ï»¿
Your IP : 172.28.240.42

Current File : //home/striker/tcpdump3.log
17:35:45.880401 IP 172.28.240.3.ssh > 172.30.237.120.51250: Flags [P.], seq 1559183969:1559184177, ack 4017169970, win 664, length 208
17:35:45.880993 IP 172.28.240.3.47437 > web-server.e-nk.ru.domain: 54887+ PTR? 120.237.30.172.in-addr.arpa. (45)
17:35:45.881389 IP web-server.e-nk.ru.domain > 172.28.240.3.47437: 54887 NXDomain* 0/1/0 (99)
17:35:45.881424 IP 172.30.237.120.51250 > 172.28.240.3.ssh: Flags [.], ack 208, win 8208, length 0
17:35:45.881543 IP 172.28.240.3.54592 > web-server.e-nk.ru.domain: 3047+ PTR? 3.240.28.172.in-addr.arpa. (43)
17:35:45.881906 IP web-server.e-nk.ru.domain > 172.28.240.3.54592: 3047 NXDomain* 0/1/0 (97)
17:35:45.915178 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [.], ack 2960269856, win 1067, options [nop,nop,TS val 123568 ecr 71198545], length 0
17:35:45.915404 IP 172.28.240.3.35506 > web-server.e-nk.ru.domain: 56083+ PTR? 31.240.28.172.in-addr.arpa. (44)
17:35:45.915798 IP web-server.e-nk.ru.domain > 172.28.240.3.35506: 56083 NXDomain* 0/1/0 (98)
17:35:45.968845 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [P.], seq 0:151, ack 1, win 1067, options [nop,nop,TS val 123581 ecr 71198545], length 151
17:35:45.969423 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [P.], seq 1:145, ack 151, win 778, options [nop,nop,TS val 71198568 ecr 123581], length 144
17:35:45.969451 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [.], ack 145, win 1112, options [nop,nop,TS val 123581 ecr 71198568], length 0
17:35:45.972861 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [P.], seq 151:308, ack 145, win 1112, options [nop,nop,TS val 123582 ecr 71198568], length 157
17:35:45.973065 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [.], seq 145:1593, ack 308, win 801, options [nop,nop,TS val 71198569 ecr 123582], length 1448
17:35:45.973076 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [P.], seq 1593:2356, ack 308, win 801, options [nop,nop,TS val 71198569 ecr 123582], length 763
17:35:45.973088 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [.], ack 2356, win 1180, options [nop,nop,TS val 123582 ecr 71198569], length 0
17:35:45.973283 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [P.], seq 308:468, ack 2356, win 1180, options [nop,nop,TS val 123582 ecr 71198569], length 160
17:35:45.973360 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [.], seq 2356:3804, ack 468, win 823, options [nop,nop,TS val 71198569 ecr 123582], length 1448
17:35:45.973368 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [P.], seq 3804:4582, ack 468, win 823, options [nop,nop,TS val 71198569 ecr 123582], length 778
17:35:45.973385 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [.], ack 4582, win 1248, options [nop,nop,TS val 123582 ecr 71198569], length 0
17:35:45.973728 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [P.], seq 468:1820, ack 4582, win 1248, options [nop,nop,TS val 123582 ecr 71198569], length 1352
17:35:45.974597 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [.], seq 4582:6030, ack 1820, win 846, options [nop,nop,TS val 71198569 ecr 123582], length 1448
17:35:45.974608 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [P.], seq 6030:6825, ack 1820, win 846, options [nop,nop,TS val 71198569 ecr 123582], length 795
17:35:45.974623 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [.], ack 6825, win 1315, options [nop,nop,TS val 123582 ecr 71198569], length 0
17:35:45.976752 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [P.], seq 1820:2083, ack 6825, win 1315, options [nop,nop,TS val 123583 ecr 71198569], length 263
17:35:45.976885 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [P.], seq 6825:6887, ack 2083, win 869, options [nop,nop,TS val 71198570 ecr 123583], length 62
17:35:45.978955 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [P.], seq 2083:2145, ack 6887, win 1315, options [nop,nop,TS val 123583 ecr 71198570], length 62
17:35:45.979120 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [P.], seq 6887:6970, ack 2145, win 869, options [nop,nop,TS val 71198570 ecr 123583], length 83
17:35:45.982135 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [P.], seq 2145:2312, ack 6970, win 1315, options [nop,nop,TS val 123584 ecr 71198570], length 167
17:35:45.982308 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [P.], seq 6970:7311, ack 2312, win 891, options [nop,nop,TS val 71198571 ecr 123584], length 341
17:35:45.984359 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [P.], seq 2312:3279, ack 7311, win 1361, options [nop,nop,TS val 123585 ecr 71198571], length 967
17:35:45.984552 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [.], seq 7311:10207, ack 3279, win 914, options [nop,nop,TS val 71198572 ecr 123585], length 2896
17:35:45.984563 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [P.], seq 10207:10902, ack 3279, win 914, options [nop,nop,TS val 71198572 ecr 123585], length 695
17:35:45.984580 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [.], ack 10902, win 1444, options [nop,nop,TS val 123585 ecr 71198572], length 0
17:35:45.984852 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [P.], seq 3279:3615, ack 10902, win 1444, options [nop,nop,TS val 123585 ecr 71198572], length 336
17:35:45.985461 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [.], seq 10902:12350, ack 3615, win 936, options [nop,nop,TS val 71198572 ecr 123585], length 1448
17:35:45.985474 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [P.], seq 12350:13434, ack 3615, win 936, options [nop,nop,TS val 71198572 ecr 123585], length 1084
17:35:45.985489 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [.], ack 13434, win 1444, options [nop,nop,TS val 123585 ecr 71198572], length 0
17:35:45.987303 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [.], seq 3615:5063, ack 13434, win 1444, options [nop,nop,TS val 123586 ecr 71198572], length 1448
17:35:45.987318 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [P.], seq 5063:5158, ack 13434, win 1444, options [nop,nop,TS val 123586 ecr 71198572], length 95
17:35:45.987371 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [.], ack 5158, win 959, options [nop,nop,TS val 71198572 ecr 123586], length 0
17:35:46.034698 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [P.], seq 13434:13493, ack 5158, win 959, options [nop,nop,TS val 71198584 ecr 123586], length 59
17:35:46.034997 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [.], seq 5158:6606, ack 13493, win 1444, options [nop,nop,TS val 123597 ecr 71198584], length 1448
17:35:46.035030 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [P.], seq 6606:7618, ack 13493, win 1444, options [nop,nop,TS val 123597 ecr 71198584], length 1012
17:35:46.035197 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [.], ack 7618, win 1004, options [nop,nop,TS val 71198584 ecr 123597], length 0
17:35:47.188253 IP 172.28.240.254.41970 > 172.28.240.3.http: Flags [S], seq 1722400571, win 14600, options [mss 1460,sackOK,TS val 80531004 ecr 0,nop,wscale 7], length 0
17:35:47.188291 IP 172.28.240.3.http > 172.28.240.254.41970: Flags [S.], seq 749599157, ack 1722400572, win 28960, options [mss 1460,sackOK,TS val 123886 ecr 80531004,nop,wscale 7], length 0
17:35:47.188483 IP 172.28.240.3.51781 > web-server.e-nk.ru.domain: 28141+ PTR? 254.240.28.172.in-addr.arpa. (45)
17:35:47.189049 IP web-server.e-nk.ru.domain > 172.28.240.3.51781: 28141 NXDomain* 0/1/0 (99)
17:35:47.190072 IP 172.28.240.254.41970 > 172.28.240.3.http: Flags [.], ack 1, win 115, options [nop,nop,TS val 80531004 ecr 123886], length 0
17:35:47.190313 IP 172.28.240.254.41970 > 172.28.240.3.http: Flags [P.], seq 1:525, ack 1, win 115, options [nop,nop,TS val 80531004 ecr 123886], length 524: HTTP: GET / HTTP/1.1
17:35:47.190331 IP 172.28.240.3.http > 172.28.240.254.41970: Flags [.], ack 525, win 235, options [nop,nop,TS val 123886 ecr 80531004], length 0
17:35:47.191000 IP 172.28.240.3.http > 172.28.240.254.41970: Flags [P.], seq 1:496, ack 525, win 235, options [nop,nop,TS val 123886 ecr 80531004], length 495: HTTP: HTTP/1.1 301 Moved Permanently
17:35:47.193633 IP 172.28.240.254.41970 > 172.28.240.3.http: Flags [.], ack 496, win 123, options [nop,nop,TS val 80531005 ecr 123886], length 0
17:35:47.249403 IP 172.28.240.254.53030 > 172.28.240.3.https: Flags [S], seq 1347753223, win 14600, options [mss 1460,sackOK,TS val 80531019 ecr 0,nop,wscale 7], length 0
17:35:47.249445 IP 172.28.240.3.https > 172.28.240.254.53030: Flags [S.], seq 2161116621, ack 1347753224, win 28960, options [mss 1460,sackOK,TS val 123901 ecr 80531019,nop,wscale 7], length 0
17:35:47.251242 IP 172.28.240.254.53030 > 172.28.240.3.https: Flags [.], ack 1, win 115, options [nop,nop,TS val 80531019 ecr 123901], length 0
17:35:47.251297 IP 172.28.240.254.53030 > 172.28.240.3.https: Flags [P.], seq 1:167, ack 1, win 115, options [nop,nop,TS val 80531020 ecr 123901], length 166
17:35:47.251329 IP 172.28.240.3.https > 172.28.240.254.53030: Flags [.], ack 167, win 235, options [nop,nop,TS val 123902 ecr 80531020], length 0
17:35:47.254526 IP 172.28.240.3.https > 172.28.240.254.53030: Flags [.], seq 1:2897, ack 167, win 235, options [nop,nop,TS val 123902 ecr 80531020], length 2896
17:35:47.254542 IP 172.28.240.3.https > 172.28.240.254.53030: Flags [P.], seq 2897:3257, ack 167, win 235, options [nop,nop,TS val 123902 ecr 80531020], length 360
17:35:47.256730 IP 172.28.240.254.53030 > 172.28.240.3.https: Flags [.], ack 1449, win 137, options [nop,nop,TS val 80531021 ecr 123902], length 0
17:35:47.258279 IP 172.28.240.254.53030 > 172.28.240.3.https: Flags [.], ack 3257, win 165, options [nop,nop,TS val 80531021 ecr 123902], length 0
17:35:47.285134 IP 172.28.240.254.53030 > 172.28.240.3.https: Flags [P.], seq 167:293, ack 3257, win 165, options [nop,nop,TS val 80531028 ecr 123902], length 126
17:35:47.285538 IP 172.28.240.3.https > 172.28.240.254.53030: Flags [P.], seq 3257:3531, ack 293, win 235, options [nop,nop,TS val 123910 ecr 80531028], length 274
17:35:47.312790 IP 172.28.240.254.53030 > 172.28.240.3.https: Flags [P.], seq 293:711, ack 3531, win 188, options [nop,nop,TS val 80531035 ecr 123910], length 418
17:35:47.351218 IP 172.28.240.3.https > 172.28.240.254.53030: Flags [.], ack 711, win 243, options [nop,nop,TS val 123927 ecr 80531035], length 0
17:35:47.385362 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [S], seq 1341086846, win 29200, options [mss 1460,sackOK,TS val 123935 ecr 0,nop,wscale 7], length 0
17:35:47.385565 IP 172.28.240.31.mysql > 172.28.240.3.59192: Flags [S.], seq 2630004657, ack 1341086847, win 28960, options [mss 1460,sackOK,TS val 71198922 ecr 123935,nop,wscale 7], length 0
17:35:47.385601 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [.], ack 1, win 229, options [nop,nop,TS val 123935 ecr 71198922], length 0
17:35:47.386021 IP 172.28.240.31.mysql > 172.28.240.3.59192: Flags [P.], seq 1:96, ack 1, win 227, options [nop,nop,TS val 71198922 ecr 123935], length 95
17:35:47.386039 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [.], ack 96, win 229, options [nop,nop,TS val 123935 ecr 71198922], length 0
17:35:47.386092 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [P.], seq 1:90, ack 96, win 229, options [nop,nop,TS val 123935 ecr 71198922], length 89
17:35:47.386144 IP 172.28.240.31.mysql > 172.28.240.3.59192: Flags [.], ack 90, win 227, options [nop,nop,TS val 71198922 ecr 123935], length 0
17:35:47.386203 IP 172.28.240.31.mysql > 172.28.240.3.59192: Flags [P.], seq 96:107, ack 90, win 227, options [nop,nop,TS val 71198922 ecr 123935], length 11
17:35:47.386234 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [P.], seq 90:111, ack 107, win 229, options [nop,nop,TS val 123935 ecr 71198922], length 21
17:35:47.386325 IP 172.28.240.31.mysql > 172.28.240.3.59192: Flags [P.], seq 107:118, ack 111, win 227, options [nop,nop,TS val 71198922 ecr 123935], length 11
17:35:47.386435 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [S], seq 3343753508, win 29200, options [mss 1460,sackOK,TS val 123935 ecr 0,nop,wscale 7], length 0
17:35:47.386507 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [S.], seq 2603404580, ack 3343753509, win 28960, options [mss 1460,sackOK,TS val 71198922 ecr 123935,nop,wscale 7], length 0
17:35:47.386532 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [.], ack 1, win 229, options [nop,nop,TS val 123935 ecr 71198922], length 0
17:35:47.386844 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 1:96, ack 1, win 227, options [nop,nop,TS val 71198922 ecr 123935], length 95
17:35:47.386855 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [.], ack 96, win 229, options [nop,nop,TS val 123935 ecr 71198922], length 0
17:35:47.386924 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 1:90, ack 96, win 229, options [nop,nop,TS val 123935 ecr 71198922], length 89
17:35:47.386959 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], ack 90, win 227, options [nop,nop,TS val 71198922 ecr 123935], length 0
17:35:47.386976 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 96:107, ack 90, win 227, options [nop,nop,TS val 71198922 ecr 123935], length 11
17:35:47.387007 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 90:111, ack 107, win 229, options [nop,nop,TS val 123935 ecr 71198922], length 21
17:35:47.387060 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 107:118, ack 111, win 227, options [nop,nop,TS val 71198922 ecr 123935], length 11
17:35:47.387146 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 111:118, ack 118, win 229, options [nop,nop,TS val 123935 ecr 71198922], length 7
17:35:47.387185 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 118:127, ack 118, win 227, options [nop,nop,TS val 71198922 ecr 123935], length 9
17:35:47.387231 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 118:139, ack 127, win 229, options [nop,nop,TS val 123936 ecr 71198922], length 21
17:35:47.387287 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 127:138, ack 139, win 227, options [nop,nop,TS val 71198922 ecr 123936], length 11
17:35:47.387500 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 139:188, ack 138, win 229, options [nop,nop,TS val 123936 ecr 71198922], length 49
17:35:47.387560 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 138:149, ack 188, win 227, options [nop,nop,TS val 71198922 ecr 123936], length 11
17:35:47.387605 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 188:209, ack 149, win 229, options [nop,nop,TS val 123936 ecr 71198922], length 21
17:35:47.387665 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 149:160, ack 209, win 227, options [nop,nop,TS val 71198922 ecr 123936], length 11
17:35:47.387714 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 209:258, ack 160, win 229, options [nop,nop,TS val 123936 ecr 71198922], length 49
17:35:47.387767 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 160:171, ack 258, win 227, options [nop,nop,TS val 71198922 ecr 123936], length 11
17:35:47.387807 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [P.], seq 111:118, ack 118, win 229, options [nop,nop,TS val 123936 ecr 71198922], length 7
17:35:47.387887 IP 172.28.240.31.mysql > 172.28.240.3.59192: Flags [P.], seq 118:127, ack 118, win 227, options [nop,nop,TS val 71198922 ecr 123936], length 9
17:35:47.387923 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [P.], seq 118:190, ack 127, win 229, options [nop,nop,TS val 123936 ecr 71198922], length 72
17:35:47.388074 IP 172.28.240.31.mysql > 172.28.240.3.59192: Flags [P.], seq 127:230, ack 190, win 227, options [nop,nop,TS val 71198923 ecr 123936], length 103
17:35:47.389740 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [P.], seq 190:378, ack 230, win 229, options [nop,nop,TS val 123936 ecr 71198923], length 188
17:35:47.395239 IP 172.28.240.31.mysql > 172.28.240.3.59192: Flags [P.], seq 230:348, ack 378, win 235, options [nop,nop,TS val 71198924 ecr 123936], length 118
17:35:47.399045 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 258:1312, ack 171, win 229, options [nop,nop,TS val 123938 ecr 71198922], length 1054
17:35:47.399337 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 171:678, ack 1312, win 243, options [nop,nop,TS val 71198925 ecr 123938], length 507
17:35:47.401551 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 1312:1369, ack 678, win 237, options [nop,nop,TS val 123939 ecr 71198925], length 57
17:35:47.401650 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 678:786, ack 1369, win 243, options [nop,nop,TS val 71198926 ecr 123939], length 108
17:35:47.405848 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 1369:1575, ack 786, win 237, options [nop,nop,TS val 123940 ecr 71198926], length 206
17:35:47.406095 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 786:2139, ack 1575, win 260, options [nop,nop,TS val 71198927 ecr 123940], length 1353
17:35:47.406465 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 1575:1893, ack 2139, win 260, options [nop,nop,TS val 123940 ecr 71198927], length 318
17:35:47.407220 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 2139:2191, ack 1893, win 276, options [nop,nop,TS val 71198927 ecr 123940], length 52
17:35:47.407347 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 1893:2366, ack 2191, win 260, options [nop,nop,TS val 123941 ecr 71198927], length 473
17:35:47.435178 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [.], ack 348, win 229, options [nop,nop,TS val 123948 ecr 71198924], length 0
17:35:47.444047 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], ack 2366, win 293, options [nop,nop,TS val 71198937 ecr 123941], length 0
17:35:47.445877 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 2191:2210, ack 2366, win 293, options [nop,nop,TS val 71198937 ecr 123941], length 19
17:35:47.446534 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 2366:2708, ack 2210, win 260, options [nop,nop,TS val 123950 ecr 71198937], length 342
17:35:47.446622 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], ack 2708, win 309, options [nop,nop,TS val 71198937 ecr 123950], length 0
17:35:47.446914 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 2210:2262, ack 2708, win 309, options [nop,nop,TS val 71198937 ecr 123950], length 52
17:35:47.447177 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 2708:2910, ack 2262, win 260, options [nop,nop,TS val 123950 ecr 71198937], length 202
17:35:47.447528 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 2262:2314, ack 2910, win 326, options [nop,nop,TS val 71198937 ecr 123950], length 52
17:35:47.447687 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 2910:3137, ack 2314, win 260, options [nop,nop,TS val 123951 ecr 71198937], length 227
17:35:47.451126 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 2314:2505, ack 3137, win 342, options [nop,nop,TS val 71198938 ecr 123951], length 191
17:35:47.451320 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 3137:3220, ack 2505, win 281, options [nop,nop,TS val 123952 ecr 71198938], length 83
17:35:47.451473 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 2505:2557, ack 3220, win 342, options [nop,nop,TS val 71198938 ecr 123952], length 52
17:35:47.451589 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 3220:3365, ack 2557, win 281, options [nop,nop,TS val 123952 ecr 71198938], length 145
17:35:47.451754 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 2557:2609, ack 3365, win 358, options [nop,nop,TS val 71198938 ecr 123952], length 52
17:35:47.451859 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 3365:3448, ack 2609, win 281, options [nop,nop,TS val 123952 ecr 71198938], length 83
17:35:47.452340 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 2609:2661, ack 3448, win 358, options [nop,nop,TS val 71198939 ecr 123952], length 52
17:35:47.452485 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 3448:3610, ack 2661, win 281, options [nop,nop,TS val 123952 ecr 71198939], length 162
17:35:47.453052 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 2661:2713, ack 3610, win 375, options [nop,nop,TS val 71198939 ecr 123952], length 52
17:35:47.453240 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 3610:3785, ack 2713, win 281, options [nop,nop,TS val 123952 ecr 71198939], length 175
17:35:47.474477 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 2713:2765, ack 3785, win 391, options [nop,nop,TS val 71198944 ecr 123952], length 52
17:35:47.474658 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 3785:4287, ack 2765, win 281, options [nop,nop,TS val 123957 ecr 71198944], length 502
17:35:47.491178 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 2765:2817, ack 4287, win 408, options [nop,nop,TS val 71198948 ecr 123957], length 52
17:35:47.491446 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 4287:4347, ack 2817, win 281, options [nop,nop,TS val 123962 ecr 71198948], length 60
17:35:47.500919 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 2817:2869, ack 4347, win 408, options [nop,nop,TS val 71198951 ecr 123962], length 52
17:35:47.501240 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 4347:4451, ack 2869, win 281, options [nop,nop,TS val 123964 ecr 71198951], length 104
17:35:47.501584 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 2869:2921, ack 4451, win 408, options [nop,nop,TS val 71198951 ecr 123964], length 52
17:35:47.501802 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 4451:4507, ack 2921, win 281, options [nop,nop,TS val 123964 ecr 71198951], length 56
17:35:47.501956 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 2921:2973, ack 4507, win 408, options [nop,nop,TS val 71198951 ecr 123964], length 52
17:35:47.502095 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 4507:4603, ack 2973, win 281, options [nop,nop,TS val 123964 ecr 71198951], length 96
