
E..4..@[email protected].....*m.....
..g>u..S
10:35:32.330327 IP 192.168.2.3.59284 > 78.159.112.12.80: Flags [S], seq 4170188942, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344190 ecr 0,sackOK,eol], length 0
E..@_.@[email protected].............
..g>........
10:35:32.332489 IP 192.168.2.3.59278 > 78.159.112.12.80: Flags [F.], seq 563, ack 132, win 65535, options [nop,nop,TS val 387344190 ecr 1977797459], length 0
E..4..@[email protected].....*l.....
..g>u..S
10:35:32.343116 IP 192.168.2.3.59279 > 78.159.112.12.80: Flags [.], ack 131, win 65535, options [nop,nop,TS val 387344190 ecr 1977797472], length 0
E..4..@[email protected]~3..n........!.....
..g>u..`
10:35:32.343323 IP 192.168.2.3.59279 > 78.159.112.12.80: Flags [F.], seq 560, ack 131, win 65535, options [nop,nop,TS val 387344190 ecr 1977797472], length 0
E..4..@.@. .....N.p....P~3..n........ .....
..g>u..`
10:35:32.343945 IP 192.168.2.3.59285 > 78.159.112.12.80: Flags [S], seq 4275503447, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344190 ecr 0,sackOK,eol], length 0
E..@..@[email protected]?.............
..g>........
10:35:32.347118 IP 192.168.2.3.59279 > 78.159.112.12.80: Flags [F.], seq 560, ack 132, win 65535, options [nop,nop,TS val 387344190 ecr 1977797472], length 0
E..4..@[email protected]~3..n..............
..g>u..`
10:35:32.356646 IP 192.168.2.3.59280 > 78.159.112.12.80: Flags [.], ack 131, win 65535, options [nop,nop,TS val 387344190 ecr 1977797486], length 0
E..4..@.@.
.....N.p....P&ol.n..W....P......
..g>u..n
10:35:32.356828 IP 192.168.2.3.59280 > 78.159.112.12.80: Flags [F.], seq 563, ack 131, win 65535, options [nop,nop,TS val 387344190 ecr 1977797486], length 0
E..4..@[email protected]&ol.n..W....P......
..g>u..n
10:35:32.357313 IP 192.168.2.3.59286 > 78.159.112.12.80: Flags [S], seq 1504332039, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344190 ecr 0,sackOK,eol], length 0
E..@..@[email protected]........................
..g>........
10:35:32.358140 IP 192.168.2.3.59280 > 78.159.112.12.80: Flags [F.], seq 563, ack 132, win 65535, options [nop,nop,TS val 387344191 ecr 1977797486], length 0
E..41.@[email protected]&ol.n..X....O......
..g?u..n
10:35:32.376543 IP 192.168.2.3.59281 > 78.159.112.12.80: Flags [.], ack 131, win 65535, options [nop,nop,TS val 387344191 ecr 1977797505], length 0
E..4G.@[email protected]......
..g?u...
10:35:32.376739 IP 192.168.2.3.59281 > 78.159.112.12.80: Flags [F.], seq 616, ack 131, win 65535, options [nop,nop,TS val 387344191 ecr 1977797505], length 0
E..4..@[email protected]......
..g?u...
10:35:32.376880 IP 192.168.2.3.59281 > 78.159.112.12.80: Flags [F.], seq 616, ack 132, win 65535, options [nop,nop,TS val 387344191 ecr 1977797505], length 0
E..4W.@[email protected]......
..g?u...
10:35:32.377244 IP 192.168.2.3.59287 > 78.159.112.12.80: Flags [S], seq 3699222615, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344191 ecr 0,sackOK,eol], length 0
E..@..@[email protected].}.W.......................
..g?........
10:35:32.387845 IP 192.168.2.3.59288 > 208.43.241.185.80: Flags [S], seq 1953072143, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344191 ecr 0,sackOK,eol], length 0
E..@z.@.@.;Q.....+.....Pti..........S..............
..g?........
10:35:32.389876 IP 192.168.2.3.59282 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344191 ecr 1977797519], length 0
E..4l.@[email protected]".n ^...........
..g?u...
10:35:32.390078 IP 192.168.2.3.59282 > 78.159.112.12.80: Flags [F.], seq 610, ack 132, win 65535, options [nop,nop,TS val 387344191 ecr 1977797519], length 0
E..4$.@[email protected]".n ^...........
..g?u...
10:35:32.390650 IP 192.168.2.3.59289 > 78.159.112.12.80: Flags [S], seq 222804942, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344191 ecr 0,sackOK,eol], length 0
G...........S.............
..g?........
10:35:32.391883 IP 192.168.2.3.59282 > 78.159.112.12.80: Flags [F.], seq 610, ack 133, win 65535, options [nop,nop,TS val 387344191 ecr 1977797519], length 0
E..4}.@.@.;.....N.p....P.t".n _...........
..g?u...
10:35:32.392797 IP 192.168.2.3.59223 > 216.239.59.100.80: Flags [.], ack 3822420223, win 65535, options [nop,nop,TS val 387344191 ecr 1002958683], length 1418
E...<.@.@.!.......;d.W.P!...........0......
..g?;..[GET /v/VoDntptaCLk&hl=it&fs=1& HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
Cookie: watched_video_id_list_mai1or=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
10:35:32.404979 IP 192.168.2.3.59283 > 78.159.112.12.80: Flags [.], ack 131, win 65535, options [nop,nop,TS val 387344191 ecr 1977797533], length 0
E..4c.@[email protected]%...n..n...........
..g?u...
10:35:32.405206 IP 192.168.2.3.59283 > 78.159.112.12.80: Flags [F.], seq 620, ack 131, win 65535, options [nop,nop,TS val 387344191 ecr 1977797533], length 0
E..4..@[email protected]%...n..n...........
..g?u...
10:35:32.405422 IP 192.168.2.3.59283 > 78.159.112.12.80: Flags [F.], seq 620, ack 132, win 65535, options [nop,nop,TS val 387344191 ecr 1977797533], length 0
E..4 .@[email protected]%...n..o...........
..g?u...
10:35:32.405880 IP 192.168.2.3.59290 > 78.159.112.12.80: Flags [S], seq 3718072238, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344191 ecr 0,sackOK,eol], length 0
E..@..@[email protected].........*..............
..g?........
10:35:32.409517 IP 192.168.2.3.59278 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344191 ecr 1977797536], length 0
E..4..@[email protected].....*......
..g?u...
10:35:32.412835 IP 192.168.2.3.59284 > 78.159.112.12.80: Flags [.], ack 1859781223, win 65535, options [nop,nop,TS val 387344191 ecr 1977797538], length 0
E..4..@[email protected].....
..g?u...
10:35:32.412971 IP 192.168.2.3.59284 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344191 ecr 1977797538], length 548
E..X..@[email protected].....
..g?u...GET /media/header.swf HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Sat, 28 Jun 2008 14:00:30 GMT
If-None-Match: "2ef801e-c3e4a-72fa7b80"
Cache-Control: max-age=0


