UAMALLOWED and HTTPS (to select.worldpay.com)

Wed Apr 29 13:56:35 UTC 2009

Hi Johan,

Below is the output of "tcpdump -vvntttt -i ath0 dst 155.136.66.34" (where
that IP is select.worldpay.com).

I also tried do "telnet 155.136.66.34 443" but, strangely, this only give
me three lines of tcpdump output (and, because it's only three lines, I'll
put this dump first).

The "telnet 155.136.66.34 443" tcpdump output: -

reading from file worldpay.dump3.bin, link-type EN10MB (Ethernet)
2009-04-29 14:49:53.244750 IP (tos 0x10, ttl 64, id 37750, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.57861 > 155.136.66.34.443:
S, cksum 0xf99c (correct), 1669727335:1669727335(0) win 5840 <mss
1460,sackOK,timestamp 7968529 0,nop,wscale 6>
2009-04-29 14:49:53.281986 IP (tos 0x10, ttl 64, id 37751, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.57861 > 155.136.66.34.443:
., cksum 0x6767 (correct), 1669727336:1669727336(0) ack 1604530671 win
5840
2009-04-29 14:49:53.283181 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.57861 > 155.136.66.34.443:
R, cksum 0x0fd6 (correct), 1669727336:1669727336(0) win 0

The Firefox https://select.worldpay.com tcpdump output: -
reading from file worldpay.dump3.bin, link-type EN10MB (Ethernet)
2009-04-29 14:49:53.244750 IP (tos 0x10, ttl 64, id 37750, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.57861 > 155.136.66.34.443:
S, cksum 0xf99c (correct), 1669727335:1669727335(0) win 5840 <mss
1460,sackOK,timestamp 7968529 0,nop,wscale 6>
2009-04-29 14:49:53.281986 IP (tos 0x10, ttl 64, id 37751, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.57861 > 155.136.66.34.443:
., cksum 0x6767 (correct), 1669727336:1669727336(0) ack 1604530671 win
5840
2009-04-29 14:49:53.283181 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.57861 > 155.136.66.34.443:
R, cksum 0x0fd6 (correct), 1669727336:1669727336(0) win 0
root at dconn-note:/home/derek# tcpdump -vvvnttttr worldpay.dump.bin
reading from file worldpay.dump.bin, link-type EN10MB (Ethernet)
2009-04-29 14:42:23.073974 IP (tos 0x0, ttl 64, id 21757, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39625 > 155.136.66.34.443:
S, cksum 0x170a (correct), 3184364431:3184364431(0) win 5840 <mss
1460,sackOK,timestamp 7855986 0,nop,wscale 6>
2009-04-29 14:42:23.110206 IP (tos 0x0, ttl 64, id 21758, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39625 > 155.136.66.34.443:
., cksum 0x534f (correct), 3184364432:3184364432(0) ack 1583459605 win
5840
2009-04-29 14:42:23.110601 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39625 > 155.136.66.34.443:
R, cksum 0x75a2 (correct), 3184364432:3184364432(0) win 0
2009-04-29 14:42:23.111542 IP (tos 0x0, ttl 64, id 1650, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39626 > 155.136.66.34.443:
S, cksum 0xc943 (correct), 3188709641:3188709641(0) win 5840 <mss
1460,sackOK,timestamp 7855995 0,nop,wscale 6>
2009-04-29 14:42:23.149688 IP (tos 0x0, ttl 64, id 1651, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39626 > 155.136.66.34.443:
., cksum 0xfe3b (correct), 3188709642:3188709642(0) ack 1583461483 win
5840
2009-04-29 14:42:23.149975 IP (tos 0x0, ttl 64, id 1652, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39626 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:23.150579 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39626 > 155.136.66.34.443:
R, cksum 0x27e5 (correct), 3188709642:3188709642(0) win 0
2009-04-29 14:42:23.151023 IP (tos 0x0, ttl 64, id 26685, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39627 > 155.136.66.34.443:
S, cksum 0xea26 (correct), 3195189176:3195189176(0) win 5840 <mss
1460,sackOK,timestamp 7856005 0,nop,wscale 6>
2009-04-29 14:42:23.190122 IP (tos 0x0, ttl 64, id 26686, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39627 > 155.136.66.34.443:
., cksum 0x16f7 (correct), 3195189177:3195189177(0) ack 1583463581 win
5840
2009-04-29 14:42:23.190277 IP (tos 0x0, ttl 64, id 26687, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39627 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:23.193421 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39627 > 155.136.66.34.443:
R, cksum 0x48d2 (correct), 3195189177:3195189177(0) win 0
2009-04-29 14:42:23.193856 IP (tos 0x0, ttl 64, id 49910, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39628 > 155.136.66.34.443:
S, cksum 0x8487 (correct), 3193445734:3193445734(0) win 5840 <mss
1460,sackOK,timestamp 7856016 0,nop,wscale 6>
2009-04-29 14:42:23.226143 IP (tos 0x0, ttl 64, id 49911, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39628 > 155.136.66.34.443:
., cksum 0xa7cc (correct), 3193445735:3193445735(0) ack 1583466035 win
5840
2009-04-29 14:42:23.226579 IP (tos 0x0, ttl 64, id 49912, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39628 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:23.226809 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39628 > 155.136.66.34.443:
R, cksum 0xe33d (correct), 3193445735:3193445735(0) win 0
2009-04-29 14:42:23.227570 IP (tos 0x0, ttl 64, id 62360, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39629 > 155.136.66.34.443:
S, cksum 0x7619 (correct), 3189976064:3189976064(0) win 5840 <mss
1460,sackOK,timestamp 7856024 0,nop,wscale 6>
2009-04-29 14:42:23.259262 IP (tos 0x0, ttl 64, id 62361, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39629 > 155.136.66.34.443:
., cksum 0x9450 (correct), 3189976065:3189976065(0) ack 1583467337 win
5840
2009-04-29 14:42:23.259686 IP (tos 0x0, ttl 64, id 62362, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39629 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:23.261113 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39629 > 155.136.66.34.443:
R, cksum 0xd4d7 (correct), 3189976065:3189976065(0) win 0
2009-04-29 14:42:23.261764 IP (tos 0x0, ttl 64, id 47542, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39630 > 155.136.66.34.443:
S, cksum 0x3bad (correct), 3194906135:3194906135(0) win 5840 <mss
1460,sackOK,timestamp 7856033 0,nop,wscale 6>
2009-04-29 14:42:23.300490 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39629 > 155.136.66.34.443:
R, cksum 0xd486 (correct), 3189976146:3189976146(0) win 0
2009-04-29 14:42:23.303093 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39629 > 155.136.66.34.443:
R, cksum 0xd486 (correct), 3189976146:3189976146(0) win 0
2009-04-29 14:42:23.303529 IP (tos 0x0, ttl 64, id 47543, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39630 > 155.136.66.34.443:
., cksum 0x5377 (correct), 3194906136:3194906136(0) ack 1583468991 win
5840
2009-04-29 14:42:23.303905 IP (tos 0x0, ttl 64, id 47544, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39630 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:23.304377 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39630 > 155.136.66.34.443:
R, cksum 0x9a74 (correct), 3194906136:3194906136(0) win 0
2009-04-29 14:42:23.305069 IP (tos 0x0, ttl 64, id 62165, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39631 > 155.136.66.34.443:
S, cksum 0x7443 (correct), 3194629497:3194629497(0) win 5840 <mss
1460,sackOK,timestamp 7856044 0,nop,wscale 6>
2009-04-29 14:42:23.335767 IP (tos 0x0, ttl 64, id 62166, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39631 > 155.136.66.34.443:
., cksum 0x855a (correct), 3194629498:3194629498(0) ack 1583470717 win
5840
2009-04-29 14:42:23.336183 IP (tos 0x0, ttl 64, id 62167, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39631 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:23.338969 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39631 > 155.136.66.34.443:
R, cksum 0xd315 (correct), 3194629498:3194629498(0) win 0
