В сообщении от Вторник 14 февраля 2012 15:13:18 вы написали:
Le mardi 14 février 2012 à 16:08 +0200, alekcejk@googlemail.com a
écrit :
quoted
В сообщении от Вторник 14 февраля 2012 06:55:02 вы написали:
quoted
Le mardi 14 février 2012 à 01:49 +0200, alekcejk@googlemail.com a
écrit :
quoted
В сообщении от Понедельник 13 февраля 2012 23:44:16 вы написали:
quoted
Le lundi 13 février 2012 à 21:18 +0100, Eric Dumazet a écrit :
I wonder if the other side of your link believes link is in half duplex
mode... Could you please check ?
I have no access to other side, the only I can check is ethtool and mii-diag (kernel-3.2.3):
I have seen numerous duplex mismatches in some data centers after a
reboot. One side believes link is full duplex, the other side believes
its half duplex.
Was no such problems here.
quoted
You could setup a pktgen/hping3 to send 2.000 small frames per second to
your gateway and check if you still can download at normal speeds.
hping3 --udp -s 9 -p 9 -i u500 192.168.1.1
Download speed not changed when running this command for my gw.
I mean with a 3.2 kernel of course ;)
Yes, results are the same for 3.2.3 kernel with and without running
this command and for geographically close to me server (speed not limited)
and for server not close to me speed limitation the same.
From: Eric Dumazet <hidden> Date: 2012-02-14 16:00:15
Le mardi 14 février 2012 à 16:28 +0200, alekcejk@googlemail.com a
écrit :
Yes, results are the same for 3.2.3 kernel with and without running
this command and for geographically close to me server (speed not limited)
and for server not close to me speed limitation the same.
I wonder if "netstat -s" is telling the truth ...
Could you post after a transfert on 3.2, "grep TcpExt /proc/net/netstat"
В сообщении от Вторник 14 февраля 2012 17:00:10 вы написали:
Le mardi 14 février 2012 à 16:28 +0200, alekcejk@googlemail.com a
écrit :
quoted
Yes, results are the same for 3.2.3 kernel with and without running
this command and for geographically close to me server (speed not limited)
and for server not close to me speed limitation the same.
I wonder if "netstat -s" is telling the truth ...
Could you post after a transfert on 3.2, "grep TcpExt /proc/net/netstat"
From: Eric Dumazet <hidden> Date: 2012-02-15 04:43:18
Le mardi 14 février 2012 à 18:43 +0200, alekcejk@googlemail.com a
écrit :
В сообщении от Вторник 14 февраля 2012 17:00:10 вы написали:
quoted
Le mardi 14 février 2012 à 16:28 +0200, alekcejk@googlemail.com a
écrit :
quoted
Yes, results are the same for 3.2.3 kernel with and without running
this command and for geographically close to me server (speed not limited)
and for server not close to me speed limitation the same.
I wonder if "netstat -s" is telling the truth ...
Could you post after a transfert on 3.2, "grep TcpExt /proc/net/netstat"
-net.core.wmem_default = 114688
-net.core.rmem_default = 114688
+net.core.wmem_default = 163840
+net.core.rmem_default = 163840
Can you please try running this as root on the 3.2 kernel and then see
what sort of performance you get:
sysctl net.core.rmem_default=114688
This should make the 3.2 config closer to the 3.1 config. Should be
interesting to see if the behavior is more similar when that happens.
neal
-net.core.wmem_default = 114688
-net.core.rmem_default = 114688
+net.core.wmem_default = 163840
+net.core.rmem_default = 163840
Can you please try running this as root on the 3.2 kernel and then see
what sort of performance you get:
sysctl net.core.rmem_default=114688
This should make the 3.2 config closer to the 3.1 config. Should be
interesting to see if the behavior is more similar when that happens.
neal
These changes are normal, since skb truesize now include shared_info.
By the way, these params are not used for tcp streams.
This is why I asked netstat -s values, to check if we had drops because
of truesize limits.
Its not the case here since skb are not too fat (as some NICS can do,
using a full PAGE to hold a single 1500 bytes frams)
-net.core.wmem_default = 114688
-net.core.rmem_default = 114688
+net.core.wmem_default = 163840
+net.core.rmem_default = 163840
Can you please try running this as root on the 3.2 kernel and then see
what sort of performance you get:
sysctl net.core.rmem_default=114688
This should make the 3.2 config closer to the 3.1 config. Should be
interesting to see if the behavior is more similar when that happens.
neal
These changes are normal, since skb truesize now include shared_info.
By the way, these params are not used for tcp streams.
This is why I asked netstat -s values, to check if we had drops because
of truesize limits.
Its not the case here since skb are not too fat (as some NICS can do,
using a full PAGE to hold a single 1500 bytes frams)
Would it be useful to check if there was any difference in
TCP parameters between the 3.1 and 3.2 kernels by performing
the following on each:
grep . /sys/module/tcp_*/parameters/*
-Bill
From: Eric Dumazet <hidden> Date: 2012-02-15 08:00:25
Le mercredi 15 février 2012 à 02:52 -0500, Bill Fink a écrit :
Would it be useful to check if there was any difference in
TCP parameters between the 3.1 and 3.2 kernels by performing
the following on each:
grep . /sys/module/tcp_*/parameters/*
-Bill
I did yesterday and found nothing interesting.
# diff SYSCTL1 SYSCTL2
13a14
From: Bill Fink <hidden> Date: 2012-02-15 08:18:21
On Wed, 15 Feb 2012, Eric Dumazet wrote:
Le mercredi 15 février 2012 à 02:52 -0500, Bill Fink a écrit :
quoted
Would it be useful to check if there was any difference in
TCP parameters between the 3.1 and 3.2 kernels by performing
the following on each:
grep . /sys/module/tcp_*/parameters/*
-Bill
I did yesterday and found nothing interesting.
Do your SYSCTL1 and SYSCTL2 files include /sys/module/tcp_*
as well as /proc/sys? Not that I know of anything that might
have changed in /sys/module/tcp_* between 3.1 and 3.2, but
you never know what a particular distro might have tweaked.
-Bill
From: Eric Dumazet <hidden> Date: 2012-02-15 08:31:55
Le mercredi 15 février 2012 à 03:18 -0500, Bill Fink a écrit :
Do your SYSCTL1 and SYSCTL2 files include /sys/module/tcp_*
as well as /proc/sys? Not that I know of anything that might
have changed in /sys/module/tcp_* between 3.1 and 3.2, but
you never know what a particular distro might have tweaked.
Fedora doesnt change these, and kernel version change is in TCP
receiver, where these congestion params dont apply.
В сообщении от Среда 15 февраля 2012 02:52:00 вы написали:
Would it be useful to check if there was any difference in
TCP parameters between the 3.1 and 3.2 kernels by performing
the following on each:
grep . /sys/module/tcp_*/parameters/*
-Bill
-net.core.wmem_default = 114688
-net.core.rmem_default = 114688
+net.core.wmem_default = 163840
+net.core.rmem_default = 163840
Can you please try running this as root on the 3.2 kernel and then see
what sort of performance you get:
sysctl net.core.rmem_default=114688
This should make the 3.2 config closer to the 3.1 config. Should be
interesting to see if the behavior is more similar when that happens.
neal
Nothing changed with download speed after I set net.core.wmem_default = 114688
and net.core.rmem_default = 114688.
В сообщении от Среда 15 февраля 2012 05:43:13 вы написали:
OK thanks, nothing seems wrong on receiver side.
Could you try to force ECN enabled flows and send tcpdump, to check if
we receive retransmits ?
echo 1 >/proc/sys/net/ipv4/tcp_ecn
2 was there before I did it.
And check tcp can engage ECN : tcpdump SYN/SYNACK should look like:
05:41:17.943538 IP 192.168.1.97.45986 > 68.232.35.119.80: Flags [SEW],
seq 2109565072, win 14600, options [mss 1460,sackOK,TS val 8295492 ecr
0,nop,wscale 6], length 0
05:41:17.980619 IP 68.232.35.119.80 > 192.168.1.97.45986: Flags [S.E],
seq 2519424885, ack 2109565073, win 14600, options [mss
1452,nop,nop,sackOK,nop,wscale 6], length 0
From: Eric Dumazet <hidden> Date: 2012-02-15 13:49:49
Le mercredi 15 février 2012 à 05:44 -0800, alekcejk@googlemail.com a
écrit :
В сообщении от Среда 15 февраля 2012 05:43:13 вы написали:
quoted
OK thanks, nothing seems wrong on receiver side.
Could you try to force ECN enabled flows and send tcpdump, to check if
we receive retransmits ?
echo 1 >/proc/sys/net/ipv4/tcp_ecn
2 was there before I did it.
quoted
And check tcp can engage ECN : tcpdump SYN/SYNACK should look like:
05:41:17.943538 IP 192.168.1.97.45986 > 68.232.35.119.80: Flags [SEW],
seq 2109565072, win 14600, options [mss 1460,sackOK,TS val 8295492 ecr
0,nop,wscale 6], length 0
05:41:17.980619 IP 68.232.35.119.80 > 192.168.1.97.45986: Flags [S.E],
seq 2519424885, ack 2109565073, win 14600, options [mss
1452,nop,nop,sackOK,nop,wscale 6], length 0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
15:21:20.799077 IP AA.BB.CC.XY.55374 > 213.83.42.56.21: Flags [SEW], seq 1233000896, win 14600, options [mss 1460,sackOK,TS val 764819 ecr 0,nop,wscale 4], length 0
15:21:20.853575 IP 213.83.42.56.21 > AA.BB.CC.XY.55374: Flags [S.], seq 3046667726, ack 1233000897, win 5792, options [mss 1460,sackOK,TS val 3782118833 ecr 764819,nop,wscale 7], length
0
Unfortunately remote server doesnt negotiate ECN (we dont see E flag in
the SYNACK frame)
Try to find another one, and check SYNACK looks like : Flags [S.E]
From: Eric Dumazet <hidden> Date: 2012-02-15 13:53:19
Le mercredi 15 février 2012 à 14:49 +0100, Eric Dumazet a écrit :
Unfortunately remote server doesnt negotiate ECN (we dont see E flag in
the SYNACK frame)
Try to find another one, and check SYNACK looks like : Flags [S.E]
If you find one, please add -v option to tcpdump so that we can see
ECT(0) code points in traces:
# tcpdump -p -n -s 0 -v -i eth3 host 192.168.20.110 -c 100
tcpdump: listening on eth3, link-type EN10MB (Ethernet), capture size 65535 bytes
14:52:05.859079 IP (tos 0x0, ttl 64, id 56260, offset 0, flags [DF], proto TCP (6), length 60)
192.168.20.110.47146 > 192.168.20.108.12865: Flags [SEW], cksum 0xdb99 (correct), seq 3163559948, win 14600, options [mss 1460,sackOK,TS val 94487496 ecr 0,nop,wscale 8], length 0
14:52:05.859092 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60)
192.168.20.108.12865 > 192.168.20.110.47146: Flags [S.E], cksum 0xaa59 (incorrect -> 0x8fae), seq 3902753423, ack 3163559949, win 14480, options [mss 1460,sackOK,TS val 79566055 ecr 94487496,nop,wscale 6], length 0
14:52:05.859172 IP (tos 0x0, ttl 64, id 56261, offset 0, flags [DF], proto TCP (6), length 52)
192.168.20.110.47146 > 192.168.20.108.12865: Flags [.], cksum 0xf70f (correct), ack 1, win 58, options [nop,nop,TS val 94487496 ecr 79566055], length 0
14:52:05.859218 IP (tos 0x2,ECT(0), ttl 64, id 56262, offset 0, flags [DF], proto TCP (6), length 708)
192.168.20.110.47146 > 192.168.20.108.12865: Flags [P.], cksum 0xf21f (correct), seq 1:657, ack 1, win 58, options [nop,nop,TS val 94487496 ecr 79566055], length 656
14:52:05.859379 IP (tos 0x0, ttl 64, id 24183, offset 0, flags [DF], proto TCP (6), length 52)
192.168.20.108.12865 > 192.168.20.110.47146: Flags [.], cksum 0xaa51 (incorrect -> 0xf3c2), ack 657, win 247, options [nop,nop,TS val 79566055 ecr 94487496], length 0
14:52:05.859414 IP (tos 0x2,ECT(0), ttl 64, id 24184, offset 0, flags [DF], proto TCP (6), length 708)
192.168.20.108.12865 > 192.168.20.110.47146: Flags [P.], cksum 0xace1 (incorrect -> 0x0527), seq 1:657, ack 657, win 247, options [nop,nop,TS val 79566055 ecr 94487496], length 656
14:52:05.859519 IP (tos 0x0, ttl 64, id 56263, offset 0, flags [DF], proto TCP (6), length 52)
192.168.20.110.47146 > 192.168.20.108.12865: Flags [.], cksum 0xf1e9 (correct), ack 657, win 63, options [nop,nop,TS val 94487497 ecr 79566055], length 0
14:52:05.859890 IP (tos 0x2,ECT(0), ttl 64, id 56264, offset 0, flags [DF], proto TCP (6), length 708)
192.168.20.110.47146 > 192.168.20.108.12865: Flags [P.], cksum 0x6b99 (correct), seq 657:1313, ack 657, win 63, options [nop,nop,TS val 94487497 ecr 79566055], length 656
14:52:05.864923 IP (tos 0x2,ECT(0), ttl 64, id 24185, offset 0, flags [DF], proto TCP (6), length 708)
192.168.20.108.12865 > 192.168.20.110.47146: Flags [P.], cksum 0xace1 (incorrect -> 0x6a91), seq 657:1313, ack 1313, win 268, options [nop,nop,TS val 79566060 ecr 94487497], length 656
14:52:05.865046 IP (tos 0x0, ttl 64, id 56385, offset 0, flags [DF], proto TCP (6), length 60)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [SEW], cksum 0x3a0a (correct), seq 4121763727, win 14600, options [mss 1460,sackOK,TS val 94487502 ecr 0,nop,wscale 8], length 0
14:52:05.865053 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 60)
192.168.20.108.51265 > 192.168.20.110.33555: Flags [S.E], cksum 0xaa59 (incorrect -> 0x3a75), seq 2704557470, ack 4121763728, win 14480, options [mss 1460,sackOK,TS val 79566061 ecr 94487502,nop,wscale 6], length 0
14:52:05.865129 IP (tos 0x0, ttl 64, id 56386, offset 0, flags [DF], proto TCP (6), length 52)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [.], cksum 0xa1d6 (correct), ack 1, win 58, options [nop,nop,TS val 94487502 ecr 79566061], length 0
14:52:05.865182 IP (tos 0x2,ECT(0), ttl 64, id 56387, offset 0, flags [DF], proto TCP (6), length 1500)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [.], cksum 0x62cb (correct), seq 1:1449, ack 1, win 58, options [nop,nop,TS val 94487502 ecr 79566061], length 1448
14:52:05.865205 IP (tos 0x2,ECT(0), ttl 64, id 56388, offset 0, flags [DF], proto TCP (6), length 1500)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [.], cksum 0x5d23 (correct), seq 1449:2897, ack 1, win 58, options [nop,nop,TS val 94487502 ecr 79566061], length 1448
14:52:05.865230 IP (tos 0x2,ECT(0), ttl 64, id 56389, offset 0, flags [DF], proto TCP (6), length 1500)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [.], cksum 0x577b (correct), seq 2897:4345, ack 1, win 58, options [nop,nop,TS val 94487502 ecr 79566061], length 1448
14:52:05.865233 IP (tos 0x2,ECT(0), ttl 64, id 56390, offset 0, flags [DF], proto TCP (6), length 1500)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [.], cksum 0x51d3 (correct), seq 4345:5793, ack 1, win 58, options [nop,nop,TS val 94487502 ecr 79566061], length 1448
14:52:05.865254 IP (tos 0x2,ECT(0), ttl 64, id 56391, offset 0, flags [DF], proto TCP (6), length 1500)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [.], cksum 0x4c2b (correct), seq 5793:7241, ack 1, win 58, options [nop,nop,TS val 94487502 ecr 79566061], length 1448
14:52:05.865257 IP (tos 0x2,ECT(0), ttl 64, id 56392, offset 0, flags [DF], proto TCP (6), length 1500)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [.], cksum 0x4683 (correct), seq 7241:8689, ack 1, win 58, options [nop,nop,TS val 94487502 ecr 79566061], length 1448
14:52:05.865278 IP (tos 0x2,ECT(0), ttl 64, id 56393, offset 0, flags [DF], proto TCP (6), length 1500)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [.], cksum 0x40db (correct), seq 8689:10137, ack 1, win 58, options [nop,nop,TS val 94487502 ecr 79566061], length 1448
14:52:05.865281 IP (tos 0x2,ECT(0), ttl 64, id 56394, offset 0, flags [DF], proto TCP (6), length 1500)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [.], cksum 0x3b33 (correct), seq 10137:11585, ack 1, win 58, options [nop,nop,TS val 94487502 ecr 79566061], length 1448
14:52:05.865301 IP (tos 0x2,ECT(0), ttl 64, id 56395, offset 0, flags [DF], proto TCP (6), length 1500)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [.], cksum 0x358b (correct), seq 11585:13033, ack 1, win 58, options [nop,nop,TS val 94487502 ecr 79566061], length 1448
14:52:05.865305 IP (tos 0x2,ECT(0), ttl 64, id 56396, offset 0, flags [DF], proto TCP (6), length 1500)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [P.], cksum 0x2fdb (correct), seq 13033:14481, ack 1, win 58, options [nop,nop,TS val 94487502 ecr 79566061], length 1448
14:52:05.865349 IP (tos 0x0, ttl 64, id 20850, offset 0, flags [DF], proto TCP (6), length 52)
192.168.20.108.51265 > 192.168.20.110.33555: Flags [.], cksum 0xaa51 (incorrect -> 0x9b58), ack 1449, win 272, options [nop,nop,TS val 79566061 ecr 94487502], length 0
14:52:05.865473 IP (tos 0x2,ECT(0), ttl 64, id 56397, offset 0, flags [DF], proto TCP (6), length 1500)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [.], cksum 0x2a3a (correct), seq 14481:15929, ack 1, win 58, options [nop,nop,TS val 94487503 ecr 79566061], length 1448
14:52:05.865508 IP (tos 0x0, ttl 64, id 20851, offset 0, flags [DF], proto TCP (6), length 52)
192.168.20.108.51265 > 192.168.20.110.33555: Flags [.], cksum 0xaa51 (incorrect -> 0x9583), ack 2897, win 317, options [nop,nop,TS val 79566061 ecr 94487502], length 0
14:52:05.865668 IP (tos 0x0, ttl 64, id 20852, offset 0, flags [DF], proto TCP (6), length 52)
192.168.20.108.51265 > 192.168.20.110.33555: Flags [.], cksum 0xaa51 (incorrect -> 0x8fae), ack 4345, win 362, options [nop,nop,TS val 79566061 ecr 94487502], length 0
14:52:05.865827 IP (tos 0x0, ttl 64, id 20853, offset 0, flags [DF], proto TCP (6), length 52)
192.168.20.108.51265 > 192.168.20.110.33555: Flags [.], cksum 0xaa51 (incorrect -> 0x89d8), ack 5793, win 408, options [nop,nop,TS val 79566061 ecr 94487502], length 0
14:52:05.865990 IP (tos 0x0, ttl 64, id 20854, offset 0, flags [DF], proto TCP (6), length 52)
192.168.20.108.51265 > 192.168.20.110.33555: Flags [.], cksum 0xaa51 (incorrect -> 0x8402), ack 7241, win 453, options [nop,nop,TS val 79566062 ecr 94487502], length 0
14:52:05.866111 IP (tos 0x2,ECT(0), ttl 64, id 56398, offset 0, flags [DF], proto TCP (6), length 1500)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [.], cksum 0x2491 (correct), seq 15929:17377, ack 1, win 58, options [nop,nop,TS val 94487503 ecr 79566062], length 1448
14:52:05.866135 IP (tos 0x2,ECT(0), ttl 64, id 56399, offset 0, flags [DF], proto TCP (6), length 1500)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [.], cksum 0x1ee9 (correct), seq 17377:18825, ack 1, win 58, options [nop,nop,TS val 94487503 ecr 79566062], length 1448
14:52:05.866152 IP (tos 0x0, ttl 64, id 20855, offset 0, flags [DF], proto TCP (6), length 52)
192.168.20.108.51265 > 192.168.20.110.33555: Flags [.], cksum 0xaa51 (incorrect -> 0x7e2d), ack 8689, win 498, options [nop,nop,TS val 79566062 ecr 94487502], length 0
14:52:05.866158 IP (tos 0x2,ECT(0), ttl 64, id 56400, offset 0, flags [DF], proto TCP (6), length 1500)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [.], cksum 0x1941 (correct), seq 18825:20273, ack 1, win 58, options [nop,nop,TS val 94487503 ecr 79566062], length 1448
14:52:05.866163 IP (tos 0x2,ECT(0), ttl 64, id 56401, offset 0, flags [DF], proto TCP (6), length 1500)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [.], cksum 0x1399 (correct), seq 20273:21721, ack 1, win 58, options [nop,nop,TS val 94487503 ecr 79566062], length 1448
14:52:05.866310 IP (tos 0x0, ttl 64, id 20856, offset 0, flags [DF], proto TCP (6), length 52)
192.168.20.108.51265 > 192.168.20.110.33555: Flags [.], cksum 0xaa51 (incorrect -> 0x7858), ack 10137, win 543, options [nop,nop,TS val 79566062 ecr 94487502], length 0
14:52:05.866432 IP (tos 0x2,ECT(0), ttl 64, id 56402, offset 0, flags [DF], proto TCP (6), length 1500)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [.], cksum 0x0df0 (correct), seq 21721:23169, ack 1, win 58, options [nop,nop,TS val 94487504 ecr 79566062], length 1448
14:52:05.866463 IP (tos 0x2,ECT(0), ttl 64, id 56403, offset 0, flags [DF], proto TCP (6), length 1500)
192.168.20.110.33555 > 192.168.20.108.51265: Flags [P.], cksum 0x0840 (correct), seq 23169:24617, ack 1, win 58, options [nop,nop,TS val 94487504 ecr 79566062], length 1448
14:52:05.866471 IP (tos 0x0, ttl 64, id 20857, offset 0, flags [DF], proto TCP (6), length 52)
192.168.20.108.51265 > 192.168.20.110.33555: Flags [.], cksum 0xaa51 (incorrect -> 0x7282), ack 11585, win 589, options [nop,nop,TS val 79566062 ecr 94487502], length 0
14:52:05.866629 IP (tos 0x0, ttl 64, id 20858, offset 0, flags [DF], proto TCP (6), length 52)
192.168.20.108.51265 > 192.168.20.110.33555: Flags [.], cksum 0xaa51 (incorrect -> 0x6cad), ack 13033, win 634, options [nop,nop,TS val 79566062 ecr 94487502], length 0
В сообщении от Среда 15 февраля 2012 14:49:45 вы написали:
Le mercredi 15 février 2012 à 05:44 -0800, alekcejk@googlemail.com a
écrit :
quoted
В сообщении от Среда 15 февраля 2012 05:43:13 вы написали:
quoted
OK thanks, nothing seems wrong on receiver side.
Could you try to force ECN enabled flows and send tcpdump, to check if
we receive retransmits ?
echo 1 >/proc/sys/net/ipv4/tcp_ecn
2 was there before I did it.
quoted
And check tcp can engage ECN : tcpdump SYN/SYNACK should look like:
05:41:17.943538 IP 192.168.1.97.45986 > 68.232.35.119.80: Flags [SEW],
seq 2109565072, win 14600, options [mss 1460,sackOK,TS val 8295492 ecr
0,nop,wscale 6], length 0
05:41:17.980619 IP 68.232.35.119.80 > 192.168.1.97.45986: Flags [S.E],
seq 2519424885, ack 2109565073, win 14600, options [mss
1452,nop,nop,sackOK,nop,wscale 6], length 0
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
15:21:20.799077 IP AA.BB.CC.XY.55374 > 213.83.42.56.21: Flags [SEW], seq 1233000896, win 14600, options [mss 1460,sackOK,TS val 764819 ecr 0,nop,wscale 4], length 0
15:21:20.853575 IP 213.83.42.56.21 > AA.BB.CC.XY.55374: Flags [S.], seq 3046667726, ack 1233000897, win 5792, options [mss 1460,sackOK,TS val 3782118833 ecr 764819,nop,wscale 7],
length 0
15:21:21.450884 IP AA.BB.CC.XY.53691 > 213.83.42.56.36139: Flags [SEW], seq 2740127335, win 14600, options [mss 1460,sackOK,TS val 765471 ecr 0,nop,wscale 4], length 0
15:21:21.505467 IP 213.83.42.56.36139 > AA.BB.CC.XY.53691: Flags [S.], seq 3050262605, ack 2740127336, win 5792, options [mss 1460,sackOK,TS val 3782119106 ecr 765471,nop,wscale 7],
length 0
Unfortunately remote server doesnt negotiate ECN (we dont see E flag in
the SYNACK frame)
Try to find another one, and check SYNACK looks like : Flags [S.E]
ftp.snt.utwente.nl - yet one server with download speed 11,2 Megabytes/s with 3.1.10 kernel
and 5,41 or 5,56 or 5,8 Megabytes/s with 3.2.6 kernel (maximum speed shown by wget
may vary after restarting of download).