10:35:32.415243 IP 192.168.2.3.59279 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344191 ecr 1977797543], length 0
E..49.@[email protected]~3..n..............
..g?u...
10:35:32.417335 IP 192.168.2.3.59285 > 78.159.112.12.80: Flags [.], ack 1860744901, win 65535, options [nop,nop,TS val 387344191 ecr 1977797545], length 0
E..4-.@[email protected].......'......
..g?u...
10:35:32.417455 IP 192.168.2.3.59285 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344191 ecr 1977797545], length 605
E.....@[email protected]#....N.p....P...Xn........I.....
..g?u...GET /portal/templates/ja_barite_1.5_template/images/bullet.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/templates/ja_barite_1.5_template/css/template.css
If-Modified-Since: Thu, 07 Feb 2008 14:15:43 GMT
If-None-Match: "2ef4438-31-1bee81c0"
Cache-Control: max-age=0


10:35:32.424163 IP 192.168.2.3.59280 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344191 ecr 1977797553], length 0
E..4..@[email protected]&ol.n..X....O......
..g?u...
10:35:32.426115 IP 192.168.2.3.59286 > 78.159.112.12.80: Flags [.], ack 1855910710, win 65535, options [nop,nop,TS val 387344191 ecr 1977797555], length 0
E..4..@.@. .....N.p....PY.I.n..6....I......
..g?u...
10:35:32.426222 IP 192.168.2.3.59286 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344191 ecr 1977797555], length 614
E.....@.@..{....N.p....PY.I.n..6...........
..g?u...GET /portal/templates/ja_barite_1.5_template/images/blue/tab-bg.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/templates/ja_barite_1.5_template/css/colors/blue.css
If-Modified-Since: Thu, 07 Feb 2008 14:16:03 GMT
If-None-Match: "2ef448c-3a2-1d1faec0"
Cache-Control: max-age=0


10:35:32.443914 IP 192.168.2.3.59281 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344191 ecr 1977797573], length 0
E..4..@.@..}....N.p....P...in0.1....N......
..g?u...
10:35:32.448356 IP 192.168.2.3.59287 > 78.159.112.12.80: Flags [.], ack 1851058072, win 65535, options [nop,nop,TS val 387344191 ecr 1977797578], length 0
E..43.@[email protected].}.XnT......r......
..g?u...
10:35:32.448512 IP 192.168.2.3.59287 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344191 ecr 1977797578], length 608
E...?.@[email protected].}.XnT......aC.....
..g?u...GET /portal/templates/ja_barite_1.5_template/images/usertool.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/templates/ja_barite_1.5_template/css/template.css
If-Modified-Since: Thu, 07 Feb 2008 14:15:52 GMT
If-None-Match: "2ef447c-500-1c77d600"
Cache-Control: max-age=0


10:35:32.459237 IP 192.168.2.3.59282 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344192 ecr 1977797588], length 0
E..4..@[email protected]".n _.....o.....
..g@u...
10:35:32.461554 IP 192.168.2.3.59289 > 78.159.112.12.80: Flags [.], ack 1858819595, win 65535, options [nop,nop,TS val 387344192 ecr 1977797591], length 0
G..n.V......~.....p....P
..g@u...
10:35:32.461701 IP 192.168.2.3.59289 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344192 ecr 1977797591], length 561
G..n.V......'.....p....P
[email protected] /portal/templates/ja_barite_1.5_template/images/blue-hilite.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Thu, 07 Feb 2008 14:15:40 GMT
If-None-Match: "2ef4426-88-1bc0bb00"
Cache-Control: max-age=0


10:35:32.493812 IP 192.168.2.3.59283 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344192 ecr 1977797623], length 0
E..46.@[email protected]%...n..o...........
..g@u...
10:35:32.497076 IP 192.168.2.3.59290 > 78.159.112.12.80: Flags [.], ack 1861368037, win 65535, options [nop,nop,TS val 387344192 ecr 1977797626], length 0
E..4;.@.@.}{....N.p....P..G.n.8......#.....
..g@u...
10:35:32.497231 IP 192.168.2.3.59290 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344192 ecr 1977797626], length 519
E..;O.@[email protected]............
[email protected] /img/blubar2009.jpg HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Mon, 27 Jul 2009 16:12:19 GMT
If-None-Match: "2ef8c7e-9cd7-37ddfec0"
Cache-Control: max-age=0


