Gateways always offline - 2.3.2-RELEASE-p1 (amd64)



  • Hey guys, It has been sometime from my last post so lets see how bad this post ends up ;D

    I have a fresh instance installed of 2.3.2-RELEASE-p1 (amd64) running as a VM on a white box VmWare ESXi 6 and from first login the Gateways have been offline but I can ping host and even trace routes, but when online gaming I lag-out and ping is killer bad. I don't know what is going on here and I have try to look over the forums to see if anyone is having the same issue but nothing, in less I am just not using the right keywords.  ::)  However if I run a older pfSenes like 2.2.6 I don't have the Gateways offline issue or killer lag in-games and everything runs fast, so I am just at a lost here and/or would like some input/help on what I should look into for fixing this issue!

    What do you need me to post to help?

    *List of what I thing could be the issue!

    Will update as I move down the list and will update list if any of you think of anything.

    Thanks all ahead of time.  :)














  • you could try a different monitor ip


  • Netgate

    Yeah looks like your actual gateway has a problem responding to ICMP. What do you get when you manually ping it?



  • I should have added more details to my initial post.

    Network topography: [ISP-TWC]==[Gateway-dhcp]==(vmnic1)==[Hypervisor]==(vSwitch0-WAN)==[pfSense]==(vSwitch1-LAN)==(vmnic2)==[physical switch]

    • Time Warner Cable

      • Gateway is a new Arris Surfboard SB6190

      • vmnic1 & vmnic2 is onboard

      • Hypervisor is ESXi 6

      • vSwitch-WAN settings are default

      • pfSense 2.3.2-RELEASE-p1 (amd64)

      • vSwitch-LAN settings are default

      I have called my ips and even had one of the "Next Level Technicians" come out and test my line and no issue.
      I have added a pic of my network topography in the hypervisor.

      –-Reply
      @heper:

      you could try a different monitor ip

      Well it worked some what! It is showing online but RTT's are still up there and Loss its going up and down, I think there is something more going on here.

      @Derelict:

      Yeah looks like your actual gateway has a problem responding to ICMP. What do you get when you manually ping it?

      The Gateway is a new Arris Surfboard SB6190 I hope there is not issue with PF and the SB6190… Ping test pic's added and I pinged the gateway from the PF vm, using the LAN and WAN IP Address.

      Whats next?











  • Netgate

    Probably an ICMP packet capture on WAN to see what's really going out and coming back in both cases. If it's going out WAN and not coming back it's not pfSense.

    FWIW I had to go back to my SB6121 from an SB6190. Nothing to do with pfSense but I don't think the extra channels work right. I would get spontaneous packet loss on a lesser scale than you are seeing.

    But it didn't matter if it was generated manually or by dpinger/gateway monitoring. Nor should it matter for you.



  • @Derelict:

    Probably an ICMP packet capture on WAN to see what's really going out and coming back in both cases. If it's going out WAN and not coming back it's not pfSense.

    FWIW I had to go back to my SB6121 from an SB6190. Nothing to do with pfSense but I don't think the extra channels work right. I would get spontaneous packet loss on a lesser scale than you are seeing.

    But it didn't matter if it was generated manually or by dpinger/gateway monitoring. Nor should it matter for you.

    
    22:35:29.531043 IP 76.187.232.93.64905 > 216.239.36.10.53: UDP, length 48
    22:35:29.531144 ARP, Request who-has 76.187.234.238 tell 76.187.224.1, length 46
    22:35:29.535061 ARP, Request who-has 76.187.246.21 tell 76.187.224.1, length 46
    22:35:29.549182 ARP, Request who-has 76.187.255.48 tell 76.187.224.1, length 46
    22:35:29.550001 IP 76.187.232.93.23509 > 107.182.226.187.51469: UDP, length 8
    22:35:29.551602 ARP, Request who-has 76.187.252.127 tell 76.187.224.1, length 46
    22:35:29.558988 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 33
    22:35:29.562836 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 25851, length 8
    22:35:29.562883 IP6 2605:6000:9fc0:6e:5419:533b:3d3a:bf2d > 2001:4860:4860::8888: ICMP6, echo request, seq 25851, length 8
    22:35:29.568651 ARP, Request who-has 76.187.252.62 tell 76.187.224.1, length 46
    22:35:29.572712 ARP, Request who-has 76.187.243.18 tell 76.187.224.1, length 46
    22:35:29.578874 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 25851, length 8
    22:35:29.581111 ARP, Request who-has 76.187.241.63 tell 76.187.224.1, length 46
    22:35:29.582214 IP 173.194.29.23.443 > 76.187.232.93.3039: tcp 0
    22:35:29.586591 IP 216.239.36.10.53 > 76.187.232.93.64905: UDP, length 77
    22:35:29.591545 IP 76.187.232.93.13153 > 216.58.218.174.443: UDP, length 1350
    22:35:29.591617 IP 76.187.232.93.13053 > 216.58.218.174.443: tcp 0
    22:35:29.594925 ARP, Request who-has 76.187.234.154 tell 76.187.224.1, length 46
    22:35:29.609693 IP 216.58.218.174.443 > 76.187.232.93.13153: UDP, length 1350
    22:35:29.610559 IP 76.187.232.93.13153 > 216.58.218.174.443: UDP, length 255
    22:35:29.610581 IP 76.187.232.93.13153 > 216.58.218.174.443: UDP, length 180
    22:35:29.614192 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.614215 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.614453 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.614730 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.614746 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.614906 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.615208 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.615237 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.615302 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.615484 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.615499 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.615637 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 41
    22:35:29.615759 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.615850 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.616034 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.616125 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.616336 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.616353 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.616549 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.616623 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.616779 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.617061 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.617244 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.617340 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.617413 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.617501 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.617992 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.618256 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.618316 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.618586 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.618600 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.619071 IP 107.182.226.187.51469 > 76.187.232.93.23509: UDP, length 8
    22:35:29.619401 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.619685 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.620338 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.620449 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.620731 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.620751 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.621459 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.621484 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.621831 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.622045 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.622791 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.622956 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.623409 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.624074 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.624088 ARP, Request who-has 76.187.252.61 tell 76.187.224.1, length 46
    22:35:29.624486 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.624677 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.625444 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.625604 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.626087 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.626823 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.627014 IP 216.58.218.174.443 > 76.187.232.93.13153: UDP, length 30
    22:35:29.627039 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.628958 ARP, Request who-has 76.187.234.136 tell 76.187.224.1, length 46
    22:35:29.634431 IP 216.58.218.174.443 > 76.187.232.93.13153: UDP, length 244
    22:35:29.634793 IP 76.187.232.93.13153 > 216.58.218.174.443: UDP, length 41
    22:35:29.647606 ARP, Request who-has 76.187.227.181 tell 76.187.224.1, length 46
    22:35:29.649724 ARP, Request who-has 76.187.254.164 tell 76.187.224.1, length 46
    22:35:29.651312 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.651423 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.651683 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.652430 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.652467 ARP, Request who-has 76.187.235.184 tell 76.187.224.1, length 46
    22:35:29.652517 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.652694 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.652700 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.652991 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.653688 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.653724 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.653927 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.654187 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.654538 ARP, Request who-has 76.187.234.117 tell 76.187.224.1, length 46
    22:35:29.654823 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.655007 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.655101 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    22:35:29.655183 IP 76.187.232.93.56021 > 173.194.29.23.443: UDP, length 38
    22:35:29.655198 IP 173.194.29.23.443 > 76.187.232.93.56021: UDP, length 1350
    
    



  • Netgate

    There are no pings in that capture. Not sure what we're supposed to be looking at there.



