[squid-users] Squid 5.2 TCP_MISS_ABORTED/100 erros when uploading
Alex Rousskov
rousskov at measurement-factory.com
Mon Aug 29 17:18:24 UTC 2022
On 8/29/22 12:17, David Ferreira wrote:
> I tried to capture the http trafic with the following tcpdump:
>
> tcpdump -i any -nn port 80|grep -i http
I am not cool enough to easily grok this kind of output. Please share (a
link to) the packet capture file instead (tcpdump -s0 -w filename ...).
Thank you,
Alex.
> Notes:
> - 1.2.3.4 is the webserver ip
> - 10.185.23.202 is the squid machine outbound interface
>
> Here's the results:
>
> Squid 4.15(Working one):
>
> tcpdump -i any -nn port 80 |grep -i http
> dropped privs to tcpdump
> tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
> listening on any, link-type LINUX_SLL (Linux cooked v1), capture size
> 262144 bytes
>
> 17:06:29.784338 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [P.], seq
> 1:626, ack 1, win 229, options [nop,nop,TS val 2986079115 ecr
> 3365651782], length 625: HTTP: POST /webserver/index.php HTTP/1.1
> 17:06:29.820186 IP 1.2.3.4.80 > 10.185.23.202.37490: Flags [P.], seq
> 1:26, ack 626, win 110, options [nop,nop,TS val 3365651818 ecr
> 2986079115], length 25: HTTP: HTTP/1.1 100 Continue
> 17:06:29.820796 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 626:3522, ack 26, win 229, options [nop,nop,TS val 2986079151 ecr
> 3365651818], length 2896: HTTP
> 17:06:29.820801 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [P.], seq
> 3522:4722, ack 26, win 229, options [nop,nop,TS val 2986079151 ecr
> 3365651818], length 1200: HTTP
> 17:06:29.820827 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [P.], seq
> 4722:5006, ack 26, win 229, options [nop,nop,TS val 2986079151 ecr
> 3365651818], length 284: HTTP
> 17:06:29.820880 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 5006:7902, ack 26, win 229, options [nop,nop,TS val 2986079151 ecr
> 3365651818], length 2896: HTTP
> 17:06:29.820889 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [P.], seq
> 7902:9102, ack 26, win 229, options [nop,nop,TS val 2986079151 ecr
> 3365651818], length 1200: HTTP
> 17:06:29.820909 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [P.], seq
> 9102:9386, ack 26, win 229, options [nop,nop,TS val 2986079151 ecr
> 3365651818], length 284: HTTP
> 17:06:29.821001 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 9386:12282, ack 26, win 229, options [nop,nop,TS val 2986079151 ecr
> 3365651818], length 2896: HTTP
> 17:06:29.856418 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 12282:15178, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr
> 3365651854], length 2896: HTTP
> 17:06:29.856437 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 15178:18074, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr
> 3365651854], length 2896: HTTP
> 17:06:29.856490 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 18074:20970, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr
> 3365651854], length 2896: HTTP
> 17:06:29.856495 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 20970:23866, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr
> 3365651854], length 2896: HTTP
> 17:06:29.856516 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 23866:25314, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr
> 3365651854], length 1448: HTTP
> 17:06:29.856521 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 25314:28210, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr
> 3365651854], length 2896: HTTP
> 17:06:29.856525 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 28210:31106, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr
> 3365651854], length 2896: HTTP
> 17:06:29.856607 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 31106:34002, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr
> 3365651854], length 2896: HTTP
> 17:06:29.856612 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 34002:36898, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr
> 3365651854], length 2896: HTTP
> 17:06:29.856634 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 36898:38346, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr
> 3365651854], length 1448: HTTP
> 17:06:29.856640 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 38346:41242, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr
> 3365651854], length 2896: HTTP
> 17:06:29.892036 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 41242:44138, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892051 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 44138:47034, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892123 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 47034:49930, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892128 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 49930:52826, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892150 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 52826:55722, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892155 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 55722:58618, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892181 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 58618:61514, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892190 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 61514:64410, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892243 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 64410:67306, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892247 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 67306:68754, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr
> 3365651890], length 1448: HTTP
> 17:06:29.892252 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 68754:71650, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892266 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 71650:74546, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892286 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 74546:77442, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892291 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 77442:80338, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892310 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 80338:83234, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892314 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 83234:86130, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892334 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 86130:89026, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892338 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 89026:91922, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892358 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 91922:94818, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892362 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 94818:97714, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr
> 3365651890], length 2896: HTTP
> 17:06:29.892381 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 97714:99162, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr
> 3365651890], length 1448: HTTP
> 17:06:29.927666 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 99162:102058, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651925], length 2896: HTTP
> 17:06:29.927675 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 102058:104954, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651925], length 2896: HTTP
> 17:06:29.927706 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 104954:107850, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651925], length 2896: HTTP
> 17:06:29.927772 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 107850:110746, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651925], length 2896: HTTP
> 17:06:29.927777 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 110746:113642, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651925], length 2896: HTTP
> 17:06:29.927797 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 113642:116538, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 2896: HTTP
> 17:06:29.927801 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 116538:119434, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 2896: HTTP
> 17:06:29.927820 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 119434:122330, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 2896: HTTP
> 17:06:29.927824 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 122330:125226, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 2896: HTTP
> 17:06:29.927844 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 125226:128122, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 2896: HTTP
> 17:06:29.927848 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 128122:131018, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 2896: HTTP
> 17:06:29.927876 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 131018:133914, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 2896: HTTP
> 17:06:29.927886 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 133914:136810, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 2896: HTTP
> 17:06:29.927902 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 136810:139706, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 2896: HTTP
> 17:06:29.927907 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 139706:144050, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 4344: HTTP
> 17:06:29.927925 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 144050:148394, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 4344: HTTP
> 17:06:29.927945 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 148394:152738, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 4344: HTTP
> 17:06:29.927949 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 152738:157082, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 4344: HTTP
> 17:06:29.927970 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 157082:161426, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 4344: HTTP
> 17:06:29.927975 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 161426:165770, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 4344: HTTP
> 17:06:29.927993 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 165770:170114, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 4344: HTTP
> 17:06:29.928018 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 170114:174458, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 4344: HTTP
> 17:06:29.928023 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 174458:180250, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 5792: HTTP
> 17:06:29.928027 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 180250:186042, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 5792: HTTP
> 17:06:29.928065 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 186042:191834, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 5792: HTTP
> 17:06:29.928069 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 191834:197626, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 5792: HTTP
> 17:06:29.928090 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 197626:203418, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 5792: HTTP
> 17:06:29.928095 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 203418:209210, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 5792: HTTP
> 17:06:29.928115 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 209210:215002, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr
> 3365651926], length 5792: HTTP
> 17:06:29.963296 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 215002:220794, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651961], length 5792: HTTP
> 17:06:29.963393 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 220794:226586, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651961], length 5792: HTTP
> 17:06:29.963399 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 226586:232378, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651961], length 5792: HTTP
> 17:06:29.963517 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 232378:238170, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651961], length 5792: HTTP
> 17:06:29.963532 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 238170:245410, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651961], length 7240: HTTP
> 17:06:29.963540 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 245410:252650, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651961], length 7240: HTTP
> 17:06:29.963880 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 252650:259890, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651961], length 7240: HTTP
> 17:06:29.963892 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 259890:267130, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651961], length 7240: HTTP