10:35:32.503369 IP 192.168.2.3.59223 > 216.239.59.100.80: Flags [.], ack 1, win 65535, options [nop,nop,TS val 387344192 ecr 1003076881], length 1418
E.....@[email protected]......;d.W.P!..................
..g@;...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; VISITOR_INFO1_LIVE=J0ttLCAMlaY; PREF=f1=50000000&vq=2; LOGIN_INFO=40538910dda581212192b88bbc7c3a6ec1IAAAB7IjEiOiAxLCAiMyI6IDMyNTM3OTgyMiwgIjIiOiAiRVRqTHBsRVNZbFJuRlVvVmtXdl8zQT09IiwgIjUi
10:35:32.503397 IP 192.168.2.3.59223 > 216.239.59.100.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344192 ecr 1003076881], length 413
E.....@[email protected]......;d.W.P!...........
......
..g@;...OiA2OTg4NiwgIjQiOiAiR0FJQSJ9; dkv=afeafc417c76279f77971ee5b180b0e6e3QJAAAAYWdlX3JhbmdlaQMAAAB0BgAAAGdlbmRlcnQBAAAAbXQDAAAAYWdlaRgAAAB0AgAAAGtsdAEAAABOdAQAAABjYW52VHQHAAAAdmVyc2lvbmkIAAAAdAIAAABrdVIFAAAAdAoAAAB1c2VyX2dyb3VwdAEAAABVMA==; __utma=27069237.282133652763791840.1246537177.1246537177.1246977868.2; __utmz=27069237.1246537177.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none)
Cache-Control: max-age=0


10:35:32.514237 IP 192.168.2.3.59284 > 78.159.112.12.80: Flags [.], ack 134, win 65535, options [nop,nop,TS val 387344192 ecr 1977797642], length 0
E..4..@[email protected]..
.n........3.....
..g@u..

10:35:32.514314 IP 192.168.2.3.59284 > 78.159.112.12.80: Flags [.], ack 135, win 65535, options [nop,nop,TS val 387344192 ecr 1977797642], length 0
E..4..@.@.&x....N.p....P..
.n........2.....
..g@u..

10:35:32.514431 IP 192.168.2.3.59284 > 78.159.112.12.80: Flags [F.], seq 548, ack 135, win 65535, options [nop,nop,TS val 387344192 ecr 1977797642], length 0
E..4+.@[email protected]..
.n........1.....
..g@u..

10:35:32.515125 IP 192.168.2.3.59291 > 78.159.112.12.80: Flags [S], seq 2545191769, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344192 ecr 0,sackOK,eol], length 0
E..@..@[email protected]........,X.............
..g@........
10:35:32.527704 IP 192.168.2.3.59288 > 208.43.241.185.80: Flags [.], ack 2959740857, win 65535, options [nop,nop,TS val 387344192 ecr 1757587234], length 0
E..4 .@[email protected].....+.....Pti...j.......j.....
..g@h.."
10:35:32.527901 IP 192.168.2.3.59288 > 208.43.241.185.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344192 ecr 1757587234], length 528
E..D..@.@........+.....Pti...j......D......
..g@h.."GET /105.swf HTTP/1.1
Host: s11.histats.com
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Tue, 11 Nov 2008 14:44:02 GMT
If-None-Match: "2406585876"
Cache-Control: max-age=0


10:35:32.531463 IP 192.168.2.3.59285 > 78.159.112.12.80: Flags [.], ack 131, win 65535, options [nop,nop,TS val 387344192 ecr 1977797658], length 0
E..4z.@.@.>.....N.p....P....n..G....$p.....
..g@u...
10:35:32.531669 IP 192.168.2.3.59285 > 78.159.112.12.80: Flags [F.], seq 605, ack 131, win 65535, options [nop,nop,TS val 387344192 ecr 1977797658], length 0
E..4F.@[email protected]....$o.....
..g@u...
10:35:32.532002 IP 192.168.2.3.59285 > 78.159.112.12.80: Flags [F.], seq 605, ack 132, win 65535, options [nop,nop,TS val 387344192 ecr 1977797658], length 0
E..4..@[email protected]....$n.....
..g@u...
10:35:32.532241 IP 192.168.2.3.59292 > 78.159.112.12.80: Flags [S], seq 2099235328, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344192 ecr 0,sackOK,eol], length 0
E..@E.@[email protected]}............E.............
..g@........
10:35:32.546242 IP 192.168.2.3.59286 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344192 ecr 1977797675], length 0
E..4Q.@[email protected]......
..g@u..+
10:35:32.546564 IP 192.168.2.3.59286 > 78.159.112.12.80: Flags [F.], seq 614, ack 132, win 65535, options [nop,nop,TS val 387344192 ecr 1977797675], length 0
E..4..@[email protected]......
..g@u..+
10:35:32.546675 IP 192.168.2.3.59286 > 78.159.112.12.80: Flags [F.], seq 614, ack 133, win 65535, options [nop,nop,TS val 387344192 ecr 1977797675], length 0
E..4..@[email protected]......
..g@u..+
10:35:32.547118 IP 192.168.2.3.59293 > 78.159.112.12.80: Flags [S], seq 2356091274, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344192 ecr 0,sackOK,eol], length 0
E..@3.@[email protected].............
..g@........
10:35:32.562080 IP 192.168.2.3.59287 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344193 ecr 1977797691], length 0
E..4H.@[email protected].}..nT......ob.....
..gAu..;
10:35:32.562310 IP 192.168.2.3.59287 > 78.159.112.12.80: Flags [F.], seq 608, ack 132, win 65535, options [nop,nop,TS val 387344193 ecr 1977797691], length 0
E..4\.@.@.\~....N.p....P.}..nT......oa.....
..gAu..;
10:35:32.562822 IP 192.168.2.3.59294 > 78.159.112.12.80: Flags [S], seq 1892608625, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344193 ecr 0,sackOK,eol], length 0
E..@..@[email protected].........!.............
..gA........
10:35:32.563396 IP 192.168.2.3.59287 > 78.159.112.12.80: Flags [F.], seq 608, ack 133, win 65535, options [nop,nop,TS val 387344193 ecr 1977797691], length 0
E..4..@.@.+.....N.p....P.}..nT......o`.....
..gAu..;
10:35:32.576693 IP 192.168.2.3.59289 > 78.159.112.12.80: Flags [.], ack 131, win 65535, options [nop,nop,TS val 387344193 ecr 1977797706], length 0
G..n.V......W.....p....P
..gAu..J
10:35:32.576912 IP 192.168.2.3.59289 > 78.159.112.12.80: Flags [F.], seq 561, ack 131, win 65535, options [nop,nop,TS val 387344193 ecr 1977797706], length 0
G..n.V......V.....p....P
..gAu..J
10:35:32.577487 IP 192.168.2.3.59289 > 78.159.112.12.80: Flags [F.], seq 561, ack 132, win 65535, options [nop,nop,TS val 387344193 ecr 1977797706], length 0
G..n.V......U.....p....P
..gAu..J
10:35:32.577629 IP 192.168.2.3.59295 > 78.159.112.12.80: Flags [S], seq 2032793774, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344193 ecr 0,sackOK,eol], length 0
E..@..@[email protected]).........................
..gA........
10:35:32.591868 IP 192.168.2.3.59290 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344193 ecr 1977797720], length 0
E..4%.@.@..|....N.p....P..I.n.9i....}9.....
..gAu..X
10:35:32.592253 IP 192.168.2.3.59290 > 78.159.112.12.80: Flags [.], ack 134, win 65535, options [nop,nop,TS val 387344193 ecr 1977797720], length 0
.....N.p....P..I.n.9j....}8.....
..gAu..X
10:35:32.592370 IP 192.168.2.3.59290 > 78.159.112.12.80: Flags [F.], seq 519, ack 134, win 65535, options [nop,nop,TS val 387344193 ecr 1977797720], length 0
E..49.@[email protected]....}7.....
..gAu..X
10:35:32.593265 IP 192.168.2.3.59296 > 78.159.112.12.80: Flags [S], seq 651578263, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344193 ecr 0,sackOK,eol], length 0
E..@..@[email protected]&.K........................
..gA........
10:35:32.634293 IP 192.168.2.3.59291 > 78.159.112.12.80: Flags [.], ack 1852061293, win 65535, options [nop,nop,TS val 387344193 ecr 1977797763], length 0
E..4U.@[email protected]...........
..gAu...
10:35:32.634455 IP 192.168.2.3.59291 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344193 ecr 1977797763], length 613
E.....@.@.* ....N.p....P...Znd6m....>......
..gAu...GET /portal/templates/ja_barite_1.5_template/images/blue/h32-r.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/templates/ja_barite_1.5_template/css/colors/blue.css
If-Modified-Since: Thu, 07 Feb 2008 14:16:02 GMT
If-None-Match: "2ef4484-1d3-1d106c80"
Cache-Control: max-age=0