17:35:47.502378 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 2973:3025, ack 4603, win 408, options [nop,nop,TS val 71198951 ecr 123964], length 52
17:35:47.502654 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 4603:5968, ack 3025, win 281, options [nop,nop,TS val 123964 ecr 71198951], length 1365
17:35:47.502811 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 3025:3077, ack 5968, win 431, options [nop,nop,TS val 71198951 ecr 123964], length 52
17:35:47.517373 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 5968:6261, ack 3077, win 281, options [nop,nop,TS val 123968 ecr 71198951], length 293
17:35:47.517573 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 3077:3563, ack 6261, win 452, options [nop,nop,TS val 71198955 ecr 123968], length 486
17:35:47.517754 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [.], seq 6261:7709, ack 3563, win 302, options [nop,nop,TS val 123968 ecr 71198955], length 1448
17:35:47.517764 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 7709:8667, ack 3563, win 302, options [nop,nop,TS val 123968 ecr 71198955], length 958
17:35:47.517833 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], ack 8667, win 497, options [nop,nop,TS val 71198955 ecr 123968], length 0
17:35:47.598151 IP 172.28.240.3.http > 172.28.240.254.41946: Flags [F.], seq 2295225756, ack 1163242502, win 235, options [nop,nop,TS val 123988 ecr 80523599], length 0
17:35:47.599957 IP 172.28.240.254.41946 > 172.28.240.3.http: Flags [F.], seq 1, ack 1, win 123, options [nop,nop,TS val 80531107 ecr 123988], length 0
17:35:47.599973 IP 172.28.240.3.http > 172.28.240.254.41946: Flags [.], ack 2, win 235, options [nop,nop,TS val 123989 ecr 80531107], length 0
17:35:47.680453 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], seq 3563:5011, ack 8667, win 497, options [nop,nop,TS val 71198996 ecr 123968], length 1448
17:35:47.680477 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 5011:5213, ack 8667, win 497, options [nop,nop,TS val 71198996 ecr 123968], length 202
17:35:47.680498 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [.], ack 5213, win 347, options [nop,nop,TS val 124009 ecr 71198996], length 0
17:35:47.682170 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 8667:9087, ack 5213, win 347, options [nop,nop,TS val 124009 ecr 71198996], length 420
17:35:47.682255 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], seq 5213:8109, ack 9087, win 520, options [nop,nop,TS val 71198996 ecr 124009], length 2896
17:35:47.682267 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], seq 8109:11005, ack 9087, win 520, options [nop,nop,TS val 71198996 ecr 124009], length 2896
17:35:47.682270 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 11005:11173, ack 9087, win 520, options [nop,nop,TS val 71198996 ecr 124009], length 168
17:35:47.682286 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [.], ack 11005, win 438, options [nop,nop,TS val 124009 ecr 71198996], length 0
17:35:47.686063 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 9087:10054, ack 11173, win 483, options [nop,nop,TS val 124010 ecr 71198996], length 967
17:35:47.686135 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], seq 11173:14069, ack 10054, win 542, options [nop,nop,TS val 71198997 ecr 124010], length 2896
17:35:47.686146 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 14069:14710, ack 10054, win 542, options [nop,nop,TS val 71198997 ecr 124010], length 641
17:35:47.686160 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [.], ack 14710, win 573, options [nop,nop,TS val 124010 ecr 71198997], length 0
17:35:47.688006 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 10054:10214, ack 14710, win 573, options [nop,nop,TS val 124011 ecr 71198997], length 160
17:35:47.688070 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], seq 14710:16158, ack 10214, win 565, options [nop,nop,TS val 71198998 ecr 124011], length 1448
17:35:47.688080 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 16158:16783, ack 10214, win 565, options [nop,nop,TS val 71198998 ecr 124011], length 625
17:35:47.688092 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [.], ack 16783, win 641, options [nop,nop,TS val 124011 ecr 71198998], length 0
17:35:47.692881 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 10214:10366, ack 16783, win 641, options [nop,nop,TS val 124012 ecr 71198998], length 152
17:35:47.693000 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], seq 16783:18231, ack 10366, win 588, options [nop,nop,TS val 71198999 ecr 124012], length 1448
17:35:47.693011 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 18231:19047, ack 10366, win 588, options [nop,nop,TS val 71198999 ecr 124012], length 816
17:35:47.693024 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [.], ack 19047, win 709, options [nop,nop,TS val 124012 ecr 71198999], length 0
17:35:47.693255 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 10366:11601, ack 19047, win 709, options [nop,nop,TS val 124012 ecr 71198999], length 1235
17:35:47.695426 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 19047:19103, ack 11601, win 610, options [nop,nop,TS val 71198999 ecr 124012], length 56
17:35:47.695549 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [.], seq 11601:13049, ack 19103, win 709, options [nop,nop,TS val 124013 ecr 71198999], length 1448
17:35:47.695559 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 13049:13937, ack 19103, win 709, options [nop,nop,TS val 124013 ecr 71198999], length 888
17:35:47.695602 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], ack 13937, win 655, options [nop,nop,TS val 71198999 ecr 124013], length 0
17:35:47.698327 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], seq 19103:20551, ack 13937, win 655, options [nop,nop,TS val 71199000 ecr 124013], length 1448
17:35:47.698337 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 20551:20788, ack 13937, win 655, options [nop,nop,TS val 71199000 ecr 124013], length 237
17:35:47.698348 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [.], ack 20788, win 777, options [nop,nop,TS val 124013 ecr 71199000], length 0
17:35:47.699827 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 13937:14086, ack 20788, win 777, options [nop,nop,TS val 124014 ecr 71199000], length 149
17:35:47.736096 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], ack 14086, win 678, options [nop,nop,TS val 71199010 ecr 124014], length 0
17:35:47.770059 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 20788:20949, ack 14086, win 678, options [nop,nop,TS val 71199018 ecr 124014], length 161
17:35:47.779414 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 14086:14500, ack 20949, win 822, options [nop,nop,TS val 124034 ecr 71199018], length 414
17:35:47.779618 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], ack 14500, win 701, options [nop,nop,TS val 71199020 ecr 124034], length 0
17:35:47.779642 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], seq 20949:23845, ack 14500, win 701, options [nop,nop,TS val 71199020 ecr 124034], length 2896
17:35:47.779651 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], seq 23845:25293, ack 14500, win 701, options [nop,nop,TS val 71199020 ecr 124034], length 1448
17:35:47.779658 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 25293:25437, ack 14500, win 701, options [nop,nop,TS val 71199020 ecr 124034], length 144
17:35:47.779659 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 25437:25795, ack 14500, win 701, options [nop,nop,TS val 71199020 ecr 124034], length 358
17:35:47.779675 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [.], ack 25293, win 890, options [nop,nop,TS val 124034 ecr 71199020], length 0
17:35:47.779687 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [.], ack 25795, win 981, options [nop,nop,TS val 124034 ecr 71199020], length 0
17:35:47.780826 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 14500:14912, ack 25795, win 981, options [nop,nop,TS val 124034 ecr 71199020], length 412
17:35:47.780923 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], seq 25795:28691, ack 14912, win 723, options [nop,nop,TS val 71199021 ecr 124034], length 2896
17:35:47.780934 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [.], seq 28691:30139, ack 14912, win 723, options [nop,nop,TS val 71199021 ecr 124034], length 1448
17:35:47.780936 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 30139:30264, ack 14912, win 723, options [nop,nop,TS val 71199021 ecr 124034], length 125
17:35:47.780952 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [.], ack 30139, win 1049, options [nop,nop,TS val 124034 ecr 71199021], length 0
17:35:47.785915 IP 172.28.240.3.41672 > web-server.e-nk.ru.domain: 31933+ AAAA? no24.ru. (25)
17:35:47.819210 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [.], ack 30264, win 1049, options [nop,nop,TS val 124044 ecr 71199021], length 0
17:35:47.982790 IP web-server.e-nk.ru.domain > 172.28.240.3.41672: 31933 ServFail 0/0/0 (25)
17:35:47.982891 IP 172.28.240.3.60148 > web-server.e-nk.ru.domain: 31933+ AAAA? no24.ru. (25)
17:35:48.036181 IP web-server.e-nk.ru.domain > 172.28.240.3.60148: 31933 ServFail 0/0/0 (25)
17:35:48.036255 IP 172.28.240.3.53836 > web-server.e-nk.ru.domain: 3195+ AAAA? no24.ru.e-nk.ru. (33)
17:35:48.036622 IP web-server.e-nk.ru.domain > 172.28.240.3.53836: 3195 NXDomain* 0/1/0 (79)
17:35:48.036697 IP 172.28.240.3.39609 > web-server.e-nk.ru.domain: 45185+ A? no24.ru. (25)
17:35:48.037003 IP web-server.e-nk.ru.domain > 172.28.240.3.39609: 45185 1/2/2 A 31.31.205.163 (176)
17:35:48.037082 IP 172.28.240.3.58069 > ns1.domainparking.int.reg.ru.http: Flags [S], seq 66264427, win 29200, options [mss 1460,sackOK,TS val 124098 ecr 0,nop,wscale 7], length 0
17:35:48.037245 IP 172.28.240.3.60150 > web-server.e-nk.ru.domain: 21798+ PTR? 163.205.31.31.in-addr.arpa. (44)
17:35:48.037565 IP web-server.e-nk.ru.domain > 172.28.240.3.60150: 21798 1/2/22 PTR ns1.domainparking.int.reg.ru. (498)
17:35:48.055950 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58069: Flags [S.], seq 2011629935, ack 66264428, win 43440, options [mss 1460,sackOK,TS val 922852336 ecr 124098,nop,wscale 9], length 0
17:35:48.055988 IP 172.28.240.3.58069 > ns1.domainparking.int.reg.ru.http: Flags [.], ack 1, win 229, options [nop,nop,TS val 124103 ecr 922852336], length 0
17:35:48.056194 IP 172.28.240.3.58069 > ns1.domainparking.int.reg.ru.http: Flags [P.], seq 1:267, ack 1, win 229, options [nop,nop,TS val 124103 ecr 922852336], length 266: HTTP: GET /get.php?ip=172.28.240.254&d=e-nkama.ru%2F&u=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F75.0.3770.100+Safari%2F537.36&i=1&h=6bff270f2de91c5850af6f8c7fb23ca4 HTTP/1.1
17:35:48.075210 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58069: Flags [.], ack 267, win 85, options [nop,nop,TS val 922852355 ecr 124103], length 0
17:35:48.075422 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58069: Flags [P.], seq 1:499, ack 267, win 85, options [nop,nop,TS val 922852355 ecr 124103], length 498: HTTP: HTTP/1.1 403 Forbidden
17:35:48.075437 IP 172.28.240.3.58069 > ns1.domainparking.int.reg.ru.http: Flags [.], ack 499, win 237, options [nop,nop,TS val 124108 ecr 922852355], length 0
17:35:48.075462 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58069: Flags [F.], seq 499, ack 267, win 85, options [nop,nop,TS val 922852355 ecr 124103], length 0
17:35:48.075585 IP 172.28.240.3.58069 > ns1.domainparking.int.reg.ru.http: Flags [F.], seq 267, ack 500, win 237, options [nop,nop,TS val 124108 ecr 922852355], length 0
17:35:48.094444 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58069: Flags [.], ack 268, win 85, options [nop,nop,TS val 922852374 ecr 124108], length 0
17:35:48.412715 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 14912:15653, ack 30264, win 1049, options [nop,nop,TS val 124192 ecr 71199021], length 741
17:35:48.412983 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [P.], seq 30264:30341, ack 15653, win 746, options [nop,nop,TS val 71199179 ecr 124192], length 77
17:35:48.413042 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [.], ack 30341, win 1049, options [nop,nop,TS val 124192 ecr 71199179], length 0
17:35:48.438173 IP 172.28.240.3.https > 172.28.240.254.53030: Flags [.], seq 3531:6427, ack 711, win 243, options [nop,nop,TS val 124198 ecr 80531035], length 2896
17:35:48.438210 IP 172.28.240.3.https > 172.28.240.254.53030: Flags [.], seq 6427:9323, ack 711, win 243, options [nop,nop,TS val 124198 ecr 80531035], length 2896
17:35:48.438227 IP 172.28.240.3.https > 172.28.240.254.53030: Flags [.], seq 9323:12219, ack 711, win 243, options [nop,nop,TS val 124198 ecr 80531035], length 2896
17:35:48.438254 IP 172.28.240.3.https > 172.28.240.254.53030: Flags [.], seq 12219:15115, ack 711, win 243, options [nop,nop,TS val 124198 ecr 80531035], length 2896
17:35:48.438270 IP 172.28.240.3.https > 172.28.240.254.53030: Flags [P.], seq 15115:18011, ack 711, win 243, options [nop,nop,TS val 124198 ecr 80531035], length 2896
17:35:48.438366 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [P.], seq 15653:15658, ack 30341, win 1049, options [nop,nop,TS val 124198 ecr 71199179], length 5
17:35:48.438398 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [F.], seq 15658, ack 30341, win 1049, options [nop,nop,TS val 124198 ecr 71199179], length 0
17:35:48.438444 IP 172.28.240.31.mysql > 172.28.240.3.59193: Flags [F.], seq 30341, ack 15659, win 746, options [nop,nop,TS val 71199185 ecr 124198], length 0
17:35:48.438462 IP 172.28.240.3.59193 > 172.28.240.31.mysql: Flags [.], ack 30342, win 1049, options [nop,nop,TS val 124198 ecr 71199185], length 0
17:35:48.439119 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [P.], seq 378:420, ack 348, win 229, options [nop,nop,TS val 124198 ecr 71198924], length 42
17:35:48.439341 IP 172.28.240.31.mysql > 172.28.240.3.59192: Flags [P.], seq 348:641, ack 420, win 235, options [nop,nop,TS val 71199185 ecr 124198], length 293
17:35:48.439372 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [.], ack 641, win 237, options [nop,nop,TS val 124199 ecr 71199185], length 0
17:35:48.439532 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [P.], seq 420:500, ack 641, win 237, options [nop,nop,TS val 124199 ecr 71199185], length 80
17:35:48.439672 IP 172.28.240.31.mysql > 172.28.240.3.59192: Flags [P.], seq 641:652, ack 500, win 235, options [nop,nop,TS val 71199185 ecr 124199], length 11
17:35:48.440587 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [.], seq 500:3396, ack 652, win 237, options [nop,nop,TS val 124199 ecr 71199185], length 2896
17:35:48.440602 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [P.], seq 3396:3592, ack 652, win 237, options [nop,nop,TS val 124199 ecr 71199185], length 196
17:35:48.440665 IP 172.28.240.31.mysql > 172.28.240.3.59192: Flags [.], ack 3592, win 326, options [nop,nop,TS val 71199186 ecr 124199], length 0
17:35:48.442107 IP 172.28.240.254.53030 > 172.28.240.3.https: Flags [.], ack 18011, win 269, options [nop,nop,TS val 80531317 ecr 124198], length 0
17:35:48.442146 IP 172.28.240.3.https > 172.28.240.254.53030: Flags [.], seq 18011:20907, ack 711, win 243, options [nop,nop,TS val 124199 ecr 80531317], length 2896
17:35:48.442166 IP 172.28.240.3.https > 172.28.240.254.53030: Flags [P.], seq 20907:21053, ack 711, win 243, options [nop,nop,TS val 124199 ecr 80531317], length 146
17:35:48.445956 IP 172.28.240.254.53030 > 172.28.240.3.https: Flags [.], ack 21053, win 325, options [nop,nop,TS val 80531318 ecr 124199], length 0
17:35:48.490752 IP 172.28.240.31.mysql > 172.28.240.3.59192: Flags [P.], seq 652:663, ack 3592, win 326, options [nop,nop,TS val 71199198 ecr 124199], length 11
17:35:48.490985 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [P.], seq 3592:3648, ack 663, win 237, options [nop,nop,TS val 124211 ecr 71199198], length 56
17:35:48.491080 IP 172.28.240.31.mysql > 172.28.240.3.59192: Flags [P.], seq 663:674, ack 3648, win 326, options [nop,nop,TS val 71199198 ecr 124211], length 11
17:35:48.513616 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [P.], seq 3648:3653, ack 674, win 237, options [nop,nop,TS val 124217 ecr 71199198], length 5
17:35:48.513654 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [F.], seq 3653, ack 674, win 237, options [nop,nop,TS val 124217 ecr 71199198], length 0
17:35:48.513745 IP 172.28.240.31.mysql > 172.28.240.3.59192: Flags [F.], seq 674, ack 3653, win 326, options [nop,nop,TS val 71199204 ecr 124217], length 0
17:35:48.513775 IP 172.28.240.3.59192 > 172.28.240.31.mysql: Flags [.], ack 675, win 237, options [nop,nop,TS val 124217 ecr 71199204], length 0
17:35:48.513803 IP 172.28.240.31.mysql > 172.28.240.3.59192: Flags [.], ack 3654, win 326, options [nop,nop,TS val 71199204 ecr 124217], length 0
17:35:48.515504 IP 172.28.240.3.https > 172.28.240.254.53030: Flags [.], seq 21053:22501, ack 711, win 243, options [nop,nop,TS val 124218 ecr 80531318], length 1448
17:35:48.515516 IP 172.28.240.3.https > 172.28.240.254.53030: Flags [P.], seq 22501:23162, ack 711, win 243, options [nop,nop,TS val 124218 ecr 80531318], length 661
17:35:48.519321 IP 172.28.240.254.53030 > 172.28.240.3.https: Flags [.], ack 23162, win 327, options [nop,nop,TS val 80531336 ecr 124218], length 0
17:35:48.682348 IP 172.28.240.3.https > 172.28.240.254.53006: Flags [P.], seq 28158682:28158713, ack 1842001451, win 243, options [nop,nop,TS val 124259 ecr 80523877], length 31
17:35:48.682435 IP 172.28.240.3.https > 172.28.240.254.53006: Flags [F.], seq 31, ack 1, win 243, options [nop,nop,TS val 124259 ecr 80523877], length 0
17:35:48.706737 IP 172.28.240.254.53006 > 172.28.240.3.https: Flags [F.], seq 1:32, ack 32, win 305, options [nop,nop,TS val 80531383 ecr 124259], length 31
17:35:48.706772 IP 172.28.240.3.https > 172.28.240.254.53006: Flags [.], ack 33, win 243, options [nop,nop,TS val 124265 ecr 80531383], length 0
17:35:48.710452 ARP, Request who-has 172.28.240.230 tell 172.28.240.24, length 46
17:35:48.710704 IP 172.28.240.3.58751 > web-server.e-nk.ru.domain: 11529+ PTR? 230.240.28.172.in-addr.arpa. (45)
17:35:48.711090 IP web-server.e-nk.ru.domain > 172.28.240.3.58751: 11529 NXDomain* 0/1/0 (99)
17:35:48.711201 IP 172.28.240.3.51811 > web-server.e-nk.ru.domain: 24867+ PTR? 24.240.28.172.in-addr.arpa. (44)
17:35:48.711519 IP web-server.e-nk.ru.domain > 172.28.240.3.51811: 24867 NXDomain* 0/1/0 (98)
17:35:49.645042 IP 172.28.240.3.https > 172.28.240.254.52959: Flags [P.], seq 2584002601:2584002632, ack 310543318, win 432, options [nop,nop,TS val 124500 ecr 80524114], length 31
17:35:49.645188 IP 172.28.240.3.https > 172.28.240.254.52959: Flags [F.], seq 31, ack 1, win 432, options [nop,nop,TS val 124500 ecr 80524114], length 0
17:35:49.646823 IP 172.28.240.254.52959 > 172.28.240.3.https: Flags [.], ack 31, win 1463, options [nop,nop,TS val 80531618 ecr 124500], length 0
17:35:49.687269 IP 172.28.240.254.52959 > 172.28.240.3.https: Flags [.], ack 32, win 1463, options [nop,nop,TS val 80531629 ecr 124500], length 0
17:35:50.743449 IP 172.28.240.254.52959 > 172.28.240.3.https: Flags [F.], seq 1, ack 32, win 1463, options [nop,nop,TS val 80531893 ecr 124500], length 0
17:35:50.743498 IP 172.28.240.3.https > 172.28.240.254.52959: Flags [.], ack 2, win 432, options [nop,nop,TS val 124775 ecr 80531893], length 0
17:35:50.757498 IP 172.28.240.254.52993 > 172.28.240.3.https: Flags [P.], seq 1843300232:1843301224, ack 4183133006, win 2579, options [nop,nop,TS val 80531896 ecr 123322], length 992
17:35:50.772973 IP 172.28.240.3.59195 > 172.28.240.31.mysql: Flags [S], seq 2920397536, win 29200, options [mss 1460,sackOK,TS val 124782 ecr 0,nop,wscale 7], length 0
17:35:50.773150 IP 172.28.240.31.mysql > 172.28.240.3.59195: Flags [S.], seq 3853595943, ack 2920397537, win 28960, options [mss 1460,sackOK,TS val 71199769 ecr 124782,nop,wscale 7], length 0
17:35:50.773191 IP 172.28.240.3.59195 > 172.28.240.31.mysql: Flags [.], ack 1, win 229, options [nop,nop,TS val 124782 ecr 71199769], length 0
17:35:50.773595 IP 172.28.240.31.mysql > 172.28.240.3.59195: Flags [P.], seq 1:96, ack 1, win 227, options [nop,nop,TS val 71199769 ecr 124782], length 95
17:35:50.773612 IP 172.28.240.3.59195 > 172.28.240.31.mysql: Flags [.], ack 96, win 229, options [nop,nop,TS val 124782 ecr 71199769], length 0
17:35:50.773721 IP 172.28.240.3.59195 > 172.28.240.31.mysql: Flags [P.], seq 1:90, ack 96, win 229, options [nop,nop,TS val 124782 ecr 71199769], length 89
17:35:50.773760 IP 172.28.240.31.mysql > 172.28.240.3.59195: Flags [.], ack 90, win 227, options [nop,nop,TS val 71199769 ecr 124782], length 0
17:35:50.773780 IP 172.28.240.31.mysql > 172.28.240.3.59195: Flags [P.], seq 96:107, ack 90, win 227, options [nop,nop,TS val 71199769 ecr 124782], length 11
17:35:50.773839 IP 172.28.240.3.59195 > 172.28.240.31.mysql: Flags [P.], seq 90:111, ack 107, win 229, options [nop,nop,TS val 124782 ecr 71199769], length 21
17:35:50.773900 IP 172.28.240.31.mysql > 172.28.240.3.59195: Flags [P.], seq 107:118, ack 111, win 227, options [nop,nop,TS val 71199769 ecr 124782], length 11
17:35:50.774154 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [S], seq 1709957812, win 29200, options [mss 1460,sackOK,TS val 124782 ecr 0,nop,wscale 7], length 0
17:35:50.774263 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [S.], seq 3355057878, ack 1709957813, win 28960, options [mss 1460,sackOK,TS val 71199769 ecr 124782,nop,wscale 7], length 0
17:35:50.774298 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [.], ack 1, win 229, options [nop,nop,TS val 124782 ecr 71199769], length 0
17:35:50.774648 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 1:96, ack 1, win 227, options [nop,nop,TS val 71199769 ecr 124782], length 95
