1 0.000000 10.0.1.153 10.0.1.1 DNS 79 Standard query 0x13d0 A sls.tivoservice.com 2 0.232490 10.0.1.1 10.0.1.153 DNS 188 Standard query response 0x13d0 A sls.tivoservice.com CNAME production.sls.prod.tivoservice.com CNAME production-2.sls.prod.tivoservice.com A 54.69.60.164 A 44.228.167.254 A 54.187.119.2 3 0.233710 10.0.1.153 54.69.60.164 TCP 74 42992 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=3433483 TSecr=0 WS=64 4 0.353824 54.69.60.164 10.0.1.153 TCP 74 80 → 42992 [SYN, ACK] Seq=0 Ack=1 Win=26847 Len=0 MSS=1460 SACK_PERM=1 TSval=2388738783 TSecr=3433483 WS=256 5 0.354141 10.0.1.153 54.69.60.164 TCP 66 42992 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=3433604 TSecr=2388738783 6 0.355283 10.0.1.153 54.69.60.164 HTTP 195 GET /Get?bodyId=tsn:A930001XXXXXXXX&service=hserver HTTP/1.1 7 0.479293 54.69.60.164 10.0.1.153 TCP 66 80 → 42992 [ACK] Seq=1 Ack=130 Win=28160 Len=0 TSval=2388738908 TSecr=3433605 8 0.558600 54.69.60.164 10.0.1.153 HTTP 272 HTTP/1.1 200 OK (text/plain) 9 0.558932 10.0.1.153 54.69.60.164 TCP 66 42992 → 80 [ACK] Seq=130 Ack=207 Win=15680 Len=0 TSval=3433809 TSecr=2388738988 10 0.560648 10.0.1.153 54.69.60.164 TCP 66 42992 → 80 [FIN, ACK] Seq=130 Ack=207 Win=15680 Len=0 TSval=3433810 TSecr=2388738988 11 0.687042 54.69.60.164 10.0.1.153 TCP 66 80 → 42992 [FIN, ACK] Seq=207 Ack=131 Win=28160 Len=0 TSval=2388739116 TSecr=3433810 12 0.687308 10.0.1.153 54.69.60.164 TCP 66 42992 → 80 [ACK] Seq=131 Ack=208 Win=15680 Len=0 TSval=3433937 TSecr=2388739116 13 8.621900 10.0.1.153 208.73.181.202 TCP 74 32850 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=3441872 TSecr=0 WS=64 14 8.713994 208.73.181.202 10.0.1.153 TCP 70 80 → 32850 [SYN, ACK] Seq=0 Ack=1 Win=4380 Len=0 MSS=1460 SACK_PERM=1 TSval=1584021067 TSecr=3441872 15 8.714274 10.0.1.153 208.73.181.202 TCP 66 32850 → 80 [ACK] Seq=1 Ack=1 Win=14600 Len=0 TSval=3441964 TSecr=1584021067 16 8.715445 10.0.1.153 208.73.181.202 TCP 209 32850 → 80 [PSH, ACK] Seq=1 Ack=1 Win=14600 Len=143 TSval=3441965 TSecr=1584021067 [TCP segment of a reassembled PDU] 17 8.809711 208.73.181.202 10.0.1.153 TCP 66 80 → 32850 [ACK] Seq=1 Ack=144 Win=4523 Len=0 TSval=1584021162 TSecr=3441965 18 8.810068 10.0.1.153 208.73.181.202 HTTP 796 POST /tivo-service/mlog.cgi?gzip HTTP/1.0 19 8.900248 208.73.181.202 10.0.1.153 TCP 66 80 → 32850 [ACK] Seq=1 Ack=874 Win=5253 Len=0 TSval=1584021253 TSecr=3442060 20 8.901994 208.73.181.202 10.0.1.153 TCP 189 80 → 32850 [PSH, ACK] Seq=1 Ack=874 Win=5253 Len=123 TSval=1584021255 TSecr=3442060 [TCP segment of a reassembled PDU] 21 8.902280 10.0.1.153 208.73.181.202 TCP 66 32850 → 80 [ACK] Seq=874 Ack=124 Win=14600 Len=0 TSval=3442152 TSecr=1584021255 22 8.902997 208.73.181.202 10.0.1.153 HTTP 66 HTTP/1.1 200 OK (text/plain) 23 8.904864 10.0.1.153 208.73.181.202 TCP 66 32850 → 80 [FIN, ACK] Seq=874 Ack=125 Win=14600 Len=0 TSval=3442154 TSecr=1584021256 24 8.992495 208.73.181.202 10.0.1.153 TCP 66 80 → 32850 [ACK] Seq=125 Ack=875 Win=5253 Len=0 TSval=1584021345 TSecr=3442154 25 9.315575 10.0.1.153 208.73.181.202 TCP 74 32851 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=3442565 TSecr=0 WS=64 26 9.404769 208.73.181.202 10.0.1.153 TCP 70 80 → 32851 [SYN, ACK] Seq=0 Ack=1 Win=4380 Len=0 MSS=1460 SACK_PERM=1 TSval=1584021758 TSecr=3442565 27 9.405048 10.0.1.153 208.73.181.202 TCP 66 32851 → 80 [ACK] Seq=1 Ack=1 Win=14600 Len=0 TSval=3442655 TSecr=1584021758 28 9.405790 10.0.1.153 208.73.181.202 TCP 255 32851 → 80 [PSH, ACK] Seq=1 Ack=1 Win=14600 Len=189 TSval=3442655 TSecr=1584021758 [TCP segment of a reassembled PDU] 29 9.497287 208.73.181.202 10.0.1.153 TCP 66 80 → 32851 [ACK] Seq=1 Ack=190 Win=4569 Len=0 TSval=1584021851 TSecr=3442655 30 9.497310 208.73.181.202 10.0.1.153 TCP 66 [TCP Dup ACK 29#1] 80 → 32851 [ACK] Seq=1 Ack=190 Win=4569 Len=0 TSval=1584021851 TSecr=3442655 31 9.497578 10.0.1.153 208.73.181.202 HTTP 286 POST /tivo-service/TCD411.cgi HTTP/1.0 (application/x-www-form-urlencoded) 32 9.605237 208.73.181.202 10.0.1.153 TCP 66 80 → 32851 [ACK] Seq=1 Ack=410 Win=4789 Len=0 TSval=1584021958 TSecr=3442747 33 9.802618 208.73.181.202 10.0.1.153 TCP 229 80 → 32851 [PSH, ACK] Seq=1 Ack=410 Win=4789 Len=163 TSval=1584022156 TSecr=3442747 [TCP segment of a reassembled PDU] 34 9.802643 208.73.181.202 10.0.1.153 TCP 83 80 → 32851 [PSH, ACK] Seq=164 Ack=410 Win=4789 Len=17 TSval=1584022156 TSecr=3442747 [TCP segment of a reassembled PDU] 35 9.802978 10.0.1.153 208.73.181.202 TCP 66 32851 → 80 [ACK] Seq=410 Ack=164 Win=15544 Len=0 TSval=3443053 TSecr=1584022156 36 9.802983 208.73.181.202 10.0.1.153 HTTP 81 HTTP/1.1 200 OK (text/plain) 37 9.802999 10.0.1.153 208.73.181.202 TCP 66 32851 → 80 [ACK] Seq=410 Ack=181 Win=15544 Len=0 TSval=3443053 TSecr=1584022156 38 9.803003 208.73.181.202 10.0.1.153 TCP 66 80 → 32851 [FIN, ACK] Seq=196 Ack=410 Win=4789 Len=0 TSval=1584022156 TSecr=3442747 39 9.803217 10.0.1.153 208.73.181.202 TCP 66 32851 → 80 [ACK] Seq=410 Ack=196 Win=15544 Len=0 TSval=3443053 TSecr=1584022156 40 9.804778 10.0.1.153 208.73.181.202 TCP 66 32851 → 80 [FIN, ACK] Seq=410 Ack=197 Win=15544 Len=0 TSval=3443054 TSecr=1584022156 41 9.900213 208.73.181.202 10.0.1.153 TCP 66 80 → 32851 [ACK] Seq=197 Ack=411 Win=4789 Len=0 TSval=1584022254 TSecr=3443054 42 9.901462 10.0.1.153 208.73.181.202 TCP 74 32852 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=3443151 TSecr=0 WS=64 43 10.002686 208.73.181.202 10.0.1.153 TCP 70 80 → 32852 [SYN, ACK] Seq=0 Ack=1 Win=4380 Len=0 MSS=1460 SACK_PERM=1 TSval=1584022355 TSecr=3443151 44 10.002957 10.0.1.153 208.73.181.202 TCP 66 32852 → 80 [ACK] Seq=1 Ack=1 Win=14600 Len=0 TSval=3443253 TSecr=1584022355 45 10.004160 10.0.1.153 208.73.181.202 TCP 257 32852 → 80 [PSH, ACK] Seq=1 Ack=1 Win=14600 Len=191 TSval=3443254 TSecr=1584022355 [TCP segment of a reassembled PDU] 46 10.007592 10.0.1.153 208.73.181.202 TCP 1514 32852 → 80 [ACK] Seq=192 Ack=1 Win=14600 Len=1448 TSval=3443257 TSecr=1584022355 [TCP segment of a reassembled PDU] 47 10.007865 10.0.1.153 208.73.181.202 TCP 1514 32852 → 80 [PSH, ACK] Seq=1640 Ack=1 Win=14600 Len=1448 TSval=3443257 TSecr=1584022355 [TCP segment of a reassembled PDU] 48 10.092557 208.73.181.202 10.0.1.153 TCP 66 80 → 32852 [ACK] Seq=1 Ack=192 Win=4571 Len=0 TSval=1584022445 TSecr=3443254 49 10.092986 10.0.1.153 208.73.181.202 HTTP 1249 POST /tivo-service/HServer.cgi HTTP/1.0 (application/x-www-form-urlencoded) 50 10.098913 208.73.181.202 10.0.1.153 TCP 66 80 → 32852 [ACK] Seq=1 Ack=3088 Win=7467 Len=0 TSval=1584022452 TSecr=3443257 51 10.182771 208.73.181.202 10.0.1.153 TCP 66 80 → 32852 [ACK] Seq=1 Ack=4271 Win=8650 Len=0 TSval=1584022535 TSecr=3443343 52 12.481288 208.73.181.202 10.0.1.153 TCP 524 80 → 32852 [PSH, ACK] Seq=1 Ack=4271 Win=8650 Len=458 TSval=1584024834 TSecr=3443343 [TCP segment of a reassembled PDU] 53 12.481502 208.73.181.202 10.0.1.153 TCP 282 80 → 32852 [PSH, ACK] Seq=459 Ack=4271 Win=8650 Len=216 TSval=1584024834 TSecr=3443343 [TCP segment of a reassembled PDU] 54 12.481546 208.73.181.202 10.0.1.153 TCP 83 80 → 32852 [PSH, ACK] Seq=675 Ack=4271 Win=8650 Len=17 TSval=1584024834 TSecr=3443343 [TCP segment of a reassembled PDU] 55 12.481569 208.73.181.202 10.0.1.153 TCP 369 80 → 32852 [PSH, ACK] Seq=692 Ack=4271 Win=8650 Len=303 TSval=1584024834 TSecr=3443343 [TCP segment of a reassembled PDU] 56 12.481589 208.73.181.202 10.0.1.153 TCP 78 80 → 32852 [PSH, ACK] Seq=995 Ack=4271 Win=8650 Len=12 TSval=1584024834 TSecr=3443343 [TCP segment of a reassembled PDU] 57 12.481607 208.73.181.202 10.0.1.153 TCP 82 80 → 32852 [PSH, ACK] Seq=1007 Ack=4271 Win=8650 Len=16 TSval=1584024834 TSecr=3443343 [TCP segment of a reassembled PDU] 58 12.481625 208.73.181.202 10.0.1.153 TCP 85 80 → 32852 [PSH, ACK] Seq=1023 Ack=4271 Win=8650 Len=19 TSval=1584024834 TSecr=3443343 [TCP segment of a reassembled PDU] 59 12.481644 10.0.1.153 208.73.181.202 TCP 66 32852 → 80 [ACK] Seq=4271 Ack=459 Win=15544 Len=0 TSval=3445731 TSecr=1584024834 60 12.481669 10.0.1.153 208.73.181.202 TCP 66 32852 → 80 [ACK] Seq=4271 Ack=675 Win=16616 Len=0 TSval=3445731 TSecr=1584024834 61 12.481754 208.73.181.202 10.0.1.153 TCP 82 80 → 32852 [PSH, ACK] Seq=1042 Ack=4271 Win=8650 Len=16 TSval=1584024834 TSecr=3443343 [TCP segment of a reassembled PDU] 62 12.481775 208.73.181.202 10.0.1.153 TCP 81 80 → 32852 [PSH, ACK] Seq=1058 Ack=4271 Win=8650 Len=15 TSval=1584024834 TSecr=3443343 [TCP segment of a reassembled PDU] 63 12.481799 10.0.1.153 208.73.181.202 TCP 66 32852 → 80 [ACK] Seq=4271 Ack=692 Win=16616 Len=0 TSval=3445731 TSecr=1584024834 64 12.481801 208.73.181.202 10.0.1.153 TCP 97 80 → 32852 [PSH, ACK] Seq=1073 Ack=4271 Win=8650 Len=31 TSval=1584024834 TSecr=3443343 [TCP segment of a reassembled PDU] 65 12.481826 208.73.181.202 10.0.1.153 TCP 79 80 → 32852 [PSH, ACK] Seq=1104 Ack=4271 Win=8650 Len=13 TSval=1584024835 TSecr=3443343 [TCP segment of a reassembled PDU] 66 12.481841 10.0.1.153 208.73.181.202 TCP 66 32852 → 80 [ACK] Seq=4271 Ack=995 Win=17688 Len=0 TSval=3445732 TSecr=1584024834 67 12.481860 10.0.1.153 208.73.181.202 TCP 66 32852 → 80 [ACK] Seq=4271 Ack=1007 Win=17688 Len=0 TSval=3445732 TSecr=1584024834 68 12.482006 10.0.1.153 208.73.181.202 TCP 66 32852 → 80 [ACK] Seq=4271 Ack=1023 Win=17688 Len=0 TSval=3445732 TSecr=1584024834 69 12.482025 10.0.1.153 208.73.181.202 TCP 66 32852 → 80 [ACK] Seq=4271 Ack=1042 Win=17688 Len=0 TSval=3445732 TSecr=1584024834 70 12.482040 10.0.1.153 208.73.181.202 TCP 66 32852 → 80 [ACK] Seq=4271 Ack=1058 Win=17688 Len=0 TSval=3445732 TSecr=1584024834 71 12.482159 10.0.1.153 208.73.181.202 TCP 66 32852 → 80 [ACK] Seq=4271 Ack=1073 Win=17688 Len=0 TSval=3445732 TSecr=1584024834 72 12.482183 10.0.1.153 208.73.181.202 TCP 66 32852 → 80 [ACK] Seq=4271 Ack=1104 Win=17688 Len=0 TSval=3445732 TSecr=1584024834 73 12.482197 10.0.1.153 208.73.181.202 TCP 66 32852 → 80 [ACK] Seq=4271 Ack=1117 Win=17688 Len=0 TSval=3445732 TSecr=1584024835 74 12.482401 208.73.181.202 10.0.1.153 TCP 1514 80 → 32852 [ACK] Seq=1117 Ack=4271 Win=8650 Len=1448 TSval=1584024835 TSecr=3443343 [TCP segment of a