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
16:01:37.313964 IP (tos 0x0, ttl 100, id 63113, offset 0, flags [DF], proto TCP (6), length 60)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [SEW], cksum 0x1028 (incorrect -> 0xe45b), seq 1339270399, win 14600, options [mss 1460,sackOK,TS val 4294857334 ecr 0,nop,wscale 4],
length 0
16:01:37.365919 IP (tos 0x0, ttl 57, id 0, offset 0, flags [DF], proto TCP (6), length 60)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [S.E], cksum 0xec12 (correct), seq 1335027049, ack 1339270400, win 5792, options [mss 1460,sackOK,TS val 86368507 ecr
4294857334,nop,wscale 7], length 0
16:01:37.365942 IP (tos 0x0, ttl 100, id 63114, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [.], cksum 0x1020 (incorrect -> 0x2dfa), ack 1, win 913, options [nop,nop,TS val 4294857386 ecr 86368507], length 0
16:01:37.418747 IP (tos 0x0, ttl 57, id 1133, offset 0, flags [DF], proto TCP (6), length 116)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x4e71 (correct), seq 1:65, ack 1, win 46, options [nop,nop,TS val 86368520 ecr 4294857386], length 64
16:01:37.418764 IP (tos 0x0, ttl 100, id 63115, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [.], cksum 0x1020 (incorrect -> 0x2d78), ack 65, win 913, options [nop,nop,TS val 4294857439 ecr 86368520], length 0
16:01:37.418771 IP (tos 0x0, ttl 57, id 1134, offset 0, flags [DF], proto TCP (6), length 93)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x4a09 (correct), seq 65:106, ack 1, win 46, options [nop,nop,TS val 86368520 ecr 4294857386], length 41
16:01:37.418783 IP (tos 0x0, ttl 100, id 63116, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [.], cksum 0x1020 (incorrect -> 0x2d4f), ack 106, win 913, options [nop,nop,TS val 4294857439 ecr 86368520], length 0
16:01:37.418790 IP (tos 0x0, ttl 57, id 1135, offset 0, flags [DF], proto TCP (6), length 93)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x8227 (correct), seq 106:147, ack 1, win 46, options [nop,nop,TS val 86368520 ecr 4294857386], length 41
16:01:37.418801 IP (tos 0x0, ttl 100, id 63117, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [.], cksum 0x1020 (incorrect -> 0x2d26), ack 147, win 913, options [nop,nop,TS val 4294857439 ecr 86368520], length 0
16:01:37.470393 IP (tos 0x0, ttl 57, id 1136, offset 0, flags [DF], proto TCP (6), length 1396)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x71a3 (correct), seq 147:1491, ack 1, win 46, options [nop,nop,TS val 86368533 ecr 4294857439], length 1344
16:01:37.470405 IP (tos 0x0, ttl 100, id 63118, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [.], cksum 0x1020 (incorrect -> 0x26fd), ack 1491, win 1081, options [nop,nop,TS val 4294857491 ecr 86368533], length 0
16:01:37.470668 IP (tos 0x2,ECT(0), ttl 100, id 63119, offset 0, flags [DF], proto TCP (6), length 68)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x1030 (incorrect -> 0x9f08), seq 1:17, ack 1491, win 1081, options [nop,nop,TS val 4294857491 ecr 86368533], length 16
16:01:37.522117 IP (tos 0x0, ttl 57, id 1137, offset 0, flags [DF], proto TCP (6), length 52)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [.], cksum 0x2aeb (correct), ack 17, win 46, options [nop,nop,TS val 86368546 ecr 4294857491], length 0
16:01:37.522129 IP (tos 0x0, ttl 57, id 1138, offset 0, flags [DF], proto TCP (6), length 86)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0xe39f (correct), seq 1491:1525, ack 17, win 46, options [nop,nop,TS val 86368546 ecr 4294857491], length 34
16:01:37.522176 IP (tos 0x2,ECT(0), ttl 100, id 63120, offset 0, flags [DF], proto TCP (6), length 65)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x102d (incorrect -> 0x3bca), seq 17:30, ack 1525, win 1081, options [nop,nop,TS val 4294857543 ecr 86368546], length 13
16:01:37.573661 IP (tos 0x0, ttl 57, id 1139, offset 0, flags [DF], proto TCP (6), length 75)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x48e3 (correct), seq 1525:1548, ack 30, win 46, options [nop,nop,TS val 86368559 ecr 4294857543], length 23
16:01:37.573826 IP (tos 0x2,ECT(0), ttl 100, id 63121, offset 0, flags [DF], proto TCP (6), length 58)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x1026 (incorrect -> 0x7260), seq 30:36, ack 1548, win 1081, options [nop,nop,TS val 4294857594 ecr 86368559], length 6
16:01:37.625305 IP (tos 0x0, ttl 57, id 1140, offset 0, flags [DF], proto TCP (6), length 71)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0xc2b3 (correct), seq 1548:1567, ack 36, win 46, options [nop,nop,TS val 86368571 ecr 4294857594], length 19
16:01:37.625425 IP (tos 0x2,ECT(0), ttl 100, id 63122, offset 0, flags [DF], proto TCP (6), length 57)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x1025 (incorrect -> 0x875b), seq 36:41, ack 1567, win 1081, options [nop,nop,TS val 4294857646 ecr 86368571], length 5
16:01:37.676911 IP (tos 0x0, ttl 57, id 1141, offset 0, flags [DF], proto TCP (6), length 61)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x7223 (correct), seq 1567:1576, ack 41, win 46, options [nop,nop,TS val 86368584 ecr 4294857646], length 9
16:01:37.677032 IP (tos 0x2,ECT(0), ttl 100, id 63123, offset 0, flags [DF], proto TCP (6), length 60)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x1028 (incorrect -> 0x537d), seq 41:49, ack 1576, win 1081, options [nop,nop,TS val 4294857697 ecr 86368584], length 8
16:01:37.728484 IP (tos 0x0, ttl 57, id 1142, offset 0, flags [DF], proto TCP (6), length 83)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0xf385 (correct), seq 1576:1607, ack 49, win 46, options [nop,nop,TS val 86368597 ecr 4294857697], length 31
16:01:37.728631 IP (tos 0x2,ECT(0), ttl 100, id 63124, offset 0, flags [DF], proto TCP (6), length 93)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x1049 (incorrect -> 0x2b64), seq 49:90, ack 1607, win 1081, options [nop,nop,TS val 4294857749 ecr 86368597], length 41
16:01:37.780113 IP (tos 0x0, ttl 57, id 1143, offset 0, flags [DF], proto TCP (6), length 89)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x9d5d (correct), seq 1607:1644, ack 90, win 46, options [nop,nop,TS val 86368610 ecr 4294857749], length 37
16:01:37.780247 IP (tos 0x2,ECT(0), ttl 100, id 63125, offset 0, flags [DF], proto TCP (6), length 91)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x1047 (incorrect -> 0x9579), seq 90:129, ack 1644, win 1081, options [nop,nop,TS val 4294857801 ecr 86368610], length 39
16:01:37.831756 IP (tos 0x0, ttl 57, id 1144, offset 0, flags [DF], proto TCP (6), length 67)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0xae1f (correct), seq 1644:1659, ack 129, win 46, options [nop,nop,TS val 86368623 ecr 4294857801], length 15
16:01:37.831882 IP (tos 0x2,ECT(0), ttl 100, id 63126, offset 0, flags [DF], proto TCP (6), length 58)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x1026 (incorrect -> 0x7362), seq 129:135, ack 1659, win 1081, options [nop,nop,TS val 4294857852 ecr 86368623], length 6
16:01:37.883482 IP (tos 0x0, ttl 57, id 1145, offset 0, flags [DF], proto TCP (6), length 104)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x6b16 (correct), seq 1659:1711, ack 135, win 46, options [nop,nop,TS val 86368636 ecr 4294857852], length 52
16:01:37.883589 IP (tos 0x0, ttl 100, id 45885, offset 0, flags [DF], proto TCP (6), length 60)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [SEW], cksum 0x1028 (incorrect -> 0x234e), seq 1207822221, win 14600, options [mss 1460,sackOK,TS val 4294857904 ecr 0,nop,wscale 4],
length 0
16:01:37.923277 IP (tos 0x0, ttl 100, id 63127, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [.], cksum 0x1020 (incorrect -> 0x236f), ack 1711, win 1081, options [nop,nop,TS val 4294857944 ecr 86368636], length 0
16:01:37.933260 IP (tos 0x0, ttl 57, id 0, offset 0, flags [DF], proto TCP (6), length 60)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [S.E], cksum 0xe744 (correct), seq 3516507796, ack 1207822222, win 5792, options [mss 1460,sackOK,TS val 86368649 ecr
4294857904,nop,wscale 7], length 0
16:01:37.933275 IP (tos 0x0, ttl 100, id 45886, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x292e), ack 1, win 913, options [nop,nop,TS val 4294857954 ecr 86368649], length 0
16:01:37.933425 IP (tos 0x2,ECT(0), ttl 100, id 63128, offset 0, flags [DF], proto TCP (6), length 91)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x1047 (incorrect -> 0x9b4d), seq 135:174, ack 1711, win 1081, options [nop,nop,TS val 4294857954 ecr 86368636], length 39
16:01:37.983255 IP (tos 0x0, ttl 57, id 18176, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x9529 (correct), seq 1:1449, ack 1, win 46, options [nop,nop,TS val 86368661 ecr 4294857954], length 1448
16:01:37.983272 IP (tos 0x0, ttl 100, id 45887, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x2293), ack 1449, win 1094, options [nop,nop,TS val 4294858004 ecr 86368661], length 0
16:01:37.983378 IP (tos 0x0, ttl 57, id 18177, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x2135 (correct), seq 1449:2897, ack 1, win 46, options [nop,nop,TS val 86368661 ecr 4294857954], length 1448
16:01:37.983388 IP (tos 0x0, ttl 100, id 45888, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x1c36), ack 2897, win 1275, options [nop,nop,TS val 4294858004 ecr 86368661], length 0
16:01:37.983500 IP (tos 0x0, ttl 57, id 18178, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x1b8d (correct), seq 2897:4345, ack 1, win 46, options [nop,nop,TS val 86368661 ecr 4294857954], length 1448
16:01:37.983509 IP (tos 0x0, ttl 100, id 45889, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x15d9), ack 4345, win 1456, options [nop,nop,TS val 4294858004 ecr 86368661], length 0
16:01:37.984985 IP (tos 0x0, ttl 57, id 1146, offset 0, flags [DF], proto TCP (6), length 149)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x8cc1 (correct), seq 1711:1808, ack 174, win 46, options [nop,nop,TS val 86368661 ecr 4294857954], length 97
16:01:37.985019 IP (tos 0x0, ttl 100, id 63129, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [.], cksum 0x1020 (incorrect -> 0x2291), ack 1808, win 1081, options [nop,nop,TS val 4294858005 ecr 86368661], length 0
16:01:38.033132 IP (tos 0x0, ttl 57, id 18179, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x15a6 (correct), seq 4345:5793, ack 1, win 46, options [nop,nop,TS val 86368674 ecr 4294858004], length 1448
16:01:38.033143 IP (tos 0x0, ttl 100, id 45890, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x0f3e), ack 5793, win 1637, options [nop,nop,TS val 4294858053 ecr 86368674], length 0
16:01:38.033255 IP (tos 0x0, ttl 57, id 18180, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x0ffe (correct), seq 5793:7241, ack 1, win 46, options [nop,nop,TS val 86368674 ecr 4294858004], length 1448
16:01:38.033267 IP (tos 0x0, ttl 100, id 45891, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x08e0), ack 7241, win 1818, options [nop,nop,TS val 4294858054 ecr 86368674], length 0
16:01:38.033377 IP (tos 0x0, ttl 57, id 18181, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x0a56 (correct), seq 7241:8689, ack 1, win 46, options [nop,nop,TS val 86368674 ecr 4294858004], length 1448
16:01:38.033385 IP (tos 0x0, ttl 100, id 45892, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x0283), ack 8689, win 1999, options [nop,nop,TS val 4294858054 ecr 86368674], length 0
16:01:38.033501 IP (tos 0x0, ttl 57, id 18182, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x04ae (correct), seq 8689:10137, ack 1, win 46, options [nop,nop,TS val 86368674 ecr 4294858004], length 1448
16:01:38.033509 IP (tos 0x0, ttl 100, id 45893, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xfc25), ack 10137, win 2180, options [nop,nop,TS val 4294858054 ecr 86368674], length 0
16:01:38.033629 IP (tos 0x0, ttl 57, id 18183, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xff05 (correct), seq 10137:11585, ack 1, win 46, options [nop,nop,TS val 86368674 ecr 4294858004], length 1448
16:01:38.033642 IP (tos 0x0, ttl 100, id 45894, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xf5c8), ack 11585, win 2361, options [nop,nop,TS val 4294858054 ecr 86368674], length 0
16:01:38.082999 IP (tos 0x0, ttl 57, id 18184, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xf920 (correct), seq 11585:13033, ack 1, win 46, options [nop,nop,TS val 86368686 ecr 4294858053], length 1448
16:01:38.083018 IP (tos 0x0, ttl 100, id 45895, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xef2e), ack 13033, win 2542, options [nop,nop,TS val 4294858103 ecr 86368686], length 0
16:01:38.083122 IP (tos 0x0, ttl 57, id 18185, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xf378 (correct), seq 13033:14481, ack 1, win 46, options [nop,nop,TS val 86368686 ecr 4294858053], length 1448
16:01:38.083131 IP (tos 0x0, ttl 100, id 45896, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xe8d1), ack 14481, win 2723, options [nop,nop,TS val 4294858103 ecr 86368686], length 0
16:01:38.083245 IP (tos 0x0, ttl 57, id 18186, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xedd0 (correct), seq 14481:15929, ack 1, win 46, options [nop,nop,TS val 86368686 ecr 4294858053], length 1448
16:01:38.083255 IP (tos 0x0, ttl 100, id 45897, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xe273), ack 15929, win 2904, options [nop,nop,TS val 4294858104 ecr 86368686], length 0
16:01:38.083368 IP (tos 0x0, ttl 57, id 18187, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xe827 (correct), seq 15929:17377, ack 1, win 46, options [nop,nop,TS val 86368686 ecr 4294858054], length 1448
16:01:38.083379 IP (tos 0x0, ttl 100, id 45898, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xdc16), ack 17377, win 3085, options [nop,nop,TS val 4294858104 ecr 86368686], length 0
16:01:38.083496 IP (tos 0x0, ttl 57, id 18188, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xe27f (correct), seq 17377:18825, ack 1, win 46, options [nop,nop,TS val 86368686 ecr 4294858054], length 1448
16:01:38.083507 IP (tos 0x0, ttl 100, id 45899, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xd5b9), ack 18825, win 3266, options [nop,nop,TS val 4294858104 ecr 86368686], length 0
16:01:38.083615 IP (tos 0x0, ttl 57, id 18189, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xdcd7 (correct), seq 18825:20273, ack 1, win 46, options [nop,nop,TS val 86368686 ecr 4294858054], length 1448
16:01:38.083627 IP (tos 0x0, ttl 100, id 45900, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xcf5c), ack 20273, win 3447, options [nop,nop,TS val 4294858104 ecr 86368686], length 0
16:01:38.083737 IP (tos 0x0, ttl 57, id 18190, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xd72f (correct), seq 20273:21721, ack 1, win 46, options [nop,nop,TS val 86368686 ecr 4294858054], length 1448
16:01:38.083750 IP (tos 0x0, ttl 100, id 45901, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xc8ff), ack 21721, win 3628, options [nop,nop,TS val 4294858104 ecr 86368686], length 0
16:01:38.083860 IP (tos 0x0, ttl 57, id 18191, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xd187 (correct), seq 21721:23169, ack 1, win 46, options [nop,nop,TS val 86368686 ecr 4294858054], length 1448
16:01:38.083871 IP (tos 0x0, ttl 100, id 45902, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xc2a2), ack 23169, win 3809, options [nop,nop,TS val 4294858104 ecr 86368686], length 0
16:01:38.083983 IP (tos 0x0, ttl 57, id 18192, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xcbdf (correct), seq 23169:24617, ack 1, win 46, options [nop,nop,TS val 86368686 ecr 4294858054], length 1448
16:01:38.083994 IP (tos 0x0, ttl 100, id 45903, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xbc45), ack 24617, win 3990, options [nop,nop,TS val 4294858104 ecr 86368686], length 0
16:01:38.132905 IP (tos 0x0, ttl 57, id 18193, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xc5f9 (correct), seq 24617:26065, ack 1, win 46, options [nop,nop,TS val 86368699 ecr 4294858103], length 1448
16:01:38.132916 IP (tos 0x0, ttl 100, id 45904, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xb65e), ack 26065, win 3991, options [nop,nop,TS val 4294858153 ecr 86368699], length 0
16:01:38.133028 IP (tos 0x0, ttl 57, id 18194, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xc051 (correct), seq 26065:27513, ack 1, win 46, options [nop,nop,TS val 86368699 ecr 4294858103], length 1448
16:01:38.133039 IP (tos 0x0, ttl 100, id 45905, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xb0b6), ack 27513, win 3991, options [nop,nop,TS val 4294858153 ecr 86368699], length 0
16:01:38.133150 IP (tos 0x0, ttl 57, id 18195, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xbaa9 (correct), seq 27513:28961, ack 1, win 46, options [nop,nop,TS val 86368699 ecr 4294858103], length 1448
16:01:38.133158 IP (tos 0x0, ttl 100, id 45906, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xab0e), ack 28961, win 3991, options [nop,nop,TS val 4294858153 ecr 86368699], length 0
16:01:38.133274 IP (tos 0x0, ttl 57, id 18196, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xb501 (correct), seq 28961:30409, ack 1, win 46, options [nop,nop,TS val 86368699 ecr 4294858103], length 1448
16:01:38.133285 IP (tos 0x0, ttl 100, id 45907, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xa565), ack 30409, win 3991, options [nop,nop,TS val 4294858154 ecr 86368699], length 0
16:01:38.133397 IP (tos 0x0, ttl 57, id 18197, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xaf58 (correct), seq 30409:31857, ack 1, win 46, options [nop,nop,TS val 86368699 ecr 4294858104], length 1448
16:01:38.133406 IP (tos 0x0, ttl 100, id 45908, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x9fbd), ack 31857, win 3991, options [nop,nop,TS val 4294858154 ecr 86368699], length 0
16:01:38.133526 IP (tos 0x0, ttl 57, id 18198, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x84c9 (correct), seq 31857:33305, ack 1, win 46, options [nop,nop,TS val 86368699 ecr 4294858104], length 1448
16:01:38.133644 IP (tos 0x0, ttl 57, id 18199, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x1498 (correct), seq 33305:34753, ack 1, win 46, options [nop,nop,TS val 86368699 ecr 4294858104], length 1448
16:01:38.133654 IP (tos 0x0, ttl 100, id 45909, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x946d), ack 34753, win 3991, options [nop,nop,TS val 4294858154 ecr 86368699], length 0
16:01:38.133767 IP (tos 0x0, ttl 57, id 18200, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xee92 (correct), seq 34753:36201, ack 1, win 46, options [nop,nop,TS val 86368699 ecr 4294858104], length 1448
16:01:38.133890 IP (tos 0x0, ttl 57, id 18201, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xd39d (correct), seq 36201:37649, ack 1, win 46, options [nop,nop,TS val 86368699 ecr 4294858104], length 1448
16:01:38.133900 IP (tos 0x0, ttl 100, id 45910, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x891d), ack 37649, win 3991, options [nop,nop,TS val 4294858154 ecr 86368699], length 0
16:01:38.134012 IP (tos 0x0, ttl 57, id 18202, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x70fb (correct), seq 37649:39097, ack 1, win 46, options [nop,nop,TS val 86368699 ecr 4294858104], length 1448
16:01:38.134135 IP (tos 0x0, ttl 57, id 18203, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x8d68 (correct), seq 39097:40545, ack 1, win 46, options [nop,nop,TS val 86368699 ecr 4294858104], length 1448
16:01:38.134146 IP (tos 0x0, ttl 100, id 45911, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x7dcd), ack 40545, win 3991, options [nop,nop,TS val 4294858154 ecr 86368699], length 0
16:01:38.134259 IP (tos 0x0, ttl 57, id 18204, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x87c0 (correct), seq 40545:41993, ack 1, win 46, options [nop,nop,TS val 86368699 ecr 4294858104], length 1448
16:01:38.134383 IP (tos 0x0, ttl 57, id 18205, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x8218 (correct), seq 41993:43441, ack 1, win 46, options [nop,nop,TS val 86368699 ecr 4294858104], length 1448
16:01:38.134393 IP (tos 0x0, ttl 100, id 45912, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x727c), ack 43441, win 3991, options [nop,nop,TS val 4294858155 ecr 86368699], length 0
16:01:38.134505 IP (tos 0x0, ttl 57, id 18206, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x7c70 (correct), seq 43441:44889, ack 1, win 46, options [nop,nop,TS val 86368699 ecr 4294858104], length 1448
16:01:38.174240 IP (tos 0x0, ttl 100, id 45913, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x6c9d), ack 44889, win 4006, options [nop,nop,TS val 4294858195 ecr 86368699], length 0
16:01:38.182767 IP (tos 0x0, ttl 57, id 18207, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x768b (correct), seq 44889:46337, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858153], length 1448
16:01:38.182890 IP (tos 0x0, ttl 57, id 18208, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x70e3 (correct), seq 46337:47785, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858153], length 1448
16:01:38.182902 IP (tos 0x0, ttl 100, id 45914, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x609c), ack 47785, win 4163, options [nop,nop,TS val 4294858203 ecr 86368711], length 0
16:01:38.183013 IP (tos 0x0, ttl 57, id 18209, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x6b3b (correct), seq 47785:49233, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858153], length 1448
16:01:38.183138 IP (tos 0x0, ttl 57, id 18210, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x6593 (correct), seq 49233:50681, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858153], length 1448
16:01:38.183150 IP (tos 0x0, ttl 100, id 45915, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x554c), ack 50681, win 4163, options [nop,nop,TS val 4294858203 ecr 86368711], length 0
16:01:38.183259 IP (tos 0x0, ttl 57, id 18211, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x5feb (correct), seq 50681:52129, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858153], length 1448
16:01:38.183383 IP (tos 0x0, ttl 57, id 18212, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x5a43 (correct), seq 52129:53577, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858153], length 1448
16:01:38.183394 IP (tos 0x0, ttl 100, id 45916, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x49fb), ack 53577, win 4163, options [nop,nop,TS val 4294858204 ecr 86368711], length 0
16:01:38.183506 IP (tos 0x0, ttl 57, id 18213, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x549b (correct), seq 53577:55025, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858153], length 1448
16:01:38.183629 IP (tos 0x0, ttl 57, id 18214, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x4ef3 (correct), seq 55025:56473, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858153], length 1448
16:01:38.183640 IP (tos 0x0, ttl 100, id 45917, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x3eab), ack 56473, win 4163, options [nop,nop,TS val 4294858204 ecr 86368711], length 0
16:01:38.183752 IP (tos 0x0, ttl 57, id 18215, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x494a (correct), seq 56473:57921, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858154], length 1448
16:01:38.183875 IP (tos 0x0, ttl 57, id 18216, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x43a2 (correct), seq 57921:59369, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858154], length 1448
16:01:38.183888 IP (tos 0x0, ttl 100, id 45918, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x335b), ack 59369, win 4163, options [nop,nop,TS val 4294858204 ecr 86368711], length 0
16:01:38.183998 IP (tos 0x0, ttl 57, id 18217, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x3dfa (correct), seq 59369:60817, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858154], length 1448
16:01:38.184122 IP (tos 0x0, ttl 57, id 18218, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x3852 (correct), seq 60817:62265, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858154], length 1448
16:01:38.184133 IP (tos 0x0, ttl 100, id 45919, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x280b), ack 62265, win 4163, options [nop,nop,TS val 4294858204 ecr 86368711], length 0
16:01:38.184243 IP (tos 0x0, ttl 57, id 18219, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x32aa (correct), seq 62265:63713, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858154], length 1448
16:01:38.184367 IP (tos 0x0, ttl 57, id 18220, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x2d02 (correct), seq 63713:65161, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858154], length 1448
16:01:38.184378 IP (tos 0x0, ttl 100, id 45920, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x1cba), ack 65161, win 4163, options [nop,nop,TS val 4294858205 ecr 86368711], length 0
16:01:38.184491 IP (tos 0x0, ttl 57, id 18221, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x9625 (correct), seq 65161:66609, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858154], length 1448
16:01:38.184613 IP (tos 0x0, ttl 57, id 18222, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x2a2b (correct), seq 66609:68057, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858154], length 1448
16:01:38.184624 IP (tos 0x0, ttl 100, id 45921, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x116a), ack 68057, win 4163, options [nop,nop,TS val 4294858205 ecr 86368711], length 0
16:01:38.184736 IP (tos 0x0, ttl 57, id 18223, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x187e (correct), seq 68057:69505, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858154], length 1448
16:01:38.184860 IP (tos 0x0, ttl 57, id 18224, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xa1bc (correct), seq 69505:70953, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858154], length 1448
16:01:38.184870 IP (tos 0x0, ttl 100, id 45922, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x061a), ack 70953, win 4163, options [nop,nop,TS val 4294858205 ecr 86368711], length 0
16:01:38.184982 IP (tos 0x0, ttl 57, id 18225, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x8ff5 (correct), seq 70953:72401, ack 1, win 46, options [nop,nop,TS val 86368711 ecr 4294858154], length 1448
16:01:38.185106 IP (tos 0x0, ttl 57, id 18226, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x07df (correct), seq 72401:73849, ack 1, win 46, options [nop,nop,TS val 86368712 ecr 4294858154], length 1448
16:01:38.185118 IP (tos 0x0, ttl 100, id 45923, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xfac9), ack 73849, win 4163, options [nop,nop,TS val 4294858205 ecr 86368711], length 0
16:01:38.185228 IP (tos 0x0, ttl 57, id 18227, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xfb73 (correct), seq 73849:75297, ack 1, win 46, options [nop,nop,TS val 86368712 ecr 4294858154], length 1448
16:01:38.185351 IP (tos 0x0, ttl 57, id 18228, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x6185 (correct), seq 75297:76745, ack 1, win 46, options [nop,nop,TS val 86368712 ecr 4294858154], length 1448
16:01:38.185362 IP (tos 0x0, ttl 100, id 45924, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xef77), ack 76745, win 4163, options [nop,nop,TS val 4294858206 ecr 86368712], length 0
16:01:38.224174 IP (tos 0x0, ttl 57, id 18229, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x1022 (correct), seq 76745:78193, ack 1, win 46, options [nop,nop,TS val 86368722 ecr 4294858195], length 1448
16:01:38.224297 IP (tos 0x0, ttl 57, id 18230, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xf43d (correct), seq 78193:79641, ack 1, win 46, options [nop,nop,TS val 86368722 ecr 4294858195], length 1448
16:01:38.224307 IP (tos 0x0, ttl 100, id 45925, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xe3f6), ack 79641, win 4163, options [nop,nop,TS val 4294858245 ecr 86368722], length 0
16:01:38.224419 IP (tos 0x0, ttl 57, id 18231, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xe491 (correct), seq 79641:81089, ack 1, win 46, options [nop,nop,TS val 86368722 ecr 4294858195], length 1448
16:01:38.224552 IP (tos 0x0, ttl 57, id 18232, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x2c56 (correct), seq 81089:82537, ack 1, win 46, options [nop,nop,TS val 86368722 ecr 4294858195], length 1448
16:01:38.224564 IP (tos 0x0, ttl 100, id 45926, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xd8a6), ack 82537, win 4163, options [nop,nop,TS val 4294858245 ecr 86368722], length 0
16:01:38.224666 IP (tos 0x0, ttl 57, id 18233, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xecce (correct), seq 82537:83985, ack 1, win 46, options [nop,nop,TS val 86368722 ecr 4294858195], length 1448
16:01:38.224790 IP (tos 0x0, ttl 57, id 18234, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x770b (correct), seq 83985:85433, ack 1, win 46, options [nop,nop,TS val 86368722 ecr 4294858195], length 1448
16:01:38.224802 IP (tos 0x0, ttl 100, id 45927, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xcd56), ack 85433, win 4163, options [nop,nop,TS val 4294858245 ecr 86368722], length 0
16:01:38.224912 IP (tos 0x0, ttl 57, id 18235, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xac94 (correct), seq 85433:86881, ack 1, win 46, options [nop,nop,TS val 86368722 ecr 4294858195], length 1448
16:01:38.225039 IP (tos 0x0, ttl 57, id 18236, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xe6b7 (correct), seq 86881:88329, ack 1, win 46, options [nop,nop,TS val 86368722 ecr 4294858195], length 1448
16:01:38.225050 IP (tos 0x0, ttl 100, id 45928, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xc206), ack 88329, win 4163, options [nop,nop,TS val 4294858245 ecr 86368722], length 0
16:01:38.233497 IP (tos 0x0, ttl 57, id 18237, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x1330 (correct), seq 88329:89777, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858204], length 1448
16:01:38.233620 IP (tos 0x0, ttl 57, id 18238, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x5a16 (correct), seq 89777:91225, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858204], length 1448
16:01:38.233631 IP (tos 0x0, ttl 100, id 45929, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xb6ab), ack 91225, win 4163, options [nop,nop,TS val 4294858254 ecr 86368724], length 0
16:01:38.233741 IP (tos 0x0, ttl 57, id 18239, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x77c6 (correct), seq 91225:92673, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858204], length 1448
16:01:38.233866 IP (tos 0x0, ttl 57, id 18240, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x9280 (correct), seq 92673:94121, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858204], length 1448
16:01:38.233879 IP (tos 0x0, ttl 100, id 45930, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xab5b), ack 94121, win 4163, options [nop,nop,TS val 4294858254 ecr 86368724], length 0
16:01:38.233989 IP (tos 0x0, ttl 57, id 18241, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x7a6e (correct), seq 94121:95569, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858204], length 1448
16:01:38.234113 IP (tos 0x0, ttl 57, id 18242, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x76f6 (correct), seq 95569:97017, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858204], length 1448
16:01:38.234125 IP (tos 0x0, ttl 100, id 45931, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xa00b), ack 97017, win 4163, options [nop,nop,TS val 4294858254 ecr 86368724], length 0
16:01:38.234235 IP (tos 0x0, ttl 57, id 18243, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xc750 (correct), seq 97017:98465, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858204], length 1448
16:01:38.234359 IP (tos 0x0, ttl 57, id 18244, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x4369 (correct), seq 98465:99913, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858204], length 1448
16:01:38.234371 IP (tos 0x0, ttl 100, id 45932, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x94ba), ack 99913, win 4163, options [nop,nop,TS val 4294858255 ecr 86368724], length 0
16:01:38.234481 IP (tos 0x0, ttl 57, id 18245, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xa4c6 (correct), seq 99913:101361, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858204], length 1448
16:01:38.234492 IP (tos 0x0, ttl 100, id 45933, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x8e5d), ack 101361, win 4344, options [nop,nop,TS val 4294858255 ecr 86368724], length 0