  • Hope I got it this time  ;)

    @Derelict:

    There are no pings in that capture. Not sure what we're supposed to be looking at there.

    You are talking about the tool under Diagnostics >> Packet Capture? IF not could you tell me what your talking about then?

    I think this is what you was talking about!?!

    
    22:56:32.373875 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28316, length 8
    22:56:32.485045 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28316, length 8
    22:56:32.893580 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28317, length 8
    22:56:32.941581 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28317, length 8
    22:56:33.397551 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28318, length 8
    22:56:33.909315 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28319, length 8
    22:56:33.952697 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28319, length 8
    22:56:34.417414 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28320, length 8
    22:56:34.933430 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28321, length 8
    22:56:35.436579 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28322, length 8
    22:56:35.462974 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28322, length 8
    22:56:35.949764 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28323, length 8
    22:56:35.985084 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28323, length 8
    22:56:36.462482 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28324, length 8
    22:56:36.966612 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28325, length 8
    22:56:36.996428 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28325, length 8
    22:56:37.486865 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28326, length 8
    22:56:37.519869 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28326, length 8
    22:56:38.003881 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28327, length 8
    22:56:38.034959 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28327, length 8
    22:56:38.506619 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28328, length 8
    22:56:38.528436 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28328, length 8
    22:56:39.016837 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28329, length 8
    22:56:39.531370 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28330, length 8
    22:56:39.562969 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28330, length 8
    22:56:40.043246 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28331, length 8
    22:56:40.570853 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28332, length 8
    22:56:41.082706 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28333, length 8
    22:56:41.586899 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28334, length 8
    22:56:42.098258 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28335, length 8
    22:56:42.243466 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28335, length 8
    22:56:42.606694 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28336, length 8
    22:56:43.121945 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28337, length 8
    22:56:43.141224 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28337, length 8
    22:56:43.626618 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28338, length 8
    22:56:44.137651 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28339, length 8
    22:56:44.646927 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28340, length 8
    22:56:44.672157 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28340, length 8
    22:56:45.161327 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28341, length 8
    22:56:45.203579 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28341, length 8
    22:56:45.673251 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28342, length 8
    22:56:46.192795 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28343, length 8
    22:56:46.231466 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28343, length 8
    22:56:46.696726 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28344, length 8
    22:56:47.206675 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28345, length 8
    22:56:47.720331 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28346, length 8
    22:56:47.752894 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28346, length 8
    22:56:48.226712 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28347, length 8
    22:56:48.736610 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28348, length 8
    22:56:48.780601 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28348, length 8
    22:56:49.263766 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28349, length 8
    22:56:49.295499 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28349, length 8
    22:56:49.783408 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28350, length 8
    22:56:50.304192 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28351, length 8
    22:56:50.324525 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28351, length 8
    22:56:50.807034 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28352, length 8
    22:56:51.316661 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28353, length 8
    22:56:51.345425 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28353, length 8
    22:56:51.830640 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28354, length 8
    22:56:52.342772 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28355, length 8
    22:56:52.364702 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28355, length 8
    22:56:52.854304 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28356, length 8
    22:56:53.373956 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28357, length 8
    22:56:53.893577 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28358, length 8
    22:56:53.913812 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28358, length 8
    22:56:54.396869 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28359, length 8
    22:56:54.911051 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28360, length 8
    22:56:54.998859 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28360, length 8
    22:56:55.421135 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28361, length 8
    22:56:55.486587 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28361, length 8
    22:56:55.933028 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28362, length 8
    22:56:56.436738 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28363, length 8
    22:56:56.461136 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28363, length 8
    22:56:56.948681 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28364, length 8
    22:56:56.970909 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28364, length 8
    22:56:57.460545 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28365, length 8
    22:56:57.479818 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28365, length 8
    22:56:57.973147 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28366, length 8
    22:56:58.004397 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28366, length 8
    22:56:58.486793 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28367, length 8
    22:56:58.518079 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28367, length 8
    22:56:59.004090 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28368, length 8
    22:56:59.025708 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28368, length 8
    22:56:59.507825 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28369, length 8
    22:57:00.017937 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28370, length 8
    22:57:00.053540 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28370, length 8
    22:57:00.526728 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28371, length 8
    22:57:00.555054 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28371, length 8
    22:57:01.043372 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28372, length 8
    22:57:01.547283 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28373, length 8
    22:57:01.597932 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28373, length 8
    22:57:02.056603 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28374, length 8
    22:57:02.421230 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28374, length 8
    22:57:02.566646 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28375, length 8
    22:57:03.082661 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28376, length 8
    22:57:03.596719 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28377, length 8
    22:57:04.106639 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28378, length 8
    22:57:04.236699 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 28378, length 8
    22:57:04.617995 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28379, length 8
    22:57:05.129783 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 28380, length 8
    
    
    