reassembled PDU] 75 12.482532 208.73.181.202 10.0.1.153 TCP 480 80 → 32852 [PSH, ACK] Seq=2565 Ack=4271 Win=8650 Len=414 TSval=1584024835 TSecr=3443343 [TCP segment of a reassembled PDU] 76 12.482553 208.73.181.202 10.0.1.153 TCP 126 80 → 32852 [PSH, ACK] Seq=2979 Ack=4271 Win=8650 Len=60 TSval=1584024835 TSecr=3443343 [TCP segment of a reassembled PDU] 77 12.482572 208.73.181.202 10.0.1.153 TCP 103 80 → 32852 [PSH, ACK] Seq=3039 Ack=4271 Win=8650 Len=37 TSval=1584024835 TSecr=3443343 [TCP segment of a reassembled PDU] 78 12.482590 208.73.181.202 10.0.1.153 TCP 106 80 → 32852 [PSH, ACK] Seq=3076 Ack=4271 Win=8650 Len=40 TSval=1584024835 TSecr=3443343 [TCP segment of a reassembled PDU] 79 12.482609 208.73.181.202 10.0.1.153 TCP 108 80 → 32852 [PSH, ACK] Seq=3116 Ack=4271 Win=8650 Len=42 TSval=1584024835 TSecr=3443343 [TCP segment of a reassembled PDU] 80 12.482734 208.73.181.202 10.0.1.153 TCP 116 80 → 32852 [PSH, ACK] Seq=3158 Ack=4271 Win=8650 Len=50 TSval=1584024835 TSecr=3443343 [TCP segment of a reassembled PDU] 81 12.482753 208.73.181.202 10.0.1.153 TCP 75 80 → 32852 [PSH, ACK] Seq=3208 Ack=4271 Win=8650 Len=9 TSval=1584024836 TSecr=3443343 [TCP segment of a reassembled PDU] 82 12.482864 10.0.1.153 208.73.181.202 TCP 66 32852 → 80 [ACK] Seq=4271 Ack=2565 Win=20272 Len=0 TSval=3445732 TSecr=1584024835 83 12.482985 208.73.181.202 10.0.1.153 TCP 84 80 → 32852 [PSH, ACK] Seq=3217 Ack=4271 Win=8650 Len=18 TSval=1584024836 TSecr=3443343 [TCP segment of a reassembled PDU] 84 12.483010 208.73.181.202 10.0.1.153 TCP 97 80 → 32852 [PSH, ACK] Seq=3235 Ack=4271 Win=8650 Len=31 TSval=1584024836 TSecr=3443343 [TCP segment of a reassembled PDU] 85 12.483011 10.0.1.153 208.73.181.202 TCP 66 32852 → 80 [ACK] Seq=4271 Ack=2979 Win=23168 Len=0 TSval=3445733 TSecr=1584024835 86 12.483031 208.73.181.202 10.0.1.153 TCP 123 80 → 32852 [PSH, ACK] Seq=3266 Ack=4271 Win=8650 Len=57 TSval=1584024836 TSecr=3443343 [TCP segment of a reassembled PDU] 87 12.483236 208.73.181.202 10.0.1.153 TCP 110 80 → 32852 [PSH, ACK] Seq=3323 Ack=4271 Win=8650 Len=44 TSval=1584024836 TSecr=3443343 [TCP segment of a reassembled PDU] 88 12.483256 208.73.181.202 10.0.1.153 TCP 92 80 → 32852 [PSH, ACK] Seq=3367 Ack=4271 Win=8650 Len=26 TSval=1584024836 TSecr=3443343 [TCP segment of a reassembled PDU] 89 12.483502 208.73.181.202 10.0.1.153 TCP 493 80 → 32852 [PSH, ACK] Seq=3393 Ack=4271 Win=8650 Len=427 TSval=1584024836 TSecr=3443343 [TCP segment of a reassembled PDU] 90 12.483522 208.73.181.202 10.0.1.153 TCP 76 80 → 32852 [PSH, ACK] Seq=3820 Ack=4271 Win=8650 Len=10 TSval=1584024836 TSecr=3443343 [TCP segment of a reassembled PDU] 91 12.483540 208.73.181.202 10.0.1.153 TCP 80 80 → 32852 [PSH, ACK] Seq=3830 Ack=4271 Win=8650 Len=14 TSval=1584024836 TSecr=3443343 [TCP segment of a reassembled PDU] 92 12.483558 208.73.181.202 10.0.1.153 TCP 306 80 → 32852 [PSH, ACK] Seq=3844 Ack=4271 Win=8650 Len=240 TSval=1584024836 TSecr=3443343 [TCP segment of a reassembled PDU] 93 12.483576 208.73.181.202 10.0.1.153 TCP 80 80 → 32852 [PSH, ACK] Seq=4084 Ack=4271 Win=8650 Len=14 TSval=1584024836 TSecr=3443343 [TCP segment of a reassembled PDU] 94 12.483741 208.73.181.202 10.0.1.153 TCP 157 80 → 32852 [PSH, ACK] Seq=4098 Ack=4271 Win=8650 Len=91 TSval=1584024836 TSecr=3443343 [TCP segment of a reassembled PDU] 95 12.483760 208.73.181.202 10.0.1.153 TCP 