10:35:32.651086 IP 192.168.2.3.59285 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344193 ecr 1977797780], length 0
E..4<.@.@.|o....N.p....P....n..H....#......
..gAu...
10:35:32.654479 IP 192.168.2.3.59292 > 78.159.112.12.80: Flags [.], ack 1860105041, win 65535, options [nop,nop,TS val 387344193 ecr 1977797784], length 0
E..4?.@[email protected]}...n..Q.....U.....
..gAu...
10:35:32.654621 IP 192.168.2.3.59292 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344193 ecr 1977797784], length 613
E...4.@.@..\....N.p....P}...n..Q....[{.....
..gAu...GET /portal/templates/ja_barite_1.5_template/images/blue/h31-l.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/templates/ja_barite_1.5_template/css/colors/blue.css
If-Modified-Since: Thu, 07 Feb 2008 14:16:02 GMT
If-None-Match: "2ef4482-107-1d106c80"
Cache-Control: max-age=0


10:35:32.659211 IP 192.168.2.3.59286 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344194 ecr 1977797788], length 0
E..4..@[email protected].....
..gBu...
10:35:32.662617 IP 192.168.2.3.59293 > 78.159.112.12.80: Flags [.], ack 1861125308, win 65535, options [nop,nop,TS val 387344194 ecr 1977797791], length 0
E..4:.@.@.~.....N.p....P.o..n..............
..gBu...
10:35:32.662822 IP 192.168.2.3.59293 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344194 ecr 1977797791], length 604
E...K.@[email protected]..............
..gBu...GET /portal/templates/ja_barite_1.5_template/images/hline.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/templates/ja_barite_1.5_template/css/template.css
If-Modified-Since: Thu, 07 Feb 2008 14:15:45 GMT
If-None-Match: "2ef444b-2b-1c0d0640"
Cache-Control: max-age=0


10:35:32.665839 IP 192.168.2.3.59287 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344194 ecr 1977797795], length 0
E..4..@[email protected].}..nT......n......
..gBu...
10:35:32.668173 IP 192.168.2.3.59294 > 78.159.112.12.80: Flags [.], ack 1851952699, win 65535, options [nop,nop,TS val 387344194 ecr 1977797797], length 0
E..4..@[email protected].;...........
..gBu...
10:35:32.668366 IP 192.168.2.3.59294 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344194 ecr 1977797797], length 608
E.....@[email protected].;....r......
..gBu...GET /portal/templates/ja_barite_1.5_template/images/icon-plus.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/templates/ja_barite_1.5_template/css/template.css
If-Modified-Since: Thu, 07 Feb 2008 14:15:47 GMT
If-None-Match: "2ef4455-36-1c2b8ac0"
Cache-Control: max-age=0


10:35:32.673220 IP 192.168.2.3.59289 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344194 ecr 1977797802], length 0
G..n.V............p....P
..gBu...
10:35:32.676860 IP 192.168.2.3.59295 > 78.159.112.12.80: Flags [.], ack 1857620122, win 65535, options [nop,nop,TS val 387344194 ecr 1977797806], length 0
E..4..@[email protected])..n.......c`.....
..gBu...
10:35:32.677033 IP 192.168.2.3.59295 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344194 ecr 1977797806], length 537
E..M..@[email protected])..n.......\......
..gBu...GET /img/banner/lateral/banner_fvilla.jpg HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Sat, 28 Jun 2008 14:54:13 GMT
If-None-Match: "2ef8043-38e0-33158f40"
Cache-Control: max-age=0