    23:04:37.476869 IP 76.187.232.93.40128 > 162.254.195.47.27019: UDP, length 244
    23:04:37.476885 IP 76.187.232.93.40128 > 162.254.195.47.27019: UDP, length 100
    23:04:37.569628 IP 162.254.195.47.27019 > 76.187.232.93.40128: UDP, length 180
    23:04:37.602769 IP 76.187.232.93.28660 > 173.194.219.100.443: tcp 240
    23:04:37.636753 IP 173.194.219.100.443 > 76.187.232.93.28660: tcp 0
    23:04:37.636798 IP 173.194.219.100.443 > 76.187.232.93.28660: tcp 46
    23:04:37.648738 IP 173.194.219.100.443 > 76.187.232.93.28660: tcp 72
    23:04:37.648769 IP 173.194.219.100.443 > 76.187.232.93.28660: tcp 248
    23:04:37.649034 IP 76.187.232.93.28660 > 173.194.219.100.443: tcp 0
    23:04:37.649469 IP 76.187.232.93.28660 > 173.194.219.100.443: tcp 46
    23:04:37.667007 IP 162.254.195.47.27019 > 76.187.232.93.40128: UDP, length 404
    23:04:37.731551 IP 173.194.219.100.443 > 76.187.232.93.28660: tcp 0
    23:04:37.933556 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29263, length 8
    23:04:37.938276 IP 76.187.232.93.40128 > 162.254.195.47.27019: UDP, length 36
    23:04:37.947857 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29263, length 8
    23:04:38.204864 IP 76.187.232.93.52892 > 104.16.58.5.443: tcp 1
    23:04:38.228132 IP 104.16.58.5.443 > 76.187.232.93.52892: tcp 0
    23:04:38.328334 IP 76.187.232.93.43211 > 216.58.218.174.443: UDP, length 23
    23:04:38.369020 IP 216.58.218.174.443 > 76.187.232.93.43211: UDP, length 30
    23:04:38.437275 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29264, length 8
    23:04:38.457639 IP 8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29264, length 8
    23:04:38.734223 IP 76.187.232.93.9306 > 107.182.226.187.443: tcp 61
    23:04:38.734247 IP 45.79.11.43.443 > 76.187.232.93.52366: tcp 34
    23:04:38.735215 IP 76.187.232.93.52366 > 45.79.11.43.443: tcp 0
    23:04:38.743202 IP 76.187.232.93.6026 > 72.21.81.253.80: tcp 0
    23:04:38.744070 IP 76.187.232.93.17659 > 72.21.81.253.80: tcp 0
    23:04:38.744742 IP 76.187.232.93.5280 > 72.21.81.253.80: tcp 0
    23:04:38.745929 IP 76.187.232.93.7050 > 72.21.92.82.80: tcp 828
    23:04:38.751686 IP 76.187.232.93.19752 > 205.251.193.211.53: UDP, length 77
    23:04:38.752051 IP 76.187.232.93.43632 > 205.251.198.65.53: UDP, length 50
    23:04:38.752357 IP 76.187.232.93.32718 > 205.251.193.103.53: UDP, length 52
    23:04:38.759414 IP 72.21.81.253.80 > 76.187.232.93.6026: tcp 0
    23:04:38.759848 IP 76.187.232.93.6026 > 72.21.81.253.80: tcp 0
    23:04:38.760196 IP 76.187.232.93.6026 > 72.21.81.253.80: tcp 1078
    23:04:38.760801 IP 72.21.81.253.80 > 76.187.232.93.5280: tcp 0
    23:04:38.760887 IP 72.21.81.253.80 > 76.187.232.93.17659: tcp 0
    23:04:38.761119 IP 76.187.232.93.5280 > 72.21.81.253.80: tcp 0
    23:04:38.761165 IP 76.187.232.93.17659 > 72.21.81.253.80: tcp 0
    23:04:38.761340 IP 76.187.232.93.5280 > 72.21.81.253.80: tcp 1248
    23:04:38.761485 IP 76.187.232.93.17659 > 72.21.81.253.80: tcp 1460
    23:04:38.761533 IP 76.187.232.93.17659 > 72.21.81.253.80: tcp 676
    23:04:38.765228 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 0
    23:04:38.777827 IP 72.21.81.253.80 > 76.187.232.93.6026: tcp 0
    23:04:38.778738 IP 72.21.81.253.80 > 76.187.232.93.6026: tcp 0
    23:04:38.784279 IP 205.251.193.211.53 > 76.187.232.93.19752: UDP, length 278
    23:04:38.785090 IP 205.251.193.103.53 > 76.187.232.93.32718: UDP, length 238
    23:04:38.795223 IP 107.182.226.187.443 > 76.187.232.93.9306: tcp 57
    23:04:38.833550 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 1460
    23:04:38.833671 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 1460
    23:04:38.833731 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 1460
    23:04:38.833780 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 1460
    23:04:38.833833 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 1460
    23:04:38.833878 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 1460
    23:04:38.833947 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 1460
    23:04:38.834085 IP 76.187.232.93.7050 > 72.21.92.82.80: tcp 0
    23:04:38.834131 IP 76.187.232.93.7050 > 72.21.92.82.80: tcp 0
    23:04:38.834172 IP 76.187.232.93.7050 > 72.21.92.82.80: tcp 0
    23:04:38.837601 IP 76.187.232.93.9306 > 107.182.226.187.443: tcp 0
    23:04:38.838613 IP 76.187.232.93.5280 > 72.21.81.253.80: tcp 0
    23:04:38.838785 IP 76.187.232.93.6026 > 72.21.81.253.80: tcp 0
    23:04:38.840943 IP 76.187.232.93.18256 > 72.21.81.253.80: tcp 0
    23:04:38.843523 IP 76.187.232.93.17659 > 72.21.81.253.80: tcp 0
    23:04:38.849013 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 1460
    23:04:38.849124 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 1460
    23:04:38.849323 IP 76.187.232.93.7050 > 72.21.92.82.80: tcp 0
    23:04:38.849341 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 1460
    23:04:38.849416 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 1460
    23:04:38.849467 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 1460
    23:04:38.849517 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 1460
    23:04:38.849595 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 1460
    23:04:38.849738 IP 76.187.232.93.7050 > 72.21.92.82.80: tcp 0
    23:04:38.849780 IP 76.187.232.93.7050 > 72.21.92.82.80: tcp 0
    23:04:38.849823 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 1460
    23:04:38.849900 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 1460
    23:04:38.850001 IP 72.21.92.82.80 > 76.187.232.93.7050: tcp 684
    23:04:38.850123 IP 76.187.232.93.7050 > 72.21.92.82.80: tcp 0
    23:04:38.850268 IP 76.187.232.93.7050 > 72.21.92.82.80: tcp 0
    23:04:38.855713 IP 72.21.81.253.80 > 76.187.232.93.5280: tcp 0
    23:04:38.860887 IP 72.21.81.253.80 > 76.187.232.93.17659: tcp 0
    23:04:38.863685 IP 72.21.81.253.80 > 76.187.232.93.18256: tcp 0
    23:04:38.863988 IP 76.187.232.93.18256 > 72.21.81.253.80: tcp 0
    23:04:38.864418 IP 76.187.232.93.18256 > 72.21.81.253.80: tcp 1460
    23:04:38.864466 IP 76.187.232.93.18256 > 72.21.81.253.80: tcp 751
    23:04:38.889582 IP 72.21.81.253.80 > 76.187.232.93.18256: tcp 0
    23:04:38.890410 IP 72.21.81.253.80 > 76.187.232.93.18256: tcp 0
    23:04:38.890575 IP 72.21.81.253.80 > 76.187.232.93.18256: tcp 0
    23:04:38.899391 IP 72.21.81.253.80 > 76.187.232.93.6026: tcp 0
    23:04:38.899726 IP 76.187.232.93.7050 > 72.21.92.82.80: tcp 0
    23:04:38.925826 IP 76.187.232.93.32947 > 72.21.81.253.80: tcp 0
    23:04:38.925930 IP 76.187.232.93.27014 > 72.21.81.253.80: tcp 0
    23:04:38.928210 IP 72.21.81.253.80 > 76.187.232.93.6026: tcp 452
    23:04:38.928412 IP 72.21.81.253.80 > 76.187.232.93.6026: tcp 0
    23:04:38.928552 IP 76.187.232.93.6026 > 72.21.81.253.80: tcp 0
    23:04:38.929451 IP 76.187.232.93.10018 > 72.21.81.253.80: tcp 0
    23:04:38.929617 IP 76.187.232.93.57937 > 72.21.81.253.80: tcp 0
    23:04:38.930219 IP 76.187.232.93.47549 > 72.21.81.253.80: tcp 0
    23:04:38.941090 IP 72.21.81.253.80 > 76.187.232.93.32947: tcp 0
    23:04:38.941417 IP 76.187.232.93.32947 > 72.21.81.253.80: tcp 0
    23:04:38.941755 IP 76.187.232.93.32947 > 72.21.81.253.80: tcp 729
    23:04:38.946803 IP 76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29265, length 8
    
    
    