17:35:50.774671 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [.], ack 96, win 229, options [nop,nop,TS val 124782 ecr 71199769], length 0
17:35:50.774787 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 1:90, ack 96, win 229, options [nop,nop,TS val 124782 ecr 71199769], length 89
17:35:50.774855 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], ack 90, win 227, options [nop,nop,TS val 71199769 ecr 124782], length 0
17:35:50.774869 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 96:107, ack 90, win 227, options [nop,nop,TS val 71199769 ecr 124782], length 11
17:35:50.774950 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 90:111, ack 107, win 229, options [nop,nop,TS val 124782 ecr 71199769], length 21
17:35:50.775019 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 107:118, ack 111, win 227, options [nop,nop,TS val 71199769 ecr 124782], length 11
17:35:50.775088 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 111:118, ack 118, win 229, options [nop,nop,TS val 124782 ecr 71199769], length 7
17:35:50.775147 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 118:127, ack 118, win 227, options [nop,nop,TS val 71199769 ecr 124782], length 9
17:35:50.775177 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 118:139, ack 127, win 229, options [nop,nop,TS val 124783 ecr 71199769], length 21
17:35:50.775250 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 127:138, ack 139, win 227, options [nop,nop,TS val 71199769 ecr 124783], length 11
17:35:50.775430 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 139:188, ack 138, win 229, options [nop,nop,TS val 124783 ecr 71199769], length 49
17:35:50.775509 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 138:149, ack 188, win 227, options [nop,nop,TS val 71199769 ecr 124783], length 11
17:35:50.775550 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 188:209, ack 149, win 229, options [nop,nop,TS val 124783 ecr 71199769], length 21
17:35:50.775610 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 149:160, ack 209, win 227, options [nop,nop,TS val 71199769 ecr 124783], length 11
17:35:50.775656 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 209:258, ack 160, win 229, options [nop,nop,TS val 124783 ecr 71199769], length 49
17:35:50.775721 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 160:171, ack 258, win 227, options [nop,nop,TS val 71199769 ecr 124783], length 11
17:35:50.775756 IP 172.28.240.3.59195 > 172.28.240.31.mysql: Flags [P.], seq 111:118, ack 118, win 229, options [nop,nop,TS val 124783 ecr 71199769], length 7
17:35:50.775814 IP 172.28.240.31.mysql > 172.28.240.3.59195: Flags [P.], seq 118:127, ack 118, win 227, options [nop,nop,TS val 71199769 ecr 124783], length 9
17:35:50.775845 IP 172.28.240.3.59195 > 172.28.240.31.mysql: Flags [P.], seq 118:190, ack 127, win 229, options [nop,nop,TS val 124783 ecr 71199769], length 72
17:35:50.775929 IP 172.28.240.31.mysql > 172.28.240.3.59195: Flags [P.], seq 127:230, ack 190, win 227, options [nop,nop,TS val 71199769 ecr 124783], length 103
17:35:50.776956 IP 172.28.240.3.59195 > 172.28.240.31.mysql: Flags [P.], seq 190:378, ack 230, win 229, options [nop,nop,TS val 124783 ecr 71199769], length 188
17:35:50.777176 IP 172.28.240.31.mysql > 172.28.240.3.59195: Flags [.], seq 230:3126, ack 378, win 235, options [nop,nop,TS val 71199770 ecr 124783], length 2896
17:35:50.777189 IP 172.28.240.31.mysql > 172.28.240.3.59195: Flags [P.], seq 3126:3507, ack 378, win 235, options [nop,nop,TS val 71199770 ecr 124783], length 381
17:35:50.777213 IP 172.28.240.3.59195 > 172.28.240.31.mysql: Flags [.], ack 3507, win 319, options [nop,nop,TS val 124783 ecr 71199770], length 0
17:35:50.780586 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 258:1393, ack 171, win 229, options [nop,nop,TS val 124784 ecr 71199769], length 1135
17:35:50.780930 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 171:678, ack 1393, win 249, options [nop,nop,TS val 71199771 ecr 124784], length 507
17:35:50.787073 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 1393:1707, ack 678, win 237, options [nop,nop,TS val 124785 ecr 71199771], length 314
17:35:50.787350 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 678:730, ack 1707, win 267, options [nop,nop,TS val 71199772 ecr 124785], length 52
17:35:50.787482 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 1707:2449, ack 730, win 237, options [nop,nop,TS val 124786 ecr 71199772], length 742
17:35:50.792373 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 730:749, ack 2449, win 285, options [nop,nop,TS val 71199774 ecr 124786], length 19
17:35:50.792673 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 2449:2791, ack 749, win 237, options [nop,nop,TS val 124787 ecr 71199774], length 342
17:35:50.795171 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [.], ack 992, win 344, options [nop,nop,TS val 124788 ecr 80531896], length 0
17:35:50.832037 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], ack 2791, win 303, options [nop,nop,TS val 71199784 ecr 124787], length 0
17:35:50.877231 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 749:801, ack 2791, win 303, options [nop,nop,TS val 71199795 ecr 124787], length 52
17:35:50.877450 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 2791:2993, ack 801, win 237, options [nop,nop,TS val 124808 ecr 71199795], length 202
17:35:50.877530 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], ack 2993, win 320, options [nop,nop,TS val 71199795 ecr 124808], length 0
17:35:50.892928 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 801:853, ack 2993, win 320, options [nop,nop,TS val 71199799 ecr 124808], length 52
17:35:50.893058 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 2993:3292, ack 853, win 237, options [nop,nop,TS val 124812 ecr 71199799], length 299
17:35:50.896673 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 853:1014, ack 3292, win 338, options [nop,nop,TS val 71199800 ecr 124812], length 161
17:35:50.896754 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 3292:3375, ack 1014, win 245, options [nop,nop,TS val 124813 ecr 71199800], length 83
17:35:50.936059 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], ack 3375, win 338, options [nop,nop,TS val 71199810 ecr 124813], length 0
17:35:50.976936 IP 172.28.240.3.https > 172.28.240.254.53008: Flags [P.], seq 3246486873:3246486904, ack 1692628391, win 243, options [nop,nop,TS val 124833 ecr 80524445], length 31
17:35:50.977039 IP 172.28.240.3.https > 172.28.240.254.53008: Flags [F.], seq 31, ack 1, win 243, options [nop,nop,TS val 124833 ecr 80524445], length 0
17:35:51.006431 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 1014:1066, ack 3375, win 338, options [nop,nop,TS val 71199827 ecr 124813], length 52
17:35:51.006542 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 3375:3611, ack 1066, win 245, options [nop,nop,TS val 124840 ecr 71199827], length 236
17:35:51.006657 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], ack 3611, win 356, options [nop,nop,TS val 71199827 ecr 124840], length 0
17:35:51.015348 IP 172.28.240.254.53008 > 172.28.240.3.https: Flags [.], ack 32, win 331, options [nop,nop,TS val 80531961 ecr 124833], length 0
17:35:51.164726 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 1066:1085, ack 3611, win 356, options [nop,nop,TS val 71199867 ecr 124840], length 19
17:35:51.164886 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 3611:3694, ack 1085, win 245, options [nop,nop,TS val 124880 ecr 71199867], length 83
17:35:51.165018 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], ack 3694, win 356, options [nop,nop,TS val 71199867 ecr 124880], length 0
17:35:51.165232 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 1085:1137, ack 3694, win 356, options [nop,nop,TS val 71199867 ecr 124880], length 52
17:35:51.165325 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 3694:3946, ack 1137, win 245, options [nop,nop,TS val 124880 ecr 71199867], length 252
17:35:51.204105 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], ack 3946, win 374, options [nop,nop,TS val 71199877 ecr 124880], length 0
17:35:51.277789 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 1137:1156, ack 3946, win 374, options [nop,nop,TS val 71199895 ecr 124880], length 19
17:35:51.278007 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 3946:4157, ack 1156, win 245, options [nop,nop,TS val 124908 ecr 71199895], length 211
17:35:51.278135 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], ack 4157, win 391, options [nop,nop,TS val 71199895 ecr 124908], length 0
17:35:51.278496 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 1156:1208, ack 4157, win 391, options [nop,nop,TS val 71199895 ecr 124908], length 52
17:35:51.278631 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 4157:4873, ack 1208, win 245, options [nop,nop,TS val 124908 ecr 71199895], length 716
17:35:51.278989 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 1208:1260, ack 4873, win 409, options [nop,nop,TS val 71199895 ecr 124908], length 52
17:35:51.279099 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 4873:4933, ack 1260, win 245, options [nop,nop,TS val 124908 ecr 71199895], length 60
17:35:51.279392 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 1260:1312, ack 4933, win 409, options [nop,nop,TS val 71199895 ecr 124908], length 52
17:35:51.279463 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 4933:5037, ack 1312, win 245, options [nop,nop,TS val 124909 ecr 71199895], length 104
17:35:51.279610 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 1312:1364, ack 5037, win 409, options [nop,nop,TS val 71199895 ecr 124909], length 52
17:35:51.279670 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 5037:5093, ack 1364, win 245, options [nop,nop,TS val 124909 ecr 71199895], length 56
17:35:51.279788 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 1364:1416, ack 5093, win 409, options [nop,nop,TS val 71199895 ecr 124909], length 52
17:35:51.279843 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 5093:5189, ack 1416, win 245, options [nop,nop,TS val 124909 ecr 71199895], length 96
17:35:51.279995 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 1416:1468, ack 5189, win 409, options [nop,nop,TS val 71199896 ecr 124909], length 52
17:35:51.288947 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 5189:5333, ack 1468, win 245, options [nop,nop,TS val 124911 ecr 71199896], length 144
17:35:51.289080 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 1468:1577, ack 5333, win 427, options [nop,nop,TS val 71199898 ecr 124911], length 109
17:35:51.295801 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 5333:6300, ack 1577, win 245, options [nop,nop,TS val 124913 ecr 71199898], length 967
17:35:51.295894 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], seq 1577:4473, ack 6300, win 444, options [nop,nop,TS val 71199899 ecr 124913], length 2896
17:35:51.295904 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 4473:5114, ack 6300, win 444, options [nop,nop,TS val 71199899 ecr 124913], length 641
17:35:51.295917 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [.], ack 5114, win 336, options [nop,nop,TS val 124913 ecr 71199899], length 0
17:35:51.297237 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 6300:6460, ack 5114, win 336, options [nop,nop,TS val 124913 ecr 71199899], length 160
17:35:51.297303 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], seq 5114:6562, ack 6460, win 462, options [nop,nop,TS val 71199900 ecr 124913], length 1448
17:35:51.297312 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 6562:7187, ack 6460, win 462, options [nop,nop,TS val 71199900 ecr 124913], length 625
17:35:51.297322 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [.], ack 7187, win 404, options [nop,nop,TS val 124913 ecr 71199900], length 0
17:35:51.300366 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 6460:6612, ack 7187, win 404, options [nop,nop,TS val 124914 ecr 71199900], length 152
17:35:51.300451 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], seq 7187:8635, ack 6612, win 480, options [nop,nop,TS val 71199901 ecr 124914], length 1448
17:35:51.300460 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 8635:9451, ack 6612, win 480, options [nop,nop,TS val 71199901 ecr 124914], length 816
17:35:51.300470 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [.], ack 9451, win 472, options [nop,nop,TS val 124914 ecr 71199901], length 0
17:35:51.300658 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 6612:7847, ack 9451, win 472, options [nop,nop,TS val 124914 ecr 71199901], length 1235
17:35:51.302942 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 9451:9507, ack 7847, win 503, options [nop,nop,TS val 71199901 ecr 124914], length 56
17:35:51.303047 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [.], seq 7847:9295, ack 9507, win 472, options [nop,nop,TS val 124914 ecr 71199901], length 1448
17:35:51.303057 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 9295:10183, ack 9507, win 472, options [nop,nop,TS val 124914 ecr 71199901], length 888
17:35:51.303120 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], ack 10183, win 548, options [nop,nop,TS val 71199901 ecr 124914], length 0
17:35:51.306227 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], seq 9507:10955, ack 10183, win 548, options [nop,nop,TS val 71199902 ecr 124914], length 1448
17:35:51.306237 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 10955:11192, ack 10183, win 548, options [nop,nop,TS val 71199902 ecr 124914], length 237
17:35:51.306251 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [.], ack 11192, win 539, options [nop,nop,TS val 124915 ecr 71199902], length 0
17:35:51.307562 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 10183:10332, ack 11192, win 539, options [nop,nop,TS val 124916 ecr 71199902], length 149
17:35:51.307629 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 11192:11302, ack 10332, win 570, options [nop,nop,TS val 71199902 ecr 124916], length 110
17:35:51.311041 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 10332:10492, ack 11302, win 539, options [nop,nop,TS val 124916 ecr 71199902], length 160
17:35:51.311115 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], seq 11302:12750, ack 10492, win 593, options [nop,nop,TS val 71199903 ecr 124916], length 1448
17:35:51.311121 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 12750:13375, ack 10492, win 593, options [nop,nop,TS val 71199903 ecr 124916], length 625
17:35:51.311143 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [.], ack 13375, win 607, options [nop,nop,TS val 124916 ecr 71199903], length 0
17:35:51.311652 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [.], seq 10492:11940, ack 13375, win 607, options [nop,nop,TS val 124917 ecr 71199903], length 1448
17:35:51.311678 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 11940:12408, ack 13375, win 607, options [nop,nop,TS val 124917 ecr 71199903], length 468
17:35:51.311710 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], ack 12408, win 638, options [nop,nop,TS val 71199903 ecr 124917], length 0
17:35:51.312145 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], seq 13375:17719, ack 12408, win 638, options [nop,nop,TS val 71199904 ecr 124917], length 4344
17:35:51.312150 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 17719:18151, ack 12408, win 638, options [nop,nop,TS val 71199904 ecr 124917], length 432
17:35:51.312172 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [.], ack 18151, win 743, options [nop,nop,TS val 124917 ecr 71199904], length 0
17:35:51.313759 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 12408:12581, ack 18151, win 743, options [nop,nop,TS val 124917 ecr 71199904], length 173
17:35:51.313884 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 18151:18263, ack 12581, win 661, options [nop,nop,TS val 71199904 ecr 124917], length 112
17:35:51.314277 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 12581:13149, ack 18263, win 743, options [nop,nop,TS val 124917 ecr 71199904], length 568
17:35:51.314450 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], seq 18263:22607, ack 13149, win 684, options [nop,nop,TS val 71199904 ecr 124917], length 4344
17:35:51.314457 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 22607:23790, ack 13149, win 684, options [nop,nop,TS val 71199904 ecr 124917], length 1183
17:35:51.314502 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [.], ack 23790, win 834, options [nop,nop,TS val 124917 ecr 71199904], length 0
17:35:51.320122 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 13149:14203, ack 23790, win 834, options [nop,nop,TS val 124919 ecr 71199904], length 1054
17:35:51.320191 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [.], seq 23790:26686, ack 14203, win 706, options [nop,nop,TS val 71199906 ecr 124919], length 2896
17:35:51.320199 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 26686:27392, ack 14203, win 706, options [nop,nop,TS val 71199906 ecr 124919], length 706
17:35:51.320240 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [.], ack 27392, win 969, options [nop,nop,TS val 124919 ecr 71199906], length 0
17:35:51.321083 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 14203:14354, ack 27392, win 969, options [nop,nop,TS val 124919 ecr 71199906], length 151
17:35:51.321154 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 27392:27502, ack 14354, win 729, options [nop,nop,TS val 71199906 ecr 124919], length 110
17:35:51.321284 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 14354:14531, ack 27502, win 969, options [nop,nop,TS val 124919 ecr 71199906], length 177
17:35:51.321553 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [P.], seq 27502:27554, ack 14531, win 751, options [nop,nop,TS val 71199906 ecr 124919], length 52
17:35:51.322000 IP 172.28.240.3.58072 > ns1.domainparking.int.reg.ru.http: Flags [S], seq 2698880954, win 29200, options [mss 1460,sackOK,TS val 124919 ecr 0,nop,wscale 7], length 0
17:35:51.342239 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58072: Flags [S.], seq 1032439575, ack 2698880955, win 43440, options [mss 1460,sackOK,TS val 922855621 ecr 124919,nop,wscale 9], length 0
17:35:51.342259 IP 172.28.240.3.58072 > ns1.domainparking.int.reg.ru.http: Flags [.], ack 1, win 229, options [nop,nop,TS val 124924 ecr 922855621], length 0
17:35:51.342333 IP 172.28.240.3.58072 > ns1.domainparking.int.reg.ru.http: Flags [P.], seq 1:305, ack 1, win 229, options [nop,nop,TS val 124924 ecr 922855621], length 304: HTTP: GET /get.php?ip=172.28.240.254&d=www.e-nkama.ru%2Fraion%2Fpochetnye-grazhdane%2F57764%2F&u=Mozilla%2F5.0+%28Linux%3B+Android+10%3B+K%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F120.0.0.0+Mobile+Safari%2F537.36&i=1&h=6bff270f2de91c5850af6f8c7fb23ca4 HTTP/1.1
17:35:51.359235 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [.], ack 27554, win 969, options [nop,nop,TS val 124929 ecr 71199906], length 0
17:35:51.362637 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58072: Flags [.], ack 305, win 85, options [nop,nop,TS val 922855642 ecr 124924], length 0
17:35:51.362898 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58072: Flags [P.], seq 1:499, ack 305, win 85, options [nop,nop,TS val 922855642 ecr 124924], length 498: HTTP: HTTP/1.1 403 Forbidden
17:35:51.362907 IP 172.28.240.3.58072 > ns1.domainparking.int.reg.ru.http: Flags [.], ack 499, win 237, options [nop,nop,TS val 124929 ecr 922855642], length 0
17:35:51.362916 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58072: Flags [F.], seq 499, ack 305, win 85, options [nop,nop,TS val 922855642 ecr 124924], length 0
17:35:51.362969 IP 172.28.240.3.58072 > ns1.domainparking.int.reg.ru.http: Flags [F.], seq 305, ack 500, win 237, options [nop,nop,TS val 124929 ecr 922855642], length 0
17:35:51.383079 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58072: Flags [.], ack 306, win 85, options [nop,nop,TS val 922855662 ecr 124929], length 0
17:35:51.434371 IP 172.28.240.254.53008 > 172.28.240.3.https: Flags [F.], seq 1:32, ack 32, win 331, options [nop,nop,TS val 80532065 ecr 124833], length 31
17:35:51.434399 IP 172.28.240.3.https > 172.28.240.254.53008: Flags [.], ack 33, win 243, options [nop,nop,TS val 124947 ecr 80532065], length 0
17:35:51.727805 IP 172.28.240.3.55559 > web-server.e-nk.ru.domain: 17994+ A? links.mainlink.ru. (35)
17:35:51.728277 IP web-server.e-nk.ru.domain > 172.28.240.3.55559: 17994 2/5/7 A 109.238.242.35, A 89.249.21.28 (317)
17:35:51.728435 IP 172.28.240.3.55871 > 109.238.242.35.http: Flags [S], seq 716422659, win 29200, options [mss 1460,sackOK,TS val 125021 ecr 0,nop,wscale 7], length 0
17:35:51.728595 IP 172.28.240.3.36700 > web-server.e-nk.ru.domain: 59814+ PTR? 35.242.238.109.in-addr.arpa. (45)
17:35:51.728884 IP web-server.e-nk.ru.domain > 172.28.240.3.36700: 59814 NXDomain 0/1/0 (107)
17:35:51.749230 IP 109.238.242.35.http > 172.28.240.3.55871: Flags [S.], seq 3969594951, ack 716422660, win 8192, options [mss 1460,nop,wscale 8,sackOK,TS val 4206130539 ecr 125021], length 0
17:35:51.749289 IP 172.28.240.3.55871 > 109.238.242.35.http: Flags [.], ack 1, win 229, options [nop,nop,TS val 125026 ecr 4206130539], length 0
17:35:51.749365 IP 172.28.240.3.55871 > 109.238.242.35.http: Flags [P.], seq 1:178, ack 1, win 229, options [nop,nop,TS val 125026 ecr 4206130539], length 177: HTTP: GET /l.aspx?u=e-nkama.ru&sec=6D8F67F1BB4059D3E0B3A23D6608B3E5&cs=utf&decode=1 HTTP/1.0
17:35:51.770706 IP 109.238.242.35.http > 172.28.240.3.55871: Flags [FP.], seq 1:245, ack 178, win 260, options [nop,nop,TS val 4206130541 ecr 125026], length 244: HTTP: HTTP/1.1 200 OK