10:35:32.683077 IP 192.168.2.3.59296 > 78.159.112.12.80: Flags [.], ack 1861924456, win 65535, options [nop,nop,TS val 387344194 ecr 1977797812], length 0
E..4..@[email protected]&.K.n..h...........
..gBu...
10:35:32.683265 IP 192.168.2.3.59296 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344194 ecr 1977797812], length 620
E.....@[email protected]&.K.n..h.....7.....
..gBu...GET /portal/templates/ja_barite_1.5_template/images/blue/spotlight-bg.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/templates/ja_barite_1.5_template/css/colors/blue.css
If-Modified-Since: Thu, 07 Feb 2008 14:16:03 GMT
If-None-Match: "2ef448a-130-1d1faec0"
Cache-Control: max-age=0


10:35:32.714272 IP 192.168.2.3.59291 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344194 ecr 1977797843], length 0
E..4..@.@.+.....N.p....P....nd6............
..gBu...
10:35:32.714494 IP 192.168.2.3.59291 > 78.159.112.12.80: Flags [F.], seq 613, ack 132, win 65535, options [nop,nop,TS val 387344194 ecr 1977797843], length 0
E..4=.@.@.{.....N.p....P....nd6............
..gBu...
10:35:32.714637 IP 192.168.2.3.59291 > 78.159.112.12.80: Flags [F.], seq 613, ack 133, win 65535, options [nop,nop,TS val 387344194 ecr 1977797843], length 0
E..4..@[email protected]............
..gBu...
10:35:32.714998 IP 192.168.2.3.59297 > 78.159.112.12.80: Flags [S], seq 145450762, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344194 ecr 0,sackOK,eol], length 0
E..@..@[email protected]
.......................
..gB........
10:35:32.720402 IP 192.168.2.3.59288 > 208.43.241.185.80: Flags [.], ack 225, win 65535, options [nop,nop,TS val 387344194 ecr 1757587427], length 0
E..4..@[email protected].....+.....Pti. .j.............
..gBh...
10:35:32.735522 IP 192.168.2.3.59292 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344194 ecr 1977797864], length 0
E..4_.@[email protected]}..fn..............
..gBu...
10:35:32.735718 IP 192.168.2.3.59292 > 78.159.112.12.80: Flags [F.], seq 613, ack 132, win 65535, options [nop,nop,TS val 387344194 ecr 1977797864], length 0
E..4..@[email protected]}..fn..............
..gBu...
10:35:32.736203 IP 192.168.2.3.59298 > 78.159.112.12.80: Flags [S], seq 3155871022, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344194 ecr 0,sackOK,eol], length 0
E..@g.@[email protected]...........................
..gB........
10:35:32.738620 IP 192.168.2.3.59292 > 78.159.112.12.80: Flags [F.], seq 613, ack 133, win 65535, options [nop,nop,TS val 387344194 ecr 1977797864], length 0
E..4}.@.@.;.....N.p....P}..fn..............
..gBu...
10:35:32.751025 IP 192.168.2.3.59293 > 78.159.112.12.80: Flags [.], ack 131, win 65535, options [nop,nop,TS val 387344194 ecr 1977797880], length 0
E..4
.@[email protected]..>...........
..gBu...
10:35:32.751233 IP 192.168.2.3.59293 > 78.159.112.12.80: Flags [F.], seq 604, ack 131, win 65535, options [nop,nop,TS val 387344194 ecr 1977797880], length 0
E..4..@[email protected]..>...........
..gBu...
10:35:32.751802 IP 192.168.2.3.59299 > 78.159.112.12.80: Flags [S], seq 1111528378, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344194 ecr 0,sackOK,eol], length 0
E..@..@[email protected]@..........ya.............
..gB........
10:35:32.754552 IP 192.168.2.3.59293 > 78.159.112.12.80: Flags [F.], seq 604, ack 132, win 65535, options [nop,nop,TS val 387344194 ecr 1977797880], length 0
.....N.p....P.o..n..?...........
..gBu...
10:35:32.768366 IP 192.168.2.3.59294 > 78.159.112.12.80: Flags [.], ack 131, win 65535, options [nop,nop,TS val 387344195 ecr 1977797896], length 0
E..4C.@[email protected].....
..gCu...
10:35:32.768575 IP 192.168.2.3.59294 > 78.159.112.12.80: Flags [F.], seq 608, ack 131, win 65535, options [nop,nop,TS val 387344195 ecr 1977797896], length 0
E..4..@[email protected].....
..gCu...
10:35:32.769066 IP 192.168.2.3.59300 > 78.159.112.12.80: Flags [S], seq 1522815055, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344195 ecr 0,sackOK,eol], length 0
E..@..@[email protected].............
..gC........
10:35:32.770549 IP 192.168.2.3.59294 > 78.159.112.12.80: Flags [F.], seq 608, ack 132, win 65535, options [nop,nop,TS val 387344195 ecr 1977797896], length 0
E..4..@[email protected].....
..gCu...
10:35:32.782029 IP 192.168.2.3.59295 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344195 ecr 1977797910], length 0
E..4F.@[email protected])..n. .....`Z.....
..gCu...
10:35:32.782252 IP 192.168.2.3.59295 > 78.159.112.12.80: Flags [F.], seq 537, ack 133, win 65535, options [nop,nop,TS val 387344195 ecr 1977797910], length 0
E..4..@.@.(.....N.p....Py)..n. .....`Y.....
..gCu...
10:35:32.782356 IP 192.168.2.3.59295 > 78.159.112.12.80: Flags [F.], seq 537, ack 134, win 65535, options [nop,nop,TS val 387344195 ecr 1977797910], length 0
E..4#.@[email protected])..n. .....`X.....
..gCu...
10:35:32.782797 IP 192.168.2.3.59301 > 78.159.112.12.80: Flags [S], seq 299709492, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344195 ecr 0,sackOK,eol], length 0
E..@..@[email protected]........ H.............
..gC........
10:35:32.797934 IP 192.168.2.3.59296 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344195 ecr 1977797926], length 0
E..4..@[email protected]&.N.n........R.....
..gCu..&
10:35:32.798261 IP 192.168.2.3.59296 > 78.159.112.12.80: Flags [F.], seq 620, ack 132, win 65535, options [nop,nop,TS val 387344195 ecr 1977797926], length 0
E..4..@[email protected]&.N.n........Q.....
..gCu..&
10:35:32.798839 IP 192.168.2.3.59302 > 78.159.112.12.80: Flags [S], seq 4088844161, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344195 ecr 0,sackOK,eol], length 0
E..@-.@[email protected]...........................
..gC........
10:35:32.799021 IP 192.168.2.3.59296 > 78.159.112.12.80: Flags [F.], seq 620, ack 133, win 65535, options [nop,nop,TS val 387344195 ecr 1977797926], length 0
E..4].@.@.[.....N.p....P&.N.n........P.....
..gCu..&
10:35:32.802167 IP 192.168.2.3.59291 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344195 ecr 1977797929], length 0
E..4 .@[email protected].....
..gCu..)
10:35:32.804274 IP 192.168.2.3.59297 > 78.159.112.12.80: Flags [.], ack 1856635313, win 65535, options [nop,nop,TS val 387344195 ecr 1977797933], length 0
E..4!.@[email protected]......
..gCu..-
10:35:32.804418 IP 192.168.2.3.59297 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344195 ecr 1977797933], length 546
E..Vq.@[email protected]..............
..gCu..-GET /portal/images/stories/programma2009_side2.jpg HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Mon, 27 Jul 2009 16:25:57 GMT
If-None-Match: "2ef01af-e2aa-689faf40"
Cache-Control: max-age=0