    23:06:22.827128 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 143: (tos 0x0, ttl 127, id 28461, offset 0, flags [none], proto TCP (6), length 129)
        76.187.232.93.28660 > 173.194.219.100.443: Flags [P.], cksum 0xf8c5 (correct), seq 1838084250:1838084339, ack 2900203632, win 256, length 89
    23:06:22.827149 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 100: (tos 0x0, ttl 127, id 28462, offset 0, flags [none], proto TCP (6), length 86)
        76.187.232.93.28660 > 173.194.219.100.443: Flags [P.], cksum 0x5ab5 (correct), seq 89:135, ack 1, win 256, length 46
    23:06:22.827156 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 248: (tos 0x0, ttl 127, id 28463, offset 0, flags [none], proto TCP (6), length 234)
        76.187.232.93.28660 > 173.194.219.100.443: Flags [P.], cksum 0xf263 (correct), seq 135:329, ack 1, win 256, length 194
    23:06:22.836079 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 127, id 17875, offset 0, flags [DF], proto TCP (6), length 40)
        76.187.232.93.9306 > 107.182.226.187.443: Flags [.], cksum 0x0568 (correct), seq 2009178695, ack 1252301599, win 256, length 0
    23:06:22.879655 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 42, id 4842, offset 0, flags [none], proto TCP (6), length 40)
        173.194.219.100.443 > 76.187.232.93.28660: Flags [.], cksum 0xda72 (correct), seq 1, ack 89, win 418, length 0
    23:06:22.884929 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 42, id 4847, offset 0, flags [none], proto TCP (6), length 52)
        173.194.219.100.443 > 76.187.232.93.28660: Flags [.], cksum 0xe62f (correct), seq 1, ack 89, win 427, options [nop,nop,sack 1 {135:329}], length 0
    23:06:22.895553 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 126: (tos 0x0, ttl 127, id 23710, offset 0, flags [none], proto UDP (17), length 112)
        76.187.232.93.58560 > 162.254.193.7.27020: [udp sum ok] UDP, length 84
    23:06:23.043298 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 4128, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29468, length 8
    23:06:23.181610 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 294: (tos 0x0, ttl 127, id 28464, offset 0, flags [none], proto TCP (6), length 280)
        76.187.232.93.28660 > 173.194.219.100.443: Flags [P.], cksum 0x723a (correct), seq 89:329, ack 1, win 256, length 240
    23:06:23.214739 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 42, id 4982, offset 0, flags [none], proto TCP (6), length 52)
        173.194.219.100.443 > 76.187.232.93.28660: Flags [.], cksum 0xe537 (correct), seq 1, ack 329, win 435, options [nop,nop,sack 1 {135:329}], length 0
    23:06:23.214820 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 100: (tos 0x0, ttl 42, id 4983, offset 0, flags [none], proto TCP (6), length 86)
        173.194.219.100.443 > 76.187.232.93.28660: Flags [P.], cksum 0x1ae3 (correct), seq 1:47, ack 329, win 435, length 46
    23:06:23.226810 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 126: (tos 0x0, ttl 42, id 4986, offset 0, flags [none], proto TCP (6), length 112)
        173.194.219.100.443 > 76.187.232.93.28660: Flags [P.], cksum 0x0de3 (correct), seq 47:119, ack 329, win 435, length 72
    23:06:23.226873 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 281: (tos 0x0, ttl 42, id 4987, offset 0, flags [none], proto TCP (6), length 267)
        173.194.219.100.443 > 76.187.232.93.28660: Flags [P.], cksum 0xfb82 (correct), seq 119:346, ack 329, win 435, length 227
    23:06:23.227208 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 127, id 28465, offset 0, flags [none], proto TCP (6), length 40)
        76.187.232.93.28660 > 173.194.219.100.443: Flags [.], cksum 0xd8cd (correct), seq 329, ack 346, win 254, length 0
    23:06:23.227484 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 100: (tos 0x0, ttl 127, id 28466, offset 0, flags [none], proto TCP (6), length 86)
        76.187.232.93.28660 > 173.194.219.100.443: Flags [P.], cksum 0x06b1 (correct), seq 329:375, ack 346, win 254, length 46
    23:06:23.303166 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 42, id 5012, offset 0, flags [none], proto TCP (6), length 40)
        173.194.219.100.443 > 76.187.232.93.28660: Flags [.], cksum 0xd7ea (correct), seq 346, ack 375, win 435, length 0
    23:06:23.546591 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 57484, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29469, length 8
    23:06:23.561397 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 15719, offset 0, flags [none], proto ICMP (1), length 28)
        8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29469, length 8
    23:06:24.056821 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 5169, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29470, length 8
    23:06:24.115279 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 127, id 22565, offset 0, flags [none], proto TCP (6), length 40)
        76.187.232.93.59767 > 66.182.208.104.80: Flags [F.], cksum 0x2de8 (correct), seq 352427104, ack 3367163097, win 254, length 0
    23:06:24.115344 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 127, id 22566, offset 0, flags [none], proto TCP (6), length 40)
        76.187.232.93.33032 > 66.182.208.104.80: Flags [F.], cksum 0x5b7e (correct), seq 1669694000, ack 2145199156, win 254, length 0
    23:06:24.115363 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 127, id 2021, offset 0, flags [none], proto TCP (6), length 40)
        76.187.232.93.10506 > 52.6.76.143.80: Flags [F.], cksum 0xd033 (correct), seq 3132182923, ack 934460329, win 255, length 0
    23:06:24.115726 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 29850, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.16045 > 201.174.128.77.80: Flags [s], cksum 0xa144 (correct), seq 2112254419, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.115760 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 29851, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.49140 > 201.174.128.77.80: Flags [s], cksum 0xe87e (correct), seq 3056300300, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.115830 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 29852, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.11684 > 201.174.128.77.80: Flags [s], cksum 0x2cb7 (correct), seq 583029392, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.115864 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 29853, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.20680 > 201.174.128.77.80: Flags [s], cksum 0x84f5 (correct), seq 478993761, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.117523 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 13018, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.4333 > 72.21.81.253.80: Flags [s], cksum 0x6a6a (correct), seq 973654581, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.117611 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 13019, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.4750 > 72.21.81.253.80: Flags [s], cksum 0x609a (correct), seq 3949863166, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.117699 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 13020, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.39611 > 72.21.81.253.80: Flags [s], cksum 0xb521 (correct), seq 2108207631, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.117791 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 13021, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.11350 > 72.21.81.253.80: Flags [s], cksum 0xefbb (correct), seq 2948182985, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.117891 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 13022, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.21905 > 72.21.81.253.80: Flags [s], cksum 0xfb20 (correct), seq 3596310663, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.117939 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 13023, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.30869 > 72.21.81.253.80: Flags [s], cksum 0xcfbe (correct), seq 1022753355, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.118081 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 29948, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.30495 > 173.248.79.10.80: Flags [s], cksum 0x2fb3 (correct), seq 3575226552, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.118131 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 29949, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.22890 > 173.248.79.10.80: Flags [s], cksum 0x6e8d (correct), seq 3131415047, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.118157 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 29950, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.7001 > 173.248.79.10.80: Flags [s], cksum 0xc84c (correct), seq 4003154531, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.118271 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 29951, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.8415 > 173.248.79.10.80: Flags [s], cksum 0xe157 (correct), seq 4001311726, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.118443 