16:01:38.234604 IP (tos 0x0, ttl 57, id 18246, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x0692 (correct), seq 101361:102809, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858204], length 1448
16:01:38.234613 IP (tos 0x0, ttl 100, id 45934, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x8800), ack 102809, win 4525, options [nop,nop,TS val 4294858255 ecr 86368724], length 0
16:01:38.234728 IP (tos 0x0, ttl 57, id 18247, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xa1de (correct), seq 102809:104257, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858204], length 1448
16:01:38.234739 IP (tos 0x0, ttl 100, id 45935, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x81a3), ack 104257, win 4706, options [nop,nop,TS val 4294858255 ecr 86368724], length 0
16:01:38.234849 IP (tos 0x0, ttl 57, id 18248, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x7393 (correct), seq 104257:105705, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858204], length 1448
16:01:38.234860 IP (tos 0x0, ttl 100, id 45936, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x7b46), ack 105705, win 4887, options [nop,nop,TS val 4294858255 ecr 86368724], length 0
16:01:38.234978 IP (tos 0x0, ttl 57, id 18249, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xeb01 (correct), seq 105705:107153, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858204], length 1448
16:01:38.234989 IP (tos 0x0, ttl 100, id 45937, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x74e9), ack 107153, win 5068, options [nop,nop,TS val 4294858255 ecr 86368724], length 0
16:01:38.235097 IP (tos 0x0, ttl 57, id 18250, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x6620 (correct), seq 107153:108601, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858204], length 1448
16:01:38.235109 IP (tos 0x0, ttl 100, id 45938, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x6e8c), ack 108601, win 5249, options [nop,nop,TS val 4294858255 ecr 86368724], length 0
16:01:38.235219 IP (tos 0x0, ttl 57, id 18251, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x106e (correct), seq 108601:110049, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858205], length 1448
16:01:38.235230 IP (tos 0x0, ttl 100, id 45939, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x682e), ack 110049, win 5430, options [nop,nop,TS val 4294858256 ecr 86368724], length 0
16:01:38.235343 IP (tos 0x0, ttl 57, id 18252, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x4f1b (correct), seq 110049:111497, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858205], length 1448
16:01:38.235355 IP (tos 0x0, ttl 100, id 45940, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x61d1), ack 111497, win 5611, options [nop,nop,TS val 4294858256 ecr 86368724], length 0
16:01:38.235465 IP (tos 0x0, ttl 57, id 18253, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xb1e8 (correct), seq 111497:112945, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858205], length 1448
16:01:38.235474 IP (tos 0x0, ttl 100, id 45941, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x5b74), ack 112945, win 5792, options [nop,nop,TS val 4294858256 ecr 86368724], length 0
16:01:38.235596 IP (tos 0x0, ttl 57, id 18254, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xa968 (correct), seq 112945:114393, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858205], length 1448
16:01:38.235607 IP (tos 0x0, ttl 100, id 45942, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x5517), ack 114393, win 5973, options [nop,nop,TS val 4294858256 ecr 86368724], length 0
16:01:38.235712 IP (tos 0x0, ttl 57, id 18255, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xf849 (correct), seq 114393:115841, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858205], length 1448
16:01:38.235724 IP (tos 0x0, ttl 100, id 45943, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x4eba), ack 115841, win 6154, options [nop,nop,TS val 4294858256 ecr 86368724], length 0
16:01:38.235835 IP (tos 0x0, ttl 57, id 18256, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xc0d0 (correct), seq 115841:117289, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858205], length 1448
16:01:38.235846 IP (tos 0x0, ttl 100, id 45944, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x485d), ack 117289, win 6335, options [nop,nop,TS val 4294858256 ecr 86368724], length 0
16:01:38.235958 IP (tos 0x0, ttl 57, id 18257, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x5b79 (correct), seq 117289:118737, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858205], length 1448
16:01:38.235970 IP (tos 0x0, ttl 100, id 45945, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x4200), ack 118737, win 6516, options [nop,nop,TS val 4294858256 ecr 86368724], length 0
16:01:38.236080 IP (tos 0x0, ttl 57, id 18258, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x22e2 (correct), seq 118737:120185, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858205], length 1448
16:01:38.236089 IP (tos 0x0, ttl 100, id 45946, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x3ba3), ack 120185, win 6697, options [nop,nop,TS val 4294858256 ecr 86368724], length 0
16:01:38.236210 IP (tos 0x0, ttl 57, id 18259, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xdf18 (correct), seq 120185:121633, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858205], length 1448
16:01:38.236327 IP (tos 0x0, ttl 57, id 18260, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x0895 (correct), seq 121633:123081, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858205], length 1448
16:01:38.236337 IP (tos 0x0, ttl 100, id 45947, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x3052), ack 123081, win 6697, options [nop,nop,TS val 4294858257 ecr 86368724], length 0
16:01:38.236450 IP (tos 0x0, ttl 57, id 18261, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x3bd8 (correct), seq 123081:124529, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858205], length 1448
16:01:38.236573 IP (tos 0x0, ttl 57, id 18262, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x5e4e (correct), seq 124529:125977, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858205], length 1448
16:01:38.236583 IP (tos 0x0, ttl 100, id 45948, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x2502), ack 125977, win 6697, options [nop,nop,TS val 4294858257 ecr 86368724], length 0
16:01:38.236696 IP (tos 0x0, ttl 57, id 18263, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xf9c9 (correct), seq 125977:127425, ack 1, win 46, options [nop,nop,TS val 86368724 ecr 4294858205], length 1448
16:01:38.274169 IP (tos 0x0, ttl 57, id 18264, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x33af (correct), seq 127425:128873, ack 1, win 46, options [nop,nop,TS val 86368734 ecr 4294858245], length 1448
16:01:38.274182 IP (tos 0x0, ttl 100, id 45949, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x198c), ack 128873, win 6697, options [nop,nop,TS val 4294858295 ecr 86368724], length 0
16:01:38.274292 IP (tos 0x0, ttl 57, id 18265, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xef48 (correct), seq 128873:130321, ack 1, win 46, options [nop,nop,TS val 86368734 ecr 4294858245], length 1448
16:01:38.274420 IP (tos 0x0, ttl 57, id 18266, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x8e0c (correct), seq 130321:131769, ack 1, win 46, options [nop,nop,TS val 86368734 ecr 4294858245], length 1448
16:01:38.274433 IP (tos 0x0, ttl 100, id 45950, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x0e32), ack 131769, win 6697, options [nop,nop,TS val 4294858295 ecr 86368734], length 0
16:01:38.274538 IP (tos 0x0, ttl 57, id 18267, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x2285 (correct), seq 131769:133217, ack 1, win 46, options [nop,nop,TS val 86368734 ecr 4294858245], length 1448
16:01:38.274662 IP (tos 0x0, ttl 57, id 18268, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x427a (correct), seq 133217:134665, ack 1, win 46, options [nop,nop,TS val 86368734 ecr 4294858245], length 1448
16:01:38.274675 IP (tos 0x0, ttl 100, id 45951, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x02e2), ack 134665, win 6697, options [nop,nop,TS val 4294858295 ecr 86368734], length 0
16:01:38.274784 IP (tos 0x0, ttl 57, id 18269, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xd96c (correct), seq 134665:136113, ack 1, win 46, options [nop,nop,TS val 86368734 ecr 4294858245], length 1448
16:01:38.274912 IP (tos 0x0, ttl 57, id 18270, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x4886 (correct), seq 136113:137561, ack 1, win 46, options [nop,nop,TS val 86368734 ecr 4294858245], length 1448
16:01:38.274924 IP (tos 0x0, ttl 100, id 45952, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xf791), ack 137561, win 6697, options [nop,nop,TS val 4294858295 ecr 86368734], length 0
16:01:38.275032 IP (tos 0x0, ttl 57, id 18271, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x0c17 (correct), seq 137561:139009, ack 1, win 46, options [nop,nop,TS val 86368734 ecr 4294858245], length 1448
16:01:38.275154 IP (tos 0x0, ttl 57, id 18272, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x61d0 (correct), seq 139009:140457, ack 1, win 46, options [nop,nop,TS val 86368734 ecr 4294858245], length 1448
16:01:38.275166 IP (tos 0x0, ttl 100, id 45953, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xec41), ack 140457, win 6697, options [nop,nop,TS val 4294858295 ecr 86368734], length 0
16:01:38.283494 IP (tos 0x0, ttl 57, id 18273, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x4600 (correct), seq 140457:141905, ack 1, win 46, options [nop,nop,TS val 86368736 ecr 4294858254], length 1448
16:01:38.283618 IP (tos 0x0, ttl 57, id 18274, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xfb13 (correct), seq 141905:143353, ack 1, win 46, options [nop,nop,TS val 86368736 ecr 4294858254], length 1448
16:01:38.283630 IP (tos 0x0, ttl 100, id 45954, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xe0e6), ack 143353, win 6697, options [nop,nop,TS val 4294858304 ecr 86368736], length 0
16:01:38.283739 IP (tos 0x0, ttl 57, id 18275, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xbb4d (correct), seq 143353:144801, ack 1, win 46, options [nop,nop,TS val 86368736 ecr 4294858254], length 1448
16:01:38.283864 IP (tos 0x0, ttl 57, id 18276, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x89ae (correct), seq 144801:146249, ack 1, win 46, options [nop,nop,TS val 86368736 ecr 4294858254], length 1448
16:01:38.283875 IP (tos 0x0, ttl 100, id 45955, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xd596), ack 146249, win 6697, options [nop,nop,TS val 4294858304 ecr 86368736], length 0
16:01:38.283987 IP (tos 0x0, ttl 57, id 18277, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xd244 (correct), seq 146249:147697, ack 1, win 46, options [nop,nop,TS val 86368736 ecr 4294858254], length 1448
16:01:38.284110 IP (tos 0x0, ttl 57, id 18278, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xe215 (correct), seq 147697:149145, ack 1, win 46, options [nop,nop,TS val 86368736 ecr 4294858254], length 1448
16:01:38.284120 IP (tos 0x0, ttl 100, id 45956, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xca46), ack 149145, win 6697, options [nop,nop,TS val 4294858304 ecr 86368736], length 0
16:01:38.284232 IP (tos 0x0, ttl 57, id 18279, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x9231 (correct), seq 149145:150593, ack 1, win 46, options [nop,nop,TS val 86368736 ecr 4294858254], length 1448
16:01:38.284356 IP (tos 0x0, ttl 57, id 18280, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xedf8 (correct), seq 150593:152041, ack 1, win 46, options [nop,nop,TS val 86368736 ecr 4294858254], length 1448
16:01:38.284367 IP (tos 0x0, ttl 100, id 45957, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xbef5), ack 152041, win 6697, options [nop,nop,TS val 4294858305 ecr 86368736], length 0
16:01:38.284479 IP (tos 0x0, ttl 57, id 18281, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x9401 (correct), seq 152041:153489, ack 1, win 46, options [nop,nop,TS val 86368736 ecr 4294858254], length 1448
16:01:38.284602 IP (tos 0x0, ttl 57, id 18282, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x9329 (correct), seq 153489:154937, ack 1, win 46, options [nop,nop,TS val 86368736 ecr 4294858254], length 1448
16:01:38.284614 IP (tos 0x0, ttl 100, id 45958, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xb3a5), ack 154937, win 6697, options [nop,nop,TS val 4294858305 ecr 86368736], length 0
16:01:38.284725 IP (tos 0x0, ttl 57, id 18283, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x7431 (correct), seq 154937:156385, ack 1, win 46, options [nop,nop,TS val 86368736 ecr 4294858254], length 1448
16:01:38.284848 IP (tos 0x0, ttl 57, id 18284, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x175f (correct), seq 156385:157833, ack 1, win 46, options [nop,nop,TS val 86368736 ecr 4294858254], length 1448
16:01:38.284861 IP (tos 0x0, ttl 100, id 45959, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xa855), ack 157833, win 6697, options [nop,nop,TS val 4294858305 ecr 86368736], length 0
16:01:38.284971 IP (tos 0x0, ttl 57, id 18285, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x8c5c (correct), seq 157833:159281, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858255], length 1448
16:01:38.285094 IP (tos 0x0, ttl 57, id 18286, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xd3de (correct), seq 159281:160729, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858255], length 1448
16:01:38.285106 IP (tos 0x0, ttl 100, id 45960, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x9d04), ack 160729, win 6697, options [nop,nop,TS val 4294858305 ecr 86368737], length 0
16:01:38.285216 IP (tos 0x0, ttl 57, id 18287, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xef44 (correct), seq 160729:162177, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858255], length 1448
16:01:38.285340 IP (tos 0x0, ttl 57, id 18288, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x390b (correct), seq 162177:163625, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858255], length 1448
16:01:38.285351 IP (tos 0x0, ttl 100, id 45961, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x91b3), ack 163625, win 6697, options [nop,nop,TS val 4294858306 ecr 86368737], length 0
16:01:38.285463 IP (tos 0x0, ttl 57, id 18289, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xb804 (correct), seq 163625:165073, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858255], length 1448
16:01:38.285586 IP (tos 0x0, ttl 57, id 18290, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xffa8 (correct), seq 165073:166521, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858255], length 1448
16:01:38.285597 IP (tos 0x0, ttl 100, id 45962, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x8663), ack 166521, win 6697, options [nop,nop,TS val 4294858306 ecr 86368737], length 0
16:01:38.285709 IP (tos 0x0, ttl 57, id 18291, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x9c0e (correct), seq 166521:167969, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858255], length 1448
16:01:38.285833 IP (tos 0x0, ttl 57, id 18292, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x50ed (correct), seq 167969:169417, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858255], length 1448
16:01:38.285843 IP (tos 0x0, ttl 100, id 45963, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x7b13), ack 169417, win 6697, options [nop,nop,TS val 4294858306 ecr 86368737], length 0
16:01:38.285955 IP (tos 0x0, ttl 57, id 18293, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xe878 (correct), seq 169417:170865, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858255], length 1448
16:01:38.286078 IP (tos 0x0, ttl 57, id 18294, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x5431 (correct), seq 170865:172313, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858255], length 1448
16:01:38.286089 IP (tos 0x0, ttl 100, id 45964, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x6fc3), ack 172313, win 6697, options [nop,nop,TS val 4294858306 ecr 86368737], length 0
16:01:38.286202 IP (tos 0x0, ttl 57, id 18295, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [P.], cksum 0xc4a4 (correct), seq 172313:173761, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858255], length 1448
16:01:38.286324 IP (tos 0x0, ttl 57, id 18296, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x92a6 (correct), seq 173761:175209, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.286335 IP (tos 0x0, ttl 100, id 45965, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x63bd), ack 175209, win 6878, options [nop,nop,TS val 4294858307 ecr 86368737], length 0
16:01:38.286448 IP (tos 0x0, ttl 57, id 18297, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xb726 (correct), seq 175209:176657, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.286460 IP (tos 0x0, ttl 100, id 45966, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x5d60), ack 176657, win 7059, options [nop,nop,TS val 4294858307 ecr 86368737], length 0
16:01:38.286571 IP (tos 0x0, ttl 57, id 18298, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x1388 (correct), seq 176657:178105, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.286583 IP (tos 0x0, ttl 100, id 45967, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x5703), ack 178105, win 7240, options [nop,nop,TS val 4294858307 ecr 86368737], length 0
16:01:38.286694 IP (tos 0x0, ttl 57, id 18299, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x6a83 (correct), seq 178105:179553, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.286705 IP (tos 0x0, ttl 100, id 45968, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x50a6), ack 179553, win 7421, options [nop,nop,TS val 4294858307 ecr 86368737], length 0
16:01:38.286816 IP (tos 0x0, ttl 57, id 18300, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x0ecc (correct), seq 179553:181001, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.286827 IP (tos 0x0, ttl 100, id 45969, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x4a49), ack 181001, win 7602, options [nop,nop,TS val 4294858307 ecr 86368737], length 0
16:01:38.286944 IP (tos 0x0, ttl 57, id 18301, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x02fd (correct), seq 181001:182449, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.286955 IP (tos 0x0, ttl 100, id 45970, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x43ec), ack 182449, win 7783, options [nop,nop,TS val 4294858307 ecr 86368737], length 0
16:01:38.287063 IP (tos 0x0, ttl 57, id 18302, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x666e (correct), seq 182449:183897, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.287075 IP (tos 0x0, ttl 100, id 45971, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x3d8f), ack 183897, win 7964, options [nop,nop,TS val 4294858307 ecr 86368737], length 0
16:01:38.287187 IP (tos 0x0, ttl 57, id 18303, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xfc66 (correct), seq 183897:185345, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.287198 IP (tos 0x0, ttl 100, id 45972, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x3731), ack 185345, win 8145, options [nop,nop,TS val 4294858308 ecr 86368737], length 0
16:01:38.287309 IP (tos 0x0, ttl 57, id 18304, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xbd8c (correct), seq 185345:186793, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.287321 IP (tos 0x0, ttl 100, id 45973, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x30d4), ack 186793, win 8326, options [nop,nop,TS val 4294858308 ecr 86368737], length 0
16:01:38.287431 IP (tos 0x0, ttl 57, id 18305, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x0846 (correct), seq 186793:188241, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.287440 IP (tos 0x0, ttl 100, id 45974, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x2a77), ack 188241, win 8507, options [nop,nop,TS val 4294858308 ecr 86368737], length 0
16:01:38.287555 IP (tos 0x0, ttl 57, id 18306, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x49e9 (correct), seq 188241:189689, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.287565 IP (tos 0x0, ttl 100, id 45975, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x241a), ack 189689, win 8688, options [nop,nop,TS val 4294858308 ecr 86368737], length 0
16:01:38.287683 IP (tos 0x0, ttl 57, id 18307, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xc416 (correct), seq 189689:191137, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.287693 IP (tos 0x0, ttl 100, id 45976, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x1dbd), ack 191137, win 8869, options [nop,nop,TS val 4294858308 ecr 86368737], length 0
16:01:38.287801 IP (tos 0x0, ttl 57, id 18308, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xc8d3 (correct), seq 191137:192585, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.287813 IP (tos 0x0, ttl 100, id 45977, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x1760), ack 192585, win 9050, options [nop,nop,TS val 4294858308 ecr 86368737], length 0
16:01:38.287924 IP (tos 0x0, ttl 57, id 18309, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xd3d8 (correct), seq 192585:194033, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.287935 IP (tos 0x0, ttl 100, id 45978, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x1103), ack 194033, win 9231, options [nop,nop,TS val 4294858308 ecr 86368737], length 0
16:01:38.288047 IP (tos 0x0, ttl 57, id 18310, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x87af (correct), seq 194033:195481, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.288172 IP (tos 0x0, ttl 57, id 18311, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x5c33 (correct), seq 195481:196929, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.288182 IP (tos 0x0, ttl 100, id 45979, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x05b2), ack 196929, win 9231, options [nop,nop,TS val 4294858309 ecr 86368737], length 0
16:01:38.288293 IP (tos 0x0, ttl 57, id 18312, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xe297 (correct), seq 196929:198377, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.288416 IP (tos 0x0, ttl 57, id 18313, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x09d0 (correct), seq 198377:199825, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.288426 IP (tos 0x0, ttl 100, id 45980, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xfa61), ack 199825, win 9231, options [nop,nop,TS val 4294858309 ecr 86368737], length 0
16:01:38.288540 IP (tos 0x0, ttl 57, id 18314, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x51e0 (correct), seq 199825:201273, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.288662 IP (tos 0x0, ttl 57, id 18315, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x145e (correct), seq 201273:202721, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.288674 IP (tos 0x0, ttl 100, id 45981, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xef11), ack 202721, win 9231, options [nop,nop,TS val 4294858309 ecr 86368737], length 0
16:01:38.288786 IP (tos 0x0, ttl 57, id 18316, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x30f2 (correct), seq 202721:204169, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.288908 IP (tos 0x0, ttl 57, id 18317, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x7777 (correct), seq 204169:205617, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.288920 IP (tos 0x0, ttl 100, id 45982, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xe3c1), ack 205617, win 9231, options [nop,nop,TS val 4294858309 ecr 86368737], length 0
16:01:38.289031 IP (tos 0x0, ttl 57, id 18318, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xe665 (correct), seq 205617:207065, ack 1, win 46, options [nop,nop,TS val 86368737 ecr 4294858256], length 1448
16:01:38.324047 IP (tos 0x0, ttl 57, id 18319, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x4a0b (correct), seq 207065:208513, ack 1, win 46, options [nop,nop,TS val 86368747 ecr 4294858295], length 1448
16:01:38.324060 IP (tos 0x0, ttl 100, id 45983, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xd84e), ack 208513, win 9231, options [nop,nop,TS val 4294858344 ecr 86368737], length 0
16:01:38.324170 IP (tos 0x0, ttl 57, id 18320, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xe8d4 (correct), seq 208513:209961, ack 1, win 46, options [nop,nop,TS val 86368747 ecr 4294858295], length 1448
16:01:38.324297 IP (tos 0x0, ttl 57, id 18321, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xffde (correct), seq 209961:211409, ack 1, win 46, options [nop,nop,TS val 86368747 ecr 4294858295], length 1448
16:01:38.324310 IP (tos 0x0, ttl 100, id 45984, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xccf3), ack 211409, win 9231, options [nop,nop,TS val 4294858345 ecr 86368747], length 0
16:01:38.324416 IP (tos 0x0, ttl 57, id 18322, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x46aa (correct), seq 211409:212857, ack 1, win 46, options [nop,nop,TS val 86368747 ecr 4294858295], length 1448
16:01:38.324539 IP (tos 0x0, ttl 57, id 18323, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x768a (correct), seq 212857:214305, ack 1, win 46, options [nop,nop,TS val 86368747 ecr 4294858295], length 1448
16:01:38.324551 IP (tos 0x0, ttl 100, id 45985, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xc1a3), ack 214305, win 9231, options [nop,nop,TS val 4294858345 ecr 86368747], length 0
16:01:38.324662 IP (tos 0x0, ttl 57, id 18324, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x1c9a (correct), seq 214305:215753, ack 1, win 46, options [nop,nop,TS val 86368747 ecr 4294858295], length 1448
16:01:38.324788 IP (tos 0x0, ttl 57, id 18325, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xb753 (correct), seq 215753:217201, ack 1, win 46, options [nop,nop,TS val 86368747 ecr 4294858295], length 1448
16:01:38.324801 IP (tos 0x0, ttl 100, id 45986, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xb653), ack 217201, win 9231, options [nop,nop,TS val 4294858345 ecr 86368747], length 0
16:01:38.324908 IP (tos 0x0, ttl 57, id 18326, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x34ad (correct), seq 217201:218649, ack 1, win 46, options [nop,nop,TS val 86368747 ecr 4294858295], length 1448
16:01:38.325031 IP (tos 0x0, ttl 57, id 18327, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xfb0f (correct), seq 218649:220097, ack 1, win 46, options [nop,nop,TS val 86368747 ecr 4294858295], length 1448
16:01:38.325044 IP (tos 0x0, ttl 100, id 45987, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xab03), ack 220097, win 9231, options [nop,nop,TS val 4294858345 ecr 86368747], length 0
16:01:38.325154 IP (tos 0x0, ttl 57, id 18328, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x4049 (correct), seq 220097:221545, ack 1, win 46, options [nop,nop,TS val 86368747 ecr 4294858295], length 1448
16:01:38.325277 IP (tos 0x0, ttl 57, id 18329, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x5dba (correct), seq 221545:222993, ack 1, win 46, options [nop,nop,TS val 86368747 ecr 4294858295], length 1448
16:01:38.325289 IP (tos 0x0, ttl 100, id 45988, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x9fb2), ack 222993, win 9231, options [nop,nop,TS val 4294858346 ecr 86368747], length 0
16:01:38.325401 IP (tos 0x0, ttl 57, id 18330, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xfde1 (correct), seq 222993:224441, ack 1, win 46, options [nop,nop,TS val 86368747 ecr 4294858295], length 1448
16:01:38.333499 IP (tos 0x0, ttl 57, id 18331, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x64d5 (correct), seq 224441:225889, ack 1, win 46, options [nop,nop,TS val 86368749 ecr 4294858304], length 1448
16:01:38.333509 IP (tos 0x0, ttl 100, id 45989, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x945a), ack 225889, win 9231, options [nop,nop,TS val 4294858354 ecr 86368747], length 0
16:01:38.333622 IP (tos 0x0, ttl 57, id 18332, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xddc2 (correct), seq 225889:227337, ack 1, win 46, options [nop,nop,TS val 86368749 ecr 4294858304], length 1448
16:01:38.333749 IP (tos 0x0, ttl 57, id 18333, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x22b9 (correct), seq 227337:228785, ack 1, win 46, options [nop,nop,TS val 86368749 ecr 4294858304], length 1448
16:01:38.333759 IP (tos 0x0, ttl 100, id 45990, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x8908), ack 228785, win 9231, options [nop,nop,TS val 4294858354 ecr 86368749], length 0
16:01:38.333867 IP (tos 0x0, ttl 57, id 18334, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x52c1 (correct), seq 228785:230233, ack 1, win 46, options [nop,nop,TS val 86368749 ecr 4294858304], length 1448
16:01:38.333991 IP (tos 0x0, ttl 57, id 18335, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xb074 (correct), seq 230233:231681, ack 1, win 46, options [nop,nop,TS val 86368749 ecr 4294858304], length 1448
16:01:38.334002 IP (tos 0x0, ttl 100, id 45991, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x7db8), ack 231681, win 9231, options [nop,nop,TS val 4294858354 ecr 86368749], length 0
300 packets captured
301 packets received by filter
0 packets dropped by kernel
If there was an increase in the number of bytes charged to the socket
for each skb, without a corresponding increase in TCP receive buffer
size, that would explain a systematic decrease in receiver window that
would cause some paths, like perhaps these, to become
receiver-window-limited (which is consistent with the symptom of
stable bandwidth for a given path).
Can you please try increasing the default TCP receiver window to see
if this helps; try this as root on the 3.2 machine:
sysctl net.ipv4.tcp_rmem="4096 897664 897664"
Basically making the middle number as big as the third number should
bump up the default receiver window size.
neal
From: Eric Dumazet <hidden> Date: 2012-02-15 14:56:24
Le mercredi 15 février 2012 à 09:49 -0500, Neal Cardwell a écrit :
If there was an increase in the number of bytes charged to the socket
for each skb, without a corresponding increase in TCP receive buffer
size, that would explain a systematic decrease in receiver window that
would cause some paths, like perhaps these, to become
receiver-window-limited (which is consistent with the symptom of
stable bandwidth for a given path).
Can you please try increasing the default TCP receiver window to see
if this helps; try this as root on the 3.2 machine:
sysctl net.ipv4.tcp_rmem="4096 897664 897664"
Basically making the middle number as big as the third number should
bump up the default receiver window size.
Neal, this was taken into account, check how sk_rcvbuf is dynamically
handled in our stack.
tcp_rmem[1] is the initial sk_rcvbuf, but its updated as soon as receive
window changes
If you check tcpdumps, you dont notice signs of receiver-window-limited.
В сообщении от Среда 15 февраля 2012 09:49:07 вы написали:
If there was an increase in the number of bytes charged to the socket
for each skb, without a corresponding increase in TCP receive buffer
size, that would explain a systematic decrease in receiver window that
would cause some paths, like perhaps these, to become
receiver-window-limited (which is consistent with the symptom of
stable bandwidth for a given path).
Can you please try increasing the default TCP receiver window to see
if this helps; try this as root on the 3.2 machine:
sysctl net.ipv4.tcp_rmem="4096 897664 897664"
The same results after setting this.
Basically making the middle number as big as the third number should
bump up the default receiver window size.
neal
From: Eric Dumazet <hidden> Date: 2012-02-15 15:08:05
Le mercredi 15 février 2012 à 16:11 +0200, alekcejk@googlemail.com a
écrit :
ftp.snt.utwente.nl - yet one server with download speed 11,2 Megabytes/s with 3.1.10 kernel
and 5,41 or 5,56 or 5,8 Megabytes/s with 3.2.6 kernel (maximum speed shown by wget
may vary after restarting of download).
OK good... Unfortunately there is something in the path eating ECT
all frames we receive from remote peer have tos 0x0, so we cant detect
retransmits.