17:35:51.770817 IP 172.28.240.3.55871 > 109.238.242.35.http: Flags [F.], seq 178, ack 246, win 237, options [nop,nop,TS val 125031 ecr 4206130541], length 0
17:35:51.791198 IP 109.238.242.35.http > 172.28.240.3.55871: Flags [.], ack 179, win 260, options [nop,nop,TS val 4206130543 ecr 125031], length 0
17:35:51.794361 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [.], seq 1:2897, ack 992, win 344, options [nop,nop,TS val 125037 ecr 80531896], length 2896
17:35:51.794394 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [.], seq 2897:5793, ack 992, win 344, options [nop,nop,TS val 125037 ecr 80531896], length 2896
17:35:51.794424 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [.], seq 5793:8689, ack 992, win 344, options [nop,nop,TS val 125037 ecr 80531896], length 2896
17:35:51.794439 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [.], seq 8689:11585, ack 992, win 344, options [nop,nop,TS val 125037 ecr 80531896], length 2896
17:35:51.794465 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [.], seq 11585:14481, ack 992, win 344, options [nop,nop,TS val 125037 ecr 80531896], length 2896
17:35:51.794566 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [P.], seq 14531:14536, ack 27554, win 969, options [nop,nop,TS val 125037 ecr 71199906], length 5
17:35:51.794590 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [F.], seq 14536, ack 27554, win 969, options [nop,nop,TS val 125037 ecr 71199906], length 0
17:35:51.794737 IP 172.28.240.31.mysql > 172.28.240.3.59196: Flags [F.], seq 27554, ack 14537, win 751, options [nop,nop,TS val 71200024 ecr 125037], length 0
17:35:51.794768 IP 172.28.240.3.59196 > 172.28.240.31.mysql: Flags [.], ack 27555, win 969, options [nop,nop,TS val 125037 ecr 71200024], length 0
17:35:51.795242 IP 172.28.240.3.59195 > 172.28.240.31.mysql: Flags [P.], seq 378:420, ack 3507, win 319, options [nop,nop,TS val 125038 ecr 71199770], length 42
17:35:51.795412 IP 172.28.240.31.mysql > 172.28.240.3.59195: Flags [P.], seq 3507:3800, ack 420, win 235, options [nop,nop,TS val 71200024 ecr 125038], length 293
17:35:51.795741 IP 172.28.240.3.59195 > 172.28.240.31.mysql: Flags [P.], seq 420:500, ack 3800, win 364, options [nop,nop,TS val 125038 ecr 71200024], length 80
17:35:51.796629 IP 172.28.240.254.52993 > 172.28.240.3.https: Flags [.], ack 1449, win 2602, options [nop,nop,TS val 80532156 ecr 125037], length 0
17:35:51.796646 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [P.], seq 14481:15279, ack 992, win 344, options [nop,nop,TS val 125038 ecr 80532156], length 798
17:35:51.798170 IP 172.28.240.254.52993 > 172.28.240.3.https: Flags [.], ack 14481, win 2806, options [nop,nop,TS val 80532156 ecr 125037], length 0
17:35:51.799809 IP 172.28.240.254.52993 > 172.28.240.3.https: Flags [.], ack 15279, win 2828, options [nop,nop,TS val 80532157 ecr 125038], length 0
17:35:51.831998 IP 172.28.240.31.mysql > 172.28.240.3.59195: Flags [.], ack 500, win 235, options [nop,nop,TS val 71200034 ecr 125038], length 0
17:35:51.834987 IP 172.28.240.31.mysql > 172.28.240.3.59195: Flags [P.], seq 3800:3811, ack 500, win 235, options [nop,nop,TS val 71200034 ecr 125038], length 11
17:35:51.836042 IP 172.28.240.3.59195 > 172.28.240.31.mysql: Flags [.], seq 500:3396, ack 3811, win 364, options [nop,nop,TS val 125048 ecr 71200034], length 2896
17:35:51.836104 IP 172.28.240.3.59195 > 172.28.240.31.mysql: Flags [P.], seq 3396:3840, ack 3811, win 364, options [nop,nop,TS val 125048 ecr 71200034], length 444
17:35:51.836116 IP 172.28.240.31.mysql > 172.28.240.3.59195: Flags [.], ack 3396, win 280, options [nop,nop,TS val 71200035 ecr 125048], length 0
17:35:51.836130 IP 172.28.240.31.mysql > 172.28.240.3.59195: Flags [.], ack 3840, win 326, options [nop,nop,TS val 71200035 ecr 125048], length 0
17:35:51.844660 IP 172.28.240.31.mysql > 172.28.240.3.59195: Flags [P.], seq 3811:3822, ack 3840, win 326, options [nop,nop,TS val 71200037 ecr 125048], length 11
17:35:51.844878 IP 172.28.240.3.59195 > 172.28.240.31.mysql: Flags [P.], seq 3840:3896, ack 3822, win 364, options [nop,nop,TS val 125050 ecr 71200037], length 56
17:35:51.844954 IP 172.28.240.31.mysql > 172.28.240.3.59195: Flags [P.], seq 3822:3833, ack 3896, win 326, options [nop,nop,TS val 71200037 ecr 125050], length 11
17:35:51.849707 IP 172.28.240.3.59195 > 172.28.240.31.mysql: Flags [P.], seq 3896:3901, ack 3833, win 364, options [nop,nop,TS val 125051 ecr 71200037], length 5
17:35:51.849741 IP 172.28.240.3.59195 > 172.28.240.31.mysql: Flags [F.], seq 3901, ack 3833, win 364, options [nop,nop,TS val 125051 ecr 71200037], length 0
17:35:51.849776 IP 172.28.240.31.mysql > 172.28.240.3.59195: Flags [F.], seq 3833, ack 3902, win 326, options [nop,nop,TS val 71200038 ecr 125051], length 0
17:35:51.849785 IP 172.28.240.3.59195 > 172.28.240.31.mysql: Flags [.], ack 3834, win 364, options [nop,nop,TS val 125051 ecr 71200038], length 0
17:35:51.851003 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [P.], seq 15279:15444, ack 992, win 344, options [nop,nop,TS val 125051 ecr 80532157], length 165
17:35:51.852785 IP 172.28.240.254.52993 > 172.28.240.3.https: Flags [.], ack 15444, win 2851, options [nop,nop,TS val 80532169 ecr 125051], length 0
17:35:51.860849 IP 172.28.240.254.53030 > 172.28.240.3.https: Flags [F.], seq 711, ack 23162, win 331, options [nop,nop,TS val 80532172 ecr 124218], length 0
17:35:51.860934 IP 172.28.240.3.https > 172.28.240.254.53030: Flags [P.], seq 23162:23193, ack 712, win 243, options [nop,nop,TS val 125054 ecr 80532172], length 31
17:35:51.860993 IP 172.28.240.3.https > 172.28.240.254.53030: Flags [F.], seq 23193, ack 712, win 243, options [nop,nop,TS val 125054 ecr 80532172], length 0
17:35:51.864249 IP 172.28.240.254.53030 > 172.28.240.3.https: Flags [.], ack 23194, win 331, options [nop,nop,TS val 80532172 ecr 125054], length 0
17:35:51.920416 ARP, Request who-has 172.28.240.230 tell 172.28.240.24, length 46
17:35:52.007218 IP 172.28.240.254.52993 > 172.28.240.3.https: Flags [P.], seq 992:1832, ack 15444, win 2851, options [nop,nop,TS val 80532208 ecr 125051], length 840
17:35:52.007248 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [.], ack 1832, win 359, options [nop,nop,TS val 125091 ecr 80532208], length 0
17:35:52.016100 IP 172.28.240.254.52962 > 172.28.240.3.https: Flags [P.], seq 985923026:985923869, ack 3747897442, win 4265, options [nop,nop,TS val 80532211 ecr 123328], length 843
17:35:52.016928 IP 172.28.240.3.https > 172.28.240.254.52962: Flags [.], seq 1:2897, ack 843, win 386, options [nop,nop,TS val 125093 ecr 80532211], length 2896
17:35:52.016959 IP 172.28.240.3.https > 172.28.240.254.52962: Flags [P.], seq 2897:3519, ack 843, win 386, options [nop,nop,TS val 125093 ecr 80532211], length 622
17:35:52.019177 IP 172.28.240.254.52962 > 172.28.240.3.https: Flags [.], ack 1449, win 4258, options [nop,nop,TS val 80532211 ecr 125093], length 0
17:35:52.020746 IP 172.28.240.254.52962 > 172.28.240.3.https: Flags [.], ack 3519, win 4243, options [nop,nop,TS val 80532212 ecr 125093], length 0
17:35:52.031764 IP 172.28.240.254.52992 > 172.28.240.3.https: Flags [P.], seq 2376979569:2376980391, ack 511161436, win 3220, options [nop,nop,TS val 80532215 ecr 123315], length 822
17:35:52.036924 IP 172.28.240.3.https > 172.28.240.254.52992: Flags [.], seq 1:2897, ack 822, win 438, options [nop,nop,TS val 125098 ecr 80532215], length 2896
17:35:52.036959 IP 172.28.240.3.https > 172.28.240.254.52992: Flags [.], seq 2897:5793, ack 822, win 438, options [nop,nop,TS val 125098 ecr 80532215], length 2896
17:35:52.037017 IP 172.28.240.3.https > 172.28.240.254.52992: Flags [.], seq 5793:7241, ack 822, win 438, options [nop,nop,TS val 125098 ecr 80532215], length 1448
17:35:52.037023 IP 172.28.240.3.https > 172.28.240.254.52992: Flags [P.], seq 7241:8550, ack 822, win 438, options [nop,nop,TS val 125098 ecr 80532215], length 1309
17:35:52.037054 IP 172.28.240.3.https > 172.28.240.254.52992: Flags [.], seq 8550:11446, ack 822, win 438, options [nop,nop,TS val 125098 ecr 80532215], length 2896
17:35:52.037070 IP 172.28.240.3.https > 172.28.240.254.52992: Flags [.], seq 11446:14342, ack 822, win 438, options [nop,nop,TS val 125098 ecr 80532215], length 2896
17:35:52.039187 IP 172.28.240.254.52992 > 172.28.240.3.https: Flags [.], ack 1449, win 3214, options [nop,nop,TS val 80532216 ecr 125098], length 0
17:35:52.039201 IP 172.28.240.3.https > 172.28.240.254.52992: Flags [P.], seq 14342:14362, ack 822, win 438, options [nop,nop,TS val 125099 ecr 80532216], length 20
17:35:52.040723 IP 172.28.240.254.52992 > 172.28.240.3.https: Flags [.], ack 8550, win 3178, options [nop,nop,TS val 80532216 ecr 125098], length 0
17:35:52.042315 IP 172.28.240.254.52992 > 172.28.240.3.https: Flags [.], ack 14342, win 3149, options [nop,nop,TS val 80532217 ecr 125098], length 0
17:35:52.044188 IP 172.28.240.254.52992 > 172.28.240.3.https: Flags [.], ack 14362, win 3149, options [nop,nop,TS val 80532218 ecr 125099], length 0
17:35:52.045663 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [.], seq 15444:18340, ack 1832, win 359, options [nop,nop,TS val 125100 ecr 80532208], length 2896
17:35:52.045698 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [.], seq 18340:21236, ack 1832, win 359, options [nop,nop,TS val 125100 ecr 80532208], length 2896
17:35:52.045717 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [.], seq 21236:22684, ack 1832, win 359, options [nop,nop,TS val 125100 ecr 80532208], length 1448
17:35:52.045722 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [P.], seq 22684:23979, ack 1832, win 359, options [nop,nop,TS val 125100 ecr 80532208], length 1295
17:35:52.045753 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [.], seq 23979:26875, ack 1832, win 359, options [nop,nop,TS val 125100 ecr 80532208], length 2896
17:35:52.045771 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [.], seq 26875:29771, ack 1832, win 359, options [nop,nop,TS val 125100 ecr 80532208], length 2896
17:35:52.045785 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [.], seq 29771:32667, ack 1832, win 359, options [nop,nop,TS val 125100 ecr 80532208], length 2896
17:35:52.045799 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [P.], seq 32667:32988, ack 1832, win 359, options [nop,nop,TS val 125100 ecr 80532208], length 321
17:35:52.045818 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [P.], seq 32988:33025, ack 1832, win 359, options [nop,nop,TS val 125100 ecr 80532208], length 37
17:35:52.047882 IP 172.28.240.254.52993 > 172.28.240.3.https: Flags [.], ack 16892, win 2873, options [nop,nop,TS val 80532218 ecr 125100], length 0
17:35:52.049479 IP 172.28.240.254.52993 > 172.28.240.3.https: Flags [.], ack 23979, win 2984, options [nop,nop,TS val 80532219 ecr 125100], length 0
17:35:52.051013 IP 172.28.240.254.52993 > 172.28.240.3.https: Flags [.], ack 32988, win 3125, options [nop,nop,TS val 80532219 ecr 125100], length 0
17:35:52.052554 IP 172.28.240.254.52993 > 172.28.240.3.https: Flags [.], ack 33025, win 3125, options [nop,nop,TS val 80532220 ecr 125100], length 0
17:35:52.175751 IP 172.28.240.254.52993 > 172.28.240.3.https: Flags [P.], seq 1832:2656, ack 33025, win 3125, options [nop,nop,TS val 80532251 ecr 125100], length 824
17:35:52.176930 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [.], seq 33025:35921, ack 2656, win 375, options [nop,nop,TS val 125133 ecr 80532251], length 2896
17:35:52.176968 IP 172.28.240.3.https > 172.28.240.254.52993: Flags [P.], seq 35921:37246, ack 2656, win 375, options [nop,nop,TS val 125133 ecr 80532251], length 1325
17:35:52.179775 IP 172.28.240.254.52993 > 172.28.240.3.https: Flags [.], ack 34473, win 3148, options [nop,nop,TS val 80532252 ecr 125133], length 0
17:35:52.181334 IP 172.28.240.254.52993 > 172.28.240.3.https: Flags [.], ack 37246, win 3191, options [nop,nop,TS val 80532252 ecr 125133], length 0
17:35:52.546638 IP 172.28.240.254.53022 > 172.28.240.3.https: Flags [P.], seq 3864097914:3864098851, ack 1807447215, win 239, options [nop,nop,TS val 80532343 ecr 123417], length 937
17:35:52.582642 IP 172.28.240.3.https > 172.28.240.254.53022: Flags [P.], seq 1:595, ack 937, win 309, options [nop,nop,TS val 125234 ecr 80532343], length 594
17:35:52.584636 IP 172.28.240.254.53022 > 172.28.240.3.https: Flags [.], ack 595, win 248, options [nop,nop,TS val 80532353 ecr 125234], length 0
17:35:52.623462 IP 172.28.240.254.53032 > 172.28.240.3.https: Flags [S], seq 1641758907, win 14600, options [mss 1460,sackOK,TS val 80532362 ecr 0,nop,wscale 7], length 0
17:35:52.623509 IP 172.28.240.3.https > 172.28.240.254.53032: Flags [S.], seq 1295182682, ack 1641758908, win 28960, options [mss 1460,sackOK,TS val 125245 ecr 80532362,nop,wscale 7], length 0
17:35:52.625819 IP 172.28.240.254.53032 > 172.28.240.3.https: Flags [.], ack 1, win 115, options [nop,nop,TS val 80532363 ecr 125245], length 0
17:35:52.626074 IP 172.28.240.254.53032 > 172.28.240.3.https: Flags [P.], seq 1:601, ack 1, win 115, options [nop,nop,TS val 80532363 ecr 125245], length 600
17:35:52.626106 IP 172.28.240.3.https > 172.28.240.254.53032: Flags [.], ack 601, win 236, options [nop,nop,TS val 125245 ecr 80532363], length 0
17:35:52.629128 IP 172.28.240.3.https > 172.28.240.254.53032: Flags [.], seq 1:2897, ack 601, win 236, options [nop,nop,TS val 125246 ecr 80532363], length 2896
17:35:52.629141 IP 172.28.240.3.https > 172.28.240.254.53032: Flags [P.], seq 2897:3257, ack 601, win 236, options [nop,nop,TS val 125246 ecr 80532363], length 360
17:35:52.631394 IP 172.28.240.254.53032 > 172.28.240.3.https: Flags [.], ack 1449, win 137, options [nop,nop,TS val 80532364 ecr 125246], length 0
17:35:52.632878 IP 172.28.240.254.53032 > 172.28.240.3.https: Flags [.], ack 3257, win 165, options [nop,nop,TS val 80532364 ecr 125246], length 0
17:35:52.709461 IP 172.28.240.254.53032 > 172.28.240.3.https: Flags [P.], seq 601:608, ack 3257, win 165, options [nop,nop,TS val 80532384 ecr 125246], length 7
17:35:52.709719 IP 172.28.240.3.https > 172.28.240.254.53032: Flags [F.], seq 3257, ack 608, win 236, options [nop,nop,TS val 125266 ecr 80532384], length 0
17:35:52.727453 IP 172.28.240.254.53032 > 172.28.240.3.https: Flags [F.], seq 608, ack 3258, win 165, options [nop,nop,TS val 80532388 ecr 125266], length 0
17:35:52.727486 IP 172.28.240.3.https > 172.28.240.254.53032: Flags [.], ack 609, win 236, options [nop,nop,TS val 125271 ecr 80532388], length 0
17:35:53.097645 IP 172.28.240.7.55950 > 172.28.240.3.ssh: Flags [S], seq 496948172, win 29200, options [mss 1460,sackOK,TS val 2272164368 ecr 0,nop,wscale 7], length 0
17:35:53.097711 IP 172.28.240.3.ssh > 172.28.240.7.55950: Flags [S.], seq 3298545220, ack 496948173, win 28960, options [mss 1460,sackOK,TS val 125363 ecr 2272164368,nop,wscale 7], length 0
17:35:53.097929 IP 172.28.240.7.55950 > 172.28.240.3.ssh: Flags [.], ack 1, win 229, options [nop,nop,TS val 2272164368 ecr 125363], length 0
17:35:53.098047 IP 172.28.240.3.51787 > web-server.e-nk.ru.domain: 14823+ PTR? 7.240.28.172.in-addr.arpa. (43)
17:35:53.098443 IP web-server.e-nk.ru.domain > 172.28.240.3.51787: 14823 NXDomain* 0/1/0 (97)
17:35:53.102738 IP 172.28.240.3.ssh > 172.28.240.7.55950: Flags [P.], seq 1:43, ack 1, win 227, options [nop,nop,TS val 125364 ecr 2272164368], length 42
17:35:53.103021 IP 172.28.240.7.55950 > 172.28.240.3.ssh: Flags [.], ack 43, win 229, options [nop,nop,TS val 2272164369 ecr 125364], length 0
17:35:53.103050 IP 172.28.240.7.55950 > 172.28.240.3.ssh: Flags [P.], seq 1:26, ack 43, win 229, options [nop,nop,TS val 2272164369 ecr 125364], length 25
17:35:53.103082 IP 172.28.240.3.ssh > 172.28.240.7.55950: Flags [.], ack 26, win 227, options [nop,nop,TS val 125364 ecr 2272164369], length 0
17:35:53.103255 IP 172.28.240.7.55950 > 172.28.240.3.ssh: Flags [F.], seq 26, ack 43, win 229, options [nop,nop,TS val 2272164369 ecr 125364], length 0
17:35:53.103666 IP 172.28.240.3.ssh > 172.28.240.7.55950: Flags [P.], seq 43:1027, ack 27, win 227, options [nop,nop,TS val 125365 ecr 2272164369], length 984
17:35:53.103817 IP 172.28.240.7.55950 > 172.28.240.3.ssh: Flags [R], seq 496948199, win 0, length 0
17:35:53.142227 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [.], seq 13493:16389, ack 7618, win 1004, options [nop,nop,TS val 71200361 ecr 123597], length 2896
17:35:53.142253 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [.], seq 16389:19285, ack 7618, win 1004, options [nop,nop,TS val 71200361 ecr 123597], length 2896
17:35:53.142256 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [.], seq 19285:22181, ack 7618, win 1004, options [nop,nop,TS val 71200361 ecr 123597], length 2896
17:35:53.142258 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [.], seq 22181:25077, ack 7618, win 1004, options [nop,nop,TS val 71200361 ecr 123597], length 2896
17:35:53.142259 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [P.], seq 25077:25112, ack 7618, win 1004, options [nop,nop,TS val 71200361 ecr 123597], length 35
17:35:53.142335 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [.], ack 19285, win 1444, options [nop,nop,TS val 125374 ecr 71200361], length 0
17:35:53.142359 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [.], ack 25077, win 1444, options [nop,nop,TS val 125374 ecr 71200361], length 0
17:35:53.143452 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [P.], seq 7618:7746, ack 25112, win 1444, options [nop,nop,TS val 125375 ecr 71200361], length 128
17:35:53.143554 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [P.], seq 25112:25168, ack 7746, win 1027, options [nop,nop,TS val 71200361 ecr 125375], length 56
17:35:53.148181 IP 172.28.240.3.57502 > web-server.e-nk.ru.domain: 22530+ AAAA? no24.ru. (25)
17:35:53.183173 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [.], ack 25168, win 1444, options [nop,nop,TS val 125385 ecr 71200361], length 0
17:35:53.928155 IP 172.28.240.254.53025 > 172.28.240.3.https: Flags [F.], seq 1661887570, ack 3979178548, win 123, options [nop,nop,TS val 80532689 ecr 122865], length 0
17:35:53.939084 IP web-server.e-nk.ru.domain > 172.28.240.3.57502: 22530 ServFail 0/0/0 (25)
17:35:53.939237 IP 172.28.240.3.60123 > web-server.e-nk.ru.domain: 22530+ AAAA? no24.ru. (25)
17:35:53.939637 IP 172.28.240.254.53026 > 172.28.240.3.https: Flags [P.], seq 2834741796:2834742748, ack 2064902346, win 123, options [nop,nop,TS val 80532691 ecr 122872], length 952
17:35:53.939702 IP 172.28.240.3.https > 172.28.240.254.53026: Flags [.], ack 952, win 254, options [nop,nop,TS val 125574 ecr 80532691], length 0
17:35:53.944210 IP 172.28.240.254.53033 > 172.28.240.3.https: Flags [S], seq 995186238, win 14600, options [mss 1460,sackOK,TS val 80532693 ecr 0,nop,wscale 7], length 0
17:35:53.944250 IP 172.28.240.3.https > 172.28.240.254.53033: Flags [S.], seq 632654383, ack 995186239, win 28960, options [mss 1460,sackOK,TS val 125575 ecr 80532693,nop,wscale 7], length 0
17:35:53.945975 IP 172.28.240.254.53033 > 172.28.240.3.https: Flags [.], ack 1, win 115, options [nop,nop,TS val 80532693 ecr 125575], length 0
17:35:53.946271 IP 172.28.240.254.53033 > 172.28.240.3.https: Flags [P.], seq 1:707, ack 1, win 115, options [nop,nop,TS val 80532693 ecr 125575], length 706
17:35:53.946288 IP 172.28.240.3.https > 172.28.240.254.53033: Flags [.], ack 707, win 238, options [nop,nop,TS val 125575 ecr 80532693], length 0
17:35:53.946910 IP 172.28.240.3.https > 172.28.240.254.53033: Flags [P.], seq 1:138, ack 707, win 238, options [nop,nop,TS val 125575 ecr 80532693], length 137
17:35:53.949478 IP 172.28.240.254.53033 > 172.28.240.3.https: Flags [.], ack 138, win 123, options [nop,nop,TS val 80532693 ecr 125575], length 0
17:35:53.954247 IP 172.28.240.254.53033 > 172.28.240.3.https: Flags [P.], seq 707:758, ack 138, win 123, options [nop,nop,TS val 80532695 ecr 125575], length 51
17:35:53.967224 IP 172.28.240.3.https > 172.28.240.254.53025: Flags [.], ack 1, win 254, options [nop,nop,TS val 125581 ecr 80532689], length 0
17:35:53.983263 IP 172.28.240.3.59201 > 172.28.240.31.mysql: Flags [S], seq 1848145118, win 29200, options [mss 1460,sackOK,TS val 125585 ecr 0,nop,wscale 7], length 0
17:35:53.983401 IP 172.28.240.31.mysql > 172.28.240.3.59201: Flags [S.], seq 3267604084, ack 1848145119, win 28960, options [mss 1460,sackOK,TS val 71200571 ecr 125585,nop,wscale 7], length 0
17:35:53.983428 IP 172.28.240.3.59201 > 172.28.240.31.mysql: Flags [.], ack 1, win 229, options [nop,nop,TS val 125585 ecr 71200571], length 0
17:35:53.983888 IP 172.28.240.31.mysql > 172.28.240.3.59201: Flags [P.], seq 1:96, ack 1, win 227, options [nop,nop,TS val 71200571 ecr 125585], length 95
17:35:53.983902 IP 172.28.240.3.59201 > 172.28.240.31.mysql: Flags [.], ack 96, win 229, options [nop,nop,TS val 125585 ecr 71200571], length 0
17:35:53.984963 IP 172.28.240.3.59201 > 172.28.240.31.mysql: Flags [P.], seq 1:90, ack 96, win 229, options [nop,nop,TS val 125585 ecr 71200571], length 89
17:35:53.985042 IP 172.28.240.31.mysql > 172.28.240.3.59201: Flags [.], ack 90, win 227, options [nop,nop,TS val 71200572 ecr 125585], length 0
17:35:53.985080 IP 172.28.240.31.mysql > 172.28.240.3.59201: Flags [P.], seq 96:107, ack 90, win 227, options [nop,nop,TS val 71200572 ecr 125585], length 11
17:35:53.985118 IP 172.28.240.3.59201 > 172.28.240.31.mysql: Flags [P.], seq 90:111, ack 107, win 229, options [nop,nop,TS val 125585 ecr 71200572], length 21
17:35:53.985210 IP 172.28.240.31.mysql > 172.28.240.3.59201: Flags [P.], seq 107:118, ack 111, win 227, options [nop,nop,TS val 71200572 ecr 125585], length 11
17:35:53.985337 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [S], seq 2780707136, win 29200, options [mss 1460,sackOK,TS val 125585 ecr 0,nop,wscale 7], length 0
17:35:53.985418 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [S.], seq 2765367105, ack 2780707137, win 28960, options [mss 1460,sackOK,TS val 71200572 ecr 125585,nop,wscale 7], length 0