10:35:32.808702 IP 192.168.2.3.59303 > 208.43.241.185.80: Flags [S], seq 2361181183, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344195 ecr 0,sackOK,eol], length 0
.@[email protected].....+.....P.............`.............
..gC........
10:35:32.808778 IP 192.168.2.3.59292 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344195 ecr 1977797938], length 0
E..4 .@[email protected]}..gn..............
..gCu..2
10:35:32.810633 IP 192.168.2.3.59298 > 78.159.112.12.80: Flags [.], ack 1863076511, win 65535, options [nop,nop,TS val 387344195 ecr 1977797939], length 0
E..4!.@[email protected].../o.J............
..gCu..3
10:35:32.810763 IP 192.168.2.3.59298 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344195 ecr 1977797939], length 546
E..VR.@[email protected].../o.J......^.....
..gCu..3GET /portal/images/banners/Banner%20Agostinelli.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Mon, 01 Sep 2008 18:46:48 GMT
If-None-Match: "2ef0905-28f7-68d5600"
Cache-Control: max-age=0


10:35:32.820169 IP 192.168.2.3.59223 > 216.239.59.100.80: Flags [.], ack 1269, win 65424, options [nop,nop,TS val 387344195 ecr 1003077196], length 0
E..4J.@.@..@......;d.W.P!..................
..gC;..L
10:35:32.821940 IP 192.168.2.3.59293 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344195 ecr 1977797948], length 0
E..4..@[email protected]..?.....z.....
..gCu..<
10:35:32.822404 IP 192.168.2.3.59299 > 78.159.112.12.80: Flags [.], ack 1851694786, win 65535, options [nop,nop,TS val 387344195 ecr 1977797950], length 0
E..4F.@[email protected]@..n^......h......
..gCu..>
10:35:32.822517 IP 192.168.2.3.59299 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344195 ecr 1977797950], length 558
E..b..@.@.#[email protected]^......3......
..gCu..>GET /portal/templates/ja_barite_1.5_template/images/but-css.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Thu, 07 Feb 2008 14:15:43 GMT
If-None-Match: "2ef443a-2a0-1bee81c0"
Cache-Control: max-age=0


10:35:32.836461 IP 192.168.2.3.59294 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344195 ecr 1977797966], length 0
E..4..@[email protected].......).....
..gCu..N
10:35:32.838521 IP 192.168.2.3.59300 > 78.159.112.12.80: Flags [.], ack 1866146318, win 65535, options [nop,nop,TS val 387344195 ecr 1977797967], length 0
E..4..@[email protected];"............
..gCu..O
10:35:32.838766 IP 192.168.2.3.59300 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344195 ecr 1977797967], length 562
E..f..@.@.)?....N.p....PZ.PPo;".....%......
..gCu..OGET /portal/templates/ja_barite_1.5_template/images/but-xhtml10.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/
If-Modified-Since: Thu, 07 Feb 2008 14:15:43 GMT
If-None-Match: "2ef443b-2c2-1bee81c0"
Cache-Control: max-age=0


10:35:32.850524 IP 192.168.2.3.59295 > 78.159.112.12.80: Flags [.], ack 134, win 65535, options [nop,nop,TS val 387344195 ecr 1977797979], length 0
E..4..@[email protected])..n. .....`......
..gCu..[
10:35:32.852605 IP 192.168.2.3.59301 > 78.159.112.12.80: Flags [.], ack 1853569727, win 65535, options [nop,nop,TS val 387344195 ecr 1977797982], length 0
E..4..@[email protected]{:.....\......
..gCu..^
10:35:32.852870 IP 192.168.2.3.59301 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344195 ecr 1977797982], length 605
E.....@[email protected]{:.....b{.....
..gCu..^GET /portal/templates/ja_barite_1.5_template/images/grad1.jpg HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/templates/ja_barite_1.5_template/css/template.css
If-Modified-Since: Thu, 07 Feb 2008 14:15:44 GMT
If-None-Match: "2ef4441-145-1bfdc400"
Cache-Control: max-age=0


10:35:32.864979 IP 192.168.2.3.59296 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344196 ecr 1977797994], length 0
E..4..@[email protected]&.N.n..............
..gDu..j
10:35:32.867836 IP 192.168.2.3.59302 > 78.159.112.12.80: Flags [.], ack 1858010819, win 65535, options [nop,nop,TS val 387344196 ecr 1977797997], length 0
E..4..@[email protected]........ .....
..gDu..m
10:35:32.868096 IP 192.168.2.3.59302 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344196 ecr 1977797997], length 609
....N.p....P....n.......R......
..gDu..mGET /portal/templates/ja_barite_1.5_template/images/icon-user.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/templates/ja_barite_1.5_template/css/template.css
If-Modified-Since: Thu, 07 Feb 2008 14:15:47 GMT
If-None-Match: "2ef4459-406-1c2b8ac0"
Cache-Control: max-age=0