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
16:01:37.313964 IP (tos 0x0, ttl 100, id 63113, offset 0, flags [DF], proto TCP (6), length 60)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [SEW], cksum 0x1028 (incorrect -> 0xe45b), seq 1339270399, win 14600, options [mss 1460,sackOK,TS val 4294857334 ecr 0,nop,wscale 4],
length 0
16:01:37.365919 IP (tos 0x0, ttl 57, id 0, offset 0, flags [DF], proto TCP (6), length 60)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [S.E], cksum 0xec12 (correct), seq 1335027049, ack 1339270400, win 5792, options [mss 1460,sackOK,TS val 86368507 ecr
4294857334,nop,wscale 7], length 0
16:01:37.365942 IP (tos 0x0, ttl 100, id 63114, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [.], cksum 0x1020 (incorrect -> 0x2dfa), ack 1, win 913, options [nop,nop,TS val 4294857386 ecr 86368507], length 0
16:01:37.418747 IP (tos 0x0, ttl 57, id 1133, offset 0, flags [DF], proto TCP (6), length 116)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x4e71 (correct), seq 1:65, ack 1, win 46, options [nop,nop,TS val 86368520 ecr 4294857386], length 64
16:01:37.418764 IP (tos 0x0, ttl 100, id 63115, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [.], cksum 0x1020 (incorrect -> 0x2d78), ack 65, win 913, options [nop,nop,TS val 4294857439 ecr 86368520], length 0
16:01:37.418771 IP (tos 0x0, ttl 57, id 1134, offset 0, flags [DF], proto TCP (6), length 93)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x4a09 (correct), seq 65:106, ack 1, win 46, options [nop,nop,TS val 86368520 ecr 4294857386], length 41
16:01:37.418783 IP (tos 0x0, ttl 100, id 63116, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [.], cksum 0x1020 (incorrect -> 0x2d4f), ack 106, win 913, options [nop,nop,TS val 4294857439 ecr 86368520], length 0
16:01:37.418790 IP (tos 0x0, ttl 57, id 1135, offset 0, flags [DF], proto TCP (6), length 93)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x8227 (correct), seq 106:147, ack 1, win 46, options [nop,nop,TS val 86368520 ecr 4294857386], length 41
16:01:37.418801 IP (tos 0x0, ttl 100, id 63117, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [.], cksum 0x1020 (incorrect -> 0x2d26), ack 147, win 913, options [nop,nop,TS val 4294857439 ecr 86368520], length 0
16:01:37.470393 IP (tos 0x0, ttl 57, id 1136, offset 0, flags [DF], proto TCP (6), length 1396)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x71a3 (correct), seq 147:1491, ack 1, win 46, options [nop,nop,TS val 86368533 ecr 4294857439], length 1344
16:01:37.470405 IP (tos 0x0, ttl 100, id 63118, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [.], cksum 0x1020 (incorrect -> 0x26fd), ack 1491, win 1081, options [nop,nop,TS val 4294857491 ecr 86368533], length 0
16:01:37.470668 IP (tos 0x2,ECT(0), ttl 100, id 63119, offset 0, flags [DF], proto TCP (6), length 68)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x1030 (incorrect -> 0x9f08), seq 1:17, ack 1491, win 1081, options [nop,nop,TS val 4294857491 ecr 86368533], length 16
16:01:37.522117 IP (tos 0x0, ttl 57, id 1137, offset 0, flags [DF], proto TCP (6), length 52)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [.], cksum 0x2aeb (correct), ack 17, win 46, options [nop,nop,TS val 86368546 ecr 4294857491], length 0
16:01:37.522129 IP (tos 0x0, ttl 57, id 1138, offset 0, flags [DF], proto TCP (6), length 86)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0xe39f (correct), seq 1491:1525, ack 17, win 46, options [nop,nop,TS val 86368546 ecr 4294857491], length 34
16:01:37.522176 IP (tos 0x2,ECT(0), ttl 100, id 63120, offset 0, flags [DF], proto TCP (6), length 65)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x102d (incorrect -> 0x3bca), seq 17:30, ack 1525, win 1081, options [nop,nop,TS val 4294857543 ecr 86368546], length 13
16:01:37.573661 IP (tos 0x0, ttl 57, id 1139, offset 0, flags [DF], proto TCP (6), length 75)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x48e3 (correct), seq 1525:1548, ack 30, win 46, options [nop,nop,TS val 86368559 ecr 4294857543], length 23
16:01:37.573826 IP (tos 0x2,ECT(0), ttl 100, id 63121, offset 0, flags [DF], proto TCP (6), length 58)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x1026 (incorrect -> 0x7260), seq 30:36, ack 1548, win 1081, options [nop,nop,TS val 4294857594 ecr 86368559], length 6
16:01:37.625305 IP (tos 0x0, ttl 57, id 1140, offset 0, flags [DF], proto TCP (6), length 71)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0xc2b3 (correct), seq 1548:1567, ack 36, win 46, options [nop,nop,TS val 86368571 ecr 4294857594], length 19
16:01:37.625425 IP (tos 0x2,ECT(0), ttl 100, id 63122, offset 0, flags [DF], proto TCP (6), length 57)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x1025 (incorrect -> 0x875b), seq 36:41, ack 1567, win 1081, options [nop,nop,TS val 4294857646 ecr 86368571], length 5
16:01:37.676911 IP (tos 0x0, ttl 57, id 1141, offset 0, flags [DF], proto TCP (6), length 61)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x7223 (correct), seq 1567:1576, ack 41, win 46, options [nop,nop,TS val 86368584 ecr 4294857646], length 9
16:01:37.677032 IP (tos 0x2,ECT(0), ttl 100, id 63123, offset 0, flags [DF], proto TCP (6), length 60)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x1028 (incorrect -> 0x537d), seq 41:49, ack 1576, win 1081, options [nop,nop,TS val 4294857697 ecr 86368584], length 8
16:01:37.728484 IP (tos 0x0, ttl 57, id 1142, offset 0, flags [DF], proto TCP (6), length 83)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0xf385 (correct), seq 1576:1607, ack 49, win 46, options [nop,nop,TS val 86368597 ecr 4294857697], length 31
16:01:37.728631 IP (tos 0x2,ECT(0), ttl 100, id 63124, offset 0, flags [DF], proto TCP (6), length 93)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x1049 (incorrect -> 0x2b64), seq 49:90, ack 1607, win 1081, options [nop,nop,TS val 4294857749 ecr 86368597], length 41
16:01:37.780113 IP (tos 0x0, ttl 57, id 1143, offset 0, flags [DF], proto TCP (6), length 89)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x9d5d (correct), seq 1607:1644, ack 90, win 46, options [nop,nop,TS val 86368610 ecr 4294857749], length 37
16:01:37.780247 IP (tos 0x2,ECT(0), ttl 100, id 63125, offset 0, flags [DF], proto TCP (6), length 91)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x1047 (incorrect -> 0x9579), seq 90:129, ack 1644, win 1081, options [nop,nop,TS val 4294857801 ecr 86368610], length 39
16:01:37.831756 IP (tos 0x0, ttl 57, id 1144, offset 0, flags [DF], proto TCP (6), length 67)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0xae1f (correct), seq 1644:1659, ack 129, win 46, options [nop,nop,TS val 86368623 ecr 4294857801], length 15
16:01:37.831882 IP (tos 0x2,ECT(0), ttl 100, id 63126, offset 0, flags [DF], proto TCP (6), length 58)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x1026 (incorrect -> 0x7362), seq 129:135, ack 1659, win 1081, options [nop,nop,TS val 4294857852 ecr 86368623], length 6
16:01:37.883482 IP (tos 0x0, ttl 57, id 1145, offset 0, flags [DF], proto TCP (6), length 104)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x6b16 (correct), seq 1659:1711, ack 135, win 46, options [nop,nop,TS val 86368636 ecr 4294857852], length 52
16:01:37.883589 IP (tos 0x0, ttl 100, id 45885, offset 0, flags [DF], proto TCP (6), length 60)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [SEW], cksum 0x1028 (incorrect -> 0x234e), seq 1207822221, win 14600, options [mss 1460,sackOK,TS val 4294857904 ecr 0,nop,wscale 4],
length 0
16:01:37.923277 IP (tos 0x0, ttl 100, id 63127, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [.], cksum 0x1020 (incorrect -> 0x236f), ack 1711, win 1081, options [nop,nop,TS val 4294857944 ecr 86368636], length 0
16:01:37.933260 IP (tos 0x0, ttl 57, id 0, offset 0, flags [DF], proto TCP (6), length 60)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [S.E], cksum 0xe744 (correct), seq 3516507796, ack 1207822222, win 5792, options [mss 1460,sackOK,TS val 86368649 ecr
4294857904,nop,wscale 7], length 0
16:01:37.933275 IP (tos 0x0, ttl 100, id 45886, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x292e), ack 1, win 913, options [nop,nop,TS val 4294857954 ecr 86368649], length 0
16:01:37.933425 IP (tos 0x2,ECT(0), ttl 100, id 63128, offset 0, flags [DF], proto TCP (6), length 91)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [P.], cksum 0x1047 (incorrect -> 0x9b4d), seq 135:174, ack 1711, win 1081, options [nop,nop,TS val 4294857954 ecr 86368636], length 39
16:01:37.983255 IP (tos 0x0, ttl 57, id 18176, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x9529 (correct), seq 1:1449, ack 1, win 46, options [nop,nop,TS val 86368661 ecr 4294857954], length 1448
16:01:37.983272 IP (tos 0x0, ttl 100, id 45887, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x2293), ack 1449, win 1094, options [nop,nop,TS val 4294858004 ecr 86368661], length 0
16:01:37.983378 IP (tos 0x0, ttl 57, id 18177, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x2135 (correct), seq 1449:2897, ack 1, win 46, options [nop,nop,TS val 86368661 ecr 4294857954], length 1448
16:01:37.983388 IP (tos 0x0, ttl 100, id 45888, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x1c36), ack 2897, win 1275, options [nop,nop,TS val 4294858004 ecr 86368661], length 0
16:01:37.983500 IP (tos 0x0, ttl 57, id 18178, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x1b8d (correct), seq 2897:4345, ack 1, win 46, options [nop,nop,TS val 86368661 ecr 4294857954], length 1448
16:01:37.983509 IP (tos 0x0, ttl 100, id 45889, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x15d9), ack 4345, win 1456, options [nop,nop,TS val 4294858004 ecr 86368661], length 0
16:01:37.984985 IP (tos 0x0, ttl 57, id 1146, offset 0, flags [DF], proto TCP (6), length 149)
130.89.149.20.21 > AA.BB.CC.XY.53896: Flags [P.], cksum 0x8cc1 (correct), seq 1711:1808, ack 174, win 46, options [nop,nop,TS val 86368661 ecr 4294857954], length 97
16:01:37.985019 IP (tos 0x0, ttl 100, id 63129, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.53896 > 130.89.149.20.21: Flags [.], cksum 0x1020 (incorrect -> 0x2291), ack 1808, win 1081, options [nop,nop,TS val 4294858005 ecr 86368661], length 0
16:01:38.033132 IP (tos 0x0, ttl 57, id 18179, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x15a6 (correct), seq 4345:5793, ack 1, win 46, options [nop,nop,TS val 86368674 ecr 4294858004], length 1448
16:01:38.033143 IP (tos 0x0, ttl 100, id 45890, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x0f3e), ack 5793, win 1637, options [nop,nop,TS val 4294858053 ecr 86368674], length 0
16:01:38.033255 IP (tos 0x0, ttl 57, id 18180, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x0ffe (correct), seq 5793:7241, ack 1, win 46, options [nop,nop,TS val 86368674 ecr 4294858004], length 1448
16:01:38.033267 IP (tos 0x0, ttl 100, id 45891, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x08e0), ack 7241, win 1818, options [nop,nop,TS val 4294858054 ecr 86368674], length 0
16:01:38.033377 IP (tos 0x0, ttl 57, id 18181, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x0a56 (correct), seq 7241:8689, ack 1, win 46, options [nop,nop,TS val 86368674 ecr 4294858004], length 1448
16:01:38.033385 IP (tos 0x0, ttl 100, id 45892, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0x0283), ack 8689, win 1999, options [nop,nop,TS val 4294858054 ecr 86368674], length 0
16:01:38.033501 IP (tos 0x0, ttl 57, id 18182, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0x04ae (correct), seq 8689:10137, ack 1, win 46, options [nop,nop,TS val 86368674 ecr 4294858004], length 1448
16:01:38.033509 IP (tos 0x0, ttl 100, id 45893, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xfc25), ack 10137, win 2180, options [nop,nop,TS val 4294858054 ecr 86368674], length 0
16:01:38.033629 IP (tos 0x0, ttl 57, id 18183, offset 0, flags [DF], proto TCP (6), length 1500)
130.89.149.20.45565 > AA.BB.CC.XY.42171: Flags [.], cksum 0xff05 (correct), seq 10137:11585, ack 1, win 46, options [nop,nop,TS val 86368674 ecr 4294858004], length 1448
16:01:38.033642 IP (tos 0x0, ttl 100, id 45894, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.42171 > 130.89.149.20.45565: Flags [.], cksum 0x1020 (incorrect -> 0xf5c8), ack 11585, win 2361, options [nop,nop,TS val 4294858054 ecr 86368674], length 0
Thanks, Eric, for the clarification.
I am still intrigued by these aspects of the issue:
Also I want to pay attention that limited speed stays constant - always
5.5 MB/s with straight line on traffic plotter as if was network bandwidth shaping.
With 3.1 kernels this never happens - speed can vary in some ranges
but at maximum it is about 11 MB/s, no limitations such as 5.5 MB/s.
...
But I can say that probably there is really 100Mb/s
with Full duplex because as I wrote in first mail
there is some servers which have almost the same
speed with 3.2.3 kernel as with 3.1.10.
They are mostly located geographically close to me
(maybe there are other servers, not close, but I not found such one).
Here example of such server ftp.linux.kiev.ua,
download speed 11,1 Megabytes/s with both kernels.
...
To me, these symptoms smell like a receiver window issue that is
capping bandwidth at some receive_window/RTT value:
1) when there is a problem bandwidth is a "straight line" instead of
typically variable TCP performance
2) when there is a problem, it is with geographically remote
(high-RTT) sites and not local sites
3) the problem only shows up when certain versions of the kernel act
as a receiver
I would be intrigued to see the following pieces of info for a slow
transfer (from a geographically distant server) with the problematic
3.2 kernel:
- tcpdump of first 300 or so packets to see SYN/SYNACK and RTT
- tcpdump of last 300 or so packets, to see the steady-state dynamics
with receiver window and packet inter-arrival times
- summary of overall throughput wget sees
(I apologize if this is already in the thread somewhere... there are
now a lot of traces in the thread and it's hard to scan them all...
:-)
neal
From: Eric Dumazet <hidden> Date: 2012-02-16 07:29:20
Le mercredi 15 février 2012 à 14:44 -0500, Neal Cardwell a écrit :
Thanks, Eric, for the clarification.
I am still intrigued by these aspects of the issue:
quoted
Also I want to pay attention that limited speed stays constant - always
5.5 MB/s with straight line on traffic plotter as if was network bandwidth shaping.
With 3.1 kernels this never happens - speed can vary in some ranges
but at maximum it is about 11 MB/s, no limitations such as 5.5 MB/s.
...
quoted
But I can say that probably there is really 100Mb/s
with Full duplex because as I wrote in first mail
there is some servers which have almost the same
speed with 3.2.3 kernel as with 3.1.10.
They are mostly located geographically close to me
(maybe there are other servers, not close, but I not found such one).
Here example of such server ftp.linux.kiev.ua,
download speed 11,1 Megabytes/s with both kernels.
...
To me, these symptoms smell like a receiver window issue that is
capping bandwidth at some receive_window/RTT value:
1) when there is a problem bandwidth is a "straight line" instead of
typically variable TCP performance
2) when there is a problem, it is with geographically remote
(high-RTT) sites and not local sites
3) the problem only shows up when certain versions of the kernel act
as a receiver
I would be intrigued to see the following pieces of info for a slow
transfer (from a geographically distant server) with the problematic
3.2 kernel:
- tcpdump of first 300 or so packets to see SYN/SYNACK and RTT
- tcpdump of last 300 or so packets, to see the steady-state dynamics
with receiver window and packet inter-arrival times
- summary of overall throughput wget sees
(I apologize if this is already in the thread somewhere... there are
now a lot of traces in the thread and it's hard to scan them all...
:-)
From: Eric Dumazet <hidden> Date: 2012-02-16 13:40:21
Le jeudi 16 février 2012 à 08:29 +0100, Eric Dumazet a écrit :
So I took the time to setup a netem in my lab (and had to fix netem by
the way). Gigabit link.
On sender :
tc qdisc add dev vlan.103 root netem delay 50ms
And netperf session is a bit strange, since receiver window is about
1Mbytes (17097*64) but sender never uses half of it.
cwnd is ~408
$ ss -emoi dst 192.168.20.108
State Recv-Q Send-Q Local
Address:Port Peer Address:Port
ESTAB 0 450976
192.168.20.110:52017
192.168.20.108:44169 timer:(on,235ms,0) ino:21711 sk:f24d2d00
mem:(r0,w698880,f206336,t0) ts sack ecn bic wscale:6,8 rto:252
rtt:52/0.75 cwnd:408 send 90.9Mbps rcv_space:14600
$ tc -s -d qdisc show dev vlan.103
qdisc netem 8009: root refcnt 2 limit 1000 delay 50.0ms
Sent 15149167430 bytes 10017438 pkt (dropped 0, overlimits 0 requeues
0)
rate 74878Kbit 6193pps backlog 476760b 316p requeues 0
Its seems a problem with GRO.
Receiver opens its window each time it sends an ACK, without taking care
how many segments were ACKed.
In these traces, I give the ACKS sent by receiver, first trace GRO on,
second with GRO off
We can see that with GRO off, receiver opens its window way faster
(against number of received bytes)
(REC & SENDER are both 3.0 kernels, so problem is quite old)
--------------------------------- GRO ON
14:13:43.287758 IP REC > SENDER: SE 1890584798:1890584798(0) ack 3734698542 win 14480 <mss 1460,sackOK,timestamp 11659135 2360992,nop,wscale 6>
14:13:43.337945 IP REC > SENDER: . ack 8689 win 272 <nop,nop,timestamp 11659186 2361042>
14:13:43.338077 IP REC > SENDER: . ack 13033 win 317 <nop,nop,timestamp 11659186 2361042>
14:13:43.388076 IP REC > SENDER: . ack 16385 win 362 <nop,nop,timestamp 11659236 2361092>
14:13:43.388187 IP REC > SENDER: . ack 26521 win 408 <nop,nop,timestamp 11659236 2361092>
14:13:43.388358 IP REC > SENDER: . ack 29417 win 453 <nop,nop,timestamp 11659236 2361092>
14:13:43.438336 IP REC > SENDER: . ack 41001 win 498 <nop,nop,timestamp 11659286 2361142>
14:13:43.438488 IP REC > SENDER: . ack 49689 win 543 <nop,nop,timestamp 11659286 2361142>
14:13:43.438689 IP REC > SENDER: . ack 51137 win 589 <nop,nop,timestamp 11659286 2361142>
14:13:43.488542 IP REC > SENDER: . ack 62721 win 634 <nop,nop,timestamp 11659336 2361192>
14:13:43.488608 IP REC > SENDER: . ack 68513 win 679 <nop,nop,timestamp 11659336 2361192>
14:13:43.488750 IP REC > SENDER: . ack 74305 win 724 <nop,nop,timestamp 11659336 2361192>
14:13:43.488998 IP REC > SENDER: . ack 77201 win 770 <nop,nop,timestamp 11659337 2361193>
14:13:43.538859 IP REC > SENDER: . ack 97473 win 815 <nop,nop,timestamp 11659386 2361242>
14:13:43.538887 IP REC > SENDER: . ack 100369 win 860 <nop,nop,timestamp 11659386 2361243>
14:13:43.539061 IP REC > SENDER: . ack 104713 win 905 <nop,nop,timestamp 11659387 2361243>
14:13:43.539309 IP REC > SENDER: . ack 109057 win 951 <nop,nop,timestamp 11659387 2361243>
14:13:43.589049 IP REC > SENDER: . ack 119193 win 996 <nop,nop,timestamp 11659437 2361293>
14:13:43.589150 IP REC > SENDER: . ack 131073 win 1041 <nop,nop,timestamp 11659437 2361293>
14:13:43.589273 IP REC > SENDER: . ack 139761 win 1086 <nop,nop,timestamp 11659437 2361293>
--------------------------- GRO OFF
14:23:30.833888 IP REC > SENDER: SE 2942791281:2942791281(0) ack 59806143 win 14480 <mss 1460,sackOK,timestamp 12246638 2948538,nop,wscale 6>
14:23:30.884007 IP REC > SENDER: . ack 1449 win 272 <nop,nop,timestamp 12246689 2948588>
14:23:30.884024 IP REC > SENDER: . ack 2897 win 317 <nop,nop,timestamp 12246689 2948588>
14:23:30.884057 IP REC > SENDER: . ack 4345 win 362 <nop,nop,timestamp 12246689 2948588>
14:23:30.884064 IP REC > SENDER: . ack 5793 win 408 <nop,nop,timestamp 12246689 2948588>
14:23:30.884069 IP REC > SENDER: . ack 7241 win 453 <nop,nop,timestamp 12246689 2948588>
14:23:30.884075 IP REC > SENDER: . ack 8689 win 498 <nop,nop,timestamp 12246689 2948588>
14:23:30.884105 IP REC > SENDER: . ack 10137 win 543 <nop,nop,timestamp 12246689 2948588>
14:23:30.884111 IP REC > SENDER: . ack 11585 win 589 <nop,nop,timestamp 12246689 2948588>
14:23:30.884125 IP REC > SENDER: . ack 13033 win 634 <nop,nop,timestamp 12246689 2948588>
14:23:30.934126 IP REC > SENDER: . ack 14481 win 679 <nop,nop,timestamp 12246739 2948638>
14:23:30.934136 IP REC > SENDER: . ack 15929 win 724 <nop,nop,timestamp 12246739 2948638>
14:23:30.934149 IP REC > SENDER: . ack 16385 win 770 <nop,nop,timestamp 12246739 2948638>
14:23:30.934154 IP REC > SENDER: . ack 17833 win 815 <nop,nop,timestamp 12246739 2948638>
14:23:30.934161 IP REC > SENDER: . ack 19281 win 860 <nop,nop,timestamp 12246739 2948638>
14:23:30.934198 IP REC > SENDER: . ack 20729 win 905 <nop,nop,timestamp 12246739 2948638>
14:23:30.934204 IP REC > SENDER: . ack 22177 win 951 <nop,nop,timestamp 12246739 2948638>
14:23:30.934208 IP REC > SENDER: . ack 23625 win 996 <nop,nop,timestamp 12246739 2948638>
14:23:30.934213 IP REC > SENDER: . ack 25073 win 1002 <nop,nop,timestamp 12246739 2948638>
14:23:30.934240 IP REC > SENDER: . ack 26521 win 1002 <nop,nop,timestamp 12246739 2948638>
14:23:30.934245 IP REC > SENDER: . ack 27969 win 1002 <nop,nop,timestamp 12246739 2948638>
14:23:30.934272 IP REC > SENDER: . ack 29417 win 1002 <nop,nop,timestamp 12246739 2948638>
14:23:30.934276 IP REC > SENDER: . ack 30865 win 1002 <nop,nop,timestamp 12246739 2948638>
14:23:30.934295 IP REC > SENDER: . ack 33761 win 1002 <nop,nop,timestamp 12246739 2948638>
14:23:30.934319 IP REC > SENDER: . ack 36657 win 1002 <nop,nop,timestamp 12246739 2948638>
From: Ben Hutchings <hidden> Date: 2012-02-16 13:51:04
On Thu, 2012-02-16 at 14:40 +0100, Eric Dumazet wrote:
Le jeudi 16 février 2012 à 08:29 +0100, Eric Dumazet a écrit :
quoted
So I took the time to setup a netem in my lab (and had to fix netem by
the way). Gigabit link.
On sender :
tc qdisc add dev vlan.103 root netem delay 50ms
And netperf session is a bit strange, since receiver window is about
1Mbytes (17097*64) but sender never uses half of it.
cwnd is ~408
$ ss -emoi dst 192.168.20.108
State Recv-Q Send-Q Local
Address:Port Peer Address:Port
ESTAB 0 450976
192.168.20.110:52017
192.168.20.108:44169 timer:(on,235ms,0) ino:21711 sk:f24d2d00
mem:(r0,w698880,f206336,t0) ts sack ecn bic wscale:6,8 rto:252
rtt:52/0.75 cwnd:408 send 90.9Mbps rcv_space:14600
$ tc -s -d qdisc show dev vlan.103
qdisc netem 8009: root refcnt 2 limit 1000 delay 50.0ms
Sent 15149167430 bytes 10017438 pkt (dropped 0, overlimits 0 requeues
0)
rate 74878Kbit 6193pps backlog 476760b 316p requeues 0
Its seems a problem with GRO.
Receiver opens its window each time it sends an ACK, without taking care
how many segments were ACKed.
In these traces, I give the ACKS sent by receiver, first trace GRO on,
second with GRO off
We can see that with GRO off, receiver opens its window way faster
(against number of received bytes)
(REC & SENDER are both 3.0 kernels, so problem is quite old)
[...]
I'm aware of this problem and I believe it exists with most
implementations of LRO.
The out-of-tree version of the sfc driver has its own soft-LRO
implementation (SSR) which does some limited connection tracking to
detect slow start and disable aggregation temporarily. I've been
meaning to look into enhancing GRO to match SSR, but haven't got round
to it yet.
Ben.
--
Ben Hutchings, Staff Engineer, Solarflare
Not speaking for my employer; that's the marketing department's job.
They asked us to note that Solarflare product names are trademarked.
From: Eric Dumazet <hidden> Date: 2012-02-16 15:09:48
Le jeudi 16 février 2012 à 13:51 +0000, Ben Hutchings a écrit :
I'm aware of this problem and I believe it exists with most
implementations of LRO.
The out-of-tree version of the sfc driver has its own soft-LRO
implementation (SSR) which does some limited connection tracking to
detect slow start and disable aggregation temporarily. I've been
meaning to look into enhancing GRO to match SSR, but haven't got round
to it yet.
Not sure why we cant change tcp_grow_window() to take into account
number of segments in skb ?
It currently increments rcv_ssthresh by a fixed amount (2 * advmss)
if (tcp_win_from_space(skb->truesize) <= skb->len)
incr = 2 * tp->advmss;
else
incr = __tcp_grow_window(sk, skb);
if (incr) {
tp->rcv_ssthresh = min(tp->rcv_ssthresh + incr,
tp->window_clamp);
inet_csk(sk)->icsk_ack.quick |= 1;
}
From: Ben Hutchings <hidden> Date: 2012-02-16 16:38:21
On Thu, 2012-02-16 at 16:09 +0100, Eric Dumazet wrote:
Le jeudi 16 février 2012 à 13:51 +0000, Ben Hutchings a écrit :
quoted
I'm aware of this problem and I believe it exists with most
implementations of LRO.
The out-of-tree version of the sfc driver has its own soft-LRO
implementation (SSR) which does some limited connection tracking to
detect slow start and disable aggregation temporarily. I've been
meaning to look into enhancing GRO to match SSR, but haven't got round
to it yet.
Not sure why we cant change tcp_grow_window() to take into account
number of segments in skb ?
Maybe it's as simple as that. I don't pretend to understand the details
of TCP flow control.
I checked with David Riddoch who originally implemented SSR. His
concern was that each aggregated packet received results in at most one
ACK and some senders then won't grow their congestion window as fast as
they would if we were ACKing each wire-level packet (or every 2
packets). But since current Linux *as a sender* counts the ACKed bytes
and not the packets, I don't think it's relevant to this particular
problem.
Ben.
It currently increments rcv_ssthresh by a fixed amount (2 * advmss)
if (tcp_win_from_space(skb->truesize) <= skb->len)
incr = 2 * tp->advmss;
else
incr = __tcp_grow_window(sk, skb);
if (incr) {
tp->rcv_ssthresh = min(tp->rcv_ssthresh + incr,
tp->window_clamp);
inet_csk(sk)->icsk_ack.quick |= 1;
}
--
Ben Hutchings, Staff Engineer, Solarflare
Not speaking for my employer; that's the marketing department's job.
They asked us to note that Solarflare product names are trademarked.
Our team has also run into issues with GRO/LRO "stretch ACKs", and
their negative impact on TCP performance. We have a patch that we've
been working with that deals with the sender-side issues. It turns out
that neither the ABC nor non-ABC byte counting quite fixes the stretch
ACKs issues.
On the receiver side, the approach of changing tcp_grow_window() and
__tcp_grow_window() to adjust things in terms of actual packet size
rather than a fixed 2*MSS sounds great to me as well.
In terms of the original 3.1 vs 3.2 issue report that started this
thread, I didn't see any evidence of LRO or GRO causing stretch ACKs.
(Alexey, would you be able to confim by running "ethtool -k eth0" on
both kernels?) So it seems that probably the original issue is
unrelated to stretch ACKs?
neal
В сообщении от Четверг 16 февраля 2012 12:22:29 вы написали:
Our team has also run into issues with GRO/LRO "stretch ACKs", and
their negative impact on TCP performance. We have a patch that we've
been working with that deals with the sender-side issues. It turns out
that neither the ABC nor non-ABC byte counting quite fixes the stretch
ACKs issues.
On the receiver side, the approach of changing tcp_grow_window() and
__tcp_grow_window() to adjust things in terms of actual packet size
rather than a fixed 2*MSS sounds great to me as well.
In terms of the original 3.1 vs 3.2 issue report that started this
thread, I didn't see any evidence of LRO or GRO causing stretch ACKs.
(Alexey, would you be able to confim by running "ethtool -k eth0" on
both kernels?) So it seems that probably the original issue is
unrelated to stretch ACKs?
neal
Looks like "ethtool -k eth0" shows the same with both kernels:
Offload parameters for eth0:
rx-checksumming: on
tx-checksumming: on
scatter-gather: on
tcp-segmentation-offload: off
udp-fragmentation-offload: off
generic-segmentation-offload: on
generic-receive-offload: on
large-receive-offload: off
rx-vlan-offload: off
tx-vlan-offload: off
ntuple-filters: off
receive-hashing: off
On Thu, Feb 16, 2012 at 12:54 PM, [off-list ref] wrote:
Looks like "ethtool -k eth0" shows the same with both kernels:
Offload parameters for eth0:
rx-checksumming: on
tx-checksumming: on
scatter-gather: on
tcp-segmentation-offload: off
udp-fragmentation-offload: off
generic-segmentation-offload: on
generic-receive-offload: on
large-receive-offload: off
rx-vlan-offload: off
tx-vlan-offload: off
ntuple-filters: off
receive-hashing: off
Great. Thanks, Alexey.
I still think it would be useful to have these three pieces of data
for a slow/3.2.x transfer (from a geographically distant server) if
you have a sec:
- tcpdump of first 300 or so packets to see SYN/SYNACK options and RTT
- tcpdump of _last_ 300 or so packets, to see the steady-state dynamics
with receiver window and packet inter-arrival times
- summary of overall throughput wget sees on that transfer
This should help establish whether the receiver window is really the
limiting factor in the slow cases.
neal
From: Eric Dumazet <hidden> Date: 2012-02-16 18:22:08
Le jeudi 16 février 2012 à 12:22 -0500, Neal Cardwell a écrit :
Our team has also run into issues with GRO/LRO "stretch ACKs", and
their negative impact on TCP performance. We have a patch that we've
been working with that deals with the sender-side issues. It turns out
that neither the ABC nor non-ABC byte counting quite fixes the stretch
ACKs issues.
On the receiver side, the approach of changing tcp_grow_window() and
__tcp_grow_window() to adjust things in terms of actual packet size
rather than a fixed 2*MSS sounds great to me as well.
In terms of the original 3.1 vs 3.2 issue report that started this
thread, I didn't see any evidence of LRO or GRO causing stretch ACKs.
(Alexey, would you be able to confim by running "ethtool -k eth0" on
both kernels?) So it seems that probably the original issue is
unrelated to stretch ACKs?
I do believe the "3.1 vs 3.2" issue is a matter of how skb truesize
fixes uncover prior bugs in tcp stack. Some drivers were lying about skb
truesize in hope to avoid these bugs...
For instance, I think we dont open receiver window fast enough in this
case, (and we probably enter the slow __tcp_grow_window() path)
On sender side, there are also issues, because if I have TSO on or off
on my 'netem delay 50ms' machine, performance is completely different.
It might have something to do with BQL. More testings needed.
From: Eric Dumazet <hidden> Date: 2012-02-16 19:44:58
Le jeudi 16 février 2012 à 19:22 +0100, Eric Dumazet a écrit :
On sender side, there are also issues, because if I have TSO on or off
on my 'netem delay 50ms' machine, performance is completely different.
Well, my sender is a 32bit kernel, so tcp_wmem[2] was less than
1Mbytes..