101 80 → 32852 [PSH, ACK] Seq=4189 Ack=4271 Win=8650 Len=35 TSval=1584024836 TSecr=3443343 [TCP segment of a reassembled PDU] 96 12.483779 208.73.181.202 10.0.1.153 TCP 105 80 → 32852 [PSH, ACK] Seq=4224 Ack=4271 Win=8650 Len=39 TSval=1584024836 TSecr=3443343 [TCP segment of a reassembled PDU] 97 12.483796 208.73.181.202 10.0.1.153 TCP 160 80 → 32852 [PSH, ACK] Seq=4263 Ack=4271 Win=8650 Len=94 TSval=1584024837 TSecr=3443343 [TCP segment of a reassembled PDU] 98 12.484510 10.0.1.153 208.73.181.202 TCP 66 32852 → 80 [ACK] Seq=4271 Ack=4357 Win=23168 Len=0 TSval=3445734 TSecr=1584024835 99 12.753060 208.73.181.202 10.0.1.153 HTTP 66 HTTP/1.1 200 OK (text/plain) 100 12.753952 10.0.1.153 208.73.181.202 TCP 66 32852 → 80 [FIN, ACK] Seq=4271 Ack=4358 Win=23168 Len=0 TSval=3446003 TSecr=1584025106 101 12.842420 208.73.181.202 10.0.1.153 TCP 66 80 → 32852 [ACK] Seq=4358 Ack=4272 Win=8650 Len=0 TSval=1584025195 TSecr=3446003 102 13.034042 10.0.1.153 129.6.15.27 NTP 90 NTP Version 3, client 103 13.067984 129.6.15.27 10.0.1.153 NTP 90 NTP Version 3, server 104 13.068358 10.0.1.153 129.6.15.27 NTP 90 NTP Version 3, client 105 13.101716 129.6.15.27 10.0.1.153 NTP 90 NTP Version 3, server 106 13.102130 10.0.1.153 129.6.15.27 NTP 90 NTP Version 3, client 107 13.137208 129.6.15.27 10.0.1.153 NTP 90 NTP Version 3, server 108 13.137544 10.0.1.153 129.6.15.27 NTP 90 NTP Version 3, client 109 13.168092 129.6.15.27 10.0.1.153 NTP 90 NTP Version 3, server 110 13.234426 10.0.1.153 129.6.15.28 NTP 90 NTP Version 3, client 111 13.270722 129.6.15.28 10.0.1.153 NTP 90 NTP Version 3, server 112 13.271116 10.0.1.153 129.6.15.28 NTP 90 NTP Version 3, client 113 13.305714 129.6.15.28 10.0.1.153 NTP 90 NTP Version 3, server 114 13.306053 10.0.1.153 129.6.15.28 NTP 90 NTP Version 3, client 115 13.344221 129.6.15.28 10.0.1.153 NTP 90 NTP Version 3, server 116 13.344585 10.0.1.153 129.6.15.28 NTP 90 NTP Version 3, client 117 13.380611 129.6.15.28 10.0.1.153 NTP 90 NTP Version 3, server 118 13.434064 10.0.1.153 132.163.96.4 NTP 90 NTP Version 3, client 119 13.506997 132.163.96.4 10.0.1.153 NTP 90 NTP Version 3, server 120 13.507336 10.0.1.153 132.163.96.4 NTP 90 NTP Version 3, client 121 13.581469 132.163.96.4 10.0.1.153 NTP 90 NTP Version 3, server 122 13.581803 10.0.1.153 132.163.96.4 NTP 90 NTP Version 3, client 123 13.634209 10.0.1.153 132.163.97.1 NTP 90 NTP Version 3, client 124 13.652216 132.163.96.4 10.0.1.153 NTP 90 NTP Version 3, server 125 13.652545 10.0.1.153 132.163.96.4 NTP 90 NTP Version 3, client 126 13.717327 132.163.97.1 10.0.1.153 NTP 90 NTP Version 3, server 127 13.717655 10.0.1.153 132.163.97.1 NTP 90 NTP Version 3, client 128 13.722357 132.163.96.4 10.0.1.153 NTP 90 NTP Version 3, server 129 13.788958 132.163.97.1 10.0.1.153 NTP 90 NTP Version 3, server 130 13.789286 10.0.1.153 132.163.97.1 NTP 90 NTP Version 3, client 131 13.834429 10.0.1.153 204.176.49.10 NTP 90 NTP Version 3, client 132 13.867715 132.163.97.1 10.0.1.153 NTP 90 NTP Version 3, server 133 13.868275 10.0.1.153 132.163.97.1 NTP 90 NTP Version 3, client 134 13.938863 132.163.97.1 10.0.1.153 NTP 90 NTP Version 3, server 135 13.946989 204.176.49.10 10.0.1.153 NTP 90 NTP Version 3, server 136 13.947348 10.0.1.153 204.176.49.10 NTP 90 NTP Version 3, client 137 14.034264 10.0.1.153 204.176.49.11 NTP 90 NTP Version 3, client 138 14.052717 