17:35:53.985449 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [.], ack 1, win 229, options [nop,nop,TS val 125585 ecr 71200572], length 0
17:35:53.985679 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 1:96, ack 1, win 227, options [nop,nop,TS val 71200572 ecr 125585], length 95
17:35:53.985699 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [.], ack 96, win 229, options [nop,nop,TS val 125585 ecr 71200572], length 0
17:35:53.985750 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 1:90, ack 96, win 229, options [nop,nop,TS val 125585 ecr 71200572], length 89
17:35:53.985797 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [.], ack 90, win 227, options [nop,nop,TS val 71200572 ecr 125585], length 0
17:35:53.985812 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 96:107, ack 90, win 227, options [nop,nop,TS val 71200572 ecr 125585], length 11
17:35:53.985839 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 90:111, ack 107, win 229, options [nop,nop,TS val 125585 ecr 71200572], length 21
17:35:53.985899 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 107:118, ack 111, win 227, options [nop,nop,TS val 71200572 ecr 125585], length 11
17:35:53.985960 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 111:118, ack 118, win 229, options [nop,nop,TS val 125585 ecr 71200572], length 7
17:35:53.986009 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 118:127, ack 118, win 227, options [nop,nop,TS val 71200572 ecr 125585], length 9
17:35:53.986032 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 118:139, ack 127, win 229, options [nop,nop,TS val 125585 ecr 71200572], length 21
17:35:53.986094 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 127:138, ack 139, win 227, options [nop,nop,TS val 71200572 ecr 125585], length 11
17:35:53.986291 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 139:188, ack 138, win 229, options [nop,nop,TS val 125585 ecr 71200572], length 49
17:35:53.986361 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 138:149, ack 188, win 227, options [nop,nop,TS val 71200572 ecr 125585], length 11
17:35:53.986400 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 188:209, ack 149, win 229, options [nop,nop,TS val 125585 ecr 71200572], length 21
17:35:53.986451 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 149:160, ack 209, win 227, options [nop,nop,TS val 71200572 ecr 125585], length 11
17:35:53.986493 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 209:258, ack 160, win 229, options [nop,nop,TS val 125585 ecr 71200572], length 49
17:35:53.986549 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 160:171, ack 258, win 227, options [nop,nop,TS val 71200572 ecr 125585], length 11
17:35:53.986581 IP 172.28.240.3.59201 > 172.28.240.31.mysql: Flags [P.], seq 111:118, ack 118, win 229, options [nop,nop,TS val 125585 ecr 71200572], length 7
17:35:53.986650 IP 172.28.240.31.mysql > 172.28.240.3.59201: Flags [P.], seq 118:127, ack 118, win 227, options [nop,nop,TS val 71200572 ecr 125585], length 9
17:35:53.986672 IP 172.28.240.3.59201 > 172.28.240.31.mysql: Flags [P.], seq 118:190, ack 127, win 229, options [nop,nop,TS val 125585 ecr 71200572], length 72
17:35:53.991173 IP 172.28.240.3.https > 172.28.240.254.53033: Flags [.], ack 758, win 238, options [nop,nop,TS val 125587 ecr 80532695], length 0
17:35:53.995139 IP web-server.e-nk.ru.domain > 172.28.240.3.60123: 22530 ServFail 0/0/0 (25)
17:35:53.995236 IP 172.28.240.3.43740 > web-server.e-nk.ru.domain: 19475+ AAAA? no24.ru.e-nk.ru. (33)
17:35:53.995525 IP web-server.e-nk.ru.domain > 172.28.240.3.43740: 19475 NXDomain* 0/1/0 (79)
17:35:53.995583 IP 172.28.240.3.39056 > web-server.e-nk.ru.domain: 38944+ A? no24.ru. (25)
17:35:53.995884 IP web-server.e-nk.ru.domain > 172.28.240.3.39056: 38944 1/2/2 A 31.31.205.163 (176)
17:35:53.995997 IP 172.28.240.3.58078 > ns1.domainparking.int.reg.ru.http: Flags [S], seq 1026697140, win 29200, options [mss 1460,sackOK,TS val 125588 ecr 0,nop,wscale 7], length 0
17:35:54.016998 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58078: Flags [S.], seq 1831597725, ack 1026697141, win 43440, options [mss 1460,sackOK,TS val 922858296 ecr 125588,nop,wscale 9], length 0
17:35:54.017025 IP 172.28.240.3.58078 > ns1.domainparking.int.reg.ru.http: Flags [.], ack 1, win 229, options [nop,nop,TS val 125593 ecr 922858296], length 0
17:35:54.017172 IP 172.28.240.3.58078 > ns1.domainparking.int.reg.ru.http: Flags [P.], seq 1:394, ack 1, win 229, options [nop,nop,TS val 125593 ecr 922858296], length 393: HTTP: GET /get.php?ip=172.28.240.254&d=e-nkama.ru%2Fnews%2F262%2F56937%2F&u=Mozilla%2F5.0+%28Linux%3B+Android+6.0.1%3B+Nexus+5X+Build%2FMMB29P%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F122.0.6261.94+Mobile+Safari%2F537.36+%28compatible%3B+Googlebot%2F2.1%3B+%2Bhttp%3A%2F%2Fwww.google.com%2Fbot.html%29&i=1&h=6bff270f2de91c5850af6f8c7fb23ca4 HTTP/1.1
17:35:54.023179 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [.], ack 171, win 229, options [nop,nop,TS val 125595 ecr 71200572], length 0
17:35:54.024062 IP 172.28.240.31.mysql > 172.28.240.3.59201: Flags [.], ack 190, win 227, options [nop,nop,TS val 71200582 ecr 125585], length 0
17:35:54.038372 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58078: Flags [.], ack 394, win 85, options [nop,nop,TS val 922858317 ecr 125593], length 0
17:35:54.038647 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58078: Flags [P.], seq 1:499, ack 394, win 85, options [nop,nop,TS val 922858318 ecr 125593], length 498: HTTP: HTTP/1.1 403 Forbidden
17:35:54.038659 IP 172.28.240.3.58078 > ns1.domainparking.int.reg.ru.http: Flags [.], ack 499, win 237, options [nop,nop,TS val 125598 ecr 922858318], length 0
17:35:54.038668 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58078: Flags [F.], seq 499, ack 394, win 85, options [nop,nop,TS val 922858318 ecr 125593], length 0
17:35:54.038777 IP 172.28.240.3.58078 > ns1.domainparking.int.reg.ru.http: Flags [F.], seq 394, ack 500, win 237, options [nop,nop,TS val 125598 ecr 922858318], length 0
17:35:54.059541 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58078: Flags [.], ack 395, win 85, options [nop,nop,TS val 922858339 ecr 125598], length 0
17:35:54.121657 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [P.], seq 7746:8487, ack 25168, win 1444, options [nop,nop,TS val 125619 ecr 71200361], length 741
17:35:54.121832 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [P.], seq 25168:25245, ack 8487, win 1050, options [nop,nop,TS val 71200606 ecr 125619], length 77
17:35:54.121866 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [.], ack 25245, win 1444, options [nop,nop,TS val 125619 ecr 71200606], length 0
17:35:54.187674 IP 172.28.240.3.https > 172.28.240.254.53027: Flags [.], seq 132359081:132370665, ack 3265540261, win 243, options [nop,nop,TS val 125636 ecr 80530628], length 11584
17:35:54.187821 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [P.], seq 8487:8492, ack 25245, win 1444, options [nop,nop,TS val 125636 ecr 71200606], length 5
17:35:54.187839 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [F.], seq 8492, ack 25245, win 1444, options [nop,nop,TS val 125636 ecr 71200606], length 0
17:35:54.188013 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [F.], seq 25245, ack 8492, win 1050, options [nop,nop,TS val 71200622 ecr 125636], length 0
17:35:54.188039 IP 172.28.240.3.59191 > 172.28.240.31.mysql: Flags [.], ack 25246, win 1444, options [nop,nop,TS val 125636 ecr 71200622], length 0
17:35:54.188049 IP 172.28.240.31.mysql > 172.28.240.3.59191: Flags [.], ack 8493, win 1050, options [nop,nop,TS val 71200623 ecr 125636], length 0
17:35:54.188585 IP 172.28.240.3.59190 > 172.28.240.31.mysql: Flags [P.], seq 637131098:637131140, ack 3674509445, win 229, options [nop,nop,TS val 125636 ecr 71198506], length 42
17:35:54.188780 IP 172.28.240.31.mysql > 172.28.240.3.59190: Flags [P.], seq 1:294, ack 42, win 235, options [nop,nop,TS val 71200623 ecr 125636], length 293
17:35:54.188813 IP 172.28.240.3.59190 > 172.28.240.31.mysql: Flags [.], ack 294, win 237, options [nop,nop,TS val 125636 ecr 71200623], length 0
17:35:54.188966 IP 172.28.240.3.59190 > 172.28.240.31.mysql: Flags [P.], seq 42:122, ack 294, win 237, options [nop,nop,TS val 125636 ecr 71200623], length 80
17:35:54.189087 IP 172.28.240.31.mysql > 172.28.240.3.59190: Flags [P.], seq 294:305, ack 122, win 235, options [nop,nop,TS val 71200623 ecr 125636], length 11
17:35:54.189896 IP 172.28.240.254.53027 > 172.28.240.3.https: Flags [.], ack 1448, win 211, options [nop,nop,TS val 80532754 ecr 125636], length 0
17:35:54.190106 IP 172.28.240.3.59190 > 172.28.240.31.mysql: Flags [.], seq 122:1570, ack 305, win 237, options [nop,nop,TS val 125636 ecr 71200623], length 1448
17:35:54.190122 IP 172.28.240.3.59190 > 172.28.240.31.mysql: Flags [P.], seq 1570:2918, ack 305, win 237, options [nop,nop,TS val 125636 ecr 71200623], length 1348
17:35:54.190175 IP 172.28.240.31.mysql > 172.28.240.3.59190: Flags [.], ack 2918, win 280, options [nop,nop,TS val 71200623 ecr 125636], length 0
17:35:54.191444 IP 172.28.240.254.53027 > 172.28.240.3.https: Flags [.], ack 11584, win 283, options [nop,nop,TS val 80532754 ecr 125636], length 0
17:35:54.191458 IP 172.28.240.3.https > 172.28.240.254.53027: Flags [.], seq 11584:15928, ack 1, win 243, options [nop,nop,TS val 125637 ecr 80532754], length 4344
17:35:54.191467 IP 172.28.240.3.https > 172.28.240.254.53027: Flags [P.], seq 15928:17343, ack 1, win 243, options [nop,nop,TS val 125637 ecr 80532754], length 1415
17:35:54.193672 IP 172.28.240.254.53027 > 172.28.240.3.https: Flags [.], ack 13032, win 331, options [nop,nop,TS val 80532755 ecr 125637], length 0
17:35:54.195237 IP 172.28.240.254.53027 > 172.28.240.3.https: Flags [.], ack 17343, win 312, options [nop,nop,TS val 80532755 ecr 125637], length 0
17:35:54.248919 IP 172.28.240.31.mysql > 172.28.240.3.59190: Flags [P.], seq 305:316, ack 2918, win 280, options [nop,nop,TS val 71200638 ecr 125636], length 11
17:35:54.249229 IP 172.28.240.3.59190 > 172.28.240.31.mysql: Flags [P.], seq 2918:2974, ack 316, win 237, options [nop,nop,TS val 125651 ecr 71200638], length 56
17:35:54.249385 IP 172.28.240.31.mysql > 172.28.240.3.59190: Flags [P.], seq 316:327, ack 2974, win 280, options [nop,nop,TS val 71200638 ecr 125651], length 11
17:35:54.260306 IP 172.28.240.3.59190 > 172.28.240.31.mysql: Flags [P.], seq 2974:2979, ack 327, win 237, options [nop,nop,TS val 125654 ecr 71200638], length 5
17:35:54.260327 IP 172.28.240.3.59190 > 172.28.240.31.mysql: Flags [F.], seq 2979, ack 327, win 237, options [nop,nop,TS val 125654 ecr 71200638], length 0
17:35:54.260477 IP 172.28.240.31.mysql > 172.28.240.3.59190: Flags [F.], seq 327, ack 2980, win 280, options [nop,nop,TS val 71200641 ecr 125654], length 0
17:35:54.260512 IP 172.28.240.3.59190 > 172.28.240.31.mysql: Flags [.], ack 328, win 237, options [nop,nop,TS val 125654 ecr 71200641], length 0
17:35:54.263319 IP 172.28.240.3.https > 172.28.240.254.53027: Flags [.], seq 17343:24583, ack 1, win 243, options [nop,nop,TS val 125655 ecr 80532755], length 7240
17:35:54.263333 IP 172.28.240.3.https > 172.28.240.254.53027: Flags [P.], seq 24583:25438, ack 1, win 243, options [nop,nop,TS val 125655 ecr 80532755], length 855
17:35:54.265534 IP 172.28.240.254.53027 > 172.28.240.3.https: Flags [.], ack 18791, win 331, options [nop,nop,TS val 80532773 ecr 125655], length 0
17:35:54.267100 IP 172.28.240.254.53027 > 172.28.240.3.https: Flags [.], ack 25438, win 298, options [nop,nop,TS val 80532773 ecr 125655], length 0
17:35:54.455015 IP 172.28.240.254.53027 > 172.28.240.3.https: Flags [F.], seq 1, ack 25438, win 331, options [nop,nop,TS val 80532820 ecr 125655], length 0
17:35:54.455135 IP 172.28.240.3.https > 172.28.240.254.53027: Flags [P.], seq 25438:25469, ack 2, win 243, options [nop,nop,TS val 125702 ecr 80532820], length 31
17:35:54.455215 IP 172.28.240.3.https > 172.28.240.254.53027: Flags [F.], seq 25469, ack 2, win 243, options [nop,nop,TS val 125703 ecr 80532820], length 0
17:35:54.456882 IP 172.28.240.254.53027 > 172.28.240.3.https: Flags [.], ack 25469, win 331, options [nop,nop,TS val 80532820 ecr 125702], length 0
17:35:54.458410 IP 172.28.240.254.53027 > 172.28.240.3.https: Flags [.], ack 25470, win 331, options [nop,nop,TS val 80532821 ecr 125703], length 0
17:35:54.787976 IP 172.28.240.3.ntp > time.cloudflare.com.ntp: NTPv4, Client, length 48
17:35:54.788187 IP 172.28.240.3.36106 > web-server.e-nk.ru.domain: 55920+ PTR? 123.200.159.162.in-addr.arpa. (46)
17:35:54.797242 IP web-server.e-nk.ru.domain > 172.28.240.3.36106: 55920 1/2/12 PTR time.cloudflare.com. (384)
17:35:54.808067 IP time.cloudflare.com.ntp > 172.28.240.3.ntp: NTPv4, Server, length 48
17:35:55.130438 ARP, Request who-has 172.28.240.230 tell 172.28.240.24, length 46
17:35:55.563565 IP 172.28.240.3.https > 172.28.240.254.53003: Flags [P.], seq 1334170605:1334170636, ack 2900387178, win 349, options [nop,nop,TS val 125980 ecr 80525604], length 31
17:35:55.563738 IP 172.28.240.3.https > 172.28.240.254.53003: Flags [F.], seq 31, ack 1, win 349, options [nop,nop,TS val 125980 ecr 80525604], length 0
17:35:55.565399 IP 172.28.240.254.53003 > 172.28.240.3.https: Flags [.], ack 31, win 2730, options [nop,nop,TS val 80533098 ecr 125980], length 0
17:35:55.603686 IP 172.28.240.254.53003 > 172.28.240.3.https: Flags [.], ack 32, win 2730, options [nop,nop,TS val 80533108 ecr 125980], length 0
17:35:55.633760 IP 172.28.240.254.53003 > 172.28.240.3.https: Flags [F.], seq 1, ack 32, win 2730, options [nop,nop,TS val 80533115 ecr 125980], length 0
17:35:55.633774 IP 172.28.240.3.https > 172.28.240.254.53003: Flags [.], ack 2, win 349, options [nop,nop,TS val 125997 ecr 80533115], length 0
17:35:55.774864 IP 172.28.240.3.https > 172.28.240.254.53001: Flags [P.], seq 155347678:155347709, ack 787231146, win 474, options [nop,nop,TS val 126032 ecr 80525761], length 31
17:35:55.774953 IP 172.28.240.3.https > 172.28.240.254.53001: Flags [F.], seq 31, ack 1, win 474, options [nop,nop,TS val 126032 ecr 80525761], length 0
17:35:55.776607 IP 172.28.240.254.53001 > 172.28.240.3.https: Flags [.], ack 31, win 1530, options [nop,nop,TS val 80533150 ecr 126032], length 0
17:35:55.815619 IP 172.28.240.254.53001 > 172.28.240.3.https: Flags [.], ack 32, win 1532, options [nop,nop,TS val 80533161 ecr 126032], length 0
17:35:55.892273 IP 172.28.240.3.https > 172.28.240.254.52997: Flags [P.], seq 4231683950:4231683981, ack 4052202312, win 415, options [nop,nop,TS val 126062 ecr 80525713], length 31
17:35:55.892326 IP 172.28.240.3.https > 172.28.240.254.52997: Flags [F.], seq 31, ack 1, win 415, options [nop,nop,TS val 126062 ecr 80525713], length 0
17:35:55.894114 IP 172.28.240.254.52997 > 172.28.240.3.https: Flags [.], ack 31, win 1426, options [nop,nop,TS val 80533180 ecr 126062], length 0
17:35:55.935664 IP 172.28.240.254.52997 > 172.28.240.3.https: Flags [.], ack 32, win 1426, options [nop,nop,TS val 80533191 ecr 126062], length 0
17:35:56.310188 IP 172.28.240.3.https > 172.28.240.254.53002: Flags [P.], seq 4086581124:4086581155, ack 526336226, win 499, options [nop,nop,TS val 126166 ecr 80525778], length 31
17:35:56.310242 IP 172.28.240.3.https > 172.28.240.254.53002: Flags [F.], seq 31, ack 1, win 499, options [nop,nop,TS val 126166 ecr 80525778], length 0
17:35:56.312060 IP 172.28.240.254.53002 > 172.28.240.3.https: Flags [.], ack 31, win 1021, options [nop,nop,TS val 80533285 ecr 126166], length 0
17:35:56.351669 IP 172.28.240.254.53002 > 172.28.240.3.https: Flags [.], ack 32, win 1021, options [nop,nop,TS val 80533295 ecr 126166], length 0
17:35:56.636047 IP 172.28.240.254.53001 > 172.28.240.3.https: Flags [F.], seq 1, ack 32, win 1532, options [nop,nop,TS val 80533366 ecr 126032], length 0
17:35:56.636132 IP 172.28.240.3.https > 172.28.240.254.53001: Flags [.], ack 2, win 474, options [nop,nop,TS val 126248 ecr 80533366], length 0
17:35:56.636176 IP 172.28.240.254.53002 > 172.28.240.3.https: Flags [F.], seq 1, ack 32, win 1021, options [nop,nop,TS val 80533366 ecr 126166], length 0
17:35:56.636201 IP 172.28.240.3.https > 172.28.240.254.53002: Flags [.], ack 2, win 499, options [nop,nop,TS val 126248 ecr 80533366], length 0
17:35:56.636206 IP 172.28.240.254.52997 > 172.28.240.3.https: Flags [F.], seq 1, ack 32, win 1426, options [nop,nop,TS val 80533366 ecr 126062], length 0
17:35:56.636220 IP 172.28.240.3.https > 172.28.240.254.52997: Flags [.], ack 2, win 415, options [nop,nop,TS val 126248 ecr 80533366], length 0
17:35:56.700434 IP 172.28.240.3.https > 172.28.240.254.53004: Flags [P.], seq 2485696337:2485696368, ack 1618014994, win 467, options [nop,nop,TS val 126264 ecr 80525881], length 31
17:35:56.700496 IP 172.28.240.3.https > 172.28.240.254.53004: Flags [F.], seq 31, ack 1, win 467, options [nop,nop,TS val 126264 ecr 80525881], length 0
17:35:56.702184 IP 172.28.240.254.53004 > 172.28.240.3.https: Flags [.], ack 31, win 2462, options [nop,nop,TS val 80533382 ecr 126264], length 0
17:35:56.718189 IP 172.28.240.3.https > 172.28.240.254.53009: Flags [P.], seq 875672817:875672848, ack 4203211541, win 243, options [nop,nop,TS val 126268 ecr 80525879], length 31
17:35:56.718281 IP 172.28.240.3.https > 172.28.240.254.53009: Flags [F.], seq 31, ack 1, win 243, options [nop,nop,TS val 126268 ecr 80525879], length 0
17:35:56.720425 IP 172.28.240.254.53009 > 172.28.240.3.https: Flags [.], ack 31, win 331, options [nop,nop,TS val 80533386 ecr 126268], length 0
17:35:56.734457 ARP, Request who-has 172.28.240.3 tell web-server.e-nk.ru, length 46
17:35:56.734493 ARP, Reply 172.28.240.3 is-at 00:50:56:82:94:eb (oui Unknown), length 28
17:35:56.743629 IP 172.28.240.254.53004 > 172.28.240.3.https: Flags [.], ack 32, win 2462, options [nop,nop,TS val 80533393 ecr 126264], length 0
17:35:56.759654 IP 172.28.240.254.53009 > 172.28.240.3.https: Flags [.], ack 32, win 331, options [nop,nop,TS val 80533397 ecr 126268], length 0
17:35:57.459074 IP 172.28.240.254.53009 > 172.28.240.3.https: Flags [F.], seq 1:32, ack 32, win 331, options [nop,nop,TS val 80533571 ecr 126268], length 31
17:35:57.459114 IP 172.28.240.3.https > 172.28.240.254.53009: Flags [.], ack 33, win 243, options [nop,nop,TS val 126453 ecr 80533571], length 0
17:35:57.647100 IP 172.28.240.254.53004 > 172.28.240.3.https: Flags [F.], seq 1, ack 32, win 2462, options [nop,nop,TS val 80533618 ecr 126264], length 0
17:35:57.647142 IP 172.28.240.3.https > 172.28.240.254.53004: Flags [.], ack 2, win 467, options [nop,nop,TS val 126500 ecr 80533618], length 0
17:35:58.350397 ARP, Request who-has 172.28.240.230 tell 172.28.240.24, length 46
17:35:58.404983 IP 172.28.240.3.https > 172.28.240.254.53013: Flags [P.], seq 298894276:298894307, ack 2637521274, win 244, options [nop,nop,TS val 126690 ecr 80526304], length 31
17:35:58.405094 IP 172.28.240.3.https > 172.28.240.254.53013: Flags [F.], seq 31, ack 1, win 244, options [nop,nop,TS val 126690 ecr 80526304], length 0
17:35:58.406804 IP 172.28.240.254.53013 > 172.28.240.3.https: Flags [.], ack 31, win 222, options [nop,nop,TS val 80533808 ecr 126690], length 0
17:35:58.443798 IP 172.28.240.254.53013 > 172.28.240.3.https: Flags [.], ack 32, win 222, options [nop,nop,TS val 80533818 ecr 126690], length 0
17:35:58.515533 IP 172.28.240.254.53013 > 172.28.240.3.https: Flags [F.], seq 1:32, ack 32, win 222, options [nop,nop,TS val 80533835 ecr 126690], length 31
17:35:58.515566 IP 172.28.240.3.https > 172.28.240.254.53013: Flags [.], ack 33, win 244, options [nop,nop,TS val 126718 ecr 80533835], length 0
17:35:59.128260 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 17232252:17235148, ack 3341304255, win 599, options [nop,nop,TS val 71201858 ecr 123460], length 2896
17:35:59.128288 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 2896:5792, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 123460], length 2896
17:35:59.128291 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 5792:8688, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 123460], length 2896
17:35:59.128292 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 8688:11584, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 123460], length 2896
17:35:59.128294 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 11584:14480, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 123460], length 2896
17:35:59.128364 IP 172.28.240.3.59154 > 172.28.240.31.mysql: Flags [.], ack 5792, win 539, options [nop,nop,TS val 126871 ecr 71201858], length 0
17:35:59.128391 IP 172.28.240.3.59154 > 172.28.240.31.mysql: Flags [.], ack 11584, win 630, options [nop,nop,TS val 126871 ecr 71201858], length 0
17:35:59.128534 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 14480:17376, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 2896
17:35:59.128540 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 17376:20272, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 2896
17:35:59.128543 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 20272:23168, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 2896
17:35:59.128545 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 23168:26064, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 2896
17:35:59.128547 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 26064:28960, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 2896
17:35:59.128549 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 28960:31856, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 2896
17:35:59.128551 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 31856:34752, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 2896
17:35:59.128587 IP 172.28.240.3.59154 > 172.28.240.31.mysql: Flags [.], ack 17376, win 720, options [nop,nop,TS val 126871 ecr 71201858], length 0