> 17:06:29.963942 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 267130:274370, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651962], length 7240: HTTP
> 17:06:29.963947 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 274370:280162, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651962], length 5792: HTTP
> 17:06:29.963955 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 280162:291746, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651962], length 11584: HTTP
> 17:06:29.963989 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 291746:303330, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651962], length 11584: HTTP
> 17:06:29.963999 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 303330:314914, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651962], length 11584: HTTP
> 17:06:29.964021 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 314914:326498, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651962], length 11584: HTTP
> 17:06:29.964035 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 326498:338082, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651962], length 11584: HTTP
> 17:06:29.964060 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 338082:345322, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651962], length 7240: HTTP
> 17:06:29.964067 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 345322:356906, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651962], length 11584: HTTP
> 17:06:29.964075 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 356906:368490, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651962], length 11584: HTTP
> 17:06:29.964110 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 368490:380074, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651962], length 11584: HTTP
> 17:06:29.964118 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 380074:391658, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651962], length 11584: HTTP
> 17:06:29.964139 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 391658:403242, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651962], length 11584: HTTP
> 17:06:29.964155 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 403242:410482, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651962], length 7240: HTTP
> 17:06:29.964161 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 410482:422066, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651962], length 11584: HTTP
> 17:06:29.964181 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 422066:433650, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr
> 3365651962], length 11584: HTTP
> 17:06:29.998905 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 433650:443786, ack 26, win 229, options [nop,nop,TS val 2986079329 ecr
> 3365651997], length 10136: HTTP
> 17:06:29.999021 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 443786:455370, ack 26, win 229, options [nop,nop,TS val 2986079329 ecr
> 3365651997], length 11584: HTTP
> 17:06:29.999031 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 455370:466954, ack 26, win 229, options [nop,nop,TS val 2986079329 ecr
> 3365651997], length 11584: HTTP
> 17:06:29.999056 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 466954:475642, ack 26, win 229, options [nop,nop,TS val 2986079329 ecr
> 3365651997], length 8688: HTTP
> 17:06:29.999137 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 475642:487226, ack 26, win 229, options [nop,nop,TS val 2986079329 ecr
> 3365651997], length 11584: HTTP
> 17:06:29.999264 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 487226:500258, ack 26, win 229, options [nop,nop,TS val 2986079329 ecr
> 3365651997], length 13032: HTTP
> 17:06:29.999272 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 500258:513290, ack 26, win 229, options [nop,nop,TS val 2986079329 ecr
> 3365651997], length 13032: HTTP
> 17:06:29.999396 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 513290:521978, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651997], length 8688: HTTP
> 17:06:29.999507 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 521978:535010, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651997], length 13032: HTTP
> 17:06:29.999518 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 535010:540802, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651997], length 5792: HTTP
> 17:06:29.999631 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 540802:555282, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651997], length 14480: HTTP
> 17:06:29.999648 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 555282:569762, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651997], length 14480: HTTP
> 17:06:29.999656 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 569762:585690, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651997], length 15928: HTTP
> 17:06:29.999743 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 585690:601618, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651997], length 15928: HTTP
> 17:06:29.999752 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 601618:605962, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651997], length 4344: HTTP
> 17:06:29.999758 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 605962:621890, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651997], length 15928: HTTP
> 17:06:29.999780 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 621890:639266, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651997], length 17376: HTTP
> 17:06:29.999791 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 639266:656642, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651997], length 17376: HTTP
> 17:06:29.999874 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 656642:671122, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651998], length 14480: HTTP
> 17:06:29.999882 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 671122:689946, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651998], length 18824: HTTP
> 17:06:29.999889 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 689946:708770, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651998], length 18824: HTTP
> 17:06:29.999979 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 708770:727594, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651998], length 18824: HTTP