10:35:32.885939 IP 192.168.2.3.59297 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344196 ecr 1977798014], length 0
E..4*.@[email protected]......
..gDu..~
10:35:32.886066 IP 192.168.2.3.59297 > 78.159.112.12.80: Flags [.], ack 134, win 65535, options [nop,nop,TS val 387344196 ecr 1977798014], length 0
E..4..@.@..{....N.p....P..i-n..6....i......
..gDu..~
10:35:32.886232 IP 192.168.2.3.59297 > 78.159.112.12.80: Flags [F.], seq 546, ack 134, win 65535, options [nop,nop,TS val 387344196 ecr 1977798014], length 0
E..4..@[email protected]......
..gDu..~
10:35:32.887056 IP 192.168.2.3.59304 > 78.159.112.12.80: Flags [S], seq 3522656110, win 65535, options [mss 1460,nop,wscale 3,nop,nop,TS val 387344196 ecr 0,sackOK,eol], length 0
E..@..@.@.*.....N.p....P..wn.......................
..gD........
10:35:32.902122 IP 192.168.2.3.59298 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344196 ecr 1977798031], length 0
E..4#.@[email protected]"...........
..gDu...
10:35:32.902290 IP 192.168.2.3.59298 > 78.159.112.12.80: Flags [F.], seq 546, ack 132, win 65535, options [nop,nop,TS val 387344196 ecr 1977798031], length 0
E..4m.@[email protected]"...........
..gDu...
10:35:32.904755 IP 192.168.2.3.59298 > 78.159.112.12.80: Flags [F.], seq 546, ack 133, win 65535, options [nop,nop,TS val 387344196 ecr 1977798031], length 0
E..4..@[email protected]#.....
.....
..gDu...
10:35:32.918913 IP 192.168.2.3.59299 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344196 ecr 1977798048], length 0
E..4..@[email protected]@..n^.E....e......
..gDu...
10:35:32.919067 IP 192.168.2.3.59299 > 78.159.112.12.80: Flags [F.], seq 558, ack 132, win 65535, options [nop,nop,TS val 387344196 ecr 1977798048], length 0
E..4..@[email protected]@..n^.E....e......
..gDu...
10:35:32.921575 IP 192.168.2.3.59299 > 78.159.112.12.80: Flags [F.], seq 558, ack 133, win 65535, options [nop,nop,TS val 387344196 ecr 1977798048], length 0
E..4..@[email protected]@..n^.F....e......
..gDu...
10:35:32.934237 IP 192.168.2.3.59300 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344196 ecr 1977798063], length 0
E..4..@[email protected];"......r.....
..gDu...
10:35:32.934365 IP 192.168.2.3.59300 > 78.159.112.12.80: Flags [F.], seq 562, ack 132, win 65535, options [nop,nop,TS val 387344196 ecr 1977798063], length 0
E..4..@[email protected];"......q.....
..gDu...
10:35:32.934393 IP 192.168.2.3.59300 > 78.159.112.12.80: Flags [F.], seq 562, ack 133, win 65535, options [nop,nop,TS val 387344196 ecr 1977798063], length 0
E..4L.@[email protected];"......p.....
..gDu...
10:35:32.950147 IP 192.168.2.3.59301 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344196 ecr 1977798079], length 0
E..4z.@.@.>.....N.p....P..6.n{;B....YG.....
..gDu...
10:35:32.950260 IP 192.168.2.3.59301 > 78.159.112.12.80: Flags [F.], seq 605, ack 132, win 65535, options [nop,nop,TS val 387344196 ecr 1977798079], length 0
E..4h.@[email protected]{;B....YF.....
..gDu...
10:35:32.952173 IP 192.168.2.3.59301 > 78.159.112.12.80: Flags [F.], seq 605, ack 133, win 65535, options [nop,nop,TS val 387344196 ecr 1977798079], length 0
E..4..@[email protected]{;C....YE.....
..gDu...
10:35:32.956377 IP 192.168.2.3.59303 > 208.43.241.185.80: Flags [.], ack 2968419023, win 65535, options [nop,nop,TS val 387344196 ecr 1757587664], length 0
E..4..@.@........+.....P......z............
..gDh...
10:35:32.956488 IP 192.168.2.3.59303 > 208.43.241.185.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344196 ecr 1757587664], length 420
E.....@.@.*......+.....P......z............
..gDh...GET /stats/391969.php?391969&1&0&0.686061687767506 HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive


10:35:32.965617 IP 192.168.2.3.59302 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344197 ecr 1977798095], length 0
E..40.@[email protected]...........
..gEu...
10:35:32.965758 IP 192.168.2.3.59302 > 78.159.112.12.80: Flags [F.], seq 609, ack 132, win 65535, options [nop,nop,TS val 387344197 ecr 1977798095], length 0
E..4..@[email protected]...........
..gEu...
10:35:32.968065 IP 192.168.2.3.59302 > 78.159.112.12.80: Flags [F.], seq 609, ack 133, win 65535, options [nop,nop,TS val 387344197 ecr 1977798095], length 0
E..4..@[email protected]...........
..gEu...
10:35:32.972207 IP 192.168.2.3.59304 > 78.159.112.12.80: Flags [.], ack 1853773994, win 65535, options [nop,nop,TS val 387344197 ecr 1977798101], length 0
E..4..@[email protected]~X.....:......
..gEu...
10:35:32.972288 IP 192.168.2.3.59304 > 78.159.112.12.80: Flags [P.], ack 1, win 65535, options [nop,nop,TS val 387344197 ecr 1977798101], length 608
E... .@.@..[....N.p....P..won~X.....#_.....
..gEu...GET /portal/templates/ja_barite_1.5_template/images/icon-key.gif HTTP/1.1
Host: www.blubar.org
User-Agent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10.5; en-US; rv:1.9.1.1) Gecko/20090715 Firefox/3.5.1
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Referer: http://www.blubar.org/portal/templates/ja_barite_1.5_template/css/template.css
If-Modified-Since: Thu, 07 Feb 2008 14:15:47 GMT
If-None-Match: "2ef4453-20c-1c2b8ac0"
Cache-Control: max-age=0


