1 0.000000 10.0.0.1 10.0.0.8 SSH 200 Server: Encrypted packet (len=144) 2 0.000004 10.0.0.1 10.0.0.8 TCP 200 [TCP Retransmission] 22 → 44301 [PSH, ACK] Seq=1 Ack=1 Win=298 Len=144 3 0.000007 10.0.0.1 10.0.0.8 TCP 200 [TCP Retransmission] 22 → 44301 [PSH, ACK] Seq=1 Ack=1 Win=298 Len=144 4 0.057796 10.0.0.8 10.0.0.1 TCP 62 44301 → 22 [ACK] Seq=1 Ack=145 Win=513 Len=0 5 0.057821 10.0.0.8 10.0.0.1 TCP 56 [TCP Dup ACK 4#1] 44301 → 22 [ACK] Seq=1 Ack=145 Win=513 Len=0 6 2.642316 IntelCor_38:c7:4b ARP 62 Who has 10.0.0.1? Tell 10.0.0.8 7 2.642324 IntelCor_38:c7:4b ARP 62 Who has 10.0.0.1? Tell 10.0.0.8 8 2.642335 Sophos_be:9b:99 ARP 44 10.0.0.1 is at 7c:5a:1c:be:9b:99 9 2.642338 Sophos_be:9b:99 ARP 44 10.0.0.1 is at 7c:5a:1c:be:9b:99 10 2.642339 40:00:00:00:00:00 ARP 44 10.0.0.1 is at 7c:5a:1c:be:9b:99 11 2.678675 10.0.0.8 10.0.0.1 DNS 83 Standard query 0xd774 PTR 1.0.0.10.in-addr.arpa 12 2.678723 10.0.0.8 10.0.0.1 DNS 83 Standard query 0xd774 PTR 1.0.0.10.in-addr.arpa 13 2.680484 10.0.0.8 10.0.0.1 TLSv1.2 293 Application Data 14 2.689102 10.0.0.1 10.0.0.8 DNS 83 Standard query response 0xd774 No such name PTR 1.0.0.10.in-addr.arpa 15 2.689106 10.0.0.1 10.0.0.8 DNS 83 Standard query response 0xd774 No such name PTR 1.0.0.10.in-addr.arpa 16 2.689108 10.0.0.1 10.0.0.8 DNS 83 Standard query response 0xd774 No such name PTR 1.0.0.10.in-addr.arpa 17 2.692365 10.0.0.8 10.0.0.1 TCP 62 41606 → 21 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 18 2.692402 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 21 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 19 2.692952 10.0.0.8 10.0.0.1 TCP 62 41606 → 143 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 20 2.692974 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 143 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 21 2.693256 10.0.0.8 10.0.0.1 TCP 62 41606 → 8888 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 22 2.693270 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 8888 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 23 2.694143 10.0.0.8 10.0.0.1 TCP 62 41606 → 23 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 24 2.694156 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 23 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 25 2.694441 10.0.0.8 10.0.0.1 TCP 62 41606 → 111 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 26 2.694450 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 111 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 27 2.695040 10.0.0.8 10.0.0.1 TCP 62 41606 → 993 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 28 2.695049 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 993 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 29 2.695337 10.0.0.8 10.0.0.1 TCP 62 41606 → 8080 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 30 2.695356 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 8080 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 31 2.695635 10.0.0.8 10.0.0.1 TCP 62 41606 → 139 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 32 2.695651 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 139 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 33 2.696823 10.0.0.8 10.0.0.1 TCP 62 41606 → 25 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 34 2.696844 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 25 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 35 2.696879 10.0.0.1 10.0.0.8 TCP 60 25 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 36 2.696882 10.0.0.1 10.0.0.8 TCP 60 [TCP Retransmission] 25 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 37 2.696883 10.0.0.1 10.0.0.8 TCP 60 [TCP Retransmission] 25 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 38 2.697130 10.0.0.8 10.0.0.1 TCP 62 41606 → 587 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 39 2.697151 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 587 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 40 2.711130 10.0.0.8 10.0.0.1 TCP 62 41606 → 443 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 41 2.711145 10.0.0.8 10.0.0.1 TCP 60 41606 → 65004 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 42 2.711167 10.0.0.1 10.0.0.8 TCP 60 443 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 43 2.711169 10.0.0.1 10.0.0.8 TCP 60 [TCP Retransmission] 443 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 44 2.711170 10.0.0.1 10.0.0.8 TCP 60 [TCP Retransmission] 443 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 45 2.711718 10.0.0.8 10.0.0.1 TCP 62 41606 → 1723 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 46 2.711735 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 1723 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 47 2.726923 10.0.0.8 10.0.0.1 TCP 56 43097 → 8347 [ACK] Seq=238 Ack=29 Win=509 Len=0 48 2.727210 10.0.0.8 10.0.0.1 TCP 62 41606 → 5900 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 49 2.727224 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 5900 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 50 2.727804 10.0.0.8 10.0.0.1 TCP 62 41606 → 995 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 51 2.727827 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 995 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 52 3.711781 10.0.0.1 10.0.0.8 TCP 60 [TCP Retransmission] 25 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 53 3.711788 10.0.0.1 10.0.0.8 TCP 60 [TCP Retransmission] 25 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 54 3.711791 10.0.0.1 10.0.0.8 TCP 60 [TCP Retransmission] 25 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 55 3.715773 10.0.0.1 10.0.0.8 TCP 60 [TCP Retransmission] 443 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 56 3.715776 10.0.0.1 10.0.0.8 TCP 60 [TCP Retransmission] 443 