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 11053, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.31480 > 75.160.216.106.80: Flags [s], cksum 0x648a (correct), seq 3212007078, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.118495 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 11054, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.47335 > 75.160.216.106.80: Flags [s], cksum 0x8ba8 (correct), seq 1674464574, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.118543 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 11055, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.20798 > 75.160.216.106.80: Flags [s], cksum 0x9960 (correct), seq 150995454, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.118600 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 11056, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.46780 > 75.160.216.106.80: Flags [s], cksum 0x424b (correct), seq 1640667850, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.118718 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 22567, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.16071 > 66.182.208.104.80: Flags [s], cksum 0x19c1 (correct), seq 1862680314, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.118811 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 22568, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.30600 > 66.182.208.104.80: Flags [s], cksum 0x5c8d (correct), seq 3975103875, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.118900 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 22569, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.23184 > 66.182.208.104.80: Flags [s], cksum 0xd190 (correct), seq 1567259901, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.118990 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 22570, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.3772 > 66.182.208.104.80: Flags [s], cksum 0x5227 (correct), seq 123575880, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.119169 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 3960, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.59094 > 67.210.150.21.80: Flags [s], cksum 0x17d8 (correct), seq 1745475847, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.119216 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 3961, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.33270 > 67.210.150.21.80: Flags [s], cksum 0x60cf (correct), seq 4005916212, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.119246 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 3962, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.49594 > 67.210.150.21.80: Flags [s], cksum 0xc7c4 (correct), seq 3395677146, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.119356 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 3963, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.42263 > 67.210.150.21.80: Flags [s], cksum 0x1fed (correct), seq 1437345039, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.119537 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 9680, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.11698 > 71.14.149.178.80: Flags [s], cksum 0x9707 (correct), seq 2642926245, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.119584 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 9681, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.10775 > 71.14.149.178.80: Flags [s], cksum 0xf2ff (correct), seq 3143918699, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.119622 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 9682, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.5712 > 71.14.149.178.80: Flags [s], cksum 0x06ff (correct), seq 1696119423, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.119720 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 127, id 9683, offset 0, flags [DF], proto TCP (6), length 52)
        76.187.232.93.54103 > 71.14.149.178.80: Flags [s], cksum 0x2c37 (correct), seq 2966916224, win 8192, options [mss 1460,nop,wscale 8,nop,nop,sackOK], length 0
    23:06:24.119795 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 86: (tos 0x0, ttl 64, id 32273, offset 0, flags [none], proto UDP (17), length 72)
        76.187.232.93.12598 > 205.251.199.124.53: [bad udp cksum 0xcad6 -> 0xce16!] 35003% [1au] A? tiles.cdnst.net. ar: . OPT UDPsize=4096 OK (44)
    23:06:24.119945 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 91: (tos 0x0, ttl 64, id 63186, offset 0, flags [none], proto UDP (17), length 77)
        76.187.232.93.27088 > 205.251.197.100.53: [bad udp cksum 0xc8c3 -> 0xe75b!] 19234% [1au] AAAA? ns-806.awsdns-36.net. ar: . OPT UDPsize=4096 OK (49)
    23:06:24.120110 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 92: (tos 0x0, ttl 64, id 7656, offset 0, flags [none], proto UDP (17), length 78)
        76.187.232.93.50238 > 205.251.198.105.53: [bad udp cksum 0xc9c9 -> 0x2d3a!] 45974% [1au] AAAA? ns-1355.awsdns-41.org. ar: . OPT UDPsize=4096 OK (50)
    23:06:24.120226 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 93: (tos 0x0, ttl 64, id 63146, offset 0, flags [none], proto UDP (17), length 79)
        76.187.232.93.37661 > 205.251.195.38.53: [bad udp cksum 0xc687 -> 0xc76c!] 6543% [1au] AAAA? g-ns-485.awsdns-36.net. ar: . OPT UDPsize=4096 OK (51)
    23:06:24.120336 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 94: (tos 0x0, ttl 64, id 36235, offset 0, flags [none], proto UDP (17), length 80)
        76.187.232.93.60549 > 205.251.199.164.53: [bad udp cksum 0xcb06 -> 0x6df9!] 9438% [1au] AAAA? g-ns-1380.awsdns-36.net. ar: . OPT UDPsize=4096 OK (52)
    23:06:24.120472 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 94: (tos 0x0, ttl 64, id 25287, offset 0, flags [none], proto UDP (17), length 80)
        76.187.232.93.39232 > 205.251.199.164.53: [bad udp cksum 0xcb06 -> 0x5aab!] 36453% [1au] AAAA? g-ns-1956.awsdns-36.net. ar: . OPT UDPsize=4096 OK (52)
    23:06:24.120609 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 91: (tos 0x0, ttl 64, id 27152, offset 0, flags [none], proto UDP (17), length 77)
        76.187.232.93.28964 > 205.251.194.106.53: [bad udp cksum 0xc5c9 -> 0x9f70!] 44964% [1au] AAAA? ns-340.awsdns-42.com. ar: . OPT UDPsize=4096 OK (49)
    23:06:24.120721 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 93: (tos 0x0, ttl 64, id 62535, offset 0, flags [none], proto UDP (17), length 79)
        76.187.232.93.48597 > 205.251.194.106.53: [bad udp cksum 0xc5cb -> 0xcd01!] 64249% [1au] AAAA? g-ns-618.awsdns-42.com. ar: . OPT UDPsize=4096 OK (51)
    23:06:24.120844 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 94: (tos 0x0, ttl 64, id 22999, offset 0, flags [none], proto UDP (17), length 80)
        76.187.232.93.61532 > 205.251.194.106.53: [bad udp cksum 0xc5cc -> 0x14df!] 30061% [1au] AAAA? g-ns-1770.awsdns-42.com. ar: . OPT UDPsize=4096 OK (52)
    23:06:24.120947 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 94: (tos 0x0, ttl 64, id 37884, offset 0, flags [none], proto UDP (17), length 80)
        76.187.232.93.18314 > 205.251.192.43.53: [bad udp cksum 0xc38d -> 0x1583!] 7645% [1au] AAAA? g-ns-1194.awsdns-42.com. ar: . OPT UDPsize=4096 OK (52)
    23:06:24.121051 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 92: (tos 0x0, ttl 64, id 23117, offset 0, flags [none], proto UDP (17), length 78)
        76.187.232.93.7459 > 205.251.196.170.53: [bad udp cksum 0xc80a -> 0x4c2d!] 17745% [1au] AAAA? g-ns-43.awsdns-42.com. ar: . OPT UDPsize=4096 OK (50)
    23:06:24.121203 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 79: (tos 0x0, ttl 64, id 29819, offset 0, flags [none], proto UDP (17), length 65)
        76.187.232.93.23032 > 205.251.198.1.53: [bad udp cksum 0xc954 -> 0x2e86!] 55008% [1au] A? zdbb.net. ar: . OPT UDPsize=4096 OK (37)
    23:06:24.125244 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 1392: (tos 0x0, ttl 127, id 19194, offset 0, flags [none], proto UDP (17), length 1378)
        76.187.232.93.55864 > 216.58.218.174.443: [udp sum ok] UDP, length 1350
    23:06:24.126554 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 882: (tos 0x0, ttl 127, id 9580, offset 0, flags [none], proto TCP (6), length 868)
        76.187.232.93.7050 > 72.21.92.82.80: Flags [P.], cksum 0x84a9 (correct), seq 2657906788:2657907616, ack 1759859040, win 256, length 828
    23:06:24.126711 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 119: (tos 0x0, ttl 64, id 5905, offset 0, flags [none], proto UDP (17), length 105)
        76.187.232.93.55028 > 205.251.192.27.53: [bad udp cksum 0xc396 -> 0x5dc7!] 43042% [1au] A? heatmap-lb-208104679.us-west-1.elb.amazonaws.com. ar: . OPT UDPsize=4096 OK (77)
    23:06:24.126835 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 87: (tos 0x0, ttl 64, id 48378, offset 0, flags [none], proto UDP (17), length 73)
        76.187.232.93.56573 > 205.251.195.199.53: [bad udp cksum 0xc722 -> 0x15bc!] 4158% [1au] AAAA? r2.amazonaws.com. ar: . OPT UDPsize=4096 OK (45)
    23:06:24.126946 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 87: (tos 0x0, ttl 64, id 34988, offset 0, flags [none], proto UDP (17), length 73)