$ cat /proc/sys/net/ipv4/tcp_wmem
4096 16384 903780
Socket cwnd is then capped to ~400 with TSO=off, and ~1500 with TSO=on
TSO off, a 1500 bytes frame now has truesize=2048+192, while in previous
kernel it had truesize=1500+192 before linux 3.2
(903780/2240 = 403)
(TSO permits a better truesize/len ratio, close to 1)
With 50ms RTT, 400 packets in flight means no more than 90Mbit/s
В сообщении от Четверг 16 февраля 2012 13:19:58 вы написали:
On Thu, Feb 16, 2012 at 12:54 PM, [off-list ref] wrote:
I still think it would be useful to have these three pieces of data
for a slow/3.2.x transfer (from a geographically distant server) if
you have a sec:
- tcpdump of first 300 or so packets to see SYN/SYNACK options and RTT
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
23:33:30.161104 IP (tos 0x0, ttl 100, id 40921, offset 0, flags [DF], proto TCP (6), length 60)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [S], cksum 0x9602 (incorrect -> 0x88a0), seq 3622665526, win 14600, options [mss 1460,sackOK,TS val 4294828783 ecr 0,nop,wscale 4],
length 0
23:33:30.225273 IP (tos 0x0, ttl 53, id 0, offset 0, flags [DF], proto TCP (6), length 60)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [S.], cksum 0xf8a5 (correct), seq 2665972683, ack 3622665527, win 17896, options [mss 8960,sackOK,TS val 3454170400 ecr
4294828783,nop,wscale 11], length 0
23:33:30.225296 IP (tos 0x0, ttl 100, id 40922, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x86d8), ack 1, win 913, options [nop,nop,TS val 4294828848 ecr 3454170400], length 0
23:33:30.225360 IP (tos 0x0, ttl 100, id 40923, offset 0, flags [DF], proto TCP (6), length 176)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [P.], cksum 0x9676 (incorrect -> 0xd695), seq 1:125, ack 1, win 913, options [nop,nop,TS val 4294828848 ecr 3454170400], length 124
23:33:30.289550 IP (tos 0x0, ttl 53, id 63228, offset 0, flags [DF], proto TCP (6), length 52)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x89d4 (correct), ack 125, win 9, options [nop,nop,TS val 3454170416 ecr 4294828848], length 0
23:33:30.289970 IP (tos 0x0, ttl 53, id 63229, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x4e88 (correct), seq 1:1449, ack 125, win 9, options [nop,nop,TS val 3454170416 ecr 4294828848], length 1448
23:33:30.289983 IP (tos 0x0, ttl 100, id 40924, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x7faf), ack 1449, win 1094, options [nop,nop,TS val 4294828912 ecr 3454170416], length 0
23:33:30.290093 IP (tos 0x0, ttl 53, id 63230, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x7e84 (correct), seq 1449:2897, ack 125, win 9, options [nop,nop,TS val 3454170416 ecr 4294828848], length 1448
23:33:30.290108 IP (tos 0x0, ttl 100, id 40925, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x7952), ack 2897, win 1275, options [nop,nop,TS val 4294828912 ecr 3454170416], length 0
23:33:30.354330 IP (tos 0x0, ttl 53, id 63231, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x788c (correct), seq 2897:4345, ack 125, win 9, options [nop,nop,TS val 3454170432 ecr 4294828912], length 1448
23:33:30.354343 IP (tos 0x0, ttl 100, id 40926, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x72a4), ack 4345, win 1456, options [nop,nop,TS val 4294828977 ecr 3454170432], length 0
23:33:30.354452 IP (tos 0x0, ttl 53, id 63232, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x72e4 (correct), seq 4345:5793, ack 125, win 9, options [nop,nop,TS val 3454170432 ecr 4294828912], length 1448
23:33:30.354464 IP (tos 0x0, ttl 100, id 40927, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x6c47), ack 5793, win 1637, options [nop,nop,TS val 4294828977 ecr 3454170432], length 0
23:33:30.354576 IP (tos 0x0, ttl 53, id 63233, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x6d3c (correct), seq 5793:7241, ack 125, win 9, options [nop,nop,TS val 3454170432 ecr 4294828912], length 1448
23:33:30.354586 IP (tos 0x0, ttl 100, id 40928, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x65ea), ack 7241, win 1818, options [nop,nop,TS val 4294828977 ecr 3454170432], length 0
23:33:30.354701 IP (tos 0x0, ttl 53, id 63234, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x6794 (correct), seq 7241:8689, ack 125, win 9, options [nop,nop,TS val 3454170432 ecr 4294828912], length 1448
23:33:30.354712 IP (tos 0x0, ttl 100, id 40929, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x5f8d), ack 8689, win 1999, options [nop,nop,TS val 4294828977 ecr 3454170432], length 0
23:33:30.418663 IP (tos 0x0, ttl 53, id 63235, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x619b (correct), seq 8689:10137, ack 125, win 9, options [nop,nop,TS val 3454170448 ecr 4294828977], length 1448
23:33:30.418676 IP (tos 0x0, ttl 100, id 40930, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x58e0), ack 10137, win 2180, options [nop,nop,TS val 4294829041 ecr 3454170448], length 0
23:33:30.418786 IP (tos 0x0, ttl 53, id 63236, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x5bf3 (correct), seq 10137:11585, ack 125, win 9, options [nop,nop,TS val 3454170448 ecr 4294828977], length 1448
23:33:30.418799 IP (tos 0x0, ttl 100, id 40931, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x5283), ack 11585, win 2361, options [nop,nop,TS val 4294829041 ecr 3454170448], length 0
23:33:30.418908 IP (tos 0x0, ttl 53, id 63237, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x564b (correct), seq 11585:13033, ack 125, win 9, options [nop,nop,TS val 3454170448 ecr 4294828977], length 1448
23:33:30.418917 IP (tos 0x0, ttl 100, id 40932, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x4c26), ack 13033, win 2542, options [nop,nop,TS val 4294829041 ecr 3454170448], length 0
23:33:30.419038 IP (tos 0x0, ttl 53, id 63238, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x50a3 (correct), seq 13033:14481, ack 125, win 9, options [nop,nop,TS val 3454170448 ecr 4294828977], length 1448
23:33:30.419048 IP (tos 0x0, ttl 100, id 40933, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x45c9), ack 14481, win 2723, options [nop,nop,TS val 4294829041 ecr 3454170448], length 0
23:33:30.419155 IP (tos 0x0, ttl 53, id 63239, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [P.], cksum 0x4af3 (correct), seq 14481:15929, ack 125, win 9, options [nop,nop,TS val 3454170448 ecr 4294828977], length 1448
23:33:30.419166 IP (tos 0x0, ttl 100, id 40934, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x3f6b), ack 15929, win 2904, options [nop,nop,TS val 4294829042 ecr 3454170448], length 0
23:33:30.419278 IP (tos 0x0, ttl 53, id 63240, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x4553 (correct), seq 15929:17377, ack 125, win 9, options [nop,nop,TS val 3454170448 ecr 4294828977], length 1448
23:33:30.419289 IP (tos 0x0, ttl 100, id 40935, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x390e), ack 17377, win 3085, options [nop,nop,TS val 4294829042 ecr 3454170448], length 0
23:33:30.419402 IP (tos 0x0, ttl 53, id 63241, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x3fab (correct), seq 17377:18825, ack 125, win 9, options [nop,nop,TS val 3454170448 ecr 4294828977], length 1448
23:33:30.419414 IP (tos 0x0, ttl 100, id 40936, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x32b1), ack 18825, win 3266, options [nop,nop,TS val 4294829042 ecr 3454170448], length 0
23:33:30.419524 IP (tos 0x0, ttl 53, id 63242, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x3a03 (correct), seq 18825:20273, ack 125, win 9, options [nop,nop,TS val 3454170448 ecr 4294828977], length 1448
23:33:30.419533 IP (tos 0x0, ttl 100, id 40937, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x2c54), ack 20273, win 3447, options [nop,nop,TS val 4294829042 ecr 3454170448], length 0
23:33:30.483022 IP (tos 0x0, ttl 53, id 63243, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x340b (correct), seq 20273:21721, ack 125, win 9, options [nop,nop,TS val 3454170464 ecr 4294829041], length 1448
23:33:30.483034 IP (tos 0x0, ttl 100, id 40938, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x25a8), ack 21721, win 3628, options [nop,nop,TS val 4294829105 ecr 3454170464], length 0
23:33:30.483146 IP (tos 0x0, ttl 53, id 63244, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x2e63 (correct), seq 21721:23169, ack 125, win 9, options [nop,nop,TS val 3454170464 ecr 4294829041], length 1448
23:33:30.483160 IP (tos 0x0, ttl 100, id 40939, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x1f4a), ack 23169, win 3809, options [nop,nop,TS val 4294829106 ecr 3454170464], length 0
23:33:30.483268 IP (tos 0x0, ttl 53, id 63245, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [P.], cksum 0x28b3 (correct), seq 23169:24617, ack 125, win 9, options [nop,nop,TS val 3454170464 ecr 4294829041], length 1448
23:33:30.483279 IP (tos 0x0, ttl 100, id 40940, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x18ed), ack 24617, win 3990, options [nop,nop,TS val 4294829106 ecr 3454170464], length 0
23:33:30.483400 IP (tos 0x0, ttl 53, id 63246, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x2313 (correct), seq 24617:26065, ack 125, win 9, options [nop,nop,TS val 3454170464 ecr 4294829041], length 1448
23:33:30.483413 IP (tos 0x0, ttl 100, id 40941, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x1344), ack 26065, win 3991, options [nop,nop,TS val 4294829106 ecr 3454170464], length 0
23:33:30.483515 IP (tos 0x0, ttl 53, id 63247, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x1d6b (correct), seq 26065:27513, ack 125, win 9, options [nop,nop,TS val 3454170464 ecr 4294829041], length 1448
23:33:30.483526 IP (tos 0x0, ttl 100, id 40942, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x0d9c), ack 27513, win 3991, options [nop,nop,TS val 4294829106 ecr 3454170464], length 0
23:33:30.483638 IP (tos 0x0, ttl 53, id 63248, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x17c3 (correct), seq 27513:28961, ack 125, win 9, options [nop,nop,TS val 3454170464 ecr 4294829041], length 1448
23:33:30.483649 IP (tos 0x0, ttl 100, id 40943, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x07f4), ack 28961, win 3991, options [nop,nop,TS val 4294829106 ecr 3454170464], length 0
23:33:30.483761 IP (tos 0x0, ttl 53, id 63249, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x121b (correct), seq 28961:30409, ack 125, win 9, options [nop,nop,TS val 3454170464 ecr 4294829041], length 1448
23:33:30.483773 IP (tos 0x0, ttl 100, id 40944, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x024c), ack 30409, win 3991, options [nop,nop,TS val 4294829106 ecr 3454170464], length 0
23:33:30.483884 IP (tos 0x0, ttl 53, id 63250, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x0c73 (correct), seq 30409:31857, ack 125, win 9, options [nop,nop,TS val 3454170464 ecr 4294829041], length 1448
23:33:30.483894 IP (tos 0x0, ttl 100, id 40945, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xfca3), ack 31857, win 3991, options [nop,nop,TS val 4294829106 ecr 3454170464], length 0
23:33:30.484014 IP (tos 0x0, ttl 53, id 63251, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x06c9 (correct), seq 31857:33305, ack 125, win 9, options [nop,nop,TS val 3454170465 ecr 4294829042], length 1448
23:33:30.484130 IP (tos 0x0, ttl 53, id 63252, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x0121 (correct), seq 33305:34753, ack 125, win 9, options [nop,nop,TS val 3454170465 ecr 4294829042], length 1448
23:33:30.484142 IP (tos 0x0, ttl 100, id 40946, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xf152), ack 34753, win 3991, options [nop,nop,TS val 4294829106 ecr 3454170465], length 0
23:33:30.484253 IP (tos 0x0, ttl 53, id 63253, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xfb78 (correct), seq 34753:36201, ack 125, win 9, options [nop,nop,TS val 3454170465 ecr 4294829042], length 1448
23:33:30.484376 IP (tos 0x0, ttl 53, id 63254, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xf5d0 (correct), seq 36201:37649, ack 125, win 9, options [nop,nop,TS val 3454170465 ecr 4294829042], length 1448
23:33:30.484386 IP (tos 0x0, ttl 100, id 40947, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xe601), ack 37649, win 3991, options [nop,nop,TS val 4294829107 ecr 3454170465], length 0
23:33:30.484498 IP (tos 0x0, ttl 53, id 63255, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xf028 (correct), seq 37649:39097, ack 125, win 9, options [nop,nop,TS val 3454170465 ecr 4294829042], length 1448
23:33:30.484622 IP (tos 0x0, ttl 53, id 63256, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [P.], cksum 0xea78 (correct), seq 39097:40545, ack 125, win 9, options [nop,nop,TS val 3454170465 ecr 4294829042], length 1448
23:33:30.484632 IP (tos 0x0, ttl 100, id 40948, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xdab1), ack 40545, win 3991, options [nop,nop,TS val 4294829107 ecr 3454170465], length 0
23:33:30.484744 IP (tos 0x0, ttl 53, id 63257, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xe4d8 (correct), seq 40545:41993, ack 125, win 9, options [nop,nop,TS val 3454170465 ecr 4294829042], length 1448
23:33:30.484868 IP (tos 0x0, ttl 53, id 63258, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xdf30 (correct), seq 41993:43441, ack 125, win 9, options [nop,nop,TS val 3454170465 ecr 4294829042], length 1448
23:33:30.484879 IP (tos 0x0, ttl 100, id 40949, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xcf61), ack 43441, win 3991, options [nop,nop,TS val 4294829107 ecr 3454170465], length 0
23:33:30.547393 IP (tos 0x0, ttl 53, id 63259, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xd93a (correct), seq 43441:44889, ack 125, win 9, options [nop,nop,TS val 3454170480 ecr 4294829105], length 1448
23:33:30.547515 IP (tos 0x0, ttl 53, id 63260, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xd392 (correct), seq 44889:46337, ack 125, win 9, options [nop,nop,TS val 3454170480 ecr 4294829105], length 1448
23:33:30.547528 IP (tos 0x0, ttl 100, id 40950, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xc2ff), ack 46337, win 4187, options [nop,nop,TS val 4294829170 ecr 3454170480], length 0
23:33:30.547639 IP (tos 0x0, ttl 53, id 63261, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [P.], cksum 0xcde0 (correct), seq 46337:47785, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829106], length 1448
23:33:30.547649 IP (tos 0x0, ttl 100, id 40951, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xbcb9), ack 47785, win 4344, options [nop,nop,TS val 4294829170 ecr 3454170481], length 0
23:33:30.547762 IP (tos 0x0, ttl 53, id 63262, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xc840 (correct), seq 47785:49233, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829106], length 1448
23:33:30.547886 IP (tos 0x0, ttl 53, id 63263, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xc298 (correct), seq 49233:50681, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829106], length 1448
23:33:30.547897 IP (tos 0x0, ttl 100, id 40952, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xb169), ack 50681, win 4344, options [nop,nop,TS val 4294829170 ecr 3454170481], length 0
23:33:30.548009 IP (tos 0x0, ttl 53, id 63264, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xbcf0 (correct), seq 50681:52129, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829106], length 1448
23:33:30.548132 IP (tos 0x0, ttl 53, id 63265, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xb748 (correct), seq 52129:53577, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829106], length 1448
23:33:30.548145 IP (tos 0x0, ttl 100, id 40953, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xa619), ack 53577, win 4344, options [nop,nop,TS val 4294829170 ecr 3454170481], length 0
23:33:30.548255 IP (tos 0x0, ttl 53, id 63266, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xb1a0 (correct), seq 53577:55025, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829106], length 1448
23:33:30.548378 IP (tos 0x0, ttl 53, id 63267, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xabf8 (correct), seq 55025:56473, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829106], length 1448
23:33:30.548390 IP (tos 0x0, ttl 100, id 40954, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x9ac8), ack 56473, win 4344, options [nop,nop,TS val 4294829171 ecr 3454170481], length 0
23:33:30.548501 IP (tos 0x0, ttl 53, id 63268, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xa650 (correct), seq 56473:57921, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829106], length 1448
23:33:30.548624 IP (tos 0x0, ttl 53, id 63269, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xa0a8 (correct), seq 57921:59369, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829106], length 1448
23:33:30.548637 IP (tos 0x0, ttl 100, id 40955, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x8f78), ack 59369, win 4344, options [nop,nop,TS val 4294829171 ecr 3454170481], length 0
23:33:30.548747 IP (tos 0x0, ttl 53, id 63270, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x9b00 (correct), seq 59369:60817, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829106], length 1448
23:33:30.548871 IP (tos 0x0, ttl 53, id 63271, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x9558 (correct), seq 60817:62265, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829106], length 1448
23:33:30.548881 IP (tos 0x0, ttl 100, id 40956, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x8428), ack 62265, win 4344, options [nop,nop,TS val 4294829171 ecr 3454170481], length 0
23:33:30.548993 IP (tos 0x0, ttl 53, id 63272, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x8fb0 (correct), seq 62265:63713, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829106], length 1448
23:33:30.549116 IP (tos 0x0, ttl 53, id 63273, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [P.], cksum 0x8a00 (correct), seq 63713:65161, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829106], length 1448
23:33:30.549128 IP (tos 0x0, ttl 100, id 40957, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x78d8), ack 65161, win 4344, options [nop,nop,TS val 4294829171 ecr 3454170481], length 0
23:33:30.549239 IP (tos 0x0, ttl 53, id 63274, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x8460 (correct), seq 65161:66609, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829106], length 1448
23:33:30.549362 IP (tos 0x0, ttl 53, id 63275, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x7eb8 (correct), seq 66609:68057, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829106], length 1448
23:33:30.549373 IP (tos 0x0, ttl 100, id 40958, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x6d87), ack 68057, win 4344, options [nop,nop,TS val 4294829172 ecr 3454170481], length 0
23:33:30.549485 IP (tos 0x0, ttl 53, id 63276, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x7910 (correct), seq 68057:69505, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829106], length 1448
23:33:30.549609 IP (tos 0x0, ttl 53, id 63277, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x7368 (correct), seq 69505:70953, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829106], length 1448
23:33:30.549621 IP (tos 0x0, ttl 100, id 40959, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x6237), ack 70953, win 4344, options [nop,nop,TS val 4294829172 ecr 3454170481], length 0
23:33:30.549738 IP (tos 0x0, ttl 53, id 63278, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x6dbf (correct), seq 70953:72401, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829107], length 1448
23:33:30.549862 IP (tos 0x0, ttl 53, id 63279, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x6817 (correct), seq 72401:73849, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829107], length 1448
23:33:30.549873 IP (tos 0x0, ttl 100, id 40960, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x56e7), ack 73849, win 4344, options [nop,nop,TS val 4294829172 ecr 3454170481], length 0
23:33:30.549984 IP (tos 0x0, ttl 53, id 63280, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x626f (correct), seq 73849:75297, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829107], length 1448
23:33:30.550107 IP (tos 0x0, ttl 53, id 63281, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x5cc7 (correct), seq 75297:76745, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829107], length 1448
23:33:30.550118 IP (tos 0x0, ttl 100, id 40961, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x4b97), ack 76745, win 4344, options [nop,nop,TS val 4294829172 ecr 3454170481], length 0
23:33:30.550231 IP (tos 0x0, ttl 53, id 63282, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x571f (correct), seq 76745:78193, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829107], length 1448
23:33:30.550353 IP (tos 0x0, ttl 53, id 63283, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x5177 (correct), seq 78193:79641, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829107], length 1448
23:33:30.550363 IP (tos 0x0, ttl 100, id 40962, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x4046), ack 79641, win 4344, options [nop,nop,TS val 4294829173 ecr 3454170481], length 0
23:33:30.550476 IP (tos 0x0, ttl 53, id 63284, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x4bcf (correct), seq 79641:81089, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829107], length 1448
23:33:30.550600 IP (tos 0x0, ttl 53, id 63285, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x4627 (correct), seq 81089:82537, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829107], length 1448
23:33:30.550610 IP (tos 0x0, ttl 100, id 40963, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x34f6), ack 82537, win 4344, options [nop,nop,TS val 4294829173 ecr 3454170481], length 0
23:33:30.550722 IP (tos 0x0, ttl 53, id 63286, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x407f (correct), seq 82537:83985, ack 125, win 9, options [nop,nop,TS val 3454170481 ecr 4294829107], length 1448
23:33:30.590287 IP (tos 0x0, ttl 100, id 40964, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x2f26), ack 83985, win 4344, options [nop,nop,TS val 4294829213 ecr 3454170481], length 0
23:33:30.611877 IP (tos 0x0, ttl 53, id 63287, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x3a88 (correct), seq 83985:85433, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829170], length 1448
23:33:30.612000 IP (tos 0x0, ttl 53, id 63288, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x34e0 (correct), seq 85433:86881, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829170], length 1448
23:33:30.612013 IP (tos 0x0, ttl 100, id 40965, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x23b1), ack 86881, win 4344, options [nop,nop,TS val 4294829234 ecr 3454170497], length 0
23:33:30.612123 IP (tos 0x0, ttl 53, id 63289, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x2f38 (correct), seq 86881:88329, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829170], length 1448
23:33:30.612247 IP (tos 0x0, ttl 53, id 63290, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x2990 (correct), seq 88329:89777, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829170], length 1448
23:33:30.612260 IP (tos 0x0, ttl 100, id 40966, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x1860), ack 89777, win 4344, options [nop,nop,TS val 4294829235 ecr 3454170497], length 0
23:33:30.612371 IP (tos 0x0, ttl 53, id 63291, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x23e8 (correct), seq 89777:91225, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829170], length 1448
23:33:30.612493 IP (tos 0x0, ttl 53, id 63292, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x1e40 (correct), seq 91225:92673, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829170], length 1448
23:33:30.612504 IP (tos 0x0, ttl 100, id 40967, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x0d10), ack 92673, win 4344, options [nop,nop,TS val 4294829235 ecr 3454170497], length 0
23:33:30.612616 IP (tos 0x0, ttl 53, id 63293, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x1898 (correct), seq 92673:94121, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829170], length 1448
23:33:30.612739 IP (tos 0x0, ttl 53, id 63294, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x12f0 (correct), seq 94121:95569, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829170], length 1448
23:33:30.612750 IP (tos 0x0, ttl 100, id 40968, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x01c0), ack 95569, win 4344, options [nop,nop,TS val 4294829235 ecr 3454170497], length 0
23:33:30.612862 IP (tos 0x0, ttl 53, id 63295, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x0d48 (correct), seq 95569:97017, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829170], length 1448
23:33:30.612985 IP (tos 0x0, ttl 53, id 63296, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [P.], cksum 0x0798 (correct), seq 97017:98465, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829170], length 1448
23:33:30.612996 IP (tos 0x0, ttl 100, id 40969, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xf66f), ack 98465, win 4344, options [nop,nop,TS val 4294829235 ecr 3454170497], length 0
23:33:30.613108 IP (tos 0x0, ttl 53, id 63297, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x01f8 (correct), seq 98465:99913, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829170], length 1448
23:33:30.613232 IP (tos 0x0, ttl 53, id 63298, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [P.], cksum 0xfc46 (correct), seq 99913:101361, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829171], length 1448
23:33:30.613242 IP (tos 0x0, ttl 100, id 40970, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xeb1e), ack 101361, win 4344, options [nop,nop,TS val 4294829236 ecr 3454170497], length 0
23:33:30.613354 IP (tos 0x0, ttl 53, id 63299, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xf6a6 (correct), seq 101361:102809, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829171], length 1448
23:33:30.613477 IP (tos 0x0, ttl 53, id 63300, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xf0fe (correct), seq 102809:104257, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829171], length 1448
23:33:30.613487 IP (tos 0x0, ttl 100, id 40971, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xdfce), ack 104257, win 4344, options [nop,nop,TS val 4294829236 ecr 3454170497], length 0
23:33:30.613600 IP (tos 0x0, ttl 53, id 63301, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xeb56 (correct), seq 104257:105705, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829171], length 1448
23:33:30.613723 IP (tos 0x0, ttl 53, id 63302, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xe5ae (correct), seq 105705:107153, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829171], length 1448
23:33:30.613735 IP (tos 0x0, ttl 100, id 40972, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xd3c9), ack 107153, win 4525, options [nop,nop,TS val 4294829236 ecr 3454170497], length 0
23:33:30.613846 IP (tos 0x0, ttl 53, id 63303, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xe006 (correct), seq 107153:108601, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829171], length 1448
23:33:30.613857 IP (tos 0x0, ttl 100, id 40973, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xcd6c), ack 108601, win 4706, options [nop,nop,TS val 4294829236 ecr 3454170497], length 0
23:33:30.613969 IP (tos 0x0, ttl 53, id 63304, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xda5e (correct), seq 108601:110049, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829171], length 1448
23:33:30.613981 IP (tos 0x0, ttl 100, id 40974, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xc70f), ack 110049, win 4887, options [nop,nop,TS val 4294829236 ecr 3454170497], length 0
23:33:30.614092 IP (tos 0x0, ttl 53, id 63305, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xd4b6 (correct), seq 110049:111497, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829171], length 1448
23:33:30.614104 IP (tos 0x0, ttl 100, id 40975, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xc0b2), ack 111497, win 5068, options [nop,nop,TS val 4294829236 ecr 3454170497], length 0
23:33:30.614216 IP (tos 0x0, ttl 53, id 63306, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xcf0e (correct), seq 111497:112945, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829171], length 1448
23:33:30.614225 IP (tos 0x0, ttl 100, id 40976, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xba54), ack 112945, win 5249, options [nop,nop,TS val 4294829237 ecr 3454170497], length 0
23:33:30.614343 IP (tos 0x0, ttl 53, id 63307, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xc966 (correct), seq 112945:114393, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829171], length 1448
23:33:30.614354 IP (tos 0x0, ttl 100, id 40977, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xb3f7), ack 114393, win 5430, options [nop,nop,TS val 4294829237 ecr 3454170497], length 0
23:33:30.614462 IP (tos 0x0, ttl 53, id 63308, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xc3be (correct), seq 114393:115841, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829171], length 1448
23:33:30.614474 IP (tos 0x0, ttl 100, id 40978, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xad9a), ack 115841, win 5611, options [nop,nop,TS val 4294829237 ecr 3454170497], length 0
23:33:30.614584 IP (tos 0x0, ttl 53, id 63309, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xbe16 (correct), seq 115841:117289, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829171], length 1448
23:33:30.614597 IP (tos 0x0, ttl 100, id 40979, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xa73d), ack 117289, win 5792, options [nop,nop,TS val 4294829237 ecr 3454170497], length 0
23:33:30.614707 IP (tos 0x0, ttl 53, id 63310, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xb86d (correct), seq 117289:118737, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829172], length 1448
23:33:30.614718 IP (tos 0x0, ttl 100, id 40980, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xa0e0), ack 118737, win 5973, options [nop,nop,TS val 4294829237 ecr 3454170497], length 0
23:33:30.614830 IP (tos 0x0, ttl 53, id 63311, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xb2c5 (correct), seq 118737:120185, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829172], length 1448
23:33:30.614841 IP (tos 0x0, ttl 100, id 40981, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x9a83), ack 120185, win 6154, options [nop,nop,TS val 4294829237 ecr 3454170497], length 0
23:33:30.614958 IP (tos 0x0, ttl 53, id 63312, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xad1d (correct), seq 120185:121633, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829172], length 1448
23:33:30.614970 IP (tos 0x0, ttl 100, id 40982, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x9426), ack 121633, win 6335, options [nop,nop,TS val 4294829237 ecr 3454170497], length 0
23:33:30.615077 IP (tos 0x0, ttl 53, id 63313, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xa775 (correct), seq 121633:123081, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829172], length 1448
23:33:30.615088 IP (tos 0x0, ttl 100, id 40983, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x8dc9), ack 123081, win 6516, options [nop,nop,TS val 4294829237 ecr 3454170497], length 0
23:33:30.615200 IP (tos 0x0, ttl 53, id 63314, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xa1cd (correct), seq 123081:124529, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829172], length 1448
23:33:30.615211 IP (tos 0x0, ttl 100, id 40984, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x876b), ack 124529, win 6697, options [nop,nop,TS val 4294829238 ecr 3454170497], length 0
23:33:30.615322 IP (tos 0x0, ttl 53, id 63315, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x9c25 (correct), seq 124529:125977, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829172], length 1448
23:33:30.615334 IP (tos 0x0, ttl 100, id 40985, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x810e), ack 125977, win 6878, options [nop,nop,TS val 4294829238 ecr 3454170497], length 0
23:33:30.615444 IP (tos 0x0, ttl 53, id 63316, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x967d (correct), seq 125977:127425, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829172], length 1448
23:33:30.615464 IP (tos 0x0, ttl 100, id 40986, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x7ab1), ack 127425, win 7059, options [nop,nop,TS val 4294829238 ecr 3454170497], length 0
23:33:30.615569 IP (tos 0x0, ttl 53, id 63317, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x90d5 (correct), seq 127425:128873, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829172], length 1448
23:33:30.615578 IP (tos 0x0, ttl 100, id 40987, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x7454), ack 128873, win 7240, options [nop,nop,TS val 4294829238 ecr 3454170497], length 0
23:33:30.615697 IP (tos 0x0, ttl 53, id 63318, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x8b2d (correct), seq 128873:130321, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829172], length 1448
23:33:30.615707 IP (tos 0x0, ttl 100, id 40988, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x6df7), ack 130321, win 7421, options [nop,nop,TS val 4294829238 ecr 3454170497], length 0
23:33:30.615815 IP (tos 0x0, ttl 53, id 63319, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x8585 (correct), seq 130321:131769, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829172], length 1448
23:33:30.615828 IP (tos 0x0, ttl 100, id 40989, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x679a), ack 131769, win 7602, options [nop,nop,TS val 4294829238 ecr 3454170497], length 0
23:33:30.615938 IP (tos 0x0, ttl 53, id 63320, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x7fdd (correct), seq 131769:133217, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829172], length 1448
23:33:30.616061 IP (tos 0x0, ttl 53, id 63321, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x7a35 (correct), seq 133217:134665, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829172], length 1448
23:33:30.616073 IP (tos 0x0, ttl 100, id 40990, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x5c4a), ack 134665, win 7602, options [nop,nop,TS val 4294829238 ecr 3454170497], length 0