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 57 3.715777 10.0.0.1 10.0.0.8 TCP 60 [TCP Retransmission] 443 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 58 3.819310 10.0.0.8 10.0.0.1 TCP 62 41608 → 995 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 59 3.819370 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41608 → 995 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 60 3.819890 10.0.0.8 10.0.0.1 TCP 62 41608 → 5900 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 61 3.819913 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41608 → 5900 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 62 3.820184 10.0.0.8 10.0.0.1 TCP 62 41608 → 1723 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 63 3.820198 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41608 → 1723 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 64 3.820484 10.0.0.8 10.0.0.1 TCP 62 41608 → 587 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 65 3.820513 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41608 → 587 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 66 3.820779 10.0.0.8 10.0.0.1 TCP 62 41608 → 139 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 67 3.820795 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41608 → 139 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 68 3.821076 10.0.0.8 10.0.0.1 TCP 62 41608 → 8080 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 69 3.821085 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41608 → 8080 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 70 3.821672 10.0.0.8 10.0.0.1 TCP 62 41608 → 993 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 71 3.821690 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41608 → 993 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 72 3.821977 10.0.0.8 10.0.0.1 TCP 62 41608 → 111 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 73 3.822010 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41608 → 111 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 74 3.822270 10.0.0.8 10.0.0.1 TCP 62 41608 → 23 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 75 3.822288 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41608 → 23 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 76 3.822568 10.0.0.8 10.0.0.1 TCP 62 41608 → 8888 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 77 3.822590 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41608 → 8888 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 78 3.822865 10.0.0.8 10.0.0.1 TCP 62 41608 → 143 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 79 3.822879 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41608 → 143 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 80 3.823459 10.0.0.8 10.0.0.1 TCP 62 41608 → 21 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 81 3.823490 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41608 → 21 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 82 3.919391 10.0.0.8 10.0.0.1 TCP 62 41606 → 445 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 83 3.919445 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 445 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 84 3.935472 10.0.0.8 10.0.0.1 TCP 62 41606 → 3306 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 85 3.935512 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 3306 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 86 3.936062 10.0.0.8 10.0.0.1 TCP 62 41606 → 3389 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 87 3.936083 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 3389 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 88 3.937552 10.0.0.8 10.0.0.1 TCP 62 41606 → 199 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 89 3.937574 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 199 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 90 3.938144 10.0.0.8 10.0.0.1 TCP 62 41606 → 53 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 91 3.938163 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 53 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 92 3.938195 10.0.0.1 10.0.0.8 TCP 60 53 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 93 3.938199 10.0.0.1 10.0.0.8 TCP 60 [TCP Retransmission] 53 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 94 3.938200 10.0.0.1 10.0.0.8 TCP 60 [TCP Retransmission] 53 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 95 3.938450 10.0.0.8 10.0.0.1 TCP 62 41606 → 22 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 96 3.938467 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 22 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 97 3.938486 10.0.0.1 10.0.0.8 TCP 60 22 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 98 3.938488 10.0.0.1 10.0.0.8 TCP 60 [TCP Retransmission] 22 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 99 3.938489 10.0.0.1 10.0.0.8 TCP 60 [TCP Retransmission] 22 → 41606 [SYN, ACK] Seq=0 Ack=1 Win=29200 Len=0 MSS=1460 100 3.938748 10.0.0.8 10.0.0.1 TCP 62 41606 → 113 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 101 3.938770 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 113 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 102 3.939043 10.0.0.8 10.0.0.1 TCP 62 41606 → 1025 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 103 3.939056 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 1025 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 104 3.940534 10.0.0.8 10.0.0.1 TCP 62 41606 → 110 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 105 3.940552 10.0.0.8 10.0.0.1 TCP 60 [TCP Retransmission] [TCP Port numbers reused] 41606 → 110 [SYN] Seq=0 Win=1024 Len=0 MSS=1460 106 3.941722 10.0.0.8 10.0.0.1 TCP 62 41606 → 1720 [SYN] Seq=0 Win=1024 Len=0 MSS=1460