> 17:06:29.999989 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 727594:736282, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651998], length 8688: HTTP
> 17:06:30.000016 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 736282:758002, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651998], length 21720: HTTP
> 17:06:30.000027 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 758002:779722, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651998], length 21720: HTTP
> 17:06:30.000106 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 779722:801442, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651998], length 21720: HTTP
> 17:06:30.000224 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 801442:824610, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651998], length 23168: HTTP
> 17:06:30.000234 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 824610:847778, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651998], length 23168: HTTP
> 17:06:30.000263 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 847778:866602, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr
> 3365651998], length 18824: HTTP
> 17:06:30.000302 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 866602:883978, ack 26, win 229, options [nop,nop,TS val 2986079331 ecr
> 3365651998], length 17376: HTTP
> 17:06:30.034540 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 883978:892666, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr
> 3365652032], length 8688: HTTP
> 17:06:30.034772 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 892666:917282, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr
> 3365652032], length 24616: HTTP
> 17:06:30.034790 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 917282:931762, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr
> 3365652032], length 14480: HTTP
> 17:06:30.034803 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 931762:957826, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr
> 3365652032], length 26064: HTTP
> 17:06:30.034835 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 957826:983890, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr
> 3365652033], length 26064: HTTP
> 17:06:30.034882 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 983890:996922, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr
> 3365652033], length 13032: HTTP
> 17:06:30.035003 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 996922:1024434, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr
> 3365652033], length 27512: HTTP
> 17:06:30.035033 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1024434:1053394, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr
> 3365652033], length 28960: HTTP
> 17:06:30.035122 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1053394:1062082, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr
> 3365652033], length 8688: HTTP
> 17:06:30.035243 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1062082:1091042, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr
> 3365652033], length 28960: HTTP
> 17:06:30.035296 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1091042:1095386, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr
> 3365652033], length 4344: HTTP
> 17:06:30.035373 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1095386:1125794, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr
> 3365652033], length 30408: HTTP
> 17:06:30.035395 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1125794:1127242, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr
> 3365652033], length 1448: HTTP
> 17:06:30.035409 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1127242:1159098, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr
> 3365652033], length 31856: HTTP
> 17:06:30.035489 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1159098:1190954, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr
> 3365652033], length 31856: HTTP
> 17:06:30.035496 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1190954:1192402, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr
> 3365652033], length 1448: HTTP
> 17:06:30.035524 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1192402:1225706, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr
> 3365652033], length 33304: HTTP
> 17:06:30.035608 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1225706:1257562, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr
> 3365652033], length 31856: HTTP
> 17:06:30.035731 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1257562:1292314, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr
> 3365652033], length 34752: HTTP
> 17:06:30.035744 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1292314:1322722, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr
> 3365652033], length 30408: HTTP
> 17:06:30.035860 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1322722:1360370, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr
> 3365652034], length 37648: HTTP
> 17:06:30.035875 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1360370:1387882, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr
> 3365652034], length 27512: HTTP
> 17:06:30.036092 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1387882:1426978, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr
> 3365652034], length 39096: HTTP
> 17:06:30.036112 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1426978:1453042, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr
> 3365652034], length 26064: HTTP
> 17:06:30.036210 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1453042:1493586, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr
> 3365652034], length 40544: HTTP
> 17:06:30.036226 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1493586:1518202, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr
> 3365652034], length 24616: HTTP
> 17:06:30.036298 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1518202:1544266, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr
> 3365652034], length 26064: HTTP
> 17:06:30.036348 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1544266:1583362, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr
> 3365652034], length 39096: HTTP
> 17:06:30.036451 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1583362:1628250, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr
> 3365652034], length 44888: HTTP