204.176.49.10 10.0.1.153 NTP 90 NTP Version 3, server 139 14.053418 10.0.1.153 204.176.49.10 NTP 90 NTP Version 3, client 140 14.136000 204.176.49.11 10.0.1.153 NTP 90 NTP Version 3, server 141 14.136331 10.0.1.153 204.176.49.11 NTP 90 NTP Version 3, client 142 14.148209 204.176.49.10 10.0.1.153 NTP 90 NTP Version 3, server 143 14.148584 10.0.1.153 204.176.49.10 NTP 90 NTP Version 3, client 144 14.232208 204.176.49.11 10.0.1.153 NTP 90 NTP Version 3, server 145 14.232543 10.0.1.153 204.176.49.11 NTP 90 NTP Version 3, client 146 14.234267 10.0.1.153 204.176.49.12 NTP 90 NTP Version 3, client 147 14.248471 204.176.49.10 10.0.1.153 NTP 90 NTP Version 3, server 148 14.325710 204.176.49.11 10.0.1.153 NTP 90 NTP Version 3, server 149 14.326089 10.0.1.153 204.176.49.11 NTP 90 NTP Version 3, client 150 14.357756 204.176.49.12 10.0.1.153 NTP 90 NTP Version 3, server 151 14.358161 10.0.1.153 204.176.49.12 NTP 90 NTP Version 3, client 152 14.415215 204.176.49.11 10.0.1.153 NTP 90 NTP Version 3, server 153 14.464304 204.176.49.12 10.0.1.153 NTP 90 NTP Version 3, server 154 14.464641 10.0.1.153 204.176.49.12 NTP 90 NTP Version 3, client 155 14.570273 204.176.49.12 10.0.1.153 NTP 90 NTP Version 3, server 156 14.570605 10.0.1.153 204.176.49.12 NTP 90 NTP Version 3, client 157 14.679260 204.176.49.12 10.0.1.153 NTP 90 NTP Version 3, server 158 14.713886 10.0.1.153 204.176.49.7 TCP 74 35906 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=3447963 TSecr=0 WS=64 159 14.779792 10.0.1.153 10.0.1.255 TiVoConnect 185 Discovery Beacon Study TiVo Mini (A930001XXXXXXXX) 160 14.806103 204.176.49.7 10.0.1.153 TCP 74 80 → 35906 [SYN, ACK] Seq=0 Ack=1 Win=14600 Len=0 MSS=1460 WS=1 SACK_PERM=1 TSval=1584027159 TSecr=3447963 161 14.806377 10.0.1.153 204.176.49.7 TCP 66 35906 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=3448056 TSecr=1584027159 162 14.806839 10.0.1.153 204.176.49.7 TCP 216 35906 → 80 [PSH, ACK] Seq=1 Ack=1 Win=14656 Len=150 TSval=3448056 TSecr=1584027159 [TCP segment of a reassembled PDU] 163 14.808099 10.0.1.153 204.176.49.7 TCP 1514 35906 → 80 [ACK] Seq=151 Ack=1 Win=14656 Len=1448 TSval=3448058 TSecr=1584027159 [TCP segment of a reassembled PDU] 164 14.903002 204.176.49.7 10.0.1.153 TCP 66 80 → 35906 [ACK] Seq=1 Ack=1599 Win=16198 Len=0 TSval=1584027256 TSecr=3448056 165 14.903410 10.0.1.153 204.176.49.7 HTTP 1047 POST /keydist.cgi?CALLTYPE=1&UPGRADE=0 HTTP/1.0 166 15.000471 204.176.49.7 10.0.1.153 TCP 66 80 → 35906 [ACK] Seq=1 Ack=2580 Win=17179 Len=0 TSval=1584027354 TSecr=3448153 167 15.106469 10.0.1.153 204.176.49.116 TCP 74 48296 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=3448356 TSecr=0 WS=64 168 15.208008 204.176.49.116 10.0.1.153 TCP 74 80 → 48296 [SYN, ACK] Seq=0 Ack=1 Win=14600 Len=0 MSS=1460 WS=1 SACK_PERM=1 TSval=1584027559 TSecr=3448356 169 15.208326 10.0.1.153 204.176.49.116 TCP 66 48296 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=3448458 TSecr=1584027559 170 15.208896 10.0.1.153 204.176.49.116 HTTP 259 GET /TiVoConnect?Command=QueryContainer&Container=%2F&DoGenres=1 HTTP/1.0 171 15.317720 204.176.49.116 10.0.1.153 TCP 66 80 → 48296 [ACK] Seq=1 Ack=194 Win=14793 Len=0 TSval=1584027669 TSecr=3448458 172 15.439383 204.176.49.116 10.0.1.153 TCP 1514 80 → 48296 [ACK] Seq=1 Ack=194 Win=14793 Len=1448 TSval=1584027791 TSecr=3448458 [TCP segment of a reassembled