        76.187.232.93.29224 > 205.251.195.199.53: [bad udp cksum 0xc722 -> 0xfbd0!] 38398% [1au] AAAA? r1.amazonaws.com. ar: . OPT UDPsize=4096 OK (45)
    23:06:24.127057 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 87: (tos 0x0, ttl 64, id 39672, offset 0, flags [none], proto UDP (17), length 73)
        76.187.232.93.25885 > 205.251.195.199.53: [bad udp cksum 0xc722 -> 0x473c!] 22427% [1au] AAAA? u1.amazonaws.com. ar: . OPT UDPsize=4096 OK (45)
    23:06:24.127156 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 87: (tos 0x0, ttl 64, id 54317, offset 0, flags [none], proto UDP (17), length 73)
        76.187.232.93.9838 > 205.251.192.27.53: [bad udp cksum 0xc376 -> 0xacd4!] 13177% [1au] A? u2.amazonaws.com. ar: . OPT UDPsize=4096 OK (45)
    23:06:24.127260 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 87: (tos 0x0, ttl 64, id 12750, offset 0, flags [none], proto UDP (17), length 73)
        76.187.232.93.58845 > 205.251.195.199.53: [bad udp cksum 0xc722 -> 0xf080!] 11414% [1au] AAAA? u2.amazonaws.com. ar: . OPT UDPsize=4096 OK (45)
    23:06:24.127429 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 87: (tos 0x0, ttl 64, id 28150, offset 0, flags [none], proto UDP (17), length 73)
        76.187.232.93.62448 > 205.251.192.27.53: [bad udp cksum 0xc376 -> 0x46fa!] 52432% [1au] A? u1.amazonaws.com. ar: . OPT UDPsize=4096 OK (45)
    23:06:24.131750 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 53, id 61655, offset 0, flags [DF], proto TCP (6), length 40)
        66.182.208.104.80 > 76.187.232.93.59767: Flags [.], cksum 0x2a43 (correct), seq 1, ack 1, win 1187, length 0
    23:06:24.134912 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 56, id 32314, offset 0, flags [DF], proto TCP (6), length 52)
        72.21.81.253.80 > 76.187.232.93.4333: Flags [S.], cksum 0x1fa3 (correct), seq 3668539716, ack 973654582, win 5840, options [mss 1460,nop,nop,sackOK,nop,wscale 0], length 0
    23:06:24.135109 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 127, id 13025, offset 0, flags [none], proto TCP (6), length 40)
        76.187.232.93.4333 > 72.21.81.253.80: Flags [.], cksum 0x763e (correct), seq 1, ack 1, win 256, length 0
    23:06:24.135188 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 56, id 2464, offset 0, flags [DF], proto TCP (6), length 52)
        72.21.81.253.80 > 76.187.232.93.39611: Flags [S.], cksum 0x5a84 (correct), seq 433277425, ack 2108207632, win 5840, options [mss 1460,nop,nop,sackOK,nop,wscale 0], length 0
    23:06:24.135383 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 127, id 13026, offset 0, flags [none], proto TCP (6), length 40)
        76.187.232.93.39611 > 72.21.81.253.80: Flags [.], cksum 0xb11f (correct), seq 1, ack 1, win 256, length 0
    23:06:24.135468 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 1130: (tos 0x0, ttl 127, id 13027, offset 0, flags [none], proto TCP (6), length 1116)
        76.187.232.93.4333 > 72.21.81.253.80: Flags [P.], cksum 0xf731 (correct), seq 1:1077, ack 1, win 256, length 1076
    23:06:24.135672 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 1514: (tos 0x0, ttl 127, id 13028, offset 0, flags [none], proto TCP (6), length 1500)
        76.187.232.93.39611 > 72.21.81.253.80: Flags [.], cksum 0xa682 (correct), seq 1:1461, ack 1, win 256, length 1460
    23:06:24.135690 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 300: (tos 0x0, ttl 127, id 13029, offset 0, flags [none], proto TCP (6), length 286)
        76.187.232.93.39611 > 72.21.81.253.80: Flags [P.], cksum 0xb2be (correct), seq 1461:1707, ack 1, win 256, length 246
    23:06:24.137054 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 51, id 0, offset 0, flags [DF], proto TCP (6), length 52)
        201.174.128.77.80 > 76.187.232.93.16045: Flags [S.], cksum 0xea88 (correct), seq 1589067500, ack 2112254420, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    23:06:24.137132 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 53, id 0, offset 0, flags [DF], proto TCP (6), length 52)
        66.182.208.104.80 > 76.187.232.93.16071: Flags [S.], cksum 0x2f38 (correct), seq 463699141, ack 1862680315, win 29200, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    23:06:24.137326 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 66: (tos 0x0, ttl 53, id 0, offset 0, flags [DF], proto TCP (6), length 52)
        71.14.149.178.80 > 76.187.232.93.5712: Flags [S.], cksum 0xf0e8 (correct), seq 1287893050, ack 1696119424, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
    23:06:24.137355 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 127, id 29854, offset 0, flags [none], proto TCP (6), length 40)
        76.187.232.93.16045 > 201.174.128.77.80: Flags [.], cksum 0x6363 (correct), seq 1, ack 1, win 256, length 0
    23:06:24.137385 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 127, id 22571, offset 0, flags [none], proto TCP (6), length 40)
        76.187.232.93.16071 > 66.182.208.104.80: Flags [.], cksum 0xe11a (correct), seq 1, ack 1, win 256, length 0
    23:06:24.137516 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 54: (tos 0x0, ttl 127, id 9684, offset 0, flags [none], proto TCP (6), length 40)
        76.187.232.93.5712 > 71.14.149.178.80: Flags [.], cksum 0x69c3 (correct), seq 1, ack 1, win 256, length 0
    23:06:24.143289 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 1392: (tos 0x0, ttl 54, id 0, offset 0, flags [DF], proto UDP (17), length 1378)
        216.58.218.174.443 > 76.187.232.93.55864: [udp sum ok] UDP, length 1350
    23:06:24.146538 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 3513, offset 0, flags [DF], proto TCP (6), length 40)
        72.21.92.82.80 > 76.187.232.93.7050: Flags [.], cksum 0xecef (correct), seq 1, ack 828, win 312, length 0
    23:06:24.160268 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 256: (tos 0x0, ttl 52, id 0, offset 0, flags [DF], proto UDP (17), length 242)
        205.251.192.27.53 > 76.187.232.93.55028: [udp sum ok] 43042- q: A? heatmap-lb-208104679.us-west-1.elb.amazonaws.com. 0/4/1 ns: us-west-1.elb.amazonaws.com. NS ns-1036.awsdns-01.org., us-west-1.elb.amazonaws.com. NS ns-1850.awsdns-39.co.uk., us-west-1.elb.amazonaws.com. NS ns-467.awsdns-58.com., us-west-1.elb.amazonaws.com. NS ns-699.awsdns-23.net. ar: . OPT UDPsize=4096 (214)
    23:06:24.160705 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 119: (tos 0x0, ttl 64, id 49851, offset 0, flags [none], proto UDP (17), length 105)
        76.187.232.93.63691 > 205.251.196.12.53: [bad udp cksum 0xc787 -> 0xe035!] 65515% [1au] A? heatmap-lb-208104679.us-west-1.elb.amazonaws.com. ar: . OPT UDPsize=4096 OK (77)
    23:06:24.160877 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 94: (tos 0x0, ttl 64, id 58109, offset 0, flags [none], proto UDP (17), length 80)
        76.187.232.93.62505 > 205.251.199.43.53: [bad udp cksum 0xca8d -> 0xa6b4!] 39272% [1au] AAAA? ns-1850.awsdns-39.co.uk. ar: . OPT UDPsize=4096 OK (52)
    23:06:24.167001 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 69: (tos 0x0, ttl 54, id 0, offset 0, flags [DF], proto UDP (17), length 55)
        216.58.218.174.443 > 76.187.232.93.55864: [udp sum ok] UDP, length 27
    23:06:24.169290 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 80: (tos 0x0, ttl 127, id 19195, offset 0, flags [none], proto UDP (17), length 66)
        76.187.232.93.55864 > 216.58.218.174.443: [udp sum ok] UDP, length 38
    23:06:24.171567 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 1392: (tos 0x0, ttl 54, id 0, offset 0, flags [DF], proto UDP (17), length 1378)
        216.58.218.174.443 > 76.187.232.93.55864: [udp sum ok] UDP, length 1350
    23:06:24.174212 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 164: (tos 0x0, ttl 52, id 0, offset 0, flags [DF], proto UDP (17), length 150)
        205.251.194.106.53 > 76.187.232.93.48597: [udp sum ok] 64249*- q: AAAA? g-ns-618.awsdns-42.com. 0/1/1 ns: awsdns-42.com. SOA g-ns-1770.awsdns-42.com. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400 ar: . OPT UDPsize=4096 (122)
    23:06:24.189374 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 119: (tos 0x0, ttl 64, id 62550, offset 0, flags [none], proto UDP (17), length 105)
        76.187.232.93.42365 > 205.251.199.58.53: [bad udp cksum 0xcab5 -> 0x8955!] 42732% [1au] A? heatmap-lb-208104679.us-west-1.elb.amazonaws.com. ar: . OPT UDPsize=4096 OK (77)
    23:06:24.196985 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 77: (tos 0x0, ttl 127, id 19196, offset 0, flags [none], proto UDP (17), length 63)
        76.187.232.93.55864 > 216.58.218.174.443: [udp sum ok] UDP, length 35
    23:06:24.208976 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 1514: (tos 0x0, ttl 56, id 3514, offset 0, flags [DF], proto TCP (6), length 1500)
        72.21.92.82.80 > 76.187.232.93.7050: Flags [.], cksum 0x1e56 (correct), seq 1:1461, ack 828, win 312, length 1460
    23:06:24.209005 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 1514: (tos 0x0, ttl 56, id 3515, offset 0, flags [DF], proto TCP (6), length 1500)
        72.21.92.82.80 > 76.187.232.93.7050: Flags [.], cksum 0x70b5 (correct), seq 1461:2921, ack 828, win 312, length 1460
    