17:35:59.128606 IP 172.28.240.3.59154 > 172.28.240.31.mysql: Flags [.], ack 23168, win 811, options [nop,nop,TS val 126871 ecr 71201858], length 0
17:35:59.128620 IP 172.28.240.3.59154 > 172.28.240.31.mysql: Flags [.], ack 28960, win 901, options [nop,nop,TS val 126871 ecr 71201858], length 0
17:35:59.128640 IP 172.28.240.3.59154 > 172.28.240.31.mysql: Flags [.], ack 34752, win 992, options [nop,nop,TS val 126871 ecr 71201858], length 0
17:35:59.128646 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 37648:40544, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 2896
17:35:59.128649 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 40544:43440, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 2896
17:35:59.128652 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 43440:46336, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 2896
17:35:59.128654 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 46336:49232, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 2896
17:35:59.128656 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 49232:52128, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 2896
17:35:59.128658 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 52128:55024, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 2896
17:35:59.128770 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 73535:80775, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 7240
17:35:59.128777 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 80775:88015, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 7240
17:35:59.128781 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 88015:89463, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 1448
17:35:59.128783 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [P.], seq 89463:89919, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 456
17:35:59.128813 IP 172.28.240.3.59154 > 172.28.240.31.mysql: Flags [.], ack 89919, win 1022, options [nop,nop,TS val 126871 ecr 71201858], length 0
17:35:59.129010 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], seq 89919:92815, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 2896
17:35:59.129015 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [P.], seq 92815:93604, ack 1, win 599, options [nop,nop,TS val 71201858 ecr 126871], length 789
17:35:59.129043 IP 172.28.240.3.59154 > 172.28.240.31.mysql: Flags [.], ack 93604, win 1444, options [nop,nop,TS val 126871 ecr 71201858], length 0
17:35:59.129418 IP 172.28.240.3.59154 > 172.28.240.31.mysql: Flags [P.], seq 1:144, ack 93604, win 1444, options [nop,nop,TS val 126871 ecr 71201858], length 143
17:35:59.129472 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [.], ack 144, win 616, options [nop,nop,TS val 71201858 ecr 126871], length 0
17:35:59.129716 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [P.], seq 93604:94862, ack 144, win 616, options [nop,nop,TS val 71201858 ecr 126871], length 1258
17:35:59.129793 IP 172.28.240.3.59154 > 172.28.240.31.mysql: Flags [P.], seq 144:203, ack 94862, win 1444, options [nop,nop,TS val 126871 ecr 71201858], length 59
17:35:59.144091 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [P.], seq 94862:94914, ack 203, win 616, options [nop,nop,TS val 71201862 ecr 126871], length 52
17:35:59.144801 IP 172.28.240.3.59154 > 172.28.240.31.mysql: Flags [P.], seq 203:256, ack 94914, win 1444, options [nop,nop,TS val 126875 ecr 71201862], length 53
17:35:59.144921 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [P.], seq 94914:95007, ack 256, win 616, options [nop,nop,TS val 71201862 ecr 126875], length 93
17:35:59.145601 IP 172.28.240.3.59154 > 172.28.240.31.mysql: Flags [P.], seq 256:443, ack 95007, win 1444, options [nop,nop,TS val 126875 ecr 71201862], length 187
17:35:59.145673 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [P.], seq 95007:95538, ack 443, win 632, options [nop,nop,TS val 71201862 ecr 126875], length 531
17:35:59.157396 IP 172.28.240.3.40729 > web-server.e-nk.ru.domain: 23043+ AAAA? no24.ru. (25)
17:35:59.183228 IP 172.28.240.3.59154 > 172.28.240.31.mysql: Flags [.], ack 95538, win 1444, options [nop,nop,TS val 126885 ecr 71201862], length 0
17:35:59.234106 IP 172.28.240.3.ssh > 172.30.237.120.51423: Flags [P.], seq 1336002380:1336002460, ack 2946508321, win 513, length 80
17:35:59.278036 IP 172.30.237.120.51423 > 172.28.240.3.ssh: Flags [.], ack 80, win 32759, length 0
17:35:59.324309 IP 172.28.240.3.http > 172.28.240.254.41957: Flags [F.], seq 2613735588, ack 2840087732, win 235, options [nop,nop,TS val 126920 ecr 80526531], length 0
17:35:59.326241 IP 172.28.240.254.41957 > 172.28.240.3.http: Flags [F.], seq 1, ack 1, win 123, options [nop,nop,TS val 80534038 ecr 126920], length 0
17:35:59.326274 IP 172.28.240.3.http > 172.28.240.254.41957: Flags [.], ack 2, win 235, options [nop,nop,TS val 126920 ecr 80534038], length 0
17:35:59.373866 IP web-server.e-nk.ru.domain > 172.28.240.3.40729: 23043 ServFail 0/0/0 (25)
17:35:59.374065 IP 172.28.240.3.34194 > web-server.e-nk.ru.domain: 23043+ AAAA? no24.ru. (25)
17:35:59.440469 IP web-server.e-nk.ru.domain > 172.28.240.3.34194: 23043 ServFail 0/0/0 (25)
17:35:59.440637 IP 172.28.240.3.59635 > web-server.e-nk.ru.domain: 29309+ AAAA? no24.ru.e-nk.ru. (33)
17:35:59.440931 IP web-server.e-nk.ru.domain > 172.28.240.3.59635: 29309 NXDomain* 0/1/0 (79)
17:35:59.441038 IP 172.28.240.3.54485 > web-server.e-nk.ru.domain: 45590+ A? no24.ru. (25)
17:35:59.441337 IP web-server.e-nk.ru.domain > 172.28.240.3.54485: 45590 1/2/2 A 31.31.205.163 (176)
17:35:59.441506 IP 172.28.240.3.58083 > ns1.domainparking.int.reg.ru.http: Flags [S], seq 2895898618, win 29200, options [mss 1460,sackOK,TS val 126949 ecr 0,nop,wscale 7], length 0
17:35:59.461586 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58083: Flags [S.], seq 3146904937, ack 2895898619, win 43440, options [mss 1460,sackOK,TS val 922863741 ecr 126949,nop,wscale 9], length 0
17:35:59.461623 IP 172.28.240.3.58083 > ns1.domainparking.int.reg.ru.http: Flags [.], ack 1, win 229, options [nop,nop,TS val 126954 ecr 922863741], length 0
17:35:59.461760 IP 172.28.240.3.58083 > ns1.domainparking.int.reg.ru.http: Flags [P.], seq 1:282, ack 1, win 229, options [nop,nop,TS val 126954 ecr 922863741], length 281: HTTP: GET /get.php?ip=172.28.240.254&d=e-nkama.ru%2Fsearch%2F%3Fq%3Dwow&u=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F122.0.0.0+Safari%2F537.36&i=1&h=6bff270f2de91c5850af6f8c7fb23ca4 HTTP/1.1
17:35:59.481862 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58083: Flags [.], ack 282, win 85, options [nop,nop,TS val 922863762 ecr 126954], length 0
17:35:59.482105 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58083: Flags [P.], seq 1:499, ack 282, win 85, options [nop,nop,TS val 922863762 ecr 126954], length 498: HTTP: HTTP/1.1 403 Forbidden
17:35:59.482113 IP 172.28.240.3.58083 > ns1.domainparking.int.reg.ru.http: Flags [.], ack 499, win 237, options [nop,nop,TS val 126959 ecr 922863762], length 0
17:35:59.482153 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58083: Flags [F.], seq 499, ack 282, win 85, options [nop,nop,TS val 922863762 ecr 126954], length 0
17:35:59.482231 IP 172.28.240.3.58083 > ns1.domainparking.int.reg.ru.http: Flags [F.], seq 282, ack 500, win 237, options [nop,nop,TS val 126959 ecr 922863762], length 0
17:35:59.502121 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58083: Flags [.], ack 283, win 85, options [nop,nop,TS val 922863782 ecr 126959], length 0
17:35:59.529368 IP 172.28.240.3.https > 172.28.240.254.52979: Flags [.], seq 3315818668:3315821564, ack 2864962826, win 736, options [nop,nop,TS val 126971 ecr 80529963], length 2896
17:35:59.529434 IP 172.28.240.3.https > 172.28.240.254.52979: Flags [.], seq 2896:5792, ack 1, win 736, options [nop,nop,TS val 126971 ecr 80529963], length 2896
17:35:59.529471 IP 172.28.240.3.https > 172.28.240.254.52979: Flags [.], seq 5792:8688, ack 1, win 736, options [nop,nop,TS val 126971 ecr 80529963], length 2896
17:35:59.529503 IP 172.28.240.3.https > 172.28.240.254.52979: Flags [.], seq 8688:11584, ack 1, win 736, options [nop,nop,TS val 126971 ecr 80529963], length 2896
17:35:59.529533 IP 172.28.240.3.https > 172.28.240.254.52979: Flags [.], seq 11584:14480, ack 1, win 736, options [nop,nop,TS val 126971 ecr 80529963], length 2896
17:35:59.529711 IP 172.28.240.3.59154 > 172.28.240.31.mysql: Flags [P.], seq 443:448, ack 95538, win 1444, options [nop,nop,TS val 126971 ecr 71201862], length 5
17:35:59.529769 IP 172.28.240.3.59154 > 172.28.240.31.mysql: Flags [F.], seq 448, ack 95538, win 1444, options [nop,nop,TS val 126971 ecr 71201862], length 0
17:35:59.529976 IP 172.28.240.31.mysql > 172.28.240.3.59154: Flags [F.], seq 95538, ack 449, win 632, options [nop,nop,TS val 71201958 ecr 126971], length 0
17:35:59.529992 IP 172.28.240.3.59154 > 172.28.240.31.mysql: Flags [.], ack 95539, win 1444, options [nop,nop,TS val 126971 ecr 71201958], length 0
17:35:59.530594 IP 172.28.240.3.59153 > 172.28.240.31.mysql: Flags [P.], seq 3432537162:3432537204, ack 3018020845, win 274, options [nop,nop,TS val 126971 ecr 71190867], length 42
17:35:59.531001 IP 172.28.240.31.mysql > 172.28.240.3.59153: Flags [P.], seq 1:294, ack 42, win 235, options [nop,nop,TS val 71201958 ecr 126971], length 293
17:35:59.531226 IP 172.28.240.3.59153 > 172.28.240.31.mysql: Flags [P.], seq 42:122, ack 294, win 296, options [nop,nop,TS val 126972 ecr 71201958], length 80
17:35:59.531627 IP 172.28.240.254.52979 > 172.28.240.3.https: Flags [.], ack 1448, win 1955, options [nop,nop,TS val 80534089 ecr 126971], length 0
17:35:59.531642 IP 172.28.240.3.https > 172.28.240.254.52979: Flags [P.], seq 14480:15517, ack 1, win 736, options [nop,nop,TS val 126972 ecr 80534089], length 1037
17:35:59.533166 IP 172.28.240.254.52979 > 172.28.240.3.https: Flags [.], ack 14480, win 1890, options [nop,nop,TS val 80534089 ecr 126971], length 0
17:35:59.534709 IP 172.28.240.254.52979 > 172.28.240.3.https: Flags [.], ack 15517, win 1882, options [nop,nop,TS val 80534090 ecr 126972], length 0
17:35:59.547239 IP 172.28.240.31.mysql > 172.28.240.3.59153: Flags [P.], seq 294:305, ack 122, win 235, options [nop,nop,TS val 71201962 ecr 126972], length 11
17:35:59.548310 IP 172.28.240.3.59153 > 172.28.240.31.mysql: Flags [.], seq 122:1570, ack 305, win 296, options [nop,nop,TS val 126976 ecr 71201962], length 1448
17:35:59.548322 IP 172.28.240.3.59153 > 172.28.240.31.mysql: Flags [P.], seq 1570:2898, ack 305, win 296, options [nop,nop,TS val 126976 ecr 71201962], length 1328
17:35:59.548489 IP 172.28.240.31.mysql > 172.28.240.3.59153: Flags [.], ack 2898, win 280, options [nop,nop,TS val 71201963 ecr 126976], length 0
17:35:59.558661 IP 172.28.240.31.mysql > 172.28.240.3.59153: Flags [P.], seq 305:316, ack 2898, win 280, options [nop,nop,TS val 71201965 ecr 126976], length 11
17:35:59.558928 IP 172.28.240.3.59153 > 172.28.240.31.mysql: Flags [P.], seq 2898:2954, ack 316, win 296, options [nop,nop,TS val 126978 ecr 71201965], length 56
17:35:59.559067 IP 172.28.240.31.mysql > 172.28.240.3.59153: Flags [P.], seq 316:327, ack 2954, win 280, options [nop,nop,TS val 71201965 ecr 126978], length 11
17:35:59.559100 IP 172.28.240.31.mysql > 172.28.240.3.59185: Flags [P.], seq 1049620257:1049620360, ack 1735362945, win 227, options [nop,nop,TS val 71201965 ecr 122871], length 103
17:35:59.560260 IP 172.28.240.3.59185 > 172.28.240.31.mysql: Flags [P.], seq 1:189, ack 103, win 229, options [nop,nop,TS val 126979 ecr 71201965], length 188
17:35:59.560350 IP 172.28.240.31.mysql > 172.28.240.3.59185: Flags [.], ack 189, win 235, options [nop,nop,TS val 71201966 ecr 126979], length 0
17:35:59.560502 IP 172.28.240.31.mysql > 172.28.240.3.59185: Flags [.], seq 103:1551, ack 189, win 235, options [nop,nop,TS val 71201966 ecr 126979], length 1448
17:35:59.560512 IP 172.28.240.31.mysql > 172.28.240.3.59185: Flags [P.], seq 1551:2864, ack 189, win 235, options [nop,nop,TS val 71201966 ecr 126979], length 1313
17:35:59.560548 IP 172.28.240.3.59185 > 172.28.240.31.mysql: Flags [.], ack 2864, win 274, options [nop,nop,TS val 126979 ecr 71201966], length 0
17:35:59.564252 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 779769878:779770978, ack 2404259528, win 229, options [nop,nop,TS val 126980 ecr 71197857], length 1100
17:35:59.564613 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 1:508, ack 1100, win 249, options [nop,nop,TS val 71201967 ecr 126980], length 507
17:35:59.564689 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [.], ack 508, win 237, options [nop,nop,TS val 126980 ecr 71201967], length 0
17:35:59.570295 IP 172.28.240.3.59153 > 172.28.240.31.mysql: Flags [P.], seq 2954:2959, ack 327, win 296, options [nop,nop,TS val 126981 ecr 71201965], length 5
17:35:59.570362 IP 172.28.240.3.59153 > 172.28.240.31.mysql: Flags [F.], seq 2959, ack 327, win 296, options [nop,nop,TS val 126981 ecr 71201965], length 0
17:35:59.570440 IP 172.28.240.31.mysql > 172.28.240.3.59153: Flags [F.], seq 327, ack 2960, win 280, options [nop,nop,TS val 71201968 ecr 126981], length 0
17:35:59.570471 IP 172.28.240.3.59153 > 172.28.240.31.mysql: Flags [.], ack 328, win 296, options [nop,nop,TS val 126981 ecr 71201968], length 0
17:35:59.571845 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 1100:1414, ack 508, win 237, options [nop,nop,TS val 126982 ecr 71201967], length 314
17:35:59.579107 IP 172.28.240.3.https > 172.28.240.254.52979: Flags [P.], seq 15517:15682, ack 1, win 736, options [nop,nop,TS val 126983 ecr 80534090], length 165
17:35:59.579292 IP 172.28.240.3.https > 172.28.240.254.52979: Flags [P.], seq 15682:15713, ack 1, win 736, options [nop,nop,TS val 126984 ecr 80534090], length 31
17:35:59.579344 IP 172.28.240.3.https > 172.28.240.254.52979: Flags [F.], seq 15713, ack 1, win 736, options [nop,nop,TS val 126984 ecr 80534090], length 0
17:35:59.580968 IP 172.28.240.254.52979 > 172.28.240.3.https: Flags [.], ack 15682, win 1960, options [nop,nop,TS val 80534101 ecr 126983], length 0
17:35:59.582429 IP 172.28.240.254.52979 > 172.28.240.3.https: Flags [.], ack 15713, win 1960, options [nop,nop,TS val 80534101 ecr 126984], length 0
17:35:59.583952 IP 172.28.240.254.52979 > 172.28.240.3.https: Flags [.], ack 15714, win 1960, options [nop,nop,TS val 80534103 ecr 126984], length 0
17:35:59.608108 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [.], ack 1414, win 267, options [nop,nop,TS val 71201978 ecr 126982], length 0
17:35:59.614341 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 508:560, ack 1414, win 267, options [nop,nop,TS val 71201979 ecr 126982], length 52
17:35:59.614537 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 1414:2131, ack 560, win 237, options [nop,nop,TS val 126992 ecr 71201979], length 717
17:35:59.614633 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [.], ack 2131, win 284, options [nop,nop,TS val 71201979 ecr 126992], length 0
17:35:59.625414 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 560:579, ack 2131, win 284, options [nop,nop,TS val 71201982 ecr 126992], length 19
17:35:59.625798 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 2131:2473, ack 579, win 237, options [nop,nop,TS val 126995 ecr 71201982], length 342
17:35:59.633194 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 579:631, ack 2473, win 301, options [nop,nop,TS val 71201984 ecr 126995], length 52
17:35:59.633360 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 2473:2675, ack 631, win 237, options [nop,nop,TS val 126997 ecr 71201984], length 202
17:35:59.633687 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 631:683, ack 2675, win 318, options [nop,nop,TS val 71201984 ecr 126997], length 52
17:35:59.633772 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 2675:2939, ack 683, win 237, options [nop,nop,TS val 126997 ecr 71201984], length 264
17:35:59.637154 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 683:874, ack 2939, win 335, options [nop,nop,TS val 71201985 ecr 126997], length 191
17:35:59.637238 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 2939:3022, ack 874, win 245, options [nop,nop,TS val 126998 ecr 71201985], length 83
17:35:59.637408 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 874:926, ack 3022, win 335, options [nop,nop,TS val 71201985 ecr 126998], length 52
17:35:59.637472 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 3022:3127, ack 926, win 245, options [nop,nop,TS val 126998 ecr 71201985], length 105
17:35:59.660763 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 926:978, ack 3127, win 335, options [nop,nop,TS val 71201991 ecr 126998], length 52
17:35:59.660874 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 3127:3272, ack 978, win 245, options [nop,nop,TS val 127004 ecr 71201991], length 145
17:35:59.671079 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 978:1030, ack 3272, win 352, options [nop,nop,TS val 71201993 ecr 127004], length 52
17:35:59.671213 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 3272:3441, ack 1030, win 245, options [nop,nop,TS val 127007 ecr 71201993], length 169
17:35:59.681295 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 1030:1082, ack 3441, win 370, options [nop,nop,TS val 71201996 ecr 127007], length 52
17:35:59.681404 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 3441:3524, ack 1082, win 245, options [nop,nop,TS val 127009 ecr 71201996], length 83
17:35:59.681581 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 1082:1134, ack 3524, win 370, options [nop,nop,TS val 71201996 ecr 127009], length 52
17:35:59.681667 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 3524:3629, ack 1134, win 245, options [nop,nop,TS val 127009 ecr 71201996], length 105
17:35:59.681806 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 1134:1186, ack 3629, win 370, options [nop,nop,TS val 71201996 ecr 127009], length 52
17:35:59.681877 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 3629:3791, ack 1186, win 245, options [nop,nop,TS val 127009 ecr 71201996], length 162
17:35:59.693012 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 1186:1238, ack 3791, win 387, options [nop,nop,TS val 71201999 ecr 127009], length 52
17:35:59.693115 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 3791:3960, ack 1238, win 245, options [nop,nop,TS val 127012 ecr 71201999], length 169
17:35:59.693258 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 1238:1290, ack 3960, win 404, options [nop,nop,TS val 71201999 ecr 127012], length 52
17:35:59.693340 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 3960:4182, ack 1290, win 245, options [nop,nop,TS val 127012 ecr 71201999], length 222
17:35:59.698722 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 1290:1304, ack 4182, win 421, options [nop,nop,TS val 71202000 ecr 127012], length 14
17:35:59.698829 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 4182:4388, ack 1304, win 245, options [nop,nop,TS val 127013 ecr 71202000], length 206
17:35:59.707423 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 1304:1356, ack 4388, win 438, options [nop,nop,TS val 71202002 ecr 127013], length 52
17:35:59.707607 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 4388:5109, ack 1356, win 245, options [nop,nop,TS val 127016 ecr 71202002], length 721
17:35:59.714573 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 1356:1408, ack 5109, win 456, options [nop,nop,TS val 71202004 ecr 127016], length 52
17:35:59.714669 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 5109:5183, ack 1408, win 245, options [nop,nop,TS val 127017 ecr 71202004], length 74
17:35:59.720090 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 1408:1460, ack 5183, win 456, options [nop,nop,TS val 71202006 ecr 127017], length 52
17:35:59.720166 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 5183:5300, ack 1460, win 245, options [nop,nop,TS val 127019 ecr 71202006], length 117
17:35:59.739709 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 1460:1512, ack 5300, win 456, options [nop,nop,TS val 71202010 ecr 127019], length 52
17:35:59.739804 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 5300:5360, ack 1512, win 245, options [nop,nop,TS val 127024 ecr 71202010], length 60
17:35:59.739976 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 1512:1564, ack 5360, win 456, options [nop,nop,TS val 71202011 ecr 127024], length 52
17:35:59.740046 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 5360:5464, ack 1564, win 245, options [nop,nop,TS val 127024 ecr 71202011], length 104
17:35:59.752436 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 1564:1616, ack 5464, win 456, options [nop,nop,TS val 71202014 ecr 127024], length 52
17:35:59.752541 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 5464:5520, ack 1616, win 245, options [nop,nop,TS val 127027 ecr 71202014], length 56
17:35:59.753266 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 1616:1668, ack 5520, win 456, options [nop,nop,TS val 71202014 ecr 127027], length 52
17:35:59.753339 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 5520:5616, ack 1668, win 245, options [nop,nop,TS val 127027 ecr 71202014], length 96
17:35:59.753477 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 1668:1720, ack 5616, win 456, options [nop,nop,TS val 71202014 ecr 127027], length 52
17:35:59.753531 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 5616:5673, ack 1720, win 245, options [nop,nop,TS val 127027 ecr 71202014], length 57
17:35:59.765233 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 1720:1772, ack 5673, win 456, options [nop,nop,TS val 71202017 ecr 127027], length 52
17:35:59.773490 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 5673:5817, ack 1772, win 245, options [nop,nop,TS val 127032 ecr 71202017], length 144