PDU] 173 15.439517 204.176.49.116 10.0.1.153 HTTP/XML 368 HTTP/1.1 200 OK 174 15.439538 204.176.49.116 10.0.1.153 TCP 66 80 → 48296 [FIN, ACK] Seq=1751 Ack=194 Win=14793 Len=0 TSval=1584027791 TSecr=3448458 175 15.439830 10.0.1.153 204.176.49.116 TCP 66 48296 → 80 [ACK] Seq=194 Ack=1449 Win=17536 Len=0 TSval=3448689 TSecr=1584027791 176 15.439859 10.0.1.153 204.176.49.116 TCP 66 48296 → 80 [ACK] Seq=194 Ack=1751 Win=20416 Len=0 TSval=3448690 TSecr=1584027791 177 15.440423 10.0.1.153 204.176.49.116 TCP 66 48296 → 80 [FIN, ACK] Seq=194 Ack=1752 Win=20416 Len=0 TSval=3448690 TSecr=1584027791 178 15.553615 204.176.49.116 10.0.1.153 TCP 66 80 → 48296 [ACK] Seq=1752 Ack=195 Win=14793 Len=0 TSval=1584027904 TSecr=3448690 179 16.126037 204.176.49.7 10.0.1.153 HTTP 1450 HTTP/1.1 200 OK (text/plain) 180 16.126060 204.176.49.7 10.0.1.153 TCP 66 80 → 35906 [FIN, ACK] Seq=1385 Ack=2580 Win=17179 Len=0 TSval=1584028478 TSecr=3448153 181 16.126444 10.0.1.153 204.176.49.7 TCP 66 35906 → 80 [ACK] Seq=2580 Ack=1385 Win=17408 Len=0 TSval=3449376 TSecr=1584028478 182 16.128014 10.0.1.153 204.176.49.7 TCP 66 35906 → 80 [FIN, ACK] Seq=2580 Ack=1386 Win=17408 Len=0 TSval=3449378 TSecr=1584028478 183 16.224707 204.176.49.7 10.0.1.153 TCP 66 80 → 35906 [ACK] Seq=1386 Ack=2581 Win=17179 Len=0 TSval=1584028578 TSecr=3449378 184 16.225743 10.0.1.153 204.176.49.2 TCP 74 60494 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=3449475 TSecr=0 WS=64 185 16.325249 204.176.49.2 10.0.1.153 TCP 74 80 → 60494 [SYN, ACK] Seq=0 Ack=1 Win=14600 Len=0 MSS=1460 WS=1 SACK_PERM=1 TSval=1584028679 TSecr=3449475 186 16.325527 10.0.1.153 204.176.49.2 TCP 66 60494 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=3449575 TSecr=1584028679 187 16.326371 10.0.1.153 204.176.49.2 HTTP 265 POST /tivo-service/caprqst.cgi HTTP/1.0 188 16.431724 204.176.49.2 10.0.1.153 TCP 66 80 → 60494 [ACK] Seq=1 Ack=200 Win=14799 Len=0 TSval=1584028785 TSecr=3449576 189 16.621488 204.176.49.2 10.0.1.153 HTTP 202 HTTP/1.1 200 OK 190 16.621509 204.176.49.2 10.0.1.153 TCP 66 80 → 60494 [FIN, ACK] Seq=137 Ack=200 Win=14799 Len=0 TSval=1584028975 TSecr=3449576 191 16.621775 10.0.1.153 204.176.49.2 TCP 66 60494 → 80 [ACK] Seq=200 Ack=137 Win=15680 Len=0 TSval=3449871 TSecr=1584028975 192 16.622569 10.0.1.153 204.176.49.2 TCP 66 60494 → 80 [FIN, ACK] Seq=200 Ack=138 Win=15680 Len=0 TSval=3449872 TSecr=1584028975 193 16.740461 204.176.49.2 10.0.1.153 TCP 66 80 → 60494 [ACK] Seq=138 Ack=201 Win=14799 Len=0 TSval=1584029094 TSecr=3449872 194 16.750114 10.0.1.153 204.176.49.9 TCP 74 37236 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=3450000 TSecr=0 WS=64 195 16.848461 204.176.49.9 10.0.1.153 TCP 74 80 → 37236 [SYN, ACK] Seq=0 Ack=1 Win=14600 Len=0 MSS=1460 WS=1 SACK_PERM=1 TSval=1584029196 TSecr=3450000 196 16.848942 10.0.1.153 204.176.49.9 TCP 66 37236 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=3450099 TSecr=1584029196 197 16.849550 10.0.1.153 204.176.49.9 TCP 232 37236 → 80 [PSH, ACK] Seq=1 Ack=1 Win=14656 Len=166 TSval=3450099 TSecr=1584029196 [TCP segment of a reassembled PDU] 198 16.850084 10.0.1.153 204.176.49.9 TCP 1514 37236 → 80 [ACK] Seq=167 Ack=1 Win=14656 Len=1448 TSval=3450099 TSecr=1584029196 [TCP segment of a reassembled PDU] 199 16.975871 204.176.49.9 10.0.1.153 TCP 66 80 → 37236 [ACK] Seq=1 Ack=167 Win=14766 Len=0 