10:35:32.976774 IP 192.168.2.3.59298 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344197 ecr 1977798105], length 0
......@[email protected]#....
..gEu...
10:35:32.986907 IP 192.168.2.3.59299 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344197 ecr 1977798116], length 0
E..4..@.@.%[email protected]^.F....e......
..gEu...
10:35:33.053935 IP 192.168.2.3.59304 > 78.159.112.12.80: Flags [.], ack 132, win 65535, options [nop,nop,TS val 387344197 ecr 1977798183], length 0
E..4..@[email protected]~Y-....7......
..gEu..'
10:35:33.054099 IP 192.168.2.3.59304 > 78.159.112.12.80: Flags [F.], seq 608, ack 132, win 65535, options [nop,nop,TS val 387344197 ecr 1977798183], length 0
E..4d.@[email protected]~Y-....7......
..gEu..'
10:35:33.054630 IP 192.168.2.3.59304 > 78.159.112.12.80: Flags [F.], seq 608, ack 133, win 65535, options [nop,nop,TS val 387344197 ecr 1977798183], length 0
E..4m.@[email protected]~....N.p....P..y.n~Y.....7......
..gEu..'
10:35:33.103856 IP 192.168.2.3.59303 > 208.43.241.185.80: Flags [.], ack 266, win 65535, options [nop,nop,TS val 387344198 ecr 1757587812], length 0
E..4..@[email protected].....+.....P......{............
..gFh..d
10:35:33.122962 IP 192.168.2.3.59304 > 78.159.112.12.80: Flags [.], ack 133, win 65535, options [nop,nop,TS val 387344198 ecr 1977798252], length 0
E..4b.@[email protected]~Y.....7M.....
..gFu..l


è un gran casotto. Una marea di ack vuoti, tanti sono addirittura duplicati. SYN inconcludenti a profusione, handshake non completati e conclusi da client, forse.

Un comportamento davvero strano, assolutamente riconducibile al kernel darwin.
pasticca
28-07-2009, 15:18
sei stato gentilissimo nel approfondire la questione, anche perchè molte questioni da te toccate sono lontane dalle mie conoscenze.

l hoster mi dice che sono il primo caso che lamenta la problematica, lo ritieni possibile?

comunque ribadisco che da quando ho disinstallato little snich e sto usando firefox (al posto di safari) non ho piu avuto blocchi... coincidenza?
Mailor
28-07-2009, 16:11
sei stato gentilissimo nel approfondire la questione, anche perchè molte questioni da te toccate sono lontane dalle mie conoscenze.

l hoster mi dice che sono il primo caso che lamenta la problematica, lo ritieni possibile?

comunque ribadisco che da quando ho disinstallato little snich e sto usando firefox (al posto di safari) non ho piu avuto blocchi... coincidenza?

no, nessuna coincidenza, poco ma sicuro.

io comunque, nonostante tutto quel casino di traffico, non vengo mai blacklistato.

ma se usi safari senza littlesnitch ti da comunque il problema? :o
pasticca
29-07-2009, 12:42
no, nessuna coincidenza, poco ma sicuro.

io comunque, nonostante tutto quel casino di traffico, non vengo mai blacklistato.

ma se usi safari senza littlesnitch ti da comunque il problema? :o

dovevo fare alcuni aggiornamenti importanti.. quindi ancora provo
ma stasera lavoro un po con safari, vedo che succede

vi tengo aggiornati
pasticca
30-07-2009, 15:31
dunque, oggi ho lavorato con safari e.. magia delle magie... il mio ip è stato blacklistato!!!!

quindi.. per ora so per certo che ci sono problemi con safari
le ultime varianti da valutare sono se il problema si presenta entrando in amministrazione di joomla o con la semplice navigazione

ma vi pare possibile?

è un problema di incompatibilità della hosting con safari o è proprio sta cacchio di hosting che fa ridere??
vi giuro, quando usavo windows non avevo mai lamentato alcun tipo di problema... tantè che l'ho sempre reputata una hosting quasi perfetta
Mailor
30-07-2009, 18:07
dunque, oggi ho lavorato con safari e.. magia delle magie... il mio ip è stato blacklistato!!!!

quindi.. per ora so per certo che ci sono problemi con safari
le ultime varianti da valutare sono se il problema si presenta entrando in amministrazione di joomla o con la semplice navigazione

ma vi pare possibile?

è un problema di incompatibilità della hosting con safari o è proprio sta cacchio di hosting che fa ridere??
vi giuro, quando usavo windows non avevo mai lamentato alcun tipo di problema... tantè che l'ho sempre reputata una hosting quasi perfetta

il traffico che genera quel server è sicuramente almeno strano. Può essere che safari si comporti diversamente da firefox nella gestione di alcune componenti del sito, se sono gestite sessioni o cose del genere, ma mi pare difficile che si arrivi addirittura al blacklisting.

una cosa stranissima davvero.
Gennarino
30-07-2009, 19:55
Packet Peeper ? (WireShark per mac va in crash in continuazione...)
pasticca
30-07-2009, 23:07
Packet Peeper ? (WireShark per mac va in crash in continuazione...)

?? scusa non ti seguo
Mailor
30-07-2009, 23:59
Packet Peeper ? (WireShark per mac va in crash in continuazione...)

a parte che preferisco dumpare tutto con tcpdump e poi semmai darlo in pasto a wireshark per analizzare il traffico, a me wireshark non crasha mai :|

installato dai port.