17:35:59.778402 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 1772:1881, ack 5817, win 473, options [nop,nop,TS val 71202020 ecr 127032], length 109
17:35:59.784758 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 5817:6784, ack 1881, win 245, options [nop,nop,TS val 127035 ecr 71202020], length 967
17:35:59.784947 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [.], seq 1881:4777, ack 6784, win 490, options [nop,nop,TS val 71202022 ecr 127035], length 2896
17:35:59.784959 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 4777:5418, ack 6784, win 490, options [nop,nop,TS val 71202022 ecr 127035], length 641
17:35:59.784975 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [.], ack 5418, win 336, options [nop,nop,TS val 127035 ecr 71202022], length 0
17:35:59.786422 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 6784:6944, ack 5418, win 336, options [nop,nop,TS val 127035 ecr 71202022], length 160
17:35:59.786546 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [.], seq 5418:6866, ack 6944, win 507, options [nop,nop,TS val 71202022 ecr 127035], length 1448
17:35:59.786577 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 6866:7491, ack 6944, win 507, options [nop,nop,TS val 71202022 ecr 127035], length 625
17:35:59.786590 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [.], ack 7491, win 404, options [nop,nop,TS val 127035 ecr 71202022], length 0
17:35:59.787994 IP 172.28.240.3.ntp > alphyn.canonical.com.ntp: NTPv4, Client, length 48
17:35:59.788122 IP 172.28.240.3.51801 > web-server.e-nk.ru.domain: 43596+ PTR? 157.91.189.91.in-addr.arpa. (44)
17:35:59.788503 IP web-server.e-nk.ru.domain > 172.28.240.3.51801: 43596 1/3/5 PTR alphyn.canonical.com. (236)
17:35:59.789899 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 6944:7096, ack 7491, win 404, options [nop,nop,TS val 127036 ecr 71202022], length 152
17:35:59.789978 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [.], seq 7491:8939, ack 7096, win 524, options [nop,nop,TS val 71202023 ecr 127036], length 1448
17:35:59.790006 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 8939:9755, ack 7096, win 524, options [nop,nop,TS val 71202023 ecr 127036], length 816
17:35:59.790021 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [.], ack 9755, win 472, options [nop,nop,TS val 127036 ecr 71202023], length 0
17:35:59.790223 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 7096:8331, ack 9755, win 472, options [nop,nop,TS val 127036 ecr 71202023], length 1235
17:35:59.803378 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 9755:9811, ack 8331, win 547, options [nop,nop,TS val 71202026 ecr 127036], length 56
17:35:59.803591 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [.], seq 8331:9779, ack 9811, win 472, options [nop,nop,TS val 127040 ecr 71202026], length 1448
17:35:59.803605 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 9779:10667, ack 9811, win 472, options [nop,nop,TS val 127040 ecr 71202026], length 888
17:35:59.803786 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [.], ack 10667, win 592, options [nop,nop,TS val 71202026 ecr 127040], length 0
17:35:59.806731 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [.], seq 9811:11259, ack 10667, win 592, options [nop,nop,TS val 71202027 ecr 127040], length 1448
17:35:59.806739 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 11259:11496, ack 10667, win 592, options [nop,nop,TS val 71202027 ecr 127040], length 237
17:35:59.806815 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [.], ack 11496, win 539, options [nop,nop,TS val 127040 ecr 71202027], length 0
17:35:59.809466 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 10667:10816, ack 11496, win 539, options [nop,nop,TS val 127041 ecr 71202027], length 149
17:35:59.810040 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [P.], seq 11496:11606, ack 10816, win 615, options [nop,nop,TS val 71202028 ecr 127041], length 110
17:35:59.815143 IP 172.28.240.3.58084 > ns1.domainparking.int.reg.ru.http: Flags [S], seq 3285799411, win 29200, options [mss 1460,sackOK,TS val 127042 ecr 0,nop,wscale 7], length 0
17:35:59.834957 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58084: Flags [S.], seq 3294210117, ack 3285799412, win 43440, options [mss 1460,sackOK,TS val 922864114 ecr 127042,nop,wscale 9], length 0
17:35:59.834993 IP 172.28.240.3.58084 > ns1.domainparking.int.reg.ru.http: Flags [.], ack 1, win 229, options [nop,nop,TS val 127047 ecr 922864114], length 0
17:35:59.835040 IP 172.28.240.3.58084 > ns1.domainparking.int.reg.ru.http: Flags [P.], seq 1:296, ack 1, win 229, options [nop,nop,TS val 127047 ecr 922864114], length 295: HTTP: GET /get.php?ip=172.28.240.254&d=e-nkama.ru%2Fraion%2Fmunitsipalnyy-kontrol.php&u=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%29+AppleWebKit%2F537.36+%28KHTML%2C+like+Gecko%29+Chrome%2F122.0.0.0+Safari%2F537.36&i=1&h=6bff270f2de91c5850af6f8c7fb23ca4 HTTP/1.1
17:35:59.847210 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [.], ack 11606, win 539, options [nop,nop,TS val 127051 ecr 71202028], length 0
17:35:59.854820 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58084: Flags [.], ack 296, win 85, options [nop,nop,TS val 922864134 ecr 127047], length 0
17:35:59.855073 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58084: Flags [P.], seq 1:499, ack 296, win 85, options [nop,nop,TS val 922864134 ecr 127047], length 498: HTTP: HTTP/1.1 403 Forbidden
17:35:59.855083 IP 172.28.240.3.58084 > ns1.domainparking.int.reg.ru.http: Flags [.], ack 499, win 237, options [nop,nop,TS val 127052 ecr 922864134], length 0
17:35:59.855091 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58084: Flags [F.], seq 499, ack 296, win 85, options [nop,nop,TS val 922864134 ecr 127047], length 0
17:35:59.855135 IP 172.28.240.3.58084 > ns1.domainparking.int.reg.ru.http: Flags [F.], seq 296, ack 500, win 237, options [nop,nop,TS val 127052 ecr 922864134], length 0
17:35:59.874810 IP ns1.domainparking.int.reg.ru.http > 172.28.240.3.58084: Flags [.], ack 297, win 85, options [nop,nop,TS val 922864154 ecr 127052], length 0
17:35:59.963279 IP 172.28.240.3.http > 172.28.240.254.41960: Flags [F.], seq 2987427471, ack 1701705841, win 235, options [nop,nop,TS val 127080 ecr 80526692], length 0
17:35:59.965235 IP 172.28.240.254.41960 > 172.28.240.3.http: Flags [F.], seq 1, ack 1, win 160, options [nop,nop,TS val 80534198 ecr 127080], length 0
17:35:59.965267 IP 172.28.240.3.http > 172.28.240.254.41960: Flags [.], ack 2, win 235, options [nop,nop,TS val 127080 ecr 80534198], length 0
17:36:00.034250 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [S], seq 3808041584, win 29200, options [mss 1460,sackOK,TS val 127097 ecr 0,nop,wscale 7], length 0
17:36:00.034463 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [S.], seq 2798773729, ack 3808041585, win 28960, options [mss 1460,sackOK,TS val 71202084 ecr 127097,nop,wscale 7], length 0
17:36:00.034489 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [.], ack 1, win 229, options [nop,nop,TS val 127097 ecr 71202084], length 0
17:36:00.035381 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [P.], seq 1:96, ack 1, win 227, options [nop,nop,TS val 71202084 ecr 127097], length 95
17:36:00.035391 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [.], ack 96, win 229, options [nop,nop,TS val 127098 ecr 71202084], length 0
17:36:00.035452 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [P.], seq 1:90, ack 96, win 229, options [nop,nop,TS val 127098 ecr 71202084], length 89
17:36:00.035490 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [.], ack 90, win 227, options [nop,nop,TS val 71202084 ecr 127098], length 0
17:36:00.035508 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [P.], seq 96:107, ack 90, win 227, options [nop,nop,TS val 71202084 ecr 127098], length 11
17:36:00.035542 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [P.], seq 90:111, ack 107, win 229, options [nop,nop,TS val 127098 ecr 71202084], length 21
17:36:00.035597 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [P.], seq 107:118, ack 111, win 227, options [nop,nop,TS val 71202084 ecr 127098], length 11
17:36:00.035654 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [P.], seq 111:118, ack 118, win 229, options [nop,nop,TS val 127098 ecr 71202084], length 7
17:36:00.035694 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [P.], seq 118:127, ack 118, win 227, options [nop,nop,TS val 71202084 ecr 127098], length 9
17:36:00.035720 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [P.], seq 118:155, ack 127, win 229, options [nop,nop,TS val 127098 ecr 71202084], length 37
17:36:00.036597 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [P.], seq 127:286, ack 155, win 227, options [nop,nop,TS val 71202085 ecr 127098], length 159
17:36:00.036652 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [P.], seq 155:244, ack 286, win 237, options [nop,nop,TS val 127098 ecr 71202085], length 89
17:36:00.052557 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [P.], seq 286:1522, ack 244, win 227, options [nop,nop,TS val 71202089 ecr 127098], length 1236
17:36:00.052670 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [P.], seq 244:346, ack 1522, win 260, options [nop,nop,TS val 127102 ecr 71202089], length 102
17:36:00.054296 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [P.], seq 1522:1533, ack 346, win 227, options [nop,nop,TS val 71202089 ecr 127102], length 11
17:36:00.054354 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [P.], seq 346:435, ack 1533, win 260, options [nop,nop,TS val 127102 ecr 71202089], length 89
17:36:00.054465 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [P.], seq 1533:1932, ack 435, win 227, options [nop,nop,TS val 71202089 ecr 127102], length 399
17:36:00.054573 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [P.], seq 435:1393, ack 1932, win 279, options [nop,nop,TS val 127102 ecr 71202089], length 958
17:36:00.054706 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [P.], seq 1932:1943, ack 1393, win 242, options [nop,nop,TS val 71202089 ecr 127102], length 11
17:36:00.074945 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [P.], seq 1393:1482, ack 1943, win 279, options [nop,nop,TS val 127107 ecr 71202089], length 89
17:36:00.075135 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [P.], seq 1943:2342, ack 1482, win 242, options [nop,nop,TS val 71202094 ecr 127107], length 399
17:36:00.075274 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [P.], seq 1482:2440, ack 2342, win 298, options [nop,nop,TS val 127108 ecr 71202094], length 958
17:36:00.075467 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [P.], seq 2342:2353, ack 2440, win 257, options [nop,nop,TS val 71202094 ecr 127108], length 11
17:36:00.075720 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [P.], seq 2440:2529, ack 2353, win 298, options [nop,nop,TS val 127108 ecr 71202094], length 89
17:36:00.075812 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [P.], seq 2353:2752, ack 2529, win 257, options [nop,nop,TS val 71202094 ecr 127108], length 399
17:36:00.075895 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [P.], seq 2529:3487, ack 2752, win 318, options [nop,nop,TS val 127108 ecr 71202094], length 958
17:36:00.076007 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [P.], seq 2752:2763, ack 3487, win 272, options [nop,nop,TS val 71202095 ecr 127108], length 11
17:36:00.076199 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [P.], seq 3487:3576, ack 2763, win 318, options [nop,nop,TS val 127108 ecr 71202095], length 89
17:36:00.076283 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [P.], seq 2763:3162, ack 3576, win 272, options [nop,nop,TS val 71202095 ecr 127108], length 399
17:36:00.076364 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [P.], seq 3576:4534, ack 3162, win 337, options [nop,nop,TS val 127108 ecr 71202095], length 958
17:36:00.095637 IP 172.28.240.3.https > 172.28.240.254.53012: Flags [P.], seq 219230941:219230972, ack 2832471210, win 296, options [nop,nop,TS val 127113 ecr 80526785], length 31
17:36:00.095687 IP 172.28.240.3.https > 172.28.240.254.53012: Flags [F.], seq 31, ack 1, win 296, options [nop,nop,TS val 127113 ecr 80526785], length 0
17:36:00.097410 IP 172.28.240.254.53012 > 172.28.240.3.https: Flags [.], ack 31, win 2222, options [nop,nop,TS val 80534230 ecr 127113], length 0
17:36:00.100223 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [P.], seq 3162:3173, ack 4534, win 287, options [nop,nop,TS val 71202101 ecr 127108], length 11
17:36:00.100454 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [P.], seq 4534:4623, ack 3173, win 337, options [nop,nop,TS val 127114 ecr 71202101], length 89
17:36:00.100679 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [P.], seq 3173:3572, ack 4623, win 287, options [nop,nop,TS val 71202101 ecr 127114], length 399
17:36:00.100775 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [P.], seq 4623:5581, ack 3572, win 356, options [nop,nop,TS val 127114 ecr 71202101], length 958
17:36:00.101318 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [P.], seq 3572:3583, ack 5581, win 302, options [nop,nop,TS val 71202101 ecr 127114], length 11
17:36:00.105388 IP 172.28.240.3.https > 172.28.240.254.53025: Flags [.], seq 1:7241, ack 1, win 254, options [nop,nop,TS val 127115 ecr 80532689], length 7240
17:36:00.105437 IP 172.28.240.3.https > 172.28.240.254.53025: Flags [.], seq 7241:13033, ack 1, win 254, options [nop,nop,TS val 127115 ecr 80532689], length 5792
17:36:00.105444 IP 172.28.240.3.https > 172.28.240.254.53025: Flags [P.], seq 13033:14342, ack 1, win 254, options [nop,nop,TS val 127115 ecr 80532689], length 1309
17:36:00.105540 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [P.], seq 10816:10821, ack 11606, win 539, options [nop,nop,TS val 127115 ecr 71202028], length 5
17:36:00.105563 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [F.], seq 10821, ack 11606, win 539, options [nop,nop,TS val 127115 ecr 71202028], length 0
17:36:00.105633 IP 172.28.240.31.mysql > 172.28.240.3.59186: Flags [F.], seq 11606, ack 10822, win 615, options [nop,nop,TS val 71202102 ecr 127115], length 0
17:36:00.105651 IP 172.28.240.3.59186 > 172.28.240.31.mysql: Flags [.], ack 11607, win 539, options [nop,nop,TS val 127115 ecr 71202102], length 0
17:36:00.106199 IP 172.28.240.3.59185 > 172.28.240.31.mysql: Flags [P.], seq 189:231, ack 2864, win 274, options [nop,nop,TS val 127115 ecr 71201966], length 42
17:36:00.106373 IP 172.28.240.31.mysql > 172.28.240.3.59185: Flags [P.], seq 2864:3157, ack 231, win 235, options [nop,nop,TS val 71202102 ecr 127115], length 293
17:36:00.106569 IP 172.28.240.3.59185 > 172.28.240.31.mysql: Flags [P.], seq 231:311, ack 3157, win 296, options [nop,nop,TS val 127115 ecr 71202102], length 80
17:36:00.106750 IP 172.28.240.31.mysql > 172.28.240.3.59185: Flags [P.], seq 3157:3168, ack 311, win 235, options [nop,nop,TS val 71202102 ecr 127115], length 11
17:36:00.107734 IP 172.28.240.3.59185 > 172.28.240.31.mysql: Flags [.], seq 311:1759, ack 3168, win 296, options [nop,nop,TS val 127116 ecr 71202102], length 1448
17:36:00.107746 IP 172.28.240.3.59185 > 172.28.240.31.mysql: Flags [P.], seq 1759:3183, ack 3168, win 296, options [nop,nop,TS val 127116 ecr 71202102], length 1424
17:36:00.107801 IP 172.28.240.31.mysql > 172.28.240.3.59185: Flags [.], ack 3183, win 280, options [nop,nop,TS val 71202102 ecr 127116], length 0
17:36:00.109186 IP 172.28.240.254.53025 > 172.28.240.3.https: Flags [.], ack 14342, win 269, options [nop,nop,TS val 80534234 ecr 127115], length 0
17:36:00.117905 IP 172.28.240.31.mysql > 172.28.240.3.59185: Flags [P.], seq 3168:3179, ack 3183, win 280, options [nop,nop,TS val 71202105 ecr 127116], length 11
17:36:00.118097 IP 172.28.240.3.59185 > 172.28.240.31.mysql: Flags [P.], seq 3183:3239, ack 3179, win 296, options [nop,nop,TS val 127118 ecr 71202105], length 56
17:36:00.118239 IP 172.28.240.31.mysql > 172.28.240.3.59185: Flags [P.], seq 3179:3190, ack 3239, win 280, options [nop,nop,TS val 71202105 ecr 127118], length 11
17:36:00.118302 IP 172.28.240.31.mysql > 172.28.240.3.59201: Flags [P.], seq 127:230, ack 190, win 227, options [nop,nop,TS val 71202105 ecr 125585], length 103
17:36:00.119826 IP 172.28.240.3.59201 > 172.28.240.31.mysql: Flags [P.], seq 190:378, ack 230, win 229, options [nop,nop,TS val 127119 ecr 71202105], length 188
17:36:00.119987 IP 172.28.240.31.mysql > 172.28.240.3.59201: Flags [.], ack 378, win 235, options [nop,nop,TS val 71202106 ecr 127119], length 0
17:36:00.120080 IP 172.28.240.31.mysql > 172.28.240.3.59201: Flags [.], seq 230:1678, ack 378, win 235, options [nop,nop,TS val 71202106 ecr 127119], length 1448
17:36:00.120094 IP 172.28.240.31.mysql > 172.28.240.3.59201: Flags [P.], seq 1678:3087, ack 378, win 235, options [nop,nop,TS val 71202106 ecr 127119], length 1409
17:36:00.120107 IP 172.28.240.3.59201 > 172.28.240.31.mysql: Flags [.], ack 3087, win 274, options [nop,nop,TS val 127119 ecr 71202106], length 0
17:36:00.124015 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 258:303, ack 171, win 229, options [nop,nop,TS val 127120 ecr 71200572], length 45
17:36:00.124249 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [.], seq 171:3067, ack 303, win 227, options [nop,nop,TS val 71202107 ecr 127120], length 2896
17:36:00.124264 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [.], seq 3067:4515, ack 303, win 227, options [nop,nop,TS val 71202107 ecr 127120], length 1448
17:36:00.124266 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 4515:5075, ack 303, win 227, options [nop,nop,TS val 71202107 ecr 127120], length 560
17:36:00.124299 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [.], ack 3067, win 274, options [nop,nop,TS val 127120 ecr 71202107], length 0
17:36:00.124310 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [.], ack 4515, win 296, options [nop,nop,TS val 127120 ecr 71202107], length 0
17:36:00.124313 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [.], ack 5075, win 342, options [nop,nop,TS val 127120 ecr 71202107], length 0
17:36:00.124451 IP 172.28.240.3.59211 > 172.28.240.31.mysql: Flags [S], seq 2257060525, win 29200, options [mss 1460,sackOK,TS val 127120 ecr 0,nop,wscale 7], length 0
17:36:00.124558 IP 172.28.240.31.mysql > 172.28.240.3.59211: Flags [S.], seq 460179460, ack 2257060526, win 28960, options [mss 1460,sackOK,TS val 71202107 ecr 127120,nop,wscale 7], length 0
17:36:00.124603 IP 172.28.240.3.59211 > 172.28.240.31.mysql: Flags [.], ack 1, win 229, options [nop,nop,TS val 127120 ecr 71202107], length 0
17:36:00.124855 IP 172.28.240.31.mysql > 172.28.240.3.59211: Flags [P.], seq 1:96, ack 1, win 227, options [nop,nop,TS val 71202107 ecr 127120], length 95
17:36:00.124865 IP 172.28.240.3.59211 > 172.28.240.31.mysql: Flags [.], ack 96, win 229, options [nop,nop,TS val 127120 ecr 71202107], length 0
17:36:00.124934 IP 172.28.240.3.59211 > 172.28.240.31.mysql: Flags [P.], seq 1:90, ack 96, win 229, options [nop,nop,TS val 127120 ecr 71202107], length 89
17:36:00.124997 IP 172.28.240.31.mysql > 172.28.240.3.59211: Flags [.], ack 90, win 227, options [nop,nop,TS val 71202107 ecr 127120], length 0
17:36:00.125038 IP 172.28.240.31.mysql > 172.28.240.3.59211: Flags [P.], seq 96:107, ack 90, win 227, options [nop,nop,TS val 71202107 ecr 127120], length 11
17:36:00.125072 IP 172.28.240.3.59211 > 172.28.240.31.mysql: Flags [P.], seq 90:111, ack 107, win 229, options [nop,nop,TS val 127120 ecr 71202107], length 21
17:36:00.125142 IP 172.28.240.31.mysql > 172.28.240.3.59211: Flags [P.], seq 107:118, ack 111, win 227, options [nop,nop,TS val 71202107 ecr 127120], length 11
17:36:00.125193 IP 172.28.240.3.59211 > 172.28.240.31.mysql: Flags [P.], seq 111:118, ack 118, win 229, options [nop,nop,TS val 127120 ecr 71202107], length 7
17:36:00.125242 IP 172.28.240.31.mysql > 172.28.240.3.59211: Flags [P.], seq 118:127, ack 118, win 227, options [nop,nop,TS val 71202107 ecr 127120], length 9
17:36:00.125269 IP 172.28.240.3.59211 > 172.28.240.31.mysql: Flags [P.], seq 118:155, ack 127, win 229, options [nop,nop,TS val 127120 ecr 71202107], length 37
17:36:00.126032 IP 172.28.240.31.mysql > 172.28.240.3.59211: Flags [P.], seq 127:286, ack 155, win 227, options [nop,nop,TS val 71202107 ecr 127120], length 159
17:36:00.126085 IP 172.28.240.3.59211 > 172.28.240.31.mysql: Flags [P.], seq 155:219, ack 286, win 237, options [nop,nop,TS val 127120 ecr 71202107], length 64
17:36:00.126170 IP 172.28.240.31.mysql > 172.28.240.3.59211: Flags [P.], seq 286:342, ack 219, win 227, options [nop,nop,TS val 71202107 ecr 127120], length 56
17:36:00.126251 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 303:324, ack 5075, win 342, options [nop,nop,TS val 127120 ecr 71202107], length 21
17:36:00.126355 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 5075:5086, ack 324, win 227, options [nop,nop,TS val 71202107 ecr 127120], length 11
17:36:00.126386 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 324:341, ack 5086, win 342, options [nop,nop,TS val 127120 ecr 71202107], length 17
17:36:00.126584 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 5086:6190, ack 341, win 227, options [nop,nop,TS val 71202107 ecr 127120], length 1104
17:36:00.126711 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 341:928, ack 6190, win 364, options [nop,nop,TS val 127120 ecr 71202107], length 587
17:36:00.127420 IP 172.28.240.3.59185 > 172.28.240.31.mysql: Flags [P.], seq 3239:3244, ack 3190, win 296, options [nop,nop,TS val 127121 ecr 71202105], length 5
17:36:00.127435 IP 172.28.240.3.59185 > 172.28.240.31.mysql: Flags [F.], seq 3244, ack 3190, win 296, options [nop,nop,TS val 127121 ecr 71202105], length 0