TSval=1584029312 TSecr=3450099 200 16.976175 10.0.1.153 204.176.49.9 HTTP 146 POST /tivo-service/uploadFile.cgi?type=..21-10-2.en_US&pp=.gz.bfg&fn=A930001XXXXXXXX&mso=tivo&tz=-18000&dst=1&prefix=A93&an=0&prv=1 HTTP/1.0 201 17.086206 204.176.49.9 10.0.1.153 TCP 66 80 → 37236 [ACK] Seq=1 Ack=1615 Win=16214 Len=0 TSval=1584029412 TSecr=3450099 202 17.128767 204.176.49.9 10.0.1.153 TCP 66 80 → 37236 [ACK] Seq=1 Ack=1695 Win=16294 Len=0 TSval=1584029447 TSecr=3450226 203 17.131222 204.176.49.9 10.0.1.153 TCP 194 80 → 37236 [PSH, ACK] Seq=1 Ack=1695 Win=16294 Len=128 TSval=1584029448 TSecr=3450226 [TCP segment of a reassembled PDU] 204 17.131521 10.0.1.153 204.176.49.9 TCP 66 37236 → 80 [ACK] Seq=1695 Ack=129 Win=15680 Len=0 TSval=3450381 TSecr=1584029448 205 17.131704 204.176.49.9 10.0.1.153 HTTP 66 HTTP/1.1 200 OK (text/plain) 206 17.133393 10.0.1.153 204.176.49.9 TCP 66 37236 → 80 [FIN, ACK] Seq=1695 Ack=130 Win=15680 Len=0 TSval=3450383 TSecr=1584029450 207 17.267735 204.176.49.9 10.0.1.153 TCP 66 80 → 37236 [ACK] Seq=130 Ack=1696 Win=16294 Len=0 TSval=1584029603 TSecr=3450383 208 17.280483 10.0.1.153 208.73.181.202 TCP 74 49802 → 8080 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=3450530 TSecr=0 WS=64 209 17.280579 208.73.181.202 10.0.1.153 TCP 54 8080 → 49802 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 210 17.295172 10.0.1.153 208.73.181.202 ICMP 60 Echo (ping) request id=0x0718, seq=0/0, ttl=64 (reply in 211) 211 17.383319 208.73.181.202 10.0.1.153 ICMP 58 Echo (ping) reply id=0x0718, seq=0/0, ttl=242 (request in 210) 212 17.444652 10.0.1.153 204.176.49.116 TCP 74 48300 → 80 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=3450694 TSecr=0 WS=64 213 17.503194 10.0.1.153 208.73.181.98 TCP 74 48909 → 8081 [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=3450753 TSecr=0 WS=64 214 17.503279 208.73.181.98 10.0.1.153 TCP 54 8081 → 48909 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 215 17.546001 204.176.49.116 10.0.1.153 TCP 74 80 → 48300 [SYN, ACK] Seq=0 Ack=1 Win=14600 Len=0 MSS=1460 WS=1 SACK_PERM=1 TSval=1584029899 TSecr=3450694 216 17.546282 10.0.1.153 204.176.49.116 TCP 66 48300 → 80 [ACK] Seq=1 Ack=1 Win=14656 Len=0 TSval=3450796 TSecr=1584029899 217 17.546742 10.0.1.153 204.176.49.116 HTTP 259 GET /TiVoConnect?Command=QueryContainer&Container=%2F&DoGenres=1 HTTP/1.0 218 17.655214 204.176.49.116 10.0.1.153 TCP 66 80 → 48300 [ACK] Seq=1 Ack=194 Win=14793 Len=0 TSval=1584030009 TSecr=3450796 219 17.705887 204.176.49.116 10.0.1.153 TCP 1514 80 → 48300 [ACK] Seq=1 Ack=194 Win=14793 Len=1448 TSval=1584030059 TSecr=3450796 [TCP segment of a reassembled PDU] 220 17.705910 204.176.49.116 10.0.1.153 HTTP/XML 368 HTTP/1.1 200 OK 221 17.705929 204.176.49.116 10.0.1.153 TCP 66 80 → 48300 [FIN, ACK] Seq=1751 Ack=194 Win=14793 Len=0 TSval=1584030059 TSecr=3450796 222 17.706306 10.0.1.153 204.176.49.116 TCP 66 48300 → 80 [ACK] Seq=194 Ack=1449 Win=17536 Len=0 TSval=3450956 TSecr=1584030059 223 17.706325 10.0.1.153 204.176.49.116 TCP 66 48300 → 80 [ACK] Seq=194 Ack=1751 Win=20416 Len=0 TSval=3450956 TSecr=1584030059 224 17.706737 10.0.1.153 204.176.49.116 TCP 66 48300 → 80 [FIN, ACK] Seq=194 Ack=1752 Win=20416 Len=0 TSval=3450956 TSecr=1584030059 225 17.815423 204.176.49.116 10.0.1.153 TCP 66 80 → 48300 [ACK] Seq=1752 Ack=195 Win=14793 Len=0 TSval=1584030169 TSecr=3450956