    [code]23:07:55.226666 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 58114, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29648, length 8
    23:07:55.314943 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 26885, offset 0, flags [none], proto ICMP (1), length 28)
        8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29648, length 8
    23:07:55.744082 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 22367, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29649, length 8
    23:07:56.247891 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 32612, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29650, length 8
    23:07:56.265648 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 27851, offset 0, flags [none], proto ICMP (1), length 28)
        8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29650, length 8
    23:07:56.756639 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 56968, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29651, length 8
    23:07:57.267057 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 7146, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29652, length 8
    23:07:57.776832 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 44856, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29653, length 8
    23:07:58.287330 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 20907, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29654, length 8
    23:07:58.301981 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 28967, offset 0, flags [none], proto ICMP (1), length 28)
        8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29654, length 8
    23:07:58.799187 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 45762, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29655, length 8
    23:07:59.326673 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 50033, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29656, length 8
    23:07:59.341122 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 29482, offset 0, flags [none], proto ICMP (1), length 28)
        8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29656, length 8
    23:07:59.854253 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 30320, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29657, length 8
    23:08:00.358128 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 38973, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29658, length 8
    23:08:00.375168 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 30171, offset 0, flags [none], proto ICMP (1), length 28)
        8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29658, length 8
    23:08:00.866613 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 38025, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29659, length 8
    23:08:01.376617 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 24134, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29660, length 8
    23:08:01.396641 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 30545, offset 0, flags [none], proto ICMP (1), length 28)
        8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29660, length 8
    23:08:01.886672 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 12118, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29661, length 8
    23:08:02.396690 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 4555, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29662, length 8
    23:08:02.416626 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 31061, offset 0, flags [none], proto ICMP (1), length 28)
        8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29662, length 8
    23:08:02.909426 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 12985, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29663, length 8
    23:08:03.416769 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 22629, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29664, length 8
    23:08:03.441750 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 31467, offset 0, flags [none], proto ICMP (1), length 28)
        8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29664, length 8
    23:08:03.933029 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 41459, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29665, length 8
    23:08:04.452663 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 33161, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29666, length 8
    23:08:04.468202 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 31769, offset 0, flags [none], proto ICMP (1), length 28)
        8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29666, length 8
    23:08:04.967305 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 49825, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29667, length 8
    23:08:05.476622 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 35254, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29668, length 8
    23:08:05.492519 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 32625, offset 0, flags [none], proto ICMP (1), length 28)
        8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29668, length 8
    23:08:05.988133 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 15912, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29669, length 8
    23:08:06.496711 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 17707, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29670, length 8
    23:08:06.511431 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 33393, offset 0, flags [none], proto ICMP (1), length 28)
        8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29670, length 8
    23:08:07.006660 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 46228, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29671, length 8
    23:08:07.516665 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 63366, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29672, length 8
    23:08:07.531579 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 34296, offset 0, flags [none], proto ICMP (1), length 28)
        8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29672, length 8
    23:08:08.043369 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 63145, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29673, length 8
    23:08:08.562918 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 30547, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29674, length 8
    23:08:08.577925 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 35101, offset 0, flags [none], proto ICMP (1), length 28)
        8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29674, length 8
    23:08:09.066878 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 51984, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29675, length 8
    23:08:09.578604 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 14554, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29676, length 8
    23:08:09.593479 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 35629, offset 0, flags [none], proto ICMP (1), length 28)
        8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29676, length 8
    23:08:10.086745 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 41210, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29677, length 8
    23:08:10.596613 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 18498, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29678, length 8
    23:08:10.611972 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 36059, offset 0, flags [none], proto ICMP (1), length 28)
        8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29678, length 8
    23:08:11.122059 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 36413, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29679, length 8
    23:08:11.633768 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 38289, offset 0, flags [none], proto ICMP (1), length 28)
        76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29680, length 8
    23:08:11.648415 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 36640, offset 0, flags [none], proto ICMP (1), length 28)
        8.8.8.8 > 76.187.232.93: ICMP echo reply, id 12666, seq 29680, length 8
    23:08:12.153529 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 25178, offset 0, flags [none], proto ICMP ([/code]
    