17:36:00.127516 IP 172.28.240.31.mysql > 172.28.240.3.59185: Flags [F.], seq 3190, ack 3244, win 280, options [nop,nop,TS val 71202107 ecr 127121], length 0
17:36:00.127535 IP 172.28.240.3.59185 > 172.28.240.31.mysql: Flags [.], ack 3191, win 296, options [nop,nop,TS val 127121 ecr 71202107], length 0
17:36:00.127542 IP 172.28.240.31.mysql > 172.28.240.3.59185: Flags [.], ack 3245, win 280, options [nop,nop,TS val 71202107 ecr 127121], length 0
17:36:00.128512 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [P.], seq 5581:5586, ack 3583, win 356, options [nop,nop,TS val 127121 ecr 71202101], length 5
17:36:00.128528 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [F.], seq 5586, ack 3583, win 356, options [nop,nop,TS val 127121 ecr 71202101], length 0
17:36:00.128581 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [F.], seq 3583, ack 5586, win 302, options [nop,nop,TS val 71202108 ecr 127121], length 0
17:36:00.128597 IP 172.28.240.3.59210 > 172.28.240.31.mysql: Flags [.], ack 3584, win 356, options [nop,nop,TS val 127121 ecr 71202108], length 0
17:36:00.128605 IP 172.28.240.31.mysql > 172.28.240.3.59210: Flags [.], ack 5587, win 302, options [nop,nop,TS val 71202108 ecr 127121], length 0
17:36:00.128724 IP 172.28.240.3.https > 172.28.240.254.53025: Flags [P.], seq 14342:14507, ack 1, win 254, options [nop,nop,TS val 127121 ecr 80534234], length 165
17:36:00.128824 IP 172.28.240.3.https > 172.28.240.254.53025: Flags [P.], seq 14507:14538, ack 1, win 254, options [nop,nop,TS val 127121 ecr 80534234], length 31
17:36:00.128852 IP 172.28.240.3.https > 172.28.240.254.53025: Flags [F.], seq 14538, ack 1, win 254, options [nop,nop,TS val 127121 ecr 80534234], length 0
17:36:00.133554 IP 172.28.240.254.53025 > 172.28.240.3.https: Flags [.], ack 14539, win 331, options [nop,nop,TS val 80534240 ecr 127121], length 0
17:36:00.135920 IP 172.28.240.254.53012 > 172.28.240.3.https: Flags [.], ack 32, win 2224, options [nop,nop,TS val 80534241 ecr 127113], length 0
17:36:00.153483 IP 172.28.240.254.53012 > 172.28.240.3.https: Flags [F.], seq 1:32, ack 32, win 2224, options [nop,nop,TS val 80534245 ecr 127113], length 31
17:36:00.153499 IP 172.28.240.3.https > 172.28.240.254.53012: Flags [.], ack 33, win 296, options [nop,nop,TS val 127127 ecr 80534245], length 0
17:36:00.159383 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 6190:6204, ack 928, win 236, options [nop,nop,TS val 71202115 ecr 127120], length 14
17:36:00.159470 IP 172.28.240.3.59211 > 172.28.240.31.mysql: Flags [P.], seq 219:299, ack 342, win 237, options [nop,nop,TS val 127129 ecr 71202107], length 80
17:36:00.159925 IP 172.28.240.31.mysql > 172.28.240.3.59211: Flags [P.], seq 342:394, ack 299, win 227, options [nop,nop,TS val 71202115 ecr 127129], length 52
17:36:00.160083 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 928:1515, ack 6204, win 364, options [nop,nop,TS val 127129 ecr 71202115], length 587
17:36:00.175653 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 6204:6218, ack 1515, win 245, options [nop,nop,TS val 71202119 ecr 127129], length 14
17:36:00.175754 IP 172.28.240.3.59211 > 172.28.240.31.mysql: Flags [P.], seq 299:379, ack 394, win 237, options [nop,nop,TS val 127133 ecr 71202115], length 80
17:36:00.189423 IP 172.28.240.31.mysql > 172.28.240.3.59211: Flags [P.], seq 394:446, ack 379, win 227, options [nop,nop,TS val 71202123 ecr 127133], length 52
17:36:00.189584 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 1515:2102, ack 6218, win 364, options [nop,nop,TS val 127136 ecr 71202119], length 587
17:36:00.190186 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 6218:6232, ack 2102, win 254, options [nop,nop,TS val 71202123 ecr 127136], length 14
17:36:00.190255 IP 172.28.240.3.59211 > 172.28.240.31.mysql: Flags [P.], seq 379:459, ack 446, win 237, options [nop,nop,TS val 127136 ecr 71202123], length 80
17:36:00.190718 IP 172.28.240.31.mysql > 172.28.240.3.59211: Flags [P.], seq 446:498, ack 459, win 227, options [nop,nop,TS val 71202123 ecr 127136], length 52
17:36:00.190836 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 2102:2689, ack 6232, win 364, options [nop,nop,TS val 127136 ecr 71202123], length 587
17:36:00.191270 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 6232:6246, ack 2689, win 263, options [nop,nop,TS val 71202123 ecr 127136], length 14
17:36:00.191327 IP 172.28.240.3.59211 > 172.28.240.31.mysql: Flags [P.], seq 459:539, ack 498, win 237, options [nop,nop,TS val 127137 ecr 71202123], length 80
17:36:00.210129 IP 172.28.240.31.mysql > 172.28.240.3.59211: Flags [P.], seq 498:550, ack 539, win 227, options [nop,nop,TS val 71202128 ecr 127137], length 52
17:36:00.210334 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 2689:3276, ack 6246, win 364, options [nop,nop,TS val 127141 ecr 71202123], length 587
17:36:00.219516 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 6246:6260, ack 3276, win 273, options [nop,nop,TS val 71202130 ecr 127141], length 14
17:36:00.219687 IP 172.28.240.3.59211 > 172.28.240.31.mysql: Flags [P.], seq 539:619, ack 550, win 237, options [nop,nop,TS val 127144 ecr 71202128], length 80
17:36:00.220267 IP 172.28.240.31.mysql > 172.28.240.3.59211: Flags [P.], seq 550:602, ack 619, win 227, options [nop,nop,TS val 71202131 ecr 127144], length 52
17:36:00.221014 IP 172.28.240.3.59211 > 172.28.240.31.mysql: Flags [P.], seq 619:690, ack 602, win 237, options [nop,nop,TS val 127144 ecr 71202131], length 71
17:36:00.221212 IP 172.28.240.31.mysql > 172.28.240.3.59211: Flags [P.], seq 602:613, ack 690, win 227, options [nop,nop,TS val 71202131 ecr 127144], length 11
17:36:00.259202 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [.], ack 6260, win 364, options [nop,nop,TS val 127154 ecr 71202130], length 0
17:36:00.259229 IP 172.28.240.3.59211 > 172.28.240.31.mysql: Flags [.], ack 613, win 237, options [nop,nop,TS val 127154 ecr 71202131], length 0
17:36:00.324386 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 3276:3312, ack 6260, win 364, options [nop,nop,TS val 127170 ecr 71202130], length 36
17:36:00.324655 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 6260:6935, ack 3312, win 273, options [nop,nop,TS val 71202157 ecr 127170], length 675
17:36:00.326268 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [.], ack 6935, win 410, options [nop,nop,TS val 127170 ecr 71202157], length 0
17:36:00.326584 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 3312:3509, ack 6935, win 410, options [nop,nop,TS val 127170 ecr 71202157], length 197
17:36:00.364086 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [.], ack 3509, win 282, options [nop,nop,TS val 71202167 ecr 127170], length 0
17:36:00.376438 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 6935:6949, ack 3509, win 282, options [nop,nop,TS val 71202170 ecr 127170], length 14
17:36:00.376653 IP 172.28.240.3.59211 > 172.28.240.31.mysql: Flags [P.], seq 690:756, ack 613, win 237, options [nop,nop,TS val 127183 ecr 71202131], length 66
17:36:00.376913 IP 172.28.240.31.mysql > 172.28.240.3.59211: Flags [P.], seq 613:721, ack 756, win 227, options [nop,nop,TS val 71202170 ecr 127183], length 108
17:36:00.377005 IP 172.28.240.3.59211 > 172.28.240.31.mysql: Flags [.], ack 721, win 237, options [nop,nop,TS val 127183 ecr 71202170], length 0
17:36:00.378215 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 3509:4593, ack 6949, win 410, options [nop,nop,TS val 127183 ecr 71202170], length 1084
17:36:00.378348 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [.], ack 4593, win 299, options [nop,nop,TS val 71202170 ecr 127183], length 0
17:36:00.378587 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 6949:7456, ack 4593, win 299, options [nop,nop,TS val 71202170 ecr 127183], length 507
17:36:00.386609 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 4593:4907, ack 7456, win 455, options [nop,nop,TS val 127185 ecr 71202170], length 314
17:36:00.387247 IP 172.28.240.3.https > 172.28.240.254.53015: Flags [P.], seq 3435907694:3435907725, ack 3235229942, win 342, options [nop,nop,TS val 127186 ecr 80526797], length 31
17:36:00.387308 IP 172.28.240.3.https > 172.28.240.254.53015: Flags [F.], seq 31, ack 1, win 342, options [nop,nop,TS val 127186 ecr 80526797], length 0
17:36:00.389065 IP 172.28.240.254.53015 > 172.28.240.3.https: Flags [.], ack 31, win 2460, options [nop,nop,TS val 80534303 ecr 127186], length 0
17:36:00.395226 IP 172.28.240.254.53015 > 172.28.240.3.https: Flags [P.], seq 1:32, ack 32, win 2462, options [nop,nop,TS val 80534305 ecr 127186], length 31
17:36:00.396815 IP 172.28.240.254.53015 > 172.28.240.3.https: Flags [F.], seq 32, ack 32, win 2462, options [nop,nop,TS val 80534306 ecr 127186], length 0
17:36:00.396830 IP 172.28.240.3.https > 172.28.240.254.53015: Flags [.], ack 33, win 342, options [nop,nop,TS val 127188 ecr 80534305], length 0
17:36:00.397584 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 7456:7508, ack 4907, win 316, options [nop,nop,TS val 71202175 ecr 127185], length 52
17:36:00.397945 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 4907:5608, ack 7508, win 455, options [nop,nop,TS val 127188 ecr 71202175], length 701
17:36:00.406356 IP 172.28.240.3.https > 172.28.240.254.53011: Flags [P.], seq 2771996954:2771996985, ack 3713488845, win 337, options [nop,nop,TS val 127190 ecr 80526802], length 31
17:36:00.406440 IP 172.28.240.3.https > 172.28.240.254.53011: Flags [F.], seq 31, ack 1, win 337, options [nop,nop,TS val 127190 ecr 80526802], length 0
17:36:00.409744 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 7508:7527, ack 5608, win 333, options [nop,nop,TS val 71202178 ecr 127188], length 19
17:36:00.410346 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 5608:5950, ack 7527, win 455, options [nop,nop,TS val 127191 ecr 71202178], length 342
17:36:00.410722 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 7527:7579, ack 5950, win 350, options [nop,nop,TS val 71202178 ecr 127191], length 52
17:36:00.410843 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 5950:6152, ack 7579, win 455, options [nop,nop,TS val 127191 ecr 71202178], length 202
17:36:00.411687 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 7579:7631, ack 6152, win 366, options [nop,nop,TS val 71202178 ecr 127191], length 52
17:36:00.411763 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 6152:6409, ack 7631, win 455, options [nop,nop,TS val 127192 ecr 71202178], length 257
17:36:00.414691 IP 172.28.240.3.https > 172.28.240.254.53014: Flags [P.], seq 1622362746:1622362777, ack 2342756124, win 336, options [nop,nop,TS val 127192 ecr 80526814], length 31
17:36:00.414785 IP 172.28.240.3.https > 172.28.240.254.53014: Flags [F.], seq 31, ack 1, win 336, options [nop,nop,TS val 127192 ecr 80526814], length 0
17:36:00.415500 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 7631:7822, ack 6409, win 383, options [nop,nop,TS val 71202179 ecr 127192], length 191
17:36:00.415606 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 6409:6492, ack 7822, win 500, options [nop,nop,TS val 127193 ecr 71202179], length 83
17:36:00.415945 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 7822:7874, ack 6492, win 383, options [nop,nop,TS val 71202179 ecr 127193], length 52
17:36:00.416000 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 6492:6597, ack 7874, win 500, options [nop,nop,TS val 127193 ecr 71202179], length 105
17:36:00.416706 IP 172.28.240.254.53014 > 172.28.240.3.https: Flags [.], ack 31, win 1657, options [nop,nop,TS val 80534311 ecr 127192], length 0
17:36:00.422590 IP 172.28.240.254.53011 > 172.28.240.3.https: Flags [F.], seq 1:32, ack 32, win 1464, options [nop,nop,TS val 80534312 ecr 127190], length 31
17:36:00.422607 IP 172.28.240.3.https > 172.28.240.254.53011: Flags [.], ack 33, win 337, options [nop,nop,TS val 127194 ecr 80534312], length 0
17:36:00.426240 IP 172.28.240.254.53014 > 172.28.240.3.https: Flags [F.], seq 1:32, ack 32, win 1657, options [nop,nop,TS val 80534313 ecr 127192], length 31
17:36:00.426289 IP 172.28.240.3.https > 172.28.240.254.53014: Flags [.], ack 33, win 336, options [nop,nop,TS val 127195 ecr 80534313], length 0
17:36:00.430898 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 7874:7926, ack 6597, win 383, options [nop,nop,TS val 71202183 ecr 127193], length 52
17:36:00.431054 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 6597:6742, ack 7926, win 500, options [nop,nop,TS val 127196 ecr 71202183], length 145
17:36:00.431408 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 7926:7978, ack 6742, win 400, options [nop,nop,TS val 71202183 ecr 127196], length 52
17:36:00.431521 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 6742:6911, ack 7978, win 500, options [nop,nop,TS val 127197 ecr 71202183], length 169
17:36:00.440063 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 7978:8030, ack 6911, win 417, options [nop,nop,TS val 71202186 ecr 127197], length 52
17:36:00.440190 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 6911:6994, ack 8030, win 500, options [nop,nop,TS val 127199 ecr 71202186], length 83
17:36:00.457610 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 8030:8082, ack 6994, win 417, options [nop,nop,TS val 71202190 ecr 127199], length 52
17:36:00.457776 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 6994:7099, ack 8082, win 500, options [nop,nop,TS val 127203 ecr 71202190], length 105
17:36:00.457966 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 8082:8134, ack 7099, win 417, options [nop,nop,TS val 71202190 ecr 127203], length 52
17:36:00.458075 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 7099:7261, ack 8134, win 500, options [nop,nop,TS val 127203 ecr 71202190], length 162
17:36:00.458382 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 8134:8186, ack 7261, win 434, options [nop,nop,TS val 71202190 ecr 127203], length 52
17:36:00.458531 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 7261:7430, ack 8186, win 500, options [nop,nop,TS val 127203 ecr 71202190], length 169
17:36:00.458664 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 8186:8238, ack 7430, win 451, options [nop,nop,TS val 71202190 ecr 127203], length 52
17:36:00.458793 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 7430:7620, ack 8238, win 500, options [nop,nop,TS val 127203 ecr 71202190], length 190
17:36:00.458960 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 8238:8290, ack 7620, win 468, options [nop,nop,TS val 71202190 ecr 127203], length 52
17:36:00.459205 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 7620:8325, ack 8290, win 500, options [nop,nop,TS val 127204 ecr 71202190], length 705
17:36:00.459514 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 8290:8342, ack 8325, win 485, options [nop,nop,TS val 71202190 ecr 127204], length 52
17:36:00.459649 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 8325:8399, ack 8342, win 500, options [nop,nop,TS val 127204 ecr 71202190], length 74
17:36:00.459772 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 8342:8394, ack 8399, win 485, options [nop,nop,TS val 71202190 ecr 127204], length 52
17:36:00.459857 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 8399:8516, ack 8394, win 500, options [nop,nop,TS val 127204 ecr 71202190], length 117
17:36:00.460011 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 8394:8446, ack 8516, win 485, options [nop,nop,TS val 71202191 ecr 127204], length 52
17:36:00.460145 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 8516:8576, ack 8446, win 500, options [nop,nop,TS val 127204 ecr 71202191], length 60
17:36:00.460260 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 8446:8498, ack 8576, win 485, options [nop,nop,TS val 71202191 ecr 127204], length 52
17:36:00.460363 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 8576:8680, ack 8498, win 500, options [nop,nop,TS val 127204 ecr 71202191], length 104
17:36:00.460488 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 8498:8550, ack 8680, win 485, options [nop,nop,TS val 71202191 ecr 127204], length 52
17:36:00.460597 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 8680:8736, ack 8550, win 500, options [nop,nop,TS val 127204 ecr 71202191], length 56
17:36:00.460703 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 8550:8602, ack 8736, win 485, options [nop,nop,TS val 71202191 ecr 127204], length 52
17:36:00.460794 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 8736:8832, ack 8602, win 500, options [nop,nop,TS val 127204 ecr 71202191], length 96
17:36:00.460932 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 8602:8654, ack 8832, win 485, options [nop,nop,TS val 71202191 ecr 127204], length 52
17:36:00.461025 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 8832:8889, ack 8654, win 500, options [nop,nop,TS val 127204 ecr 71202191], length 57
17:36:00.461131 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 8654:8706, ack 8889, win 485, options [nop,nop,TS val 71202191 ecr 127204], length 52
17:36:00.473602 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 8889:9033, ack 8706, win 500, options [nop,nop,TS val 127207 ecr 71202191], length 144
17:36:00.512061 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [.], ack 9033, win 502, options [nop,nop,TS val 71202204 ecr 127207], length 0
17:36:00.613397 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 8706:8815, ack 9033, win 502, options [nop,nop,TS val 71202229 ecr 127207], length 109
17:36:00.619288 IP 172.28.240.3.https > 172.28.240.254.53020: Flags [P.], seq 3830514405:3830514436, ack 1444702773, win 244, options [nop,nop,TS val 127244 ecr 80526865], length 31
17:36:00.619350 IP 172.28.240.3.https > 172.28.240.254.53020: Flags [F.], seq 31, ack 1, win 244, options [nop,nop,TS val 127244 ecr 80526865], length 0
17:36:00.621076 IP 172.28.240.254.53020 > 172.28.240.3.https: Flags [.], ack 31, win 188, options [nop,nop,TS val 80534362 ecr 127244], length 0
17:36:00.630682 IP 172.28.240.254.53020 > 172.28.240.3.https: Flags [F.], seq 1:32, ack 32, win 188, options [nop,nop,TS val 80534364 ecr 127244], length 31
17:36:00.630698 IP 172.28.240.3.https > 172.28.240.254.53020: Flags [.], ack 33, win 244, options [nop,nop,TS val 127246 ecr 80534364], length 0
17:36:00.651203 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [.], ack 8815, win 500, options [nop,nop,TS val 127252 ecr 71202229], length 0
17:36:00.703995 ARP, Request who-has 172.28.240.230 tell 172.28.240.24, length 46
17:36:00.707251 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 9033:9394, ack 8815, win 500, options [nop,nop,TS val 127266 ecr 71202229], length 361
17:36:00.707393 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [.], ack 9394, win 519, options [nop,nop,TS val 71202252 ecr 127266], length 0
17:36:00.761996 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [P.], seq 8815:9922, ack 9394, win 519, options [nop,nop,TS val 71202266 ecr 127266], length 1107
17:36:00.762032 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [.], ack 9922, win 523, options [nop,nop,TS val 127279 ecr 71202266], length 0
17:36:00.770047 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [.], seq 9394:10842, ack 9922, win 523, options [nop,nop,TS val 127281 ecr 71202266], length 1448
17:36:00.770062 IP 172.28.240.3.59202 > 172.28.240.31.mysql: Flags [P.], seq 10842:11100, ack 9922, win 523, options [nop,nop,TS val 127281 ecr 71202266], length 258
17:36:00.770205 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [.], ack 10842, win 542, options [nop,nop,TS val 71202268 ecr 127281], length 0
17:36:00.770219 IP 172.28.240.31.mysql > 172.28.240.3.59202: Flags [.], ack 11100, win 564, options [nop,nop,TS val 71202268 ecr 127281], length 0
17:36:00.788082 IP 172.28.240.3.ntp > 217.10.42.30.ntp: NTPv4, Client, length 48
17:36:00.788378 IP 172.28.240.3.39205 > web-server.e-nk.ru.domain: 39429+ PTR? 30.42.10.217.in-addr.arpa. (43)
17:36:00.788763 IP web-server.e-nk.ru.domain > 172.28.240.3.39205: 39429 NXDomain 0/1/0 (133)
17:36:00.817126 IP 217.10.42.30.ntp > 172.28.240.3.ntp: NTPv4, Server, length 48
17:36:01.612626 IP 172.28.240.3.https > 172.28.240.254.53010: Flags [P.], seq 561999359:561999390, ack 1718681006, win 586, options [nop,nop,TS val 127492 ecr 80527104], length 31
17:36:01.612705 IP 172.28.240.3.https > 172.28.240.254.53010: Flags [F.], seq 31, ack 1, win 586, options [nop,nop,TS val 127492 ecr 80527104], length 0
17:36:01.614420 IP 172.28.240.254.53010 > 172.28.240.3.https: Flags [.], ack 31, win 2403, options [nop,nop,TS val 80534610 ecr 127492], length 0
17:36:01.652137 IP 172.28.240.254.53010 > 172.28.240.3.https: Flags [.], ack 32, win 2405, options [nop,nop,TS val 80534620 ecr 127492], length 0
17:36:01.694049 IP 172.28.240.254.53010 > 172.28.240.3.https: Flags [F.], seq 1:32, ack 32, win 2405, options [nop,nop,TS val 80534630 ecr 127492], length 31
17:36:01.694075 IP 172.28.240.3.https > 172.28.240.254.53010: Flags [.], ack 33, win 586, options [nop,nop,TS val 127512 ecr 80534630], length 0
17:36:01.787992 IP 172.28.240.3.ntp > ntp.truenetwork.ru.ntp: NTPv4, Client, length 48
17:36:01.788147 IP 172.28.240.3.53914 > web-server.e-nk.ru.domain: 55914+ PTR? 10.111.247.94.in-addr.arpa. (44)
17:36:01.796222 IP web-server.e-nk.ru.domain > 172.28.240.3.53914: 55914 1/2/2 PTR ntp.truenetwork.ru. (148)
17:36:01.833866 IP ntp.truenetwork.ru.ntp > 172.28.240.3.ntp: NTPv4, Server, length 48
17:36:02.788013 IP 172.28.240.3.ntp > atomail.ru.ntp: NTPv4, Client, length 48
17:36:02.788299 IP 172.28.240.3.60536 > web-server.e-nk.ru.domain: 10937+ PTR? 26.233.120.188.in-addr.arpa. (45)
17:36:02.796159 IP web-server.e-nk.ru.domain > 172.28.240.3.60536: 10937 1/2/3 PTR atomail.ru. (177)
17:36:02.817915 IP 172.30.237.120.51250 > 172.28.240.3.ssh: Flags [P.], seq 1:65, ack 208, win 8208, length 64
17:36:02.817935 IP atomail.ru.ntp > 172.28.240.3.ntp: NTPv4, Server, length 48