23:33:30.616184 IP (tos 0x0, ttl 53, id 63322, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x748c (correct), seq 134665:136113, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829173], length 1448
23:33:30.616306 IP (tos 0x0, ttl 53, id 63323, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [P.], cksum 0x6edc (correct), seq 136113:137561, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829173], length 1448
23:33:30.616317 IP (tos 0x0, ttl 100, id 40991, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x50f9), ack 137561, win 7602, options [nop,nop,TS val 4294829239 ecr 3454170497], length 0
23:33:30.616429 IP (tos 0x0, ttl 53, id 63324, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x693c (correct), seq 137561:139009, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829173], length 1448
23:33:30.616553 IP (tos 0x0, ttl 53, id 63325, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x6394 (correct), seq 139009:140457, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829173], length 1448
23:33:30.616564 IP (tos 0x0, ttl 100, id 40992, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x45a9), ack 140457, win 7602, options [nop,nop,TS val 4294829239 ecr 3454170497], length 0
23:33:30.616676 IP (tos 0x0, ttl 53, id 63326, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x5dec (correct), seq 140457:141905, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829173], length 1448
23:33:30.616800 IP (tos 0x0, ttl 53, id 63327, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x5844 (correct), seq 141905:143353, ack 125, win 9, options [nop,nop,TS val 3454170497 ecr 4294829173], length 1448
23:33:30.616812 IP (tos 0x0, ttl 100, id 40993, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x3a59), ack 143353, win 7602, options [nop,nop,TS val 4294829239 ecr 3454170497], length 0
23:33:30.654648 IP (tos 0x0, ttl 53, id 63328, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x526a (correct), seq 143353:144801, ack 125, win 9, options [nop,nop,TS val 3454170507 ecr 4294829213], length 1448
23:33:30.654771 IP (tos 0x0, ttl 53, id 63329, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x4cc2 (correct), seq 144801:146249, ack 125, win 9, options [nop,nop,TS val 3454170507 ecr 4294829213], length 1448
23:33:30.654784 IP (tos 0x0, ttl 100, id 40994, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x2ed9), ack 146249, win 7602, options [nop,nop,TS val 4294829277 ecr 3454170507], length 0
23:33:30.676418 IP (tos 0x0, ttl 53, id 63330, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x46ff (correct), seq 146249:147697, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829234], length 1448
23:33:30.676541 IP (tos 0x0, ttl 53, id 63331, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x4157 (correct), seq 147697:149145, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829234], length 1448
23:33:30.676554 IP (tos 0x0, ttl 100, id 40995, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x236d), ack 149145, win 7602, options [nop,nop,TS val 4294829299 ecr 3454170513], length 0
23:33:30.676663 IP (tos 0x0, ttl 53, id 63332, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x3baf (correct), seq 149145:150593, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829234], length 1448
23:33:30.676787 IP (tos 0x0, ttl 53, id 63333, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [P.], cksum 0x35fe (correct), seq 150593:152041, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829235], length 1448
23:33:30.676799 IP (tos 0x0, ttl 100, id 40996, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x181d), ack 152041, win 7602, options [nop,nop,TS val 4294829299 ecr 3454170513], length 0
23:33:30.676911 IP (tos 0x0, ttl 53, id 63334, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x305e (correct), seq 152041:153489, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829235], length 1448
23:33:30.677034 IP (tos 0x0, ttl 53, id 63335, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x2ab6 (correct), seq 153489:154937, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829235], length 1448
23:33:30.677044 IP (tos 0x0, ttl 100, id 40997, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x0ccd), ack 154937, win 7602, options [nop,nop,TS val 4294829299 ecr 3454170513], length 0
23:33:30.677156 IP (tos 0x0, ttl 53, id 63336, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x250e (correct), seq 154937:156385, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829235], length 1448
23:33:30.677280 IP (tos 0x0, ttl 53, id 63337, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x1f66 (correct), seq 156385:157833, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829235], length 1448
23:33:30.677290 IP (tos 0x0, ttl 100, id 40998, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x017c), ack 157833, win 7602, options [nop,nop,TS val 4294829300 ecr 3454170513], length 0
23:33:30.677402 IP (tos 0x0, ttl 53, id 63338, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x19be (correct), seq 157833:159281, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829235], length 1448
23:33:30.677525 IP (tos 0x0, ttl 53, id 63339, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x1416 (correct), seq 159281:160729, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829235], length 1448
23:33:30.677537 IP (tos 0x0, ttl 100, id 40999, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xf62b), ack 160729, win 7602, options [nop,nop,TS val 4294829300 ecr 3454170513], length 0
23:33:30.677649 IP (tos 0x0, ttl 53, id 63340, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x0e6e (correct), seq 160729:162177, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829235], length 1448
23:33:30.677771 IP (tos 0x0, ttl 53, id 63341, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x08c6 (correct), seq 162177:163625, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829235], length 1448
23:33:30.677783 IP (tos 0x0, ttl 100, id 41000, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xeadb), ack 163625, win 7602, options [nop,nop,TS val 4294829300 ecr 3454170513], length 0
23:33:30.677895 IP (tos 0x0, ttl 53, id 63342, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x031e (correct), seq 163625:165073, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829235], length 1448
23:33:30.678018 IP (tos 0x0, ttl 53, id 63343, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xfd75 (correct), seq 165073:166521, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829235], length 1448
23:33:30.678028 IP (tos 0x0, ttl 100, id 41001, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xdf8b), ack 166521, win 7602, options [nop,nop,TS val 4294829300 ecr 3454170513], length 0
23:33:30.678140 IP (tos 0x0, ttl 53, id 63344, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xf7cd (correct), seq 166521:167969, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829235], length 1448
23:33:30.678278 IP (tos 0x0, ttl 53, id 63345, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xf224 (correct), seq 167969:169417, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829236], length 1448
23:33:30.678290 IP (tos 0x0, ttl 100, id 41002, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xd385), ack 169417, win 7783, options [nop,nop,TS val 4294829301 ecr 3454170513], length 0
23:33:30.678400 IP (tos 0x0, ttl 53, id 63346, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xec7c (correct), seq 169417:170865, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829236], length 1448
23:33:30.678523 IP (tos 0x0, ttl 53, id 63347, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xe6d4 (correct), seq 170865:172313, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829236], length 1448
23:33:30.678533 IP (tos 0x0, ttl 100, id 41003, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xc835), ack 172313, win 7783, options [nop,nop,TS val 4294829301 ecr 3454170513], length 0
23:33:30.678646 IP (tos 0x0, ttl 53, id 63348, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xe12c (correct), seq 172313:173761, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829236], length 1448
23:33:30.678770 IP (tos 0x0, ttl 53, id 63349, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xdb84 (correct), seq 173761:175209, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829236], length 1448
23:33:30.678782 IP (tos 0x0, ttl 100, id 41004, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xbce5), ack 175209, win 7783, options [nop,nop,TS val 4294829301 ecr 3454170513], length 0
23:33:30.678893 IP (tos 0x0, ttl 53, id 63350, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xd5dc (correct), seq 175209:176657, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829236], length 1448
23:33:30.679016 IP (tos 0x0, ttl 53, id 63351, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xd034 (correct), seq 176657:178105, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829236], length 1448
23:33:30.679026 IP (tos 0x0, ttl 100, id 41005, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xb195), ack 178105, win 7783, options [nop,nop,TS val 4294829301 ecr 3454170513], length 0
23:33:30.679138 IP (tos 0x0, ttl 53, id 63352, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xca8c (correct), seq 178105:179553, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829236], length 1448
23:33:30.679262 IP (tos 0x0, ttl 53, id 63353, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xc4e4 (correct), seq 179553:181001, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829236], length 1448
23:33:30.679273 IP (tos 0x0, ttl 100, id 41006, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xa644), ack 181001, win 7783, options [nop,nop,TS val 4294829302 ecr 3454170513], length 0
23:33:30.679386 IP (tos 0x0, ttl 53, id 63354, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xbf3c (correct), seq 181001:182449, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829236], length 1448
23:33:30.679507 IP (tos 0x0, ttl 53, id 63355, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xb994 (correct), seq 182449:183897, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829236], length 1448
23:33:30.679518 IP (tos 0x0, ttl 100, id 41007, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x9af4), ack 183897, win 7783, options [nop,nop,TS val 4294829302 ecr 3454170513], length 0
23:33:30.679631 IP (tos 0x0, ttl 53, id 63356, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xb3ec (correct), seq 183897:185345, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829236], length 1448
23:33:30.679754 IP (tos 0x0, ttl 53, id 63357, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xae44 (correct), seq 185345:186793, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829236], length 1448
23:33:30.679764 IP (tos 0x0, ttl 100, id 41008, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x8fa4), ack 186793, win 7783, options [nop,nop,TS val 4294829302 ecr 3454170513], length 0
23:33:30.679877 IP (tos 0x0, ttl 53, id 63358, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [P.], cksum 0xa894 (correct), seq 186793:188241, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829236], length 1448
23:33:30.680000 IP (tos 0x0, ttl 53, id 63359, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xa2f4 (correct), seq 188241:189689, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829236], length 1448
23:33:30.680011 IP (tos 0x0, ttl 100, id 41009, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x8454), ack 189689, win 7783, options [nop,nop,TS val 4294829302 ecr 3454170513], length 0
23:33:30.680122 IP (tos 0x0, ttl 53, id 63360, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x9d4b (correct), seq 189689:191137, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829237], length 1448
23:33:30.680246 IP (tos 0x0, ttl 53, id 63361, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x97a3 (correct), seq 191137:192585, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829237], length 1448
23:33:30.680258 IP (tos 0x0, ttl 100, id 41010, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x7903), ack 192585, win 7783, options [nop,nop,TS val 4294829303 ecr 3454170513], length 0
23:33:30.680369 IP (tos 0x0, ttl 53, id 63362, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x91fb (correct), seq 192585:194033, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829237], length 1448
23:33:30.680492 IP (tos 0x0, ttl 53, id 63363, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x8c53 (correct), seq 194033:195481, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829237], length 1448
23:33:30.680504 IP (tos 0x0, ttl 100, id 41011, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x6db3), ack 195481, win 7783, options [nop,nop,TS val 4294829303 ecr 3454170513], length 0
23:33:30.680616 IP (tos 0x0, ttl 53, id 63364, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x86ab (correct), seq 195481:196929, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829237], length 1448
23:33:30.680738 IP (tos 0x0, ttl 53, id 63365, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x8103 (correct), seq 196929:198377, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829237], length 1448
23:33:30.680750 IP (tos 0x0, ttl 100, id 41012, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x6263), ack 198377, win 7783, options [nop,nop,TS val 4294829303 ecr 3454170513], length 0
23:33:30.680861 IP (tos 0x0, ttl 53, id 63366, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x7b5b (correct), seq 198377:199825, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829237], length 1448
23:33:30.680985 IP (tos 0x0, ttl 53, id 63367, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x75b3 (correct), seq 199825:201273, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829237], length 1448
23:33:30.680997 IP (tos 0x0, ttl 100, id 41013, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x5713), ack 201273, win 7783, options [nop,nop,TS val 4294829303 ecr 3454170513], length 0
23:33:30.681107 IP (tos 0x0, ttl 53, id 63368, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x700b (correct), seq 201273:202721, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829237], length 1448
23:33:30.681230 IP (tos 0x0, ttl 53, id 63369, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x6a63 (correct), seq 202721:204169, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829237], length 1448
23:33:30.681240 IP (tos 0x0, ttl 100, id 41014, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x4bc2), ack 204169, win 7783, options [nop,nop,TS val 4294829304 ecr 3454170513], length 0
23:33:30.681354 IP (tos 0x0, ttl 53, id 63370, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x64bb (correct), seq 204169:205617, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829237], length 1448
23:33:30.681476 IP (tos 0x0, ttl 53, id 63371, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x5f13 (correct), seq 205617:207065, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829237], length 1448
23:33:30.681488 IP (tos 0x0, ttl 100, id 41015, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x4072), ack 207065, win 7783, options [nop,nop,TS val 4294829304 ecr 3454170513], length 0
23:33:30.681600 IP (tos 0x0, ttl 53, id 63372, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x596b (correct), seq 207065:208513, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829237], length 1448
23:33:30.681722 IP (tos 0x0, ttl 53, id 63373, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x53c3 (correct), seq 208513:209961, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829237], length 1448
23:33:30.681732 IP (tos 0x0, ttl 100, id 41016, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x3522), ack 209961, win 7783, options [nop,nop,TS val 4294829304 ecr 3454170513], length 0
23:33:30.681845 IP (tos 0x0, ttl 53, id 63374, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x4e1b (correct), seq 209961:211409, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829237], length 1448
23:33:30.681968 IP (tos 0x0, ttl 53, id 63375, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x4873 (correct), seq 211409:212857, ack 125, win 9, options [nop,nop,TS val 3454170513 ecr 4294829237], length 1448
23:33:30.681981 IP (tos 0x0, ttl 100, id 41017, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x29d2), ack 212857, win 7783, options [nop,nop,TS val 4294829304 ecr 3454170513], length 0
23:33:30.682091 IP (tos 0x0, ttl 53, id 63376, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x42c9 (correct), seq 212857:214305, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829238], length 1448
23:33:30.682215 IP (tos 0x0, ttl 53, id 63377, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x3d21 (correct), seq 214305:215753, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829238], length 1448
23:33:30.682226 IP (tos 0x0, ttl 100, id 41018, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x1e80), ack 215753, win 7783, options [nop,nop,TS val 4294829305 ecr 3454170514], length 0
23:33:30.682338 IP (tos 0x0, ttl 53, id 63378, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x3779 (correct), seq 215753:217201, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829238], length 1448
23:33:30.682460 IP (tos 0x0, ttl 53, id 63379, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x31d1 (correct), seq 217201:218649, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829238], length 1448
23:33:30.682472 IP (tos 0x0, ttl 100, id 41019, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x1330), ack 218649, win 7783, options [nop,nop,TS val 4294829305 ecr 3454170514], length 0
23:33:30.682583 IP (tos 0x0, ttl 53, id 63380, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [P.], cksum 0x2c21 (correct), seq 218649:220097, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829238], length 1448
23:33:30.682706 IP (tos 0x0, ttl 53, id 63381, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x2681 (correct), seq 220097:221545, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829238], length 1448
23:33:30.682718 IP (tos 0x0, ttl 100, id 41020, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x07e0), ack 221545, win 7783, options [nop,nop,TS val 4294829305 ecr 3454170514], length 0
23:33:30.682829 IP (tos 0x0, ttl 53, id 63382, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x20d9 (correct), seq 221545:222993, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829238], length 1448
23:33:30.682953 IP (tos 0x0, ttl 53, id 63383, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x1b31 (correct), seq 222993:224441, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829238], length 1448
23:33:30.682963 IP (tos 0x0, ttl 100, id 41021, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xfc8f), ack 224441, win 7783, options [nop,nop,TS val 4294829305 ecr 3454170514], length 0
23:33:30.683076 IP (tos 0x0, ttl 53, id 63384, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x1589 (correct), seq 224441:225889, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829238], length 1448
23:33:30.683199 IP (tos 0x0, ttl 53, id 63385, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x0fe1 (correct), seq 225889:227337, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829238], length 1448
23:33:30.683209 IP (tos 0x0, ttl 100, id 41022, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xf13e), ack 227337, win 7783, options [nop,nop,TS val 4294829306 ecr 3454170514], length 0
23:33:30.683323 IP (tos 0x0, ttl 53, id 63386, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x0a39 (correct), seq 227337:228785, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829238], length 1448
23:33:30.683445 IP (tos 0x0, ttl 53, id 63387, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x0491 (correct), seq 228785:230233, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829238], length 1448
23:33:30.683455 IP (tos 0x0, ttl 100, id 41023, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xe5ee), ack 230233, win 7783, options [nop,nop,TS val 4294829306 ecr 3454170514], length 0
23:33:30.683568 IP (tos 0x0, ttl 53, id 63388, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xfee8 (correct), seq 230233:231681, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829238], length 1448
23:33:30.683690 IP (tos 0x0, ttl 53, id 63389, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xf940 (correct), seq 231681:233129, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829238], length 1448
23:33:30.683701 IP (tos 0x0, ttl 100, id 41024, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xda9e), ack 233129, win 7783, options [nop,nop,TS val 4294829306 ecr 3454170514], length 0
23:33:30.683814 IP (tos 0x0, ttl 53, id 63390, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xf398 (correct), seq 233129:234577, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829238], length 1448
23:33:30.683938 IP (tos 0x0, ttl 53, id 63391, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xedef (correct), seq 234577:236025, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829239], length 1448
23:33:30.683948 IP (tos 0x0, ttl 100, id 41025, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xcf4e), ack 236025, win 7783, options [nop,nop,TS val 4294829306 ecr 3454170514], length 0
23:33:30.684060 IP (tos 0x0, ttl 53, id 63392, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xe847 (correct), seq 236025:237473, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829239], length 1448
23:33:30.684183 IP (tos 0x0, ttl 53, id 63393, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xe29f (correct), seq 237473:238921, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829239], length 1448
23:33:30.684195 IP (tos 0x0, ttl 100, id 41026, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xc3fd), ack 238921, win 7783, options [nop,nop,TS val 4294829307 ecr 3454170514], length 0
23:33:30.684306 IP (tos 0x0, ttl 53, id 63394, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xdcf7 (correct), seq 238921:240369, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829239], length 1448
23:33:30.684429 IP (tos 0x0, ttl 53, id 63395, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xd74f (correct), seq 240369:241817, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829239], length 1448
23:33:30.684441 IP (tos 0x0, ttl 100, id 41027, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xb8ad), ack 241817, win 7783, options [nop,nop,TS val 4294829307 ecr 3454170514], length 0
23:33:30.684552 IP (tos 0x0, ttl 53, id 63396, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xd1a7 (correct), seq 241817:243265, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829239], length 1448
23:33:30.684676 IP (tos 0x0, ttl 53, id 63397, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xcbff (correct), seq 243265:244713, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829239], length 1448
23:33:30.684688 IP (tos 0x0, ttl 100, id 41028, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xad5d), ack 244713, win 7783, options [nop,nop,TS val 4294829307 ecr 3454170514], length 0
23:33:30.684798 IP (tos 0x0, ttl 53, id 63398, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xc657 (correct), seq 244713:246161, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829239], length 1448
23:33:30.684922 IP (tos 0x0, ttl 53, id 63399, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xc0af (correct), seq 246161:247609, ack 125, win 9, options [nop,nop,TS val 3454170514 ecr 4294829239], length 1448
23:33:30.684934 IP (tos 0x0, ttl 100, id 41029, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xa20d), ack 247609, win 7783, options [nop,nop,TS val 4294829307 ecr 3454170514], length 0
23:33:30.719125 IP (tos 0x0, ttl 53, id 63400, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xbad8 (correct), seq 247609:249057, ack 125, win 9, options [nop,nop,TS val 3454170523 ecr 4294829277], length 1448
23:33:30.719249 IP (tos 0x0, ttl 53, id 63401, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xb530 (correct), seq 249057:250505, ack 125, win 9, options [nop,nop,TS val 3454170523 ecr 4294829277], length 1448
23:33:30.719260 IP (tos 0x0, ttl 100, id 41030, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x9691), ack 250505, win 7783, options [nop,nop,TS val 4294829342 ecr 3454170523], length 0
23:33:30.719371 IP (tos 0x0, ttl 53, id 63402, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xaf88 (correct), seq 250505:251953, ack 125, win 9, options [nop,nop,TS val 3454170523 ecr 4294829277], length 1448
23:33:30.740920 IP (tos 0x0, ttl 53, id 63403, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xa9c4 (correct), seq 251953:253401, ack 125, win 9, options [nop,nop,TS val 3454170529 ecr 4294829299], length 1448
23:33:30.740931 IP (tos 0x0, ttl 100, id 41031, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x8b2c), ack 253401, win 7783, options [nop,nop,TS val 4294829363 ecr 3454170523], length 0
23:33:30.741043 IP (tos 0x0, ttl 53, id 63404, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xa41c (correct), seq 253401:254849, ack 125, win 9, options [nop,nop,TS val 3454170529 ecr 4294829299], length 1448
23:33:30.741171 IP (tos 0x0, ttl 53, id 63405, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x9e74 (correct), seq 254849:256297, ack 125, win 9, options [nop,nop,TS val 3454170529 ecr 4294829299], length 1448
23:33:30.741184 IP (tos 0x0, ttl 100, id 41032, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x7fd5), ack 256297, win 7783, options [nop,nop,TS val 4294829364 ecr 3454170529], length 0
23:33:30.741290 IP (tos 0x0, ttl 53, id 63406, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x98cc (correct), seq 256297:257745, ack 125, win 9, options [nop,nop,TS val 3454170529 ecr 4294829299], length 1448
23:33:30.741412 IP (tos 0x0, ttl 53, id 63407, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x9324 (correct), seq 257745:259193, ack 125, win 9, options [nop,nop,TS val 3454170529 ecr 4294829299], length 1448
23:33:30.741425 IP (tos 0x0, ttl 100, id 41033, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x7485), ack 259193, win 7783, options [nop,nop,TS val 4294829364 ecr 3454170529], length 0
23:33:30.741535 IP (tos 0x0, ttl 53, id 63408, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x8d7c (correct), seq 259193:260641, ack 125, win 9, options [nop,nop,TS val 3454170529 ecr 4294829299], length 1448
23:33:30.741658 IP (tos 0x0, ttl 53, id 63409, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x87d4 (correct), seq 260641:262089, ack 125, win 9, options [nop,nop,TS val 3454170529 ecr 4294829299], length 1448
23:33:30.741669 IP (tos 0x0, ttl 100, id 41034, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x6935), ack 262089, win 7783, options [nop,nop,TS val 4294829364 ecr 3454170529], length 0
23:33:30.741782 IP (tos 0x0, ttl 53, id 63410, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x822c (correct), seq 262089:263537, ack 125, win 9, options [nop,nop,TS val 3454170529 ecr 4294829299], length 1448
23:33:30.741904 IP (tos 0x0, ttl 53, id 63411, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x7c84 (correct), seq 263537:264985, ack 125, win 9, options [nop,nop,TS val 3454170529 ecr 4294829299], length 1448
23:33:30.741916 IP (tos 0x0, ttl 100, id 41035, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x5de5), ack 264985, win 7783, options [nop,nop,TS val 4294829364 ecr 3454170529], length 0
300 packets captured
300 packets received by filter
0 packets dropped by kernel
- tcpdump of _last_ 300 or so packets, to see the steady-state dynamics
with receiver window and packet inter-arrival times
tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes
23:36:59.155010 IP (tos 0x0, ttl 100, id 18644, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x51fc), ack 8424464, win 21177, options [nop,nop,TS val 70481 ecr 3454222632], length 0
23:36:59.155294 IP (tos 0x0, ttl 53, id 18141, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x9f43 (correct), seq 8424464:8425912, ack 1, win 9, options [nop,nop,TS val 3454222633 ecr 70417], length 1448
23:36:59.155417 IP (tos 0x0, ttl 53, id 18142, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x999b (correct), seq 8425912:8427360, ack 1, win 9, options [nop,nop,TS val 3454222633 ecr 70417], length 1448
23:36:59.155427 IP (tos 0x0, ttl 100, id 18645, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x46aa), ack 8427360, win 21177, options [nop,nop,TS val 70482 ecr 3454222633], length 0
23:36:59.156459 IP (tos 0x0, ttl 53, id 18143, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x93f2 (correct), seq 8427360:8428808, ack 1, win 9, options [nop,nop,TS val 3454222633 ecr 70418], length 1448
23:36:59.156581 IP (tos 0x0, ttl 53, id 18144, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x8e4a (correct), seq 8428808:8430256, ack 1, win 9, options [nop,nop,TS val 3454222633 ecr 70418], length 1448
23:36:59.156591 IP (tos 0x0, ttl 100, id 18646, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x3b59), ack 8430256, win 21177, options [nop,nop,TS val 70483 ecr 3454222633], length 0
23:36:59.157355 IP (tos 0x0, ttl 53, id 18145, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x88a1 (correct), seq 8430256:8431704, ack 1, win 9, options [nop,nop,TS val 3454222633 ecr 70419], length 1448
23:36:59.157478 IP (tos 0x0, ttl 53, id 18146, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x82f9 (correct), seq 8431704:8433152, ack 1, win 9, options [nop,nop,TS val 3454222633 ecr 70419], length 1448
23:36:59.157489 IP (tos 0x0, ttl 100, id 18647, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x3008), ack 8433152, win 21177, options [nop,nop,TS val 70484 ecr 3454222633], length 0
23:36:59.157600 IP (tos 0x0, ttl 53, id 18147, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x7d50 (correct), seq 8433152:8434600, ack 1, win 9, options [nop,nop,TS val 3454222633 ecr 70420], length 1448
23:36:59.157724 IP (tos 0x0, ttl 53, id 18148, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x77a8 (correct), seq 8434600:8436048, ack 1, win 9, options [nop,nop,TS val 3454222633 ecr 70420], length 1448
23:36:59.157735 IP (tos 0x0, ttl 100, id 18648, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x24b8), ack 8436048, win 21177, options [nop,nop,TS val 70484 ecr 3454222633], length 0
23:36:59.157915 IP (tos 0x0, ttl 53, id 18149, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x7200 (correct), seq 8436048:8437496, ack 1, win 9, options [nop,nop,TS val 3454222633 ecr 70420], length 1448
23:36:59.158038 IP (tos 0x0, ttl 53, id 18150, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x6c58 (correct), seq 8437496:8438944, ack 1, win 9, options [nop,nop,TS val 3454222633 ecr 70420], length 1448
23:36:59.158048 IP (tos 0x0, ttl 100, id 18649, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x1968), ack 8438944, win 21177, options [nop,nop,TS val 70484 ecr 3454222633], length 0
23:36:59.158281 IP (tos 0x0, ttl 53, id 18151, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x66b0 (correct), seq 8438944:8440392, ack 1, win 9, options [nop,nop,TS val 3454222633 ecr 70420], length 1448
23:36:59.158404 IP (tos 0x0, ttl 53, id 18152, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x6108 (correct), seq 8440392:8441840, ack 1, win 9, options [nop,nop,TS val 3454222633 ecr 70420], length 1448
23:36:59.158414 IP (tos 0x0, ttl 100, id 18650, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x0e17), ack 8441840, win 21177, options [nop,nop,TS val 70485 ecr 3454222633], length 0
23:36:59.158842 IP (tos 0x0, ttl 53, id 18153, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x5b5f (correct), seq 8441840:8443288, ack 1, win 9, options [nop,nop,TS val 3454222633 ecr 70421], length 1448
23:36:59.158966 IP (tos 0x0, ttl 53, id 18154, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x55b7 (correct), seq 8443288:8444736, ack 1, win 9, options [nop,nop,TS val 3454222633 ecr 70421], length 1448
23:36:59.158976 IP (tos 0x0, ttl 100, id 18651, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x02c7), ack 8444736, win 21177, options [nop,nop,TS val 70485 ecr 3454222633], length 0
23:36:59.159757 IP (tos 0x0, ttl 53, id 18155, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x500d (correct), seq 8444736:8446184, ack 1, win 9, options [nop,nop,TS val 3454222634 ecr 70422], length 1448
23:36:59.159880 IP (tos 0x0, ttl 53, id 18156, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x4a65 (correct), seq 8446184:8447632, ack 1, win 9, options [nop,nop,TS val 3454222634 ecr 70422], length 1448
23:36:59.159890 IP (tos 0x0, ttl 100, id 18652, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xf774), ack 8447632, win 21177, options [nop,nop,TS val 70486 ecr 3454222634], length 0
23:36:59.160686 IP (tos 0x0, ttl 53, id 18157, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x44bc (correct), seq 8447632:8449080, ack 1, win 9, options [nop,nop,TS val 3454222634 ecr 70423], length 1448
23:36:59.160808 IP (tos 0x0, ttl 53, id 18158, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x3f14 (correct), seq 8449080:8450528, ack 1, win 9, options [nop,nop,TS val 3454222634 ecr 70423], length 1448
23:36:59.160820 IP (tos 0x0, ttl 100, id 18653, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xec23), ack 8450528, win 21177, options [nop,nop,TS val 70487 ecr 3454222634], length 0
23:36:59.163216 IP (tos 0x0, ttl 53, id 18159, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x3969 (correct), seq 8450528:8451976, ack 1, win 9, options [nop,nop,TS val 3454222635 ecr 70425], length 1448
23:36:59.163338 IP (tos 0x0, ttl 53, id 18160, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x33c1 (correct), seq 8451976:8453424, ack 1, win 9, options [nop,nop,TS val 3454222635 ecr 70425], length 1448
23:36:59.163350 IP (tos 0x0, ttl 100, id 18654, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xe0cf), ack 8453424, win 21177, options [nop,nop,TS val 70490 ecr 3454222635], length 0
23:36:59.163542 IP (tos 0x0, ttl 53, id 18161, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x2e18 (correct), seq 8453424:8454872, ack 1, win 9, options [nop,nop,TS val 3454222635 ecr 70426], length 1448