> 17:06:30.036500 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1628250:1648522, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr
> 3365652034], length 20272: HTTP
> 17:06:30.036567 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1648522:1693410, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr
> 3365652034], length 44888: HTTP
> 17:06:30.036584 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1693410:1713682, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr
> 3365652034], length 20272: HTTP
> 17:06:30.036698 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1713682:1761466, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr
> 3365652034], length 47784: HTTP
> 17:06:30.036748 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1761466:1778842, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr
> 3365652034], length 17376: HTTP
> 17:06:30.036754 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1778842:1784634, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr
> 3365652034], length 5792: HTTP
> 17:06:30.070180 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1784634:1802010, ack 26, win 229, options [nop,nop,TS val 2986079400 ecr
> 3365652068], length 17376: HTTP
> 17:06:30.070368 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1802010:1813594, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr
> 3365652068], length 11584: HTTP
> 17:06:30.070497 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1813594:1844002, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr
> 3365652068], length 30408: HTTP
> 17:06:30.070635 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1844002:1896130, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr
> 3365652068], length 52128: HTTP
> 17:06:30.070673 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1896130:1909162, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr
> 3365652068], length 13032: HTTP
> 17:06:30.070748 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1909162:1962738, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr
> 3365652068], length 53576: HTTP
> 17:06:30.070851 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1962738:1974322, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr
> 3365652069], length 11584: HTTP
> 17:06:30.070875 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 1974322:2029346, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr
> 3365652069], length 55024: HTTP
> 17:06:30.070969 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2029346:2039482, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr
> 3365652069], length 10136: HTTP
> 17:06:30.071153 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2039482:2095954, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr
> 3365652069], length 56472: HTTP
> 17:06:30.071175 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2095954:2104642, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr
> 3365652069], length 8688: HTTP
> 17:06:30.071248 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2104642:2162562, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr
> 3365652069], length 57920: HTTP
> 17:06:30.071261 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2162562:2169802, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr
> 3365652069], length 7240: HTTP
> 17:06:30.071306 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2169802:2195866, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr
> 3365652069], length 26064: HTTP
> 17:06:30.071354 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2195866:2234962, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr
> 3365652069], length 39096: HTTP
> 17:06:30.071604 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2234962:2297226, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr
> 3365652069], length 62264: HTTP
> 17:06:30.071624 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2297226:2300122, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr
> 3365652069], length 2896: HTTP
> 17:06:30.071713 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2300122:2363834, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr
> 3365652069], length 63712: HTTP
> 17:06:30.071724 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2363834:2365282, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr
> 3365652069], length 1448: HTTP
> 17:06:30.071823 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2365282:2430442, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr
> 3365652070], length 65160: HTTP
> 17:06:30.071950 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2430442:2495602, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr
> 3365652070], length 65160: HTTP
> 17:06:30.072180 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2495602:2560762, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr
> 3365652070], length 65160: HTTP
> 17:06:30.072310 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2560762:2604202, ack 26, win 229, options [nop,nop,TS val 2986079403 ecr
> 3365652070], length 43440: HTTP
> 17:06:30.072326 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2604202:2625922, ack 26, win 229, options [nop,nop,TS val 2986079403 ecr
> 3365652070], length 21720: HTTP
> 17:06:30.072424 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2625922:2691082, ack 26, win 229, options [nop,nop,TS val 2986079403 ecr
> 3365652070], length 65160: HTTP
> 17:06:30.072666 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2691082:2756242, ack 26, win 229, options [nop,nop,TS val 2986079403 ecr
> 3365652070], length 65160: HTTP
> 17:06:30.072797 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2756242:2821402, ack 26, win 229, options [nop,nop,TS val 2986079403 ecr
> 3365652070], length 65160: HTTP
> 17:06:30.072926 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2821402:2886562, ack 26, win 229, options [nop,nop,TS val 2986079403 ecr
> 3365652071], length 65160: HTTP
> 17:06:30.073023 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2886562:2951722, ack 26, win 229, options [nop,nop,TS val 2986079403 ecr
> 3365652071], length 65160: HTTP
> 17:06:30.073262 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 2951722:3016882, ack 26, win 229, options [nop,nop,TS val 2986079403 ecr
> 3365652071], length 65160: HTTP
> 17:06:30.073379 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3016882:3061770, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr
> 3365652071], length 44888: HTTP
> 17:06:30.073390 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3061770:3082042, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr
> 3365652071], length 20272: HTTP
> 17:06:30.073504 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3082042:3147202, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr
> 3365652071], length 65160: HTTP
> 17:06:30.073629 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3147202:3212362, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr
> 3365652071], length 65160: HTTP
> 17:06:30.073751 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3212362:3277522, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr
> 3365652071], length 65160: HTTP
> 17:06:30.073872 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3277522:3342682, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr
> 3365652072], length 65160: HTTP
> 17:06:30.074054 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3342682:3407842, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr
> 3365652072], length 65160: HTTP
> 17:06:30.074107 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3407842:3473002, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr
> 3365652072], length 65160: HTTP
> 17:06:30.074226 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3473002:3538162, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr
> 3365652072], length 65160: HTTP
> 17:06:30.074333 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3538162:3556986, ack 26, win 229, options [nop,nop,TS val 2986079405 ecr
> 3365652072], length 18824: HTTP
> 17:06:30.074347 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3556986:3585946, ack 26, win 229, options [nop,nop,TS val 2986079405 ecr
> 3365652072], length 28960: HTTP
> 17:06:30.105764 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3585946:3591738, ack 26, win 229, options [nop,nop,TS val 2986079436 ecr
> 3365652104], length 5792: HTTP
> 17:06:30.105873 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3591738:3603322, ack 26, win 229, options [nop,nop,TS val 2986079436 ecr
> 3365652104], length 11584: HTTP
> 17:06:30.106239 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3603322:3668482, ack 26, win 229, options [nop,nop,TS val 2986079436 ecr
> 3365652104], length 65160: HTTP
> 17:06:30.106363 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3668482:3719162, ack 26, win 229, options [nop,nop,TS val 2986079437 ecr
> 3365652104], length 50680: HTTP
> 17:06:30.106375 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3719162:3733642, ack 26, win 229, options [nop,nop,TS val 2986079437 ecr
> 3365652104], length 14480: HTTP
> 17:06:30.106487 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3733642:3798802, ack 26, win 229, options [nop,nop,TS val 2986079437 ecr
> 3365652104], length 65160: HTTP
> 17:06:30.106608 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3798802:3863962, ack 26, win 229, options [nop,nop,TS val 2986079437 ecr
> 3365652104], length 65160: HTTP
> 17:06:30.106737 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3863962:3929122, ack 26, win 229, options [nop,nop,TS val 2986079437 ecr
> 3365652104], length 65160: HTTP
> 17:06:30.106856 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3929122:3994282, ack 26, win 229, options [nop,nop,TS val 2986079437 ecr
> 3365652105], length 65160: HTTP
> 17:06:30.107092 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 3994282:4059442, ack 26, win 229, options [nop,nop,TS val 2986079437 ecr
> 3365652105], length 65160: HTTP
> 17:06:30.107204 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 4059442:4124602, ack 26, win 229, options [nop,nop,TS val 2986079437 ecr
> 3365652105], length 65160: HTTP
> 17:06:30.107319 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 4124602:4156458, ack 26, win 229, options [nop,nop,TS val 2986079438 ecr
> 3365652105], length 31856: HTTP
> 17:06:30.107336 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 4156458:4189762, ack 26, win 229, options [nop,nop,TS val 2986079438 ecr
> 3365652105], length 33304: HTTP
> 17:06:30.107449 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq
> 4189762:4254922, ack 26, win 229, options [nop,nop,TS val 2986079438 ecr
> 3365652105], length 65160: HTTP
> 17:06:30.107671 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [P.], seq
> 4254922:4269395, ack 26, win 229, options [nop,nop,TS val 2986079438 ecr
> 3365652105], length 14473: HTTP
> 17:06:30.956704 IP 1.2.3.4.80 > 10.185.23.202.37490: Flags [.], seq
> 26:1474, ack 4269395, win 9881, options [nop,nop,TS val 3365652954 ecr
> 2986079438], length 1448: HTTP: HTTP/1.1 200 OK
>
> Squid 5.2:
>
> tcpdump -i any -nn port 80 |grep -i http
> tcpdump: data link type LINUX_SLL2
> dropped privs to tcpdump
> tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
> listening on any, link-type LINUX_SLL2 (Linux cooked v2), snapshot
> length 262144 bytes
>
> 16:37:18.523520 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 1:625, ack 1, win 502, options [nop,nop,TS val 670563552 ecr
> 3363900519], length 624: HTTP: POST /webserver/index.php HTTP/1.1
> 16:37:18.559373 ens224 In IP 1.2.3.4.80 > 10.185.23.202.56572: Flags
> [P.], seq 1:26, ack 625, win 110, options [nop,nop,TS val 3363900556 ecr
> 670563552], length 25: HTTP: HTTP/1.1 100 Continue
> 16:37:18.560439 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 625:3521, ack 26, win 502, options [nop,nop,TS val 670563589
> ecr 3363900556], length 2896: HTTP
> 16:37:18.560474 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 3521:6417, ack 26, win 502, options [nop,nop,TS val 670563589
> ecr 3363900556], length 2896: HTTP
> 16:37:18.560482 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 6417:7640, ack 26, win 502, options [nop,nop,TS val 670563589
> ecr 3363900556], length 1223: HTTP
> 16:37:18.560516 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 7640:10536, ack 26, win 502, options [nop,nop,TS val 670563589
> ecr 3363900556], length 2896: HTTP
> 16:37:18.560524 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 10536:13432, ack 26, win 502, options [nop,nop,TS val
> 670563589 ecr 3363900556], length 2896: HTTP
> 16:37:18.560552 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [.], seq 13432:14880, ack 26, win 502, options [nop,nop,TS val 670563589
> ecr 3363900556], length 1448: HTTP