2009-04-29 14:42:23.339781 IP (tos 0x0, ttl 64, id 31015, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39632 > 155.136.66.34.443:
S, cksum 0xfab4 (correct), 3201672851:3201672851(0) win 5840 <mss
1460,sackOK,timestamp 7856052 0,nop,wscale 6>
2009-04-29 14:42:23.373579 IP (tos 0x0, ttl 64, id 31016, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39632 > 155.136.66.34.443:
., cksum 0x071c (correct), 3201672852:3201672852(0) ack 1583471925 win
5840
2009-04-29 14:42:23.374013 IP (tos 0x0, ttl 64, id 31017, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39632 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:23.374197 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39632 > 155.136.66.34.443:
R, cksum 0x598f (correct), 3201672852:3201672852(0) win 0
2009-04-29 14:42:23.374938 IP (tos 0x0, ttl 64, id 14730, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39633 > 155.136.66.34.443:
S, cksum 0xbafe (correct), 3202213431:3202213431(0) win 5840 <mss
1460,sackOK,timestamp 7856061 0,nop,wscale 6>
2009-04-29 14:42:23.406160 IP (tos 0x0, ttl 64, id 14731, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39633 > 155.136.66.34.443:
., cksum 0xbecc (correct), 3202213432:3202213432(0) ack 1583474135 win
5840
2009-04-29 14:42:23.406568 IP (tos 0x0, ttl 64, id 14732, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39633 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:23.407633 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39633 > 155.136.66.34.443:
R, cksum 0x19e2 (correct), 3202213432:3202213432(0) win 0
2009-04-29 14:42:23.408198 IP (tos 0x0, ttl 64, id 51868, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39634 > 155.136.66.34.443:
S, cksum 0x8c8c (correct), 3189970266:3189970266(0) win 5840 <mss
1460,sackOK,timestamp 7856070 0,nop,wscale 6>
2009-04-29 14:42:23.446764 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39633 > 155.136.66.34.443:
R, cksum 0x1991 (correct), 3202213513:3202213513(0) win 0
2009-04-29 14:42:23.449090 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39633 > 155.136.66.34.443:
R, cksum 0x1991 (correct), 3202213513:3202213513(0) win 0
2009-04-29 14:42:23.449755 IP (tos 0x0, ttl 64, id 51869, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39634 > 155.136.66.34.443:
., cksum 0x85af (correct), 3189970267:3189970267(0) ack 1583476875 win
5840
2009-04-29 14:42:23.450092 IP (tos 0x0, ttl 64, id 51870, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39634 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:23.450385 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39634 > 155.136.66.34.443:
R, cksum 0xeb78 (correct), 3189970267:3189970267(0) win 0
2009-04-29 14:42:23.495457 IP (tos 0x0, ttl 64, id 53756, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39635 > 155.136.66.34.443:
S, cksum 0x936d (correct), 3193900583:3193900583(0) win 5840 <mss
1460,sackOK,timestamp 7856091 0,nop,wscale 6>
2009-04-29 14:42:23.524586 IP (tos 0x0, ttl 64, id 53757, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39635 > 155.136.66.34.443:
., cksum 0x7ce3 (correct), 3193900584:3193900584(0) ack 1583480909 win
5840
2009-04-29 14:42:23.524979 IP (tos 0x0, ttl 64, id 53758, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39635 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:23.526313 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39635 > 155.136.66.34.443:
R, cksum 0xf26e (correct), 3193900584:3193900584(0) win 0
2009-04-29 14:42:23.527009 IP (tos 0x0, ttl 64, id 10052, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39636 > 155.136.66.34.443:
S, cksum 0xa912 (correct), 3190880423:3190880423(0) win 5840 <mss
1460,sackOK,timestamp 7856099 0,nop,wscale 6>
2009-04-29 14:42:23.559286 IP (tos 0x0, ttl 64, id 10053, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39636 > 155.136.66.34.443:
., cksum 0x8eb0 (correct), 3190880424:3190880424(0) ack 1583481901 win
5840
2009-04-29 14:42:23.559556 IP (tos 0x0, ttl 64, id 10054, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39636 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:23.559834 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39636 > 155.136.66.34.443:
R, cksum 0x081c (correct), 3190880424:3190880424(0) win 0
2009-04-29 14:42:23.560268 IP (tos 0x0, ttl 64, id 50655, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39637 > 155.136.66.34.443:
S, cksum 0x8705 (correct), 3198687796:3198687796(0) win 5840 <mss
1460,sackOK,timestamp 7856107 0,nop,wscale 6>
2009-04-29 14:42:23.600806 IP (tos 0x0, ttl 64, id 50656, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39637 > 155.136.66.34.443:
., cksum 0x694f (correct), 3198687797:3198687797(0) ack 1583482761 win
5840
2009-04-29 14:42:23.601056 IP (tos 0x0, ttl 64, id 50657, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39637 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:23.601425 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39637 > 155.136.66.34.443:
R, cksum 0xe616 (correct), 3198687797:3198687797(0) win 0
2009-04-29 14:42:23.601776 IP (tos 0x0, ttl 64, id 38104, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39638 > 155.136.66.34.443:
S, cksum 0x5655 (correct), 3193064238:3193064238(0) win 5840 <mss
1460,sackOK,timestamp 7856118 0,nop,wscale 6>
2009-04-29 14:42:23.633068 IP (tos 0x0, ttl 64, id 38105, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39638 > 155.136.66.34.443:
., cksum 0x3370 (correct), 3193064239:3193064239(0) ack 1583484099 win
5840
2009-04-29 14:42:23.633463 IP (tos 0x0, ttl 64, id 38106, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39638 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:23.635702 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39638 > 155.136.66.34.443:
R, cksum 0xb571 (correct), 3193064239:3193064239(0) win 0
2009-04-29 14:42:23.636422 IP (tos 0x0, ttl 64, id 57842, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39639 > 155.136.66.34.443:
S, cksum 0x6324 (correct), 3197779469:3197779469(0) win 5840 <mss
1460,sackOK,timestamp 7856127 0,nop,wscale 6>
2009-04-29 14:42:23.667316 IP (tos 0x0, ttl 64, id 57843, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39639 > 155.136.66.34.443:
., cksum 0x3b40 (correct), 3197779470:3197779470(0) ack 1583485387 win
5840
2009-04-29 14:42:23.667575 IP (tos 0x0, ttl 64, id 57844, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39639 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:23.667987 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39639 > 155.136.66.34.443:
R, cksum 0xc249 (correct), 3197779470:3197779470(0) win 0
2009-04-29 14:42:23.668483 IP (tos 0x0, ttl 64, id 25120, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39640 > 155.136.66.34.443:
S, cksum 0x1e99 (correct), 3204612647:3204612647(0) win 5840 <mss
1460,sackOK,timestamp 7856135 0,nop,wscale 6>
2009-04-29 14:42:23.699223 IP (tos 0x0, ttl 64, id 25121, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39640 > 155.136.66.34.443:
., cksum 0xf108 (correct), 3204612648:3204612648(0) ack 1583486847 win
5840
2009-04-29 14:42:23.699454 IP (tos 0x0, ttl 64, id 25122, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39640 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:23.699683 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39640 > 155.136.66.34.443:
R, cksum 0x7dc6 (correct), 3204612648:3204612648(0) win 0
2009-04-29 14:42:23.700172 IP (tos 0x0, ttl 64, id 34593, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39641 > 155.136.66.34.443:
S, cksum 0x39ba (correct), 3201394478:3201394478(0) win 5840 <mss
1460,sackOK,timestamp 7856143 0,nop,wscale 6>