23:36:59.163665 IP (tos 0x0, ttl 53, id 18162, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x2870 (correct), seq 8454872:8456320, ack 1, win 9, options [nop,nop,TS val 3454222635 ecr 70426], length 1448
23:36:59.163677 IP (tos 0x0, ttl 100, id 18655, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xd57f), ack 8456320, win 21177, options [nop,nop,TS val 70490 ecr 3454222635], length 0
23:36:59.166044 IP (tos 0x0, ttl 53, id 18163, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x22c6 (correct), seq 8456320:8457768, ack 1, win 9, options [nop,nop,TS val 3454222635 ecr 70428], length 1448
23:36:59.166167 IP (tos 0x0, ttl 53, id 18164, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x1d1e (correct), seq 8457768:8459216, ack 1, win 9, options [nop,nop,TS val 3454222635 ecr 70428], length 1448
23:36:59.166180 IP (tos 0x0, ttl 100, id 18656, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xca2c), ack 8459216, win 21177, options [nop,nop,TS val 70493 ecr 3454222635], length 0
23:36:59.166291 IP (tos 0x0, ttl 53, id 18165, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x1776 (correct), seq 8459216:8460664, ack 1, win 9, options [nop,nop,TS val 3454222635 ecr 70428], length 1448
23:36:59.166413 IP (tos 0x0, ttl 53, id 18166, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x11ce (correct), seq 8460664:8462112, ack 1, win 9, options [nop,nop,TS val 3454222635 ecr 70428], length 1448
23:36:59.166425 IP (tos 0x0, ttl 100, id 18657, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xbedc), ack 8462112, win 21177, options [nop,nop,TS val 70493 ecr 3454222635], length 0
23:36:59.167035 IP (tos 0x0, ttl 53, id 18167, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x0c24 (correct), seq 8462112:8463560, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70429], length 1448
23:36:59.167158 IP (tos 0x0, ttl 53, id 18168, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x067c (correct), seq 8463560:8465008, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70429], length 1448
23:36:59.167170 IP (tos 0x0, ttl 100, id 18658, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xb38a), ack 8465008, win 21177, options [nop,nop,TS val 70494 ecr 3454222636], length 0
23:36:59.167521 IP (tos 0x0, ttl 53, id 18169, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x00d4 (correct), seq 8465008:8466456, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70429], length 1448
23:36:59.167644 IP (tos 0x0, ttl 53, id 18170, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xfb2b (correct), seq 8466456:8467904, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70429], length 1448
23:36:59.167656 IP (tos 0x0, ttl 100, id 18659, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xa83a), ack 8467904, win 21177, options [nop,nop,TS val 70494 ecr 3454222636], length 0
23:36:59.168562 IP (tos 0x0, ttl 53, id 18171, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xf581 (correct), seq 8467904:8469352, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70431], length 1448
23:36:59.168685 IP (tos 0x0, ttl 53, id 18172, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xefd9 (correct), seq 8469352:8470800, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70431], length 1448
23:36:59.168697 IP (tos 0x0, ttl 100, id 18660, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x9ce9), ack 8470800, win 21177, options [nop,nop,TS val 70495 ecr 3454222636], length 0
23:36:59.168913 IP (tos 0x0, ttl 53, id 18173, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xea31 (correct), seq 8470800:8472248, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70431], length 1448
23:36:59.169035 IP (tos 0x0, ttl 53, id 18174, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xe489 (correct), seq 8472248:8473696, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70431], length 1448
23:36:59.169046 IP (tos 0x0, ttl 100, id 18661, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x9199), ack 8473696, win 21177, options [nop,nop,TS val 70495 ecr 3454222636], length 0
23:36:59.169263 IP (tos 0x0, ttl 53, id 18175, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xdee1 (correct), seq 8473696:8475144, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70431], length 1448
23:36:59.169382 IP (tos 0x0, ttl 53, id 18176, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xd939 (correct), seq 8475144:8476592, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70431], length 1448
23:36:59.169393 IP (tos 0x0, ttl 100, id 18662, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x8648), ack 8476592, win 21177, options [nop,nop,TS val 70496 ecr 3454222636], length 0
23:36:59.169505 IP (tos 0x0, ttl 53, id 18177, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xd391 (correct), seq 8476592:8478040, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70431], length 1448
23:36:59.169628 IP (tos 0x0, ttl 53, id 18178, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xcde9 (correct), seq 8478040:8479488, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70431], length 1448
23:36:59.169638 IP (tos 0x0, ttl 100, id 18663, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x7af8), ack 8479488, win 21177, options [nop,nop,TS val 70496 ecr 3454222636], length 0
23:36:59.169976 IP (tos 0x0, ttl 53, id 18179, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xc840 (correct), seq 8479488:8480936, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70432], length 1448
23:36:59.170100 IP (tos 0x0, ttl 53, id 18180, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xc298 (correct), seq 8480936:8482384, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70432], length 1448
23:36:59.170110 IP (tos 0x0, ttl 100, id 18664, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x6fa8), ack 8482384, win 21177, options [nop,nop,TS val 70496 ecr 3454222636], length 0
23:36:59.170254 IP (tos 0x0, ttl 53, id 18181, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xbcf0 (correct), seq 8482384:8483832, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70432], length 1448
23:36:59.170370 IP (tos 0x0, ttl 53, id 18182, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xb748 (correct), seq 8483832:8485280, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70432], length 1448
23:36:59.170380 IP (tos 0x0, ttl 100, id 18665, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x6457), ack 8485280, win 21177, options [nop,nop,TS val 70497 ecr 3454222636], length 0
23:36:59.170522 IP (tos 0x0, ttl 53, id 18183, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xb19f (correct), seq 8485280:8486728, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70433], length 1448
23:36:59.170645 IP (tos 0x0, ttl 53, id 18184, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xabf7 (correct), seq 8486728:8488176, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70433], length 1448
23:36:59.170655 IP (tos 0x0, ttl 100, id 18666, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x5907), ack 8488176, win 21177, options [nop,nop,TS val 70497 ecr 3454222636], length 0
23:36:59.170802 IP (tos 0x0, ttl 53, id 18185, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xa64f (correct), seq 8488176:8489624, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70433], length 1448
23:36:59.170926 IP (tos 0x0, ttl 53, id 18186, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xa0a7 (correct), seq 8489624:8491072, ack 1, win 9, options [nop,nop,TS val 3454222636 ecr 70433], length 1448
23:36:59.170936 IP (tos 0x0, ttl 100, id 18667, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x4db7), ack 8491072, win 21177, options [nop,nop,TS val 70497 ecr 3454222636], length 0
23:36:59.171216 IP (tos 0x0, ttl 53, id 18187, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x9afe (correct), seq 8491072:8492520, ack 1, win 9, options [nop,nop,TS val 3454222637 ecr 70433], length 1448
23:36:59.171334 IP (tos 0x0, ttl 53, id 18188, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x9556 (correct), seq 8492520:8493968, ack 1, win 9, options [nop,nop,TS val 3454222637 ecr 70433], length 1448
23:36:59.171345 IP (tos 0x0, ttl 100, id 18668, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x4265), ack 8493968, win 21177, options [nop,nop,TS val 70498 ecr 3454222637], length 0
23:36:59.172533 IP (tos 0x0, ttl 53, id 18189, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x8fac (correct), seq 8493968:8495416, ack 1, win 9, options [nop,nop,TS val 3454222637 ecr 70435], length 1448
23:36:59.172656 IP (tos 0x0, ttl 53, id 18190, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x8a04 (correct), seq 8495416:8496864, ack 1, win 9, options [nop,nop,TS val 3454222637 ecr 70435], length 1448
23:36:59.172668 IP (tos 0x0, ttl 100, id 18669, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x3714), ack 8496864, win 21177, options [nop,nop,TS val 70499 ecr 3454222637], length 0
23:36:59.172805 IP (tos 0x0, ttl 53, id 18191, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x845c (correct), seq 8496864:8498312, ack 1, win 9, options [nop,nop,TS val 3454222637 ecr 70435], length 1448
23:36:59.172920 IP (tos 0x0, ttl 53, id 18192, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x7eb4 (correct), seq 8498312:8499760, ack 1, win 9, options [nop,nop,TS val 3454222637 ecr 70435], length 1448
23:36:59.172932 IP (tos 0x0, ttl 100, id 18670, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x2bc4), ack 8499760, win 21177, options [nop,nop,TS val 70499 ecr 3454222637], length 0
23:36:59.173871 IP (tos 0x0, ttl 53, id 18193, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x790b (correct), seq 8499760:8501208, ack 1, win 9, options [nop,nop,TS val 3454222637 ecr 70436], length 1448
23:36:59.173995 IP (tos 0x0, ttl 53, id 18194, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x7363 (correct), seq 8501208:8502656, ack 1, win 9, options [nop,nop,TS val 3454222637 ecr 70436], length 1448
23:36:59.174007 IP (tos 0x0, ttl 100, id 18671, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x2073), ack 8502656, win 21177, options [nop,nop,TS val 70500 ecr 3454222637], length 0
23:36:59.174301 IP (tos 0x0, ttl 53, id 18195, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x6dbb (correct), seq 8502656:8504104, ack 1, win 9, options [nop,nop,TS val 3454222637 ecr 70436], length 1448
23:36:59.174423 IP (tos 0x0, ttl 53, id 18196, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x6813 (correct), seq 8504104:8505552, ack 1, win 9, options [nop,nop,TS val 3454222637 ecr 70436], length 1448
23:36:59.174434 IP (tos 0x0, ttl 100, id 18672, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x1522), ack 8505552, win 21177, options [nop,nop,TS val 70501 ecr 3454222637], length 0
23:36:59.174554 IP (tos 0x0, ttl 53, id 18197, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x626a (correct), seq 8505552:8507000, ack 1, win 9, options [nop,nop,TS val 3454222637 ecr 70437], length 1448
23:36:59.174677 IP (tos 0x0, ttl 53, id 18198, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x5cc2 (correct), seq 8507000:8508448, ack 1, win 9, options [nop,nop,TS val 3454222637 ecr 70437], length 1448
23:36:59.174689 IP (tos 0x0, ttl 100, id 18673, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x09d2), ack 8508448, win 21177, options [nop,nop,TS val 70501 ecr 3454222637], length 0
23:36:59.174835 IP (tos 0x0, ttl 53, id 18199, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x571a (correct), seq 8508448:8509896, ack 1, win 9, options [nop,nop,TS val 3454222637 ecr 70437], length 1448
23:36:59.174958 IP (tos 0x0, ttl 53, id 18200, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x5172 (correct), seq 8509896:8511344, ack 1, win 9, options [nop,nop,TS val 3454222637 ecr 70437], length 1448
23:36:59.174970 IP (tos 0x0, ttl 100, id 18674, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xfe81), ack 8511344, win 21177, options [nop,nop,TS val 70501 ecr 3454222637], length 0
23:36:59.175311 IP (tos 0x0, ttl 53, id 18201, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x4bc9 (correct), seq 8511344:8512792, ack 1, win 9, options [nop,nop,TS val 3454222638 ecr 70437], length 1448
23:36:59.175434 IP (tos 0x0, ttl 53, id 18202, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [P.], cksum 0x4619 (correct), seq 8512792:8514240, ack 1, win 9, options [nop,nop,TS val 3454222638 ecr 70437], length 1448
23:36:59.175446 IP (tos 0x0, ttl 100, id 18675, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xf32f), ack 8514240, win 21177, options [nop,nop,TS val 70502 ecr 3454222638], length 0
23:36:59.175760 IP (tos 0x0, ttl 53, id 18203, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x4078 (correct), seq 8514240:8515688, ack 1, win 9, options [nop,nop,TS val 3454222638 ecr 70438], length 1448
23:36:59.175883 IP (tos 0x0, ttl 53, id 18204, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x3ad0 (correct), seq 8515688:8517136, ack 1, win 9, options [nop,nop,TS val 3454222638 ecr 70438], length 1448
23:36:59.175895 IP (tos 0x0, ttl 100, id 18676, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xe7df), ack 8517136, win 21177, options [nop,nop,TS val 70502 ecr 3454222638], length 0
23:36:59.177422 IP (tos 0x0, ttl 53, id 18205, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x3527 (correct), seq 8517136:8518584, ack 1, win 9, options [nop,nop,TS val 3454222638 ecr 70439], length 1448
23:36:59.177545 IP (tos 0x0, ttl 53, id 18206, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x2f7f (correct), seq 8518584:8520032, ack 1, win 9, options [nop,nop,TS val 3454222638 ecr 70439], length 1448
23:36:59.177556 IP (tos 0x0, ttl 100, id 18677, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xdc8d), ack 8520032, win 21177, options [nop,nop,TS val 70504 ecr 3454222638], length 0
23:36:59.178168 IP (tos 0x0, ttl 53, id 18207, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x29d6 (correct), seq 8520032:8521480, ack 1, win 9, options [nop,nop,TS val 3454222638 ecr 70440], length 1448
23:36:59.178291 IP (tos 0x0, ttl 53, id 18208, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x242e (correct), seq 8521480:8522928, ack 1, win 9, options [nop,nop,TS val 3454222638 ecr 70440], length 1448
23:36:59.178302 IP (tos 0x0, ttl 100, id 18678, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xd13c), ack 8522928, win 21177, options [nop,nop,TS val 70505 ecr 3454222638], length 0
23:36:59.178608 IP (tos 0x0, ttl 53, id 18209, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x1e85 (correct), seq 8522928:8524376, ack 1, win 9, options [nop,nop,TS val 3454222638 ecr 70441], length 1448
23:36:59.178731 IP (tos 0x0, ttl 53, id 18210, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x18dd (correct), seq 8524376:8525824, ack 1, win 9, options [nop,nop,TS val 3454222638 ecr 70441], length 1448
23:36:59.178741 IP (tos 0x0, ttl 100, id 18679, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xc5ec), ack 8525824, win 21177, options [nop,nop,TS val 70505 ecr 3454222638], length 0
23:36:59.178895 IP (tos 0x0, ttl 53, id 18211, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x1335 (correct), seq 8525824:8527272, ack 1, win 9, options [nop,nop,TS val 3454222638 ecr 70441], length 1448
23:36:59.179013 IP (tos 0x0, ttl 53, id 18212, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x0d8d (correct), seq 8527272:8528720, ack 1, win 9, options [nop,nop,TS val 3454222638 ecr 70441], length 1448
23:36:59.179023 IP (tos 0x0, ttl 100, id 18680, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xba9c), ack 8528720, win 21177, options [nop,nop,TS val 70505 ecr 3454222638], length 0
23:36:59.181108 IP (tos 0x0, ttl 53, id 18213, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x07e3 (correct), seq 8528720:8530168, ack 1, win 9, options [nop,nop,TS val 3454222639 ecr 70442], length 1448
23:36:59.181230 IP (tos 0x0, ttl 53, id 18214, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x023b (correct), seq 8530168:8531616, ack 1, win 9, options [nop,nop,TS val 3454222639 ecr 70442], length 1448
23:36:59.181241 IP (tos 0x0, ttl 100, id 18681, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xaf48), ack 8531616, win 21177, options [nop,nop,TS val 70508 ecr 3454222639], length 0
23:36:59.183522 IP (tos 0x0, ttl 53, id 18215, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xfc8e (correct), seq 8531616:8533064, ack 1, win 9, options [nop,nop,TS val 3454222640 ecr 70445], length 1448
23:36:59.183645 IP (tos 0x0, ttl 53, id 18216, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xf6e6 (correct), seq 8533064:8534512, ack 1, win 9, options [nop,nop,TS val 3454222640 ecr 70445], length 1448
23:36:59.183656 IP (tos 0x0, ttl 100, id 18682, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xa3f5), ack 8534512, win 21177, options [nop,nop,TS val 70510 ecr 3454222640], length 0
23:36:59.183860 IP (tos 0x0, ttl 53, id 18217, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xf13d (correct), seq 8534512:8535960, ack 1, win 9, options [nop,nop,TS val 3454222640 ecr 70446], length 1448
23:36:59.183983 IP (tos 0x0, ttl 53, id 18218, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xeb95 (correct), seq 8535960:8537408, ack 1, win 9, options [nop,nop,TS val 3454222640 ecr 70446], length 1448
23:36:59.183994 IP (tos 0x0, ttl 100, id 18683, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x98a5), ack 8537408, win 21177, options [nop,nop,TS val 70510 ecr 3454222640], length 0
23:36:59.184554 IP (tos 0x0, ttl 53, id 18219, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xe5ec (correct), seq 8537408:8538856, ack 1, win 9, options [nop,nop,TS val 3454222640 ecr 70447], length 1448
23:36:59.184678 IP (tos 0x0, ttl 53, id 18220, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xe044 (correct), seq 8538856:8540304, ack 1, win 9, options [nop,nop,TS val 3454222640 ecr 70447], length 1448
23:36:59.184689 IP (tos 0x0, ttl 100, id 18684, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x8d54), ack 8540304, win 21177, options [nop,nop,TS val 70511 ecr 3454222640], length 0
23:36:59.186603 IP (tos 0x0, ttl 53, id 18221, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xda9a (correct), seq 8540304:8541752, ack 1, win 9, options [nop,nop,TS val 3454222640 ecr 70449], length 1448
23:36:59.186727 IP (tos 0x0, ttl 53, id 18222, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xd4f2 (correct), seq 8541752:8543200, ack 1, win 9, options [nop,nop,TS val 3454222640 ecr 70449], length 1448
23:36:59.186739 IP (tos 0x0, ttl 100, id 18685, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x8202), ack 8543200, win 21177, options [nop,nop,TS val 70513 ecr 3454222640], length 0
23:36:59.186924 IP (tos 0x0, ttl 53, id 18223, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xcf4a (correct), seq 8543200:8544648, ack 1, win 9, options [nop,nop,TS val 3454222640 ecr 70449], length 1448
23:36:59.187047 IP (tos 0x0, ttl 53, id 18224, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xc9a1 (correct), seq 8544648:8546096, ack 1, win 9, options [nop,nop,TS val 3454222641 ecr 70449], length 1448
23:36:59.187059 IP (tos 0x0, ttl 100, id 18686, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x76b2), ack 8546096, win 21177, options [nop,nop,TS val 70513 ecr 3454222640], length 0
23:36:59.187251 IP (tos 0x0, ttl 53, id 18225, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xc3f9 (correct), seq 8546096:8547544, ack 1, win 9, options [nop,nop,TS val 3454222641 ecr 70449], length 1448
23:36:59.187374 IP (tos 0x0, ttl 53, id 18226, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xbe51 (correct), seq 8547544:8548992, ack 1, win 9, options [nop,nop,TS val 3454222641 ecr 70449], length 1448
23:36:59.187387 IP (tos 0x0, ttl 100, id 18687, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x6b60), ack 8548992, win 21177, options [nop,nop,TS val 70514 ecr 3454222641], length 0
23:36:59.187510 IP (tos 0x0, ttl 53, id 18227, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xb8a9 (correct), seq 8548992:8550440, ack 1, win 9, options [nop,nop,TS val 3454222641 ecr 70449], length 1448
23:36:59.187632 IP (tos 0x0, ttl 53, id 18228, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xb301 (correct), seq 8550440:8551888, ack 1, win 9, options [nop,nop,TS val 3454222641 ecr 70449], length 1448
23:36:59.187644 IP (tos 0x0, ttl 100, id 18688, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x6010), ack 8551888, win 21177, options [nop,nop,TS val 70514 ecr 3454222641], length 0
23:36:59.188501 IP (tos 0x0, ttl 53, id 18229, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xad57 (correct), seq 8551888:8553336, ack 1, win 9, options [nop,nop,TS val 3454222641 ecr 70451], length 1448
23:36:59.188623 IP (tos 0x0, ttl 53, id 18230, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xa7af (correct), seq 8553336:8554784, ack 1, win 9, options [nop,nop,TS val 3454222641 ecr 70451], length 1448
23:36:59.188635 IP (tos 0x0, ttl 100, id 18689, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x54bf), ack 8554784, win 21177, options [nop,nop,TS val 70515 ecr 3454222641], length 0
23:36:59.188960 IP (tos 0x0, ttl 53, id 18231, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xa207 (correct), seq 8554784:8556232, ack 1, win 9, options [nop,nop,TS val 3454222641 ecr 70451], length 1448
23:36:59.189084 IP (tos 0x0, ttl 53, id 18232, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x9c5f (correct), seq 8556232:8557680, ack 1, win 9, options [nop,nop,TS val 3454222641 ecr 70451], length 1448
23:36:59.189095 IP (tos 0x0, ttl 100, id 18690, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x496f), ack 8557680, win 21177, options [nop,nop,TS val 70515 ecr 3454222641], length 0
23:36:59.189208 IP (tos 0x0, ttl 53, id 18233, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x96b7 (correct), seq 8557680:8559128, ack 1, win 9, options [nop,nop,TS val 3454222641 ecr 70451], length 1448
23:36:59.189330 IP (tos 0x0, ttl 53, id 18234, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x910f (correct), seq 8559128:8560576, ack 1, win 9, options [nop,nop,TS val 3454222641 ecr 70451], length 1448
23:36:59.189342 IP (tos 0x0, ttl 100, id 18691, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x3e1e), ack 8560576, win 21177, options [nop,nop,TS val 70516 ecr 3454222641], length 0
23:36:59.190146 IP (tos 0x0, ttl 53, id 18235, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x8b66 (correct), seq 8560576:8562024, ack 1, win 9, options [nop,nop,TS val 3454222641 ecr 70452], length 1448
23:36:59.190270 IP (tos 0x0, ttl 53, id 18236, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x85be (correct), seq 8562024:8563472, ack 1, win 9, options [nop,nop,TS val 3454222641 ecr 70452], length 1448
23:36:59.190282 IP (tos 0x0, ttl 100, id 18692, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x32cd), ack 8563472, win 21177, options [nop,nop,TS val 70517 ecr 3454222641], length 0
23:36:59.190466 IP (tos 0x0, ttl 53, id 18237, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x8016 (correct), seq 8563472:8564920, ack 1, win 9, options [nop,nop,TS val 3454222641 ecr 70452], length 1448
23:36:59.190589 IP (tos 0x0, ttl 53, id 18238, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x7a6e (correct), seq 8564920:8566368, ack 1, win 9, options [nop,nop,TS val 3454222641 ecr 70452], length 1448
23:36:59.190599 IP (tos 0x0, ttl 100, id 18693, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x277d), ack 8566368, win 21177, options [nop,nop,TS val 70517 ecr 3454222641], length 0
23:36:59.190712 IP (tos 0x0, ttl 53, id 18239, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x74c5 (correct), seq 8566368:8567816, ack 1, win 9, options [nop,nop,TS val 3454222641 ecr 70453], length 1448
23:36:59.190844 IP (tos 0x0, ttl 53, id 18240, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x6f1d (correct), seq 8567816:8569264, ack 1, win 9, options [nop,nop,TS val 3454222641 ecr 70453], length 1448
23:36:59.190853 IP (tos 0x0, ttl 100, id 18694, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x1c2d), ack 8569264, win 21177, options [nop,nop,TS val 70517 ecr 3454222641], length 0
23:36:59.190965 IP (tos 0x0, ttl 53, id 18241, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x6974 (correct), seq 8569264:8570712, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70453], length 1448
23:36:59.191082 IP (tos 0x0, ttl 53, id 18242, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x63cc (correct), seq 8570712:8572160, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70453], length 1448
23:36:59.191092 IP (tos 0x0, ttl 100, id 18695, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x10dc), ack 8572160, win 21177, options [nop,nop,TS val 70517 ecr 3454222642], length 0
23:36:59.191204 IP (tos 0x0, ttl 53, id 18243, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x5e24 (correct), seq 8572160:8573608, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70453], length 1448
23:36:59.191327 IP (tos 0x0, ttl 53, id 18244, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x587c (correct), seq 8573608:8575056, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70453], length 1448
23:36:59.191340 IP (tos 0x0, ttl 100, id 18696, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x058b), ack 8575056, win 21177, options [nop,nop,TS val 70518 ecr 3454222642], length 0
23:36:59.191828 IP (tos 0x0, ttl 53, id 18245, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x52d3 (correct), seq 8575056:8576504, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70454], length 1448
23:36:59.191951 IP (tos 0x0, ttl 53, id 18246, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x4d2b (correct), seq 8576504:8577952, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70454], length 1448
23:36:59.191962 IP (tos 0x0, ttl 100, id 18697, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xfa3a), ack 8577952, win 21177, options [nop,nop,TS val 70518 ecr 3454222642], length 0
23:36:59.192198 IP (tos 0x0, ttl 53, id 18247, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x4783 (correct), seq 8577952:8579400, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70454], length 1448
23:36:59.192321 IP (tos 0x0, ttl 53, id 18248, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x41db (correct), seq 8579400:8580848, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70454], length 1448
23:36:59.192333 IP (tos 0x0, ttl 100, id 18698, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xeee9), ack 8580848, win 21177, options [nop,nop,TS val 70519 ecr 3454222642], length 0
23:36:59.192614 IP (tos 0x0, ttl 53, id 18249, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x3c32 (correct), seq 8580848:8582296, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70455], length 1448
23:36:59.192738 IP (tos 0x0, ttl 53, id 18250, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x368a (correct), seq 8582296:8583744, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70455], length 1448
23:36:59.192750 IP (tos 0x0, ttl 100, id 18699, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xe399), ack 8583744, win 21177, options [nop,nop,TS val 70519 ecr 3454222642], length 0
23:36:59.192879 IP (tos 0x0, ttl 53, id 18251, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x30e2 (correct), seq 8583744:8585192, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70455], length 1448
23:36:59.193013 IP (tos 0x0, ttl 53, id 18252, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x2b3a (correct), seq 8585192:8586640, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70455], length 1448
23:36:59.193025 IP (tos 0x0, ttl 100, id 18700, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xd849), ack 8586640, win 21177, options [nop,nop,TS val 70519 ecr 3454222642], length 0
23:36:59.193287 IP (tos 0x0, ttl 53, id 18253, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x2592 (correct), seq 8586640:8588088, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70455], length 1448
23:36:59.193409 IP (tos 0x0, ttl 53, id 18254, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x1fea (correct), seq 8588088:8589536, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70455], length 1448
23:36:59.193419 IP (tos 0x0, ttl 100, id 18701, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xccf8), ack 8589536, win 21177, options [nop,nop,TS val 70520 ecr 3454222642], length 0
23:36:59.193576 IP (tos 0x0, ttl 53, id 18255, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x1a41 (correct), seq 8589536:8590984, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70456], length 1448
23:36:59.193699 IP (tos 0x0, ttl 53, id 18256, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x1499 (correct), seq 8590984:8592432, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70456], length 1448
23:36:59.193709 IP (tos 0x0, ttl 100, id 18702, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xc1a8), ack 8592432, win 21177, options [nop,nop,TS val 70520 ecr 3454222642], length 0
23:36:59.194213 IP (tos 0x0, ttl 53, id 18257, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x0ef1 (correct), seq 8592432:8593880, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70456], length 1448
23:36:59.194337 IP (tos 0x0, ttl 53, id 18258, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x0949 (correct), seq 8593880:8595328, ack 1, win 9, options [nop,nop,TS val 3454222642 ecr 70456], length 1448
23:36:59.194347 IP (tos 0x0, ttl 100, id 18703, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xb657), ack 8595328, win 21177, options [nop,nop,TS val 70521 ecr 3454222642], length 0
23:36:59.195473 IP (tos 0x0, ttl 53, id 18259, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x039f (correct), seq 8595328:8596776, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70457], length 1448
23:36:59.195595 IP (tos 0x0, ttl 53, id 18260, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xfdf6 (correct), seq 8596776:8598224, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70457], length 1448
23:36:59.195606 IP (tos 0x0, ttl 100, id 18704, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xab05), ack 8598224, win 21177, options [nop,nop,TS val 70522 ecr 3454222643], length 0
23:36:59.195720 IP (tos 0x0, ttl 53, id 18261, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xf84d (correct), seq 8598224:8599672, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70458], length 1448
23:36:59.195848 IP (tos 0x0, ttl 53, id 18262, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xf2a5 (correct), seq 8599672:8601120, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70458], length 1448
23:36:59.195859 IP (tos 0x0, ttl 100, id 18705, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x9fb5), ack 8601120, win 21177, options [nop,nop,TS val 70522 ecr 3454222643], length 0
23:36:59.196083 IP (tos 0x0, ttl 53, id 18263, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xecfd (correct), seq 8601120:8602568, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70458], length 1448
23:36:59.196207 IP (tos 0x0, ttl 53, id 18264, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xe755 (correct), seq 8602568:8604016, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70458], length 1448
23:36:59.196217 IP (tos 0x0, ttl 100, id 18706, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x9464), ack 8604016, win 21177, options [nop,nop,TS val 70523 ecr 3454222643], length 0
23:36:59.196330 IP (tos 0x0, ttl 53, id 18265, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xe1ad (correct), seq 8604016:8605464, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70458], length 1448
23:36:59.196453 IP (tos 0x0, ttl 53, id 18266, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xdc05 (correct), seq 8605464:8606912, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70458], length 1448
23:36:59.196466 IP (tos 0x0, ttl 100, id 18707, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x8914), ack 8606912, win 21177, options [nop,nop,TS val 70523 ecr 3454222643], length 0
23:36:59.196653 IP (tos 0x0, ttl 53, id 18267, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xd65c (correct), seq 8606912:8608360, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70459], length 1448
23:36:59.196776 IP (tos 0x0, ttl 53, id 18268, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xd0b4 (correct), seq 8608360:8609808, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70459], length 1448
23:36:59.196788 IP (tos 0x0, ttl 100, id 18708, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x7dc4), ack 8609808, win 21177, options [nop,nop,TS val 70523 ecr 3454222643], length 0
23:36:59.197082 IP (tos 0x0, ttl 53, id 18269, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xcb0c (correct), seq 8609808:8611256, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70459], length 1448
23:36:59.197205 IP (tos 0x0, ttl 53, id 18270, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xc564 (correct), seq 8611256:8612704, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70459], length 1448
23:36:59.197217 IP (tos 0x0, ttl 100, id 18709, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x7273), ack 8612704, win 21177, options [nop,nop,TS val 70524 ecr 3454222643], length 0
23:36:59.197405 IP (tos 0x0, ttl 53, id 18271, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xbfbc (correct), seq 8612704:8614152, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70459], length 1448
23:36:59.197528 IP (tos 0x0, ttl 53, id 18272, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xba14 (correct), seq 8614152:8615600, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70459], length 1448
23:36:59.197538 IP (tos 0x0, ttl 100, id 18710, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x6723), ack 8615600, win 21177, options [nop,nop,TS val 70524 ecr 3454222643], length 0
23:36:59.198005 IP (tos 0x0, ttl 53, id 18273, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xb46b (correct), seq 8615600:8617048, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70460], length 1448
23:36:59.198128 IP (tos 0x0, ttl 53, id 18274, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xaec3 (correct), seq 8617048:8618496, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70460], length 1448