    ![Screenshot_153.png](/public/_imported_attachments_/1/Screenshot_153.png)
    ![Screenshot_153.png_thumb](/public/_imported_attachments_/1/Screenshot_153.png_thumb)[/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s][/s]
    

  • Netgate

    That is showing packets leaving and not being returned.

    Not sure what else to tell you there. Check upstream.

    There should be a reply for every request. If there is not that is the definition of ICMP packet loss.

    05:09:48.077929 IP 172.25.228.5 > 8.8.8.8: ICMP echo request, id 30741, seq 63, length 8
    05:09:48.115574 IP 8.8.8.8 > 172.25.228.5: ICMP echo reply, id 30741, seq 63, length 8
    05:09:48.579556 IP 172.25.228.5 > 8.8.8.8: ICMP echo request, id 30741, seq 64, length 8
    05:09:48.617289 IP 8.8.8.8 > 172.25.228.5: ICMP echo reply, id 30741, seq 64, length 8
    05:09:49.080939 IP 172.25.228.5 > 8.8.8.8: ICMP echo request, id 30741, seq 65, length 8
    05:09:49.118607 IP 8.8.8.8 > 172.25.228.5: ICMP echo reply, id 30741, seq 65, length 8
    05:09:49.582548 IP 172.25.228.5 > 8.8.8.8: ICMP echo request, id 30741, seq 66, length 8
    05:09:49.619924 IP 8.8.8.8 > 172.25.228.5: ICMP echo reply, id 30741, seq 66, length 8
    05:09:50.084023 IP 172.25.228.5 > 8.8.8.8: ICMP echo request, id 30741, seq 67, length 8
    05:09:50.121874 IP 8.8.8.8 > 172.25.228.5: ICMP echo reply, id 30741, seq 67, length 8
    05:09:50.585591 IP 172.25.228.5 > 8.8.8.8: ICMP echo request, id 30741, seq 68, length 8
    05:09:50.622230 IP 8.8.8.8 > 172.25.228.5: ICMP echo reply, id 30741, seq 68, length 8
    05:09:51.088961 IP 172.25.228.5 > 8.8.8.8: ICMP echo request, id 30741, seq 69, length 8
    05:09:51.126111 IP 8.8.8.8 > 172.25.228.5: ICMP echo reply, id 30741, seq 69, length 8
    05:09:51.590576 IP 172.25.228.5 > 8.8.8.8: ICMP echo request, id 30741, seq 70, length 8
    05:09:51.628037 IP 8.8.8.8 > 172.25.228.5: ICMP echo reply, id 30741, seq 70, length 8
    05:09:52.091982 IP 172.25.228.5 > 8.8.8.8: ICMP echo request, id 30741, seq 71, length 8
    05:09:52.127754 IP 8.8.8.8 > 172.25.228.5: ICMP echo reply, id 30741, seq 71, length 8
    05:09:52.593572 IP 172.25.228.5 > 8.8.8.8: ICMP echo request, id 30741, seq 72, length 8
    05:09:52.630214 IP 8.8.8.8 > 172.25.228.5: ICMP echo reply, id 30741, seq 72, length 8


  • Netgate

    76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29675, length 8
    23:08:09.578604 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 14554, offset 0, flags [none], proto ICMP (1), length 28)
    76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29676, length 8
    23:08:09.593479 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 35629, offset 0, flags [none], proto ICMP (1), length 28)

    You have something hosed in your environment. You have two sets of pings being seen on that interface with the same source IP address and reciprocal MAC addresses. No idea what you did there.



  • @Derelict:

    That is showing packets leaving and not being returned.

    Not sure what else to tell you there. Check upstream.

    There should be a reply for every request. If there is not that is the definition of ICMP packet loss.

    05:09:48.077929 IP 172.25.228.5 > 8.8.8.8: ICMP echo request, id 30741, seq 63, length 8

    How do I go about checking the upstream? Even though I think it will prove you are correct. due to when I run a speedtest my upstream times out.

    –--

    @Derelict:

    76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29675, length 8
    23:08:09.578604 00:0c:29:af:40:bd > 00:01:5c:77:7a:46, ethertype IPv4 (0x0800), length 42: (tos 0x0, ttl 64, id 14554, offset 0, flags [none], proto ICMP (1), length 28)
    76.187.232.93 > 8.8.8.8: ICMP echo request, id 12666, seq 29676, length 8
    23:08:09.593479 00:01:5c:77:7a:46 > 00:0c:29:af:40:bd, ethertype IPv4 (0x0800), length 60: (tos 0x0, ttl 56, id 35629, offset 0, flags [none], proto ICMP (1), length 28)

    You have something hosed in your environment. You have two sets of pings being seen on that interface with the same source IP address and reciprocal MAC addresses. No idea what you did there.

    Huh? I didn't do anything, no odd settings just everything out of the box.

    I added a pic of my esxi network configuration up there^ (i'll add it to this post) and yes I have 2 Sense box's as VM's (One old) (One new) but only one is booted up at this time and that is the new one (which is the one I'm having an issue with), in less the vSwitch is an issue?

    –EDIT
    pfSense MAC is 00:0c:29:af:40:bd
    I am looking for this MAC 00:01:5c:77:7a:46 I don't know what it is.






  • Netgate

    Not sure. Sorry. Much more familiar with XenServer. Having two MAC addresses out there for the same IP address will undoubtedly screw things up though. Are there a bunch of IP conflicts being logged in the system log? Maybe look around in ESXi to see what those two MAC addresses are.



  • @Derelict:

    Not sure. Sorry. Much more familiar with XenServer. Having two MAC addresses out there for the same IP address will undoubtedly screw things up though.

    All good man, thanks for the help anyhow. Yeah I was using Xenserver but due to can't live migrate unless you have the exact same Hardware for every hypervisor turned me off and away from Xen. Was running proxmox but started to run in to stupid issues and stuff was braking all the time.

    Are there a bunch of IP conflicts being logged in the system log?

    Nope not that I can tell.

    Maybe look around in ESXi to see what those two MAC addresses are.

    I know the 00:0c:29:af:40:bd is pfSense but for the life of me I can not find 00:01:5c:77:7a:46


    I think i'll just take down my network and install pfSense on real hardware and see if I still have the same issue, I mean the ESXi box was built for the sole purpose of running pfSense but I decided to utilize more of its power sometime back. I will post back in a few days and let you know my findings.

    THANKS  ;D



  • @Fmslick:

    I know the 00:0c:29:af:40:bd is pfSense but for the life of me I can not find 00:01:5c:77:7a:46

    Arris (Cadant) modem?



  • @dennypage:

    @Fmslick:

    I know the 00:0c:29:af:40:bd is pfSense but for the life of me I can not find 00:01:5c:77:7a:46

    Arris (Cadant) modem?

    No it's not the Arris modem, I was thinking the samething an it was one of the first things I looked up. It ends with aa:47.

    I have a feeling the the 7a:46 is coming from something in esxi like vswitch or something.



  • The OUI is for an Arris modem. It would be rather odd that this MAC address would randomly appear in your installation and not be associated with the modem. VMware has their own OUI (which matches your other MAC address). Modems have multiple MAC addresses. I would suggest logging into the thing and try cataloging them.



  • Hi.

    Cadant INC. 00:01:5C http://macvendors.co/v/9690/CADANT-INC.

    Regards.



  • Sorry it was late last night.

    @dennypage:

    The OUI is for an Arris modem. It would be rather odd that this MAC address would randomly appear in your installation and not be associated with the modem. VMware has their own OUI (which matches your other MAC address). Modems have multiple MAC addresses. I would suggest logging into the thing and try cataloging them.

    Yep you are right about the OUI's but wrong, Cable Modem MAC Address = D4:0A:A9:52:AA:47 (pic below) and it is randomly appear in my installation. Maybe the ISP got something wrong? lol I am at a loss now.

    @javcasta:

    Hi.

    Cadant INC. 00:01:5C http://macvendors.co/v/9690/CADANT-INC.

    Regards.

    Thanks for the link :) but still not it. Cable Modem MAC Address = D4:0A:A9:52:AA:47



  • Netgate

    It's in your packet capture. It's coming from somewhere. Check the MAC address tables in your switches, etc. Wireshark out on a mirror port on the physical network. Something.



  • @Derelict:

    It's in your packet capture. It's coming from somewhere. Check the MAC address tables in your switches, etc. Wireshark out on a mirror port on the physical network. Something.

    ;D  "Something" ok will do.