2009-04-29 14:42:23.739014 IP (tos 0x0, ttl 64, id 34594, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39641 > 155.136.66.34.443:
., cksum 0x07c2 (correct), 3201394479:3201394479(0) ack 1583487983 win
5840
2009-04-29 14:42:23.739253 IP (tos 0x0, ttl 64, id 34595, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39641 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:23.739408 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39641 > 155.136.66.34.443:
R, cksum 0x98ef (correct), 3201394479:3201394479(0) win 0
2009-04-29 14:42:23.739895 IP (tos 0x0, ttl 64, id 59295, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39642 > 155.136.66.34.443:
S, cksum 0x98d3 (correct), 3210020743:3210020743(0) win 5840 <mss
1460,sackOK,timestamp 7856152 0,nop,wscale 6>
2009-04-29 14:42:23.770729 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39642 > 155.136.66.34.443:
R, cksum 0xf811 (correct), 3210020744:3210020744(0) win 0
2009-04-29 14:42:23.772019 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39642 > 155.136.66.34.443:
R, cksum 0xf811 (correct), 3210020744:3210020744(0) win 0
2009-04-29 14:42:26.740876 IP (tos 0x0, ttl 64, id 41143, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39643 > 155.136.66.34.443:
S, cksum 0x57e6 (correct), 3240706992:3240706992(0) win 5840 <mss
1460,sackOK,timestamp 7856903 0,nop,wscale 6>
2009-04-29 14:42:26.771637 IP (tos 0x0, ttl 64, id 41144, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39643 > 155.136.66.34.443:
., cksum 0x2bf6 (correct), 3240706993:3240706993(0) ack 1583618269 win
5840
2009-04-29 14:42:26.772182 IP (tos 0x0, ttl 64, id 41145, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39643 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:26.772242 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39643 > 155.136.66.34.443:
R, cksum 0xba13 (correct), 3240706993:3240706993(0) win 0
2009-04-29 14:42:26.772989 IP (tos 0x0, ttl 64, id 38625, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39644 > 155.136.66.34.443:
S, cksum 0x24b8 (correct), 3255858670:3255858670(0) win 5840 <mss
1460,sackOK,timestamp 7856911 0,nop,wscale 6>
2009-04-29 14:42:26.803655 IP (tos 0x0, ttl 64, id 38626, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39644 > 155.136.66.34.443:
., cksum 0xf1bd (correct), 3255858671:3255858671(0) ack 1583620079 win
5840
2009-04-29 14:42:26.803892 IP (tos 0x0, ttl 64, id 38627, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39644 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:26.806045 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39644 > 155.136.66.34.443:
R, cksum 0x86ed (correct), 3255858671:3255858671(0) win 0
2009-04-29 14:42:26.806549 IP (tos 0x0, ttl 64, id 24031, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39645 > 155.136.66.34.443:
S, cksum 0xdc0f (correct), 3252010696:3252010696(0) win 5840 <mss
1460,sackOK,timestamp 7856919 0,nop,wscale 6>
2009-04-29 14:42:26.840977 IP (tos 0x0, ttl 64, id 24032, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39645 > 155.136.66.34.443:
., cksum 0xa4ab (correct), 3252010697:3252010697(0) ack 1583621217 win
5840
2009-04-29 14:42:26.841282 IP (tos 0x0, ttl 64, id 24033, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39645 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:26.843606 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39645 > 155.136.66.34.443:
R, cksum 0x3e4d (correct), 3252010697:3252010697(0) win 0
2009-04-29 14:42:26.844045 IP (tos 0x0, ttl 64, id 64303, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39646 > 155.136.66.34.443:
S, cksum 0x8292 (correct), 3254917135:3254917135(0) win 5840 <mss
1460,sackOK,timestamp 7856928 0,nop,wscale 6>
2009-04-29 14:42:26.873253 IP (tos 0x0, ttl 64, id 64304, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39646 > 155.136.66.34.443:
., cksum 0x46ab (correct), 3254917136:3254917136(0) ack 1583622381 win
5840
2009-04-29 14:42:26.873916 IP (tos 0x0, ttl 64, id 64305, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39646 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:26.875675 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39646 > 155.136.66.34.443:
R, cksum 0xe4d8 (correct), 3254917136:3254917136(0) win 0
2009-04-29 14:42:26.876329 IP (tos 0x0, ttl 64, id 33681, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39647 > 155.136.66.34.443:
S, cksum 0x39cf (correct), 3255984312:3255984312(0) win 5840 <mss
1460,sackOK,timestamp 7856937 0,nop,wscale 6>
2009-04-29 14:42:26.911793 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39646 > 155.136.66.34.443:
R, cksum 0xe487 (correct), 3254917217:3254917217(0) win 0
2009-04-29 14:42:26.912459 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39646 > 155.136.66.34.443:
R, cksum 0xe487 (correct), 3254917217:3254917217(0) win 0
2009-04-29 14:42:26.912650 IP (tos 0x0, ttl 64, id 33682, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39647 > 155.136.66.34.443:
., cksum 0xf8d4 (correct), 3255984313:3255984313(0) ack 1583623689 win
5840
2009-04-29 14:42:26.912968 IP (tos 0x0, ttl 64, id 33683, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39647 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:26.913234 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39647 > 155.136.66.34.443:
R, cksum 0x9c1e (correct), 3255984313:3255984313(0) win 0
2009-04-29 14:42:26.913971 IP (tos 0x0, ttl 64, id 27545, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39648 > 155.136.66.34.443:
S, cksum 0x1198 (correct), 3259795627:3259795627(0) win 5840 <mss
1460,sackOK,timestamp 7856946 0,nop,wscale 6>
2009-04-29 14:42:26.949845 IP (tos 0x0, ttl 64, id 27546, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39648 > 155.136.66.34.443:
., cksum 0xc8c4 (correct), 3259795628:3259795628(0) ack 1583625707 win
5840
2009-04-29 14:42:26.950296 IP (tos 0x0, ttl 64, id 27547, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39648 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:26.950855 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39648 > 155.136.66.34.443:
R, cksum 0x73f0 (correct), 3259795628:3259795628(0) win 0
2009-04-29 14:42:26.951396 IP (tos 0x0, ttl 64, id 11405, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39649 > 155.136.66.34.443:
S, cksum 0xca76 (correct), 3260600246:3260600246(0) win 5840 <mss
1460,sackOK,timestamp 7856955 0,nop,wscale 6>
2009-04-29 14:42:26.981823 IP (tos 0x0, ttl 64, id 11406, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39649 > 155.136.66.34.443:
., cksum 0x7c5e (correct), 3260600247:3260600247(0) ack 1583627065 win
5840
2009-04-29 14:42:26.982206 IP (tos 0x0, ttl 64, id 11407, offset 0, flags
[DF], proto TCP (6), length 121) 192.168.182.8.39649 > 155.136.66.34.443:
P 0:81(81) ack 1 win 5840
2009-04-29 14:42:26.982411 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39649 > 155.136.66.34.443:
R, cksum 0x2cd8 (correct), 3260600247:3260600247(0) win 0
2009-04-29 14:42:26.982991 IP (tos 0x0, ttl 64, id 3433, offset 0, flags
[DF], proto TCP (6), length 60) 192.168.182.8.39650 > 155.136.66.34.443:
S, cksum 0xacd2 (correct), 3246386730:3246386730(0) win 5840 <mss
1460,sackOK,timestamp 7856963 0,nop,wscale 6>
2009-04-29 14:42:27.015292 IP (tos 0x0, ttl 64, id 3434, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39650 > 155.136.66.34.443:
., cksum 0x58c8 (correct), 3246386731:3246386731(0) ack 1583628595 win
5840
2009-04-29 14:42:27.015745 IP (tos 0x0, ttl 64, id 0, offset 0, flags
[DF], proto TCP (6), length 40) 192.168.182.8.39650 > 155.136.66.34.443:
R, cksum 0x0f3c (correct), 3246386731:3246386731(0) win 0

-- 
Derek C
In Ireland