23:36:59.198138 IP (tos 0x0, ttl 100, id 18711, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x5bd3), ack 8618496, win 21177, options [nop,nop,TS val 70524 ecr 3454222643], length 0
23:36:59.198275 IP (tos 0x0, ttl 53, id 18275, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xa91b (correct), seq 8618496:8619944, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70460], length 1448
23:36:59.198384 IP (tos 0x0, ttl 53, id 18276, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xa373 (correct), seq 8619944:8621392, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70460], length 1448
23:36:59.198394 IP (tos 0x0, ttl 100, id 18712, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x5082), ack 8621392, win 21177, options [nop,nop,TS val 70525 ecr 3454222643], length 0
23:36:59.198507 IP (tos 0x0, ttl 53, id 18277, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x9dcb (correct), seq 8621392:8622840, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70460], length 1448
23:36:59.198630 IP (tos 0x0, ttl 53, id 18278, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x9823 (correct), seq 8622840:8624288, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70460], length 1448
23:36:59.198640 IP (tos 0x0, ttl 100, id 18713, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x4532), ack 8624288, win 21177, options [nop,nop,TS val 70525 ecr 3454222643], length 0
23:36:59.198855 IP (tos 0x0, ttl 53, id 18279, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x927a (correct), seq 8624288:8625736, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70461], length 1448
23:36:59.198978 IP (tos 0x0, ttl 53, id 18280, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x8cd2 (correct), seq 8625736:8627184, ack 1, win 9, options [nop,nop,TS val 3454222643 ecr 70461], length 1448
23:36:59.198988 IP (tos 0x0, ttl 100, id 18714, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x39e2), ack 8627184, win 21177, options [nop,nop,TS val 70525 ecr 3454222643], length 0
23:36:59.199150 IP (tos 0x0, ttl 53, id 18281, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x8729 (correct), seq 8627184:8628632, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70461], length 1448
23:36:59.199272 IP (tos 0x0, ttl 53, id 18282, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x8181 (correct), seq 8628632:8630080, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70461], length 1448
23:36:59.199282 IP (tos 0x0, ttl 100, id 18715, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x2e90), ack 8630080, win 21177, options [nop,nop,TS val 70526 ecr 3454222644], length 0
23:36:59.199409 IP (tos 0x0, ttl 53, id 18283, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x7bd9 (correct), seq 8630080:8631528, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70461], length 1448
23:36:59.199532 IP (tos 0x0, ttl 53, id 18284, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x7631 (correct), seq 8631528:8632976, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70461], length 1448
23:36:59.199542 IP (tos 0x0, ttl 100, id 18716, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x2340), ack 8632976, win 21177, options [nop,nop,TS val 70526 ecr 3454222644], length 0
23:36:59.199925 IP (tos 0x0, ttl 53, id 18285, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x7088 (correct), seq 8632976:8634424, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70462], length 1448
23:36:59.200048 IP (tos 0x0, ttl 53, id 18286, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x6ae0 (correct), seq 8634424:8635872, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70462], length 1448
23:36:59.200058 IP (tos 0x0, ttl 100, id 18717, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x17f0), ack 8635872, win 21177, options [nop,nop,TS val 70526 ecr 3454222644], length 0
23:36:59.200345 IP (tos 0x0, ttl 53, id 18287, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x6538 (correct), seq 8635872:8637320, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70462], length 1448
23:36:59.200469 IP (tos 0x0, ttl 53, id 18288, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x5f90 (correct), seq 8637320:8638768, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70462], length 1448
23:36:59.200481 IP (tos 0x0, ttl 100, id 18718, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x0c9f), ack 8638768, win 21177, options [nop,nop,TS val 70527 ecr 3454222644], length 0
23:36:59.200591 IP (tos 0x0, ttl 53, id 18289, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x59e7 (correct), seq 8638768:8640216, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70463], length 1448
23:36:59.200714 IP (tos 0x0, ttl 53, id 18290, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x543f (correct), seq 8640216:8641664, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70463], length 1448
23:36:59.200726 IP (tos 0x0, ttl 100, id 18719, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x014f), ack 8641664, win 21177, options [nop,nop,TS val 70527 ecr 3454222644], length 0
23:36:59.202068 IP (tos 0x0, ttl 53, id 18291, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x4e96 (correct), seq 8641664:8643112, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70464], length 1448
23:36:59.202191 IP (tos 0x0, ttl 53, id 18292, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x48ee (correct), seq 8643112:8644560, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70464], length 1448
23:36:59.202204 IP (tos 0x0, ttl 100, id 18720, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xf5fc), ack 8644560, win 21177, options [nop,nop,TS val 70529 ecr 3454222644], length 0
23:36:59.202314 IP (tos 0x0, ttl 53, id 18293, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x4346 (correct), seq 8644560:8646008, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70464], length 1448
23:36:59.202438 IP (tos 0x0, ttl 53, id 18294, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x3d9e (correct), seq 8646008:8647456, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70464], length 1448
23:36:59.202448 IP (tos 0x0, ttl 100, id 18721, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xeaac), ack 8647456, win 21177, options [nop,nop,TS val 70529 ecr 3454222644], length 0
23:36:59.202560 IP (tos 0x0, ttl 53, id 18295, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x37f6 (correct), seq 8647456:8648904, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70464], length 1448
23:36:59.202684 IP (tos 0x0, ttl 53, id 18296, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x324e (correct), seq 8648904:8650352, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70464], length 1448
23:36:59.202694 IP (tos 0x0, ttl 100, id 18722, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xdf5c), ack 8650352, win 21177, options [nop,nop,TS val 70529 ecr 3454222644], length 0
23:36:59.202807 IP (tos 0x0, ttl 53, id 18297, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x2ca5 (correct), seq 8650352:8651800, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70465], length 1448
23:36:59.202930 IP (tos 0x0, ttl 53, id 18298, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x26fd (correct), seq 8651800:8653248, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70465], length 1448
23:36:59.202940 IP (tos 0x0, ttl 100, id 18723, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xd40c), ack 8653248, win 21177, options [nop,nop,TS val 70529 ecr 3454222644], length 0
23:36:59.203053 IP (tos 0x0, ttl 53, id 18299, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x2155 (correct), seq 8653248:8654696, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70465], length 1448
23:36:59.203176 IP (tos 0x0, ttl 53, id 18300, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x1bad (correct), seq 8654696:8656144, ack 1, win 9, options [nop,nop,TS val 3454222644 ecr 70465], length 1448
23:36:59.203186 IP (tos 0x0, ttl 100, id 18724, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xc8bb), ack 8656144, win 21177, options [nop,nop,TS val 70530 ecr 3454222644], length 0
23:36:59.203299 IP (tos 0x0, ttl 53, id 18301, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x1604 (correct), seq 8656144:8657592, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70465], length 1448
23:36:59.203421 IP (tos 0x0, ttl 53, id 18302, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x105c (correct), seq 8657592:8659040, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70465], length 1448
23:36:59.203432 IP (tos 0x0, ttl 100, id 18725, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xbd6a), ack 8659040, win 21177, options [nop,nop,TS val 70530 ecr 3454222645], length 0
23:36:59.203545 IP (tos 0x0, ttl 53, id 18303, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x0ab4 (correct), seq 8659040:8660488, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70465], length 1448
23:36:59.203668 IP (tos 0x0, ttl 53, id 18304, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x050c (correct), seq 8660488:8661936, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70465], length 1448
23:36:59.203680 IP (tos 0x0, ttl 100, id 18726, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xb21a), ack 8661936, win 21177, options [nop,nop,TS val 70530 ecr 3454222645], length 0
23:36:59.203791 IP (tos 0x0, ttl 53, id 18305, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xff62 (correct), seq 8661936:8663384, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70466], length 1448
23:36:59.203914 IP (tos 0x0, ttl 53, id 18306, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xf9ba (correct), seq 8663384:8664832, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70466], length 1448
23:36:59.203926 IP (tos 0x0, ttl 100, id 18727, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xa6ca), ack 8664832, win 21177, options [nop,nop,TS val 70530 ecr 3454222645], length 0
23:36:59.204037 IP (tos 0x0, ttl 53, id 18307, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xf412 (correct), seq 8664832:8666280, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70466], length 1448
23:36:59.204161 IP (tos 0x0, ttl 53, id 18308, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xee6a (correct), seq 8666280:8667728, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70466], length 1448
23:36:59.204173 IP (tos 0x0, ttl 100, id 18728, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x9b79), ack 8667728, win 21177, options [nop,nop,TS val 70531 ecr 3454222645], length 0
23:36:59.204283 IP (tos 0x0, ttl 53, id 18309, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xe8c2 (correct), seq 8667728:8669176, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70466], length 1448
23:36:59.204406 IP (tos 0x0, ttl 53, id 18310, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xe31a (correct), seq 8669176:8670624, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70466], length 1448
23:36:59.204418 IP (tos 0x0, ttl 100, id 18729, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x9029), ack 8670624, win 21177, options [nop,nop,TS val 70531 ecr 3454222645], length 0
23:36:59.204529 IP (tos 0x0, ttl 53, id 18311, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xdd72 (correct), seq 8670624:8672072, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70466], length 1448
23:36:59.204653 IP (tos 0x0, ttl 53, id 18312, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xd7ca (correct), seq 8672072:8673520, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70466], length 1448
23:36:59.204665 IP (tos 0x0, ttl 100, id 18730, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x84d9), ack 8673520, win 21177, options [nop,nop,TS val 70531 ecr 3454222645], length 0
23:36:59.204775 IP (tos 0x0, ttl 53, id 18313, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xd221 (correct), seq 8673520:8674968, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70467], length 1448
23:36:59.204898 IP (tos 0x0, ttl 53, id 18314, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xcc79 (correct), seq 8674968:8676416, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70467], length 1448
23:36:59.204910 IP (tos 0x0, ttl 100, id 18731, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x7989), ack 8676416, win 21177, options [nop,nop,TS val 70531 ecr 3454222645], length 0
23:36:59.205099 IP (tos 0x0, ttl 53, id 18315, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xc6d1 (correct), seq 8676416:8677864, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70467], length 1448
23:36:59.205221 IP (tos 0x0, ttl 53, id 18316, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xc129 (correct), seq 8677864:8679312, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70467], length 1448
23:36:59.205233 IP (tos 0x0, ttl 100, id 18732, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x6e38), ack 8679312, win 21177, options [nop,nop,TS val 70532 ecr 3454222645], length 0
23:36:59.205343 IP (tos 0x0, ttl 53, id 18317, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xbb81 (correct), seq 8679312:8680760, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70467], length 1448
23:36:59.205467 IP (tos 0x0, ttl 53, id 18318, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xb5d9 (correct), seq 8680760:8682208, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70467], length 1448
23:36:59.205479 IP (tos 0x0, ttl 100, id 18733, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x62e8), ack 8682208, win 21177, options [nop,nop,TS val 70532 ecr 3454222645], length 0
23:36:59.205724 IP (tos 0x0, ttl 53, id 18319, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xb030 (correct), seq 8682208:8683656, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70468], length 1448
23:36:59.205847 IP (tos 0x0, ttl 53, id 18320, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xaa88 (correct), seq 8683656:8685104, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70468], length 1448
23:36:59.205857 IP (tos 0x0, ttl 100, id 18734, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x5798), ack 8685104, win 21177, options [nop,nop,TS val 70532 ecr 3454222645], length 0
23:36:59.206026 IP (tos 0x0, ttl 53, id 18321, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0xa4e0 (correct), seq 8685104:8686552, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70468], length 1448
23:36:59.206149 IP (tos 0x0, ttl 53, id 18322, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x9f38 (correct), seq 8686552:8688000, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70468], length 1448
23:36:59.206159 IP (tos 0x0, ttl 100, id 18735, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x4c48), ack 8688000, win 21177, options [nop,nop,TS val 70532 ecr 3454222645], length 0
23:36:59.206469 IP (tos 0x0, ttl 53, id 18323, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x9990 (correct), seq 8688000:8689448, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70468], length 1448
23:36:59.206591 IP (tos 0x0, ttl 53, id 18324, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x93e8 (correct), seq 8689448:8690896, ack 1, win 9, options [nop,nop,TS val 3454222645 ecr 70468], length 1448
23:36:59.206601 IP (tos 0x0, ttl 100, id 18736, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x40f7), ack 8690896, win 21177, options [nop,nop,TS val 70533 ecr 3454222645], length 0
23:36:59.206926 IP (tos 0x0, ttl 53, id 18325, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x8e3e (correct), seq 8690896:8692344, ack 1, win 9, options [nop,nop,TS val 3454222646 ecr 70469], length 1448
23:36:59.207049 IP (tos 0x0, ttl 53, id 18326, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x8896 (correct), seq 8692344:8693792, ack 1, win 9, options [nop,nop,TS val 3454222646 ecr 70469], length 1448
23:36:59.207059 IP (tos 0x0, ttl 100, id 18737, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x35a6), ack 8693792, win 21177, options [nop,nop,TS val 70533 ecr 3454222646], length 0
23:36:59.207568 IP (tos 0x0, ttl 53, id 18327, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x82ed (correct), seq 8693792:8695240, ack 1, win 9, options [nop,nop,TS val 3454222646 ecr 70470], length 1448
23:36:59.207691 IP (tos 0x0, ttl 53, id 18328, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x7d45 (correct), seq 8695240:8696688, ack 1, win 9, options [nop,nop,TS val 3454222646 ecr 70470], length 1448
23:36:59.207702 IP (tos 0x0, ttl 100, id 18738, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x2a55), ack 8696688, win 21177, options [nop,nop,TS val 70534 ecr 3454222646], length 0
23:36:59.208162 IP (tos 0x0, ttl 53, id 18329, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x779d (correct), seq 8696688:8698136, ack 1, win 9, options [nop,nop,TS val 3454222646 ecr 70470], length 1448
23:36:59.208284 IP (tos 0x0, ttl 53, id 18330, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x71f5 (correct), seq 8698136:8699584, ack 1, win 9, options [nop,nop,TS val 3454222646 ecr 70470], length 1448
23:36:59.208294 IP (tos 0x0, ttl 100, id 18739, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x1f04), ack 8699584, win 21177, options [nop,nop,TS val 70535 ecr 3454222646], length 0
23:36:59.208492 IP (tos 0x0, ttl 53, id 18331, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x6c4d (correct), seq 8699584:8701032, ack 1, win 9, options [nop,nop,TS val 3454222646 ecr 70470], length 1448
23:36:59.208615 IP (tos 0x0, ttl 53, id 18332, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x66a5 (correct), seq 8701032:8702480, ack 1, win 9, options [nop,nop,TS val 3454222646 ecr 70470], length 1448
23:36:59.208625 IP (tos 0x0, ttl 100, id 18740, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x13b4), ack 8702480, win 21177, options [nop,nop,TS val 70535 ecr 3454222646], length 0
23:36:59.208738 IP (tos 0x0, ttl 53, id 18333, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x60fc (correct), seq 8702480:8703928, ack 1, win 9, options [nop,nop,TS val 3454222646 ecr 70471], length 1448
23:36:59.208865 IP (tos 0x0, ttl 53, id 18334, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x5b54 (correct), seq 8703928:8705376, ack 1, win 9, options [nop,nop,TS val 3454222646 ecr 70471], length 1448
23:36:59.208874 IP (tos 0x0, ttl 100, id 18741, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0x0864), ack 8705376, win 21177, options [nop,nop,TS val 70535 ecr 3454222646], length 0
23:36:59.208989 IP (tos 0x0, ttl 53, id 18335, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x55ac (correct), seq 8705376:8706824, ack 1, win 9, options [nop,nop,TS val 3454222646 ecr 70471], length 1448
23:36:59.209108 IP (tos 0x0, ttl 53, id 18336, offset 0, flags [DF], proto TCP (6), length 1500)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [.], cksum 0x5004 (correct), seq 8706824:8708272, ack 1, win 9, options [nop,nop,TS val 3454222646 ecr 70471], length 1448
23:36:59.209119 IP (tos 0x0, ttl 100, id 18742, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xfd13), ack 8708272, win 21177, options [nop,nop,TS val 70535 ecr 3454222646], length 0
23:36:59.209184 IP (tos 0x0, ttl 53, id 18337, offset 0, flags [DF], proto TCP (6), length 992)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [P.], cksum 0x4c50 (correct), seq 8708272:8709212, ack 1, win 9, options [nop,nop,TS val 3454222646 ecr 70471], length 940
23:36:59.209214 IP (tos 0x0, ttl 100, id 18743, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xf966), ack 8709212, win 21177, options [nop,nop,TS val 70536 ecr 3454222646], length 0
23:36:59.209808 IP (tos 0x0, ttl 100, id 18744, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [F.], cksum 0x95fa (incorrect -> 0xf965), seq 1, ack 8709212, win 21177, options [nop,nop,TS val 70536 ecr 3454222646], length 0
23:36:59.273989 IP (tos 0x0, ttl 53, id 18338, offset 0, flags [DF], proto TCP (6), length 52)
90.130.66.198.80 > AA.BB.CC.XY.47140: Flags [F.], cksum 0x4c05 (correct), seq 8709212, ack 2, win 9, options [nop,nop,TS val 3454222662 ecr 70536], length 0
23:36:59.274009 IP (tos 0x0, ttl 100, id 18745, offset 0, flags [DF], proto TCP (6), length 52)
AA.BB.CC.XY.47140 > 90.130.66.198.80: Flags [.], cksum 0x95fa (incorrect -> 0xf914), ack 8709213, win 21177, options [nop,nop,TS val 70600 ecr 3454222662], length 0
8608 packets captured
9044 packets received by filter
418 packets dropped by kernel
- summary of overall throughput wget sees on that transfer
From: Eric Dumazet <hidden> Date: 2012-02-16 21:59:40
Le jeudi 16 février 2012 à 23:49 +0200, alekcejk@googlemail.com a
écrit :
В сообщении от Четверг 16 февраля 2012 13:19:58 вы написали:
quoted
On Thu, Feb 16, 2012 at 12:54 PM, [off-list ref] wrote:
I still think it would be useful to have these three pieces of data
for a slow/3.2.x transfer (from a geographically distant server) if
you have a sec:
- tcpdump of first 300 or so packets to see SYN/SYNACK options and RTT
quoted
- summary of overall throughput wget sees on that transfer
В сообщении от Четверг 16 февраля 2012 22:59:33 вы написали:
Le jeudi 16 février 2012 à 23:49 +0200, alekcejk@googlemail.com a
écrit :
quoted
В сообщении от Четверг 16 февраля 2012 13:19:58 вы написали:
quoted
On Thu, Feb 16, 2012 at 12:54 PM, [off-list ref] wrote:
I still think it would be useful to have these three pieces of data
for a slow/3.2.x transfer (from a geographically distant server) if
you have a sec:
- tcpdump of first 300 or so packets to see SYN/SYNACK options and RTT
- summary of overall throughput wget sees on that transfer
From: Eric Dumazet <hidden> Date: 2012-02-16 22:35:51
Le vendredi 17 février 2012 à 00:08 +0200, alekcejk@googlemail.com a
écrit :
В сообщении от Четверг 16 февраля 2012 22:59:33 вы написали:
quoted
Le jeudi 16 février 2012 à 23:49 +0200, alekcejk@googlemail.com a
écrit :
quoted
В сообщении от Четверг 16 февраля 2012 13:19:58 вы написали:
quoted
On Thu, Feb 16, 2012 at 12:54 PM, [off-list ref] wrote:
I still think it would be useful to have these three pieces of data
for a slow/3.2.x transfer (from a geographically distant server) if
you have a sec:
- tcpdump of first 300 or so packets to see SYN/SYNACK options and RTT
- summary of overall throughput wget sees on that transfer
This should help establish whether the receiver window is really the
limiting factor in the slow cases.
Is tweaking /proc/sys/net/ipv4/tcp_adv_win_scale changes the numbers ?
Yes.
quoted
try 1, -1 or -2
With 1 and -1 maximum speed increased to 6,99 M/s, with -2 decreased to 3,3 M/s.
Thats indeed the problem.
An incoming skb is considered as "good citizen" in term of memory usage
if its truesize is no more than
len + len/4 (if adv_win_scale == 2)
That was true when truesize was 1500+NET_SKB_PAD+sizeof(sk_buff),
but not true anymore when truesize is 2048+sizeof(sk_buff), or even more
when its 4096+sizeof(sk_buff)
So receiver doesnt increase rcv_ssthresh and cannot open its window.
tcp_grow_window() should be tweaked to :
1) Relax the requirements
2) Allow bigger increase in case of super packets (LRO/GRO)
On Thu, Feb 16, 2012 at 5:35 PM, Eric Dumazet [off-list ref] wrote:
An incoming skb is considered as "good citizen" in term of memory usage
if its truesize is no more than
len + len/4 (if adv_win_scale == 2)
That was true when truesize was 1500+NET_SKB_PAD+sizeof(sk_buff),
but not true anymore when truesize is 2048+sizeof(sk_buff), or even more
when its 4096+sizeof(sk_buff)
So receiver doesnt increase rcv_ssthresh and cannot open its window.
tcp_grow_window() should be tweaked to :
1) Relax the requirements
2) Allow bigger increase in case of super packets (LRO/GRO)
That sounds great. Is this something you're planning on tackling?
neal
And thanks, Alexey, for the detailed info.
The first tcpdump shows a SYN/SYNACK RTT of roughly 64ms, and the
second tcpdump shows a steady-state receive window of 21177* 16=338832
bytes. Together those imply that the receiver window is limiting
bandwidth to roughly (21177 * 16 bytes)/ 0.064sec ~= 5.0 Mbytes/sec.
This is pretty close to the throughput of 4.9Mbytes/sec that wget
reports, suggesting that indeed the receiver window was the limiting
factor here.
And Eric's proposed fix for this receiver window issue sounds like it
should take care of this.
neal
From: Eric Dumazet <hidden> Date: 2012-02-21 18:41:27
Le vendredi 17 février 2012 à 11:41 -0500, Neal Cardwell a écrit :
On Thu, Feb 16, 2012 at 5:35 PM, Eric Dumazet [off-list ref] wrote:
quoted
An incoming skb is considered as "good citizen" in term of memory usage
if its truesize is no more than
len + len/4 (if adv_win_scale == 2)
That was true when truesize was 1500+NET_SKB_PAD+sizeof(sk_buff),
but not true anymore when truesize is 2048+sizeof(sk_buff), or even more
when its 4096+sizeof(sk_buff)
So receiver doesnt increase rcv_ssthresh and cannot open its window.
tcp_grow_window() should be tweaked to :
1) Relax the requirements
2) Allow bigger increase in case of super packets (LRO/GRO)
That sounds great. Is this something you're planning on tackling?
Hmm, I thought about following (untested) patch :
Idea is to increase rcv_sshthresh by 2*len * (len/truesize), instead of
2*mss.
From: David Miller <davem@davemloft.net> Date: 2012-02-21 19:11:36
From: Eric Dumazet <redacted>
Date: Tue, 21 Feb 2012 19:41:23 +0100
Le vendredi 17 février 2012 à 11:41 -0500, Neal Cardwell a écrit :
quoted
On Thu, Feb 16, 2012 at 5:35 PM, Eric Dumazet [off-list ref] wrote:
quoted
An incoming skb is considered as "good citizen" in term of memory usage
if its truesize is no more than
len + len/4 (if adv_win_scale == 2)
That was true when truesize was 1500+NET_SKB_PAD+sizeof(sk_buff),
but not true anymore when truesize is 2048+sizeof(sk_buff), or even more
when its 4096+sizeof(sk_buff)
So receiver doesnt increase rcv_ssthresh and cannot open its window.
tcp_grow_window() should be tweaked to :
1) Relax the requirements
2) Allow bigger increase in case of super packets (LRO/GRO)
That sounds great. Is this something you're planning on tackling?
Hmm, I thought about following (untested) patch :
Idea is to increase rcv_sshthresh by 2*len * (len/truesize), instead of
2*mss.
This looks like a good start.
I think the core task is to seperate two things:
1) The test for "full size SKB" which erroneously is done using that
"X + (X/N)" formula.
To be quite honest, I think we don't care about this condition at
all. What we really care about is whether the frame was a full MSS
(or at least, close to it).
2) The growth calculation which does in fact need to be based upon
truesize because this determines what we'll need to do to make
more frames actually fit in the receive window given the witnessed
truesize ratio.
And it seems your patch takes care of #2 but not #1.
The error in the current code is that it tries to estimate what a
"good" truesize might look like with a very ad-hoc sysctl that is, at
best, magic. We should kill this sysctl and everything using it, and
therefore make our decisions on window growth purely based upon
skb->len and MSS.
A few thoughts:
(1) Currently __tcp_grow_window has a very large negative impact due
to quantization. AFAICT from inspecting the code, the rcv_ssthresh
converges to the following output values given the following input
skb->truesize/skb->len input values:
truesize/len rcv_ssthresh
------------ -------------
<= 4/3 3/4 * tcp_space()
<= 8/3 3/8 * sysctl_tcp_rmem[2]
<= 16/3 3/16 * sysctl_tcp_rmem[2]
<= 32/3 3/32 * sysctl_tcp_rmem[2]
...
As a sanity-check of this table, note that in the report above where
we got tcpdump traces for the beginning and end of the connection,
the receive window converged to 338832, which was 2208 bytes above
(3/8)*sysctl_tcp_rmem[2] for his configuration of sysctl_tcp_rmem[2]
= 897664.
It would be nice to get rid of this huge jump between truesize of
4/3*skb->len and 8/3*skb->len. Ideally we could make this
continuous?
(2) I don't think we want to scale the increment using truesize, but
rather calculate a cap using the truesize/skb->len ratio.
(3) We should use this cap to also cap the post-incremented value of
rcv_ssthresh, so the increment itself does not take us over the
target. (Again, note the example where the receive window ended up
about 2MSS above the target.)
(4) We should only request an ACK now if the rcv_ssthresh actually
increases.
With this in mind, this is the flavor of approach that occurs to me
(compiles, but not tested):
@@ -296,22 +296,14 @@ static void tcp_fixup_sndbuf(struct sock *sk)*incommonsituations.Otherwise,wehavetorelyonqueuecollapsing.*/-/* Slow part of check#2. */-staticint__tcp_grow_window(conststructsock*sk,conststructsk_buff*skb)+/* Slow part of check#2. Estimate a budget for how many bytes of+*receivewindowwecanaffordtoadvertiseatthecurrentratioof+*skb->lentoskb->truesize.+*/+staticu32tcp_rcv_ssthresh_budget(conststructsk_buff*skb){-structtcp_sock*tp=tcp_sk(sk);-/* Optimize this! */-inttruesize=tcp_win_from_space(skb->truesize)>>1;-intwindow=tcp_win_from_space(sysctl_tcp_rmem[2])>>1;--while(tp->rcv_ssthresh<=window){-if(truesize<=skb->len)-return2*inet_csk(sk)->icsk_ack.rcv_mss;--truesize>>=1;-window>>=1;-}-return0;+u32skb_budget=sysctl_tcp_rmem[2]/skb->truesize;+return(u32)(skb->len*skb_budget);}staticvoidtcp_grow_window(structsock*sk,conststructsk_buff*skb)
@@ -322,20 +314,25 @@ static void tcp_grow_window(struct sock *sk, const struct sk_buff *skb)if(tp->rcv_ssthresh<tp->window_clamp&&(int)tp->rcv_ssthresh<tcp_space(sk)&&!sk_under_memory_pressure(sk)){-intincr;-/* Check #2. Increase window, if skb with such overhead*willfittorcvbufinfuture.*/-if(tcp_win_from_space(skb->truesize)<=skb->len)-incr=2*tp->advmss;-else-incr=__tcp_grow_window(sk,skb);+u32rcv_ssthresh_budget=tcp_rcv_ssthresh_budget(skb);+if(tp->rcv_ssthresh<rcv_ssthresh_budget){+/* With GRO or LRO we may receive an skb of+*manyMSS.Toenablethesender'scwndto+*growatahealthypaceinslowstartwe+*mustopenthereceivewindowproportionally+*toskbsize.+*/+u32incr=skb->len;-if(incr){-tp->rcv_ssthresh=min(tp->rcv_ssthresh+incr,-tp->window_clamp);-inet_csk(sk)->icsk_ack.quick|=1;+u32rcv_ssthresh_cap=min(rcv_ssthresh_budget,tp->window_clamp);+u32rcv_ssthresh_now=min(tp->rcv_ssthresh+incr,rcv_ssthresh_cap);+if(tp->rcv_ssthresh!=rcv_ssthresh_now){+tp->rcv_ssthresh=rcv_ssthresh_now;+inet_csk(sk)->icsk_ack.quick|=1;+}}}}
From: Eric Dumazet <hidden> Date: 2012-02-22 07:36:42
Le mercredi 22 février 2012 à 00:51 -0500, Neal Cardwell a écrit :
A few thoughts:
(1) Currently __tcp_grow_window has a very large negative impact due
to quantization. AFAICT from inspecting the code, the rcv_ssthresh
converges to the following output values given the following input
skb->truesize/skb->len input values:
truesize/len rcv_ssthresh
------------ -------------
<= 4/3 3/4 * tcp_space()
<= 8/3 3/8 * sysctl_tcp_rmem[2]
<= 16/3 3/16 * sysctl_tcp_rmem[2]
<= 32/3 3/32 * sysctl_tcp_rmem[2]
...
As a sanity-check of this table, note that in the report above where
we got tcpdump traces for the beginning and end of the connection,
the receive window converged to 338832, which was 2208 bytes above
(3/8)*sysctl_tcp_rmem[2] for his configuration of sysctl_tcp_rmem[2]
= 897664.
It would be nice to get rid of this huge jump between truesize of
4/3*skb->len and 8/3*skb->len. Ideally we could make this
continuous?
This skb->truesize/skb->len affair is suspect if you ask me.
We increase rcv_ssthresh if we receive a 'good skb', but we have no
guarantee of future skbs.
When we are close to the converged value, we might spend some time in
tcp_grow_window() and decide not to increase rcv_sshthresh
IMHO a better way would be to look at integration values
(sk->sk_rmem_alloc) to not increase rcv_sshthresh if socket receive
queue is full of 'bad skbs'
(2) I don't think we want to scale the increment using truesize, but
rather calculate a cap using the truesize/skb->len ratio.
(3) We should use this cap to also cap the post-incremented value of
rcv_ssthresh, so the increment itself does not take us over the
target. (Again, note the example where the receive window ended up
about 2MSS above the target.)
Thats the 'oh we receive a good skb, lets add 2*MSS to rcv_sshthresh'
syndrom
(4) We should only request an ACK now if the rcv_ssthresh actually
increases.
Note that with your patch and 'good skb', rcv_ssthresh increases slower
than before (MSS increases instead of 2*MSS)
On Wed, Feb 22, 2012 at 2:36 AM, Eric Dumazet [off-list ref] wrote:
This skb->truesize/skb->len affair is suspect if you ask me.
We increase rcv_ssthresh if we receive a 'good skb', but we have no
guarantee of future skbs.
When we are close to the converged value, we might spend some time in
tcp_grow_window() and decide not to increase rcv_sshthresh
IMHO a better way would be to look at integration values
(sk->sk_rmem_alloc) to not increase rcv_sshthresh if socket receive
queue is full of 'bad skbs'
I agree that using a single skb->truesize/skb->len sample is
unfortunate, and it would be nice to have a larger sample size.
Looking at sk->sk_rmem_alloc would be an improvement, though I'm
guessing that often this will still be a small sample of just a couple
of packets, for the case of well-behaved apps that mostly keep up with
reading everything that arrives in their read buffer.
If we wanted a larger sample of truesize/len ratios, perhaps we'd want
some sort of exponentially weighted moving average of skb->truesize
and skb->len, or the ratio of the two. That could give us a larger
sample even for well-behaved apps that keep their read queues short.
But that is starting to seem like it's perhaps overkill.
Note that with your patch and 'good skb', rcv_ssthresh increases slower
than before (MSS increases instead of 2*MSS)
Good point. How about:
u32 incr = max(skb->len, 2U * tp->advmss);
Or do you think we'd want:
u32 incr = 2U * max(skb->len, tp->advmss);
neal
If we wanted a larger sample of truesize/len ratios, perhaps we'd want
some sort of exponentially weighted moving average of skb->truesize
and skb->len, or the ratio of the two. That could give us a larger
sample even for well-behaved apps that keep their read queues short.
But that is starting to seem like it's perhaps overkill.
I don't think it's overkill at all.
And I would do it per-device only on MSS or larger frames using
extremely coarse units to avoid flaps and encorage quick convergance.