> 16:37:18.596062 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 14880:17776, ack 26, win 502, options [nop,nop,TS val
> 670563624 ecr 3363900592], length 2896: HTTP
> 16:37:18.596084 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 17776:20672, ack 26, win 502, options [nop,nop,TS val
> 670563624 ecr 3363900592], length 2896: HTTP
> 16:37:18.596154 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 20672:23568, ack 26, win 502, options [nop,nop,TS val
> 670563624 ecr 3363900593], length 2896: HTTP
> 16:37:18.596159 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 23568:26464, ack 26, win 502, options [nop,nop,TS val
> 670563624 ecr 3363900593], length 2896: HTTP
> 16:37:18.596264 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [.], seq 26464:27912, ack 26, win 502, options [nop,nop,TS val 670563624
> ecr 3363900593], length 1448: HTTP
> 16:37:18.596271 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 27912:30808, ack 26, win 502, options [nop,nop,TS val
> 670563624 ecr 3363900593], length 2896: HTTP
> 16:37:18.596275 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 30808:33704, ack 26, win 502, options [nop,nop,TS val
> 670563624 ecr 3363900593], length 2896: HTTP
> 16:37:18.596321 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 33704:36600, ack 26, win 502, options [nop,nop,TS val
> 670563624 ecr 3363900593], length 2896: HTTP
> 16:37:18.596333 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 36600:39496, ack 26, win 502, options [nop,nop,TS val
> 670563624 ecr 3363900593], length 2896: HTTP
> 16:37:18.596349 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [.], seq 39496:40944, ack 26, win 502, options [nop,nop,TS val 670563625
> ecr 3363900593], length 1448: HTTP
> 16:37:18.631831 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 40944:43840, ack 26, win 502, options [nop,nop,TS val
> 670563660 ecr 3363900628], length 2896: HTTP
> 16:37:18.631848 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 43840:46736, ack 26, win 502, options [nop,nop,TS val
> 670563660 ecr 3363900628], length 2896: HTTP
> 16:37:18.631930 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 46736:49632, ack 26, win 502, options [nop,nop,TS val
> 670563660 ecr 3363900628], length 2896: HTTP
> 16:37:18.631950 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 49632:52528, ack 26, win 502, options [nop,nop,TS val
> 670563660 ecr 3363900628], length 2896: HTTP
> 16:37:18.631964 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 52528:55424, ack 26, win 502, options [nop,nop,TS val
> 670563660 ecr 3363900628], length 2896: HTTP
> 16:37:18.631976 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 55424:58320, ack 26, win 502, options [nop,nop,TS val
> 670563660 ecr 3363900628], length 2896: HTTP
> 16:37:18.632006 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [.], seq 58320:59768, ack 26, win 502, options [nop,nop,TS val 670563660
> ecr 3363900628], length 1448: HTTP
> 16:37:18.632012 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 59768:62664, ack 26, win 502, options [nop,nop,TS val
> 670563660 ecr 3363900628], length 2896: HTTP
> 16:37:18.632015 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 62664:65560, ack 26, win 502, options [nop,nop,TS val
> 670563660 ecr 3363900628], length 2896: HTTP
> 16:37:18.632042 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 65560:68456, ack 26, win 502, options [nop,nop,TS val
> 670563660 ecr 3363900628], length 2896: HTTP
> 16:37:18.632050 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 68456:71352, ack 26, win 502, options [nop,nop,TS val
> 670563660 ecr 3363900628], length 2896: HTTP
> 16:37:18.632072 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 71352:74248, ack 26, win 502, options [nop,nop,TS val
> 670563660 ecr 3363900628], length 2896: HTTP
> 16:37:18.632078 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 74248:77144, ack 26, win 502, options [nop,nop,TS val
> 670563660 ecr 3363900628], length 2896: HTTP
> 16:37:18.632098 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 77144:80040, ack 26, win 502, options [nop,nop,TS val
> 670563660 ecr 3363900628], length 2896: HTTP
> 16:37:18.632105 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 80040:82936, ack 26, win 502, options [nop,nop,TS val
> 670563660 ecr 3363900628], length 2896: HTTP
> 16:37:18.632126 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 82936:85832, ack 26, win 502, options [nop,nop,TS val
> 670563660 ecr 3363900628], length 2896: HTTP
> 16:37:18.632133 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 85832:88728, ack 26, win 502, options [nop,nop,TS val
> 670563660 ecr 3363900628], length 2896: HTTP
> 16:37:18.632153 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 88728:91624, ack 26, win 502, options [nop,nop,TS val
> 670563660 ecr 3363900628], length 2896: HTTP
> 16:37:18.667587 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 91624:94520, ack 26, win 502, options [nop,nop,TS val
> 670563696 ecr 3363900664], length 2896: HTTP
> 16:37:18.667605 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 94520:97416, ack 26, win 502, options [nop,nop,TS val
> 670563696 ecr 3363900664], length 2896: HTTP
> 16:37:18.667681 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 97416:100312, ack 26, win 502, options [nop,nop,TS val
> 670563696 ecr 3363900664], length 2896: HTTP
> 16:37:18.667692 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 100312:103208, ack 26, win 502, options [nop,nop,TS val
> 670563696 ecr 3363900664], length 2896: HTTP
> 16:37:18.667716 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 103208:106104, ack 26, win 502, options [nop,nop,TS val
> 670563696 ecr 3363900664], length 2896: HTTP
> 16:37:18.667722 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 106104:110448, ack 26, win 502, options [nop,nop,TS val
> 670563696 ecr 3363900664], length 4344: HTTP
> 16:37:18.667741 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [P.], seq 110448:111896, ack 26, win 502, options [nop,nop,TS val
> 670563696 ecr 3363900664], length 1448: HTTP
> 16:37:18.667748 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags
> [FP.], seq 111896:114340, ack 26, win 502, options [nop,nop,TS val
> 670563696 ecr 3363900664], length 2444: HTTP
> 16:37:18.703502 ens224 In IP 1.2.3.4.80 > 10.185.23.202.56572: Flags
> [P.], seq 26:81, ack 114341, win 557, options [nop,nop,TS val 3363900700
> ecr 670563696], length 55: HTTP: HTTP/1.1 503 Service Unavailable.
> 16:37:24.675580 ens224 Out IP 10.185.23.202.49786 > 1.2.3.4.80: Flags
> [P.], seq 1:620, ack 1, win 502, options [nop,nop,TS val 670569704 ecr
> 3363906672], length 619: HTTP: POST /webserver/index.php HTTP/1.1
> 16:37:24.711626 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [P.], seq 1:26, ack 620, win 110, options [nop,nop,TS val 3363906708 ecr
> 670569704], length 25: HTTP: HTTP/1.1 100 Continue
> 16:37:24.712318 ens224 Out IP 10.185.23.202.49786 > 1.2.3.4.80: Flags
> [P.], seq 620:1740, ack 26, win 502, options [nop,nop,TS val 670569740
> ecr 3363906708], length 1120: HTTP
> 16:37:24.939742 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 26:1474, ack 1740, win 119, options [nop,nop,TS val 3363906936
> ecr 670569740], length 1448: HTTP: HTTP/1.1 200 OK
> 16:37:24.939852 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 1474:2922, ack 1740, win 119, options [nop,nop,TS val
> 3363906936 ecr 670569740], length 1448: HTTP
> 16:37:24.939861 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 2922:4370, ack 1740, win 119, options [nop,nop,TS val
> 3363906936 ecr 670569740], length 1448: HTTP
> 16:37:24.939875 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 4370:5818, ack 1740, win 119, options [nop,nop,TS val
> 3363906936 ecr 670569740], length 1448: HTTP
> 16:37:24.939885 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 5818:7266, ack 1740, win 119, options [nop,nop,TS val
> 3363906936 ecr 670569740], length 1448: HTTP
> 16:37:24.939895 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 7266:8714, ack 1740, win 119, options [nop,nop,TS val
> 3363906936 ecr 670569740], length 1448: HTTP
> 16:37:24.939963 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 8714:10162, ack 1740, win 119, options [nop,nop,TS val
> 3363906936 ecr 670569740], length 1448: HTTP
> 16:37:24.939972 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 10162:11610, ack 1740, win 119, options [nop,nop,TS val
> 3363906936 ecr 670569740], length 1448: HTTP
> 16:37:24.939981 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 11610:13058, ack 1740, win 119, options [nop,nop,TS val
> 3363906936 ecr 670569740], length 1448: HTTP
> 16:37:24.939990 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 13058:14506, ack 1740, win 119, options [nop,nop,TS val
> 3363906936 ecr 670569740], length 1448: HTTP
> 16:37:24.975855 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 14506:15954, ack 1740, win 119, options [nop,nop,TS val
> 3363906972 ecr 670569968], length 1448: HTTP
> 16:37:24.975899 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 15954:17402, ack 1740, win 119, options [nop,nop,TS val
> 3363906972 ecr 670569968], length 1448: HTTP
> 16:37:24.975943 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 17402:18850, ack 1740, win 119, options [nop,nop,TS val
> 3363906972 ecr 670569968], length 1448: HTTP
> 16:37:24.975946 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 18850:20298, ack 1740, win 119, options [nop,nop,TS val
> 3363906972 ecr 670569968], length 1448: HTTP
> 16:37:24.975948 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 20298:21746, ack 1740, win 119, options [nop,nop,TS val
> 3363906972 ecr 670569968], length 1448: HTTP
> 16:37:24.975949 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 21746:23194, ack 1740, win 119, options [nop,nop,TS val
> 3363906972 ecr 670569968], length 1448: HTTP
> 16:37:24.976058 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 23194:24642, ack 1740, win 119, options [nop,nop,TS val
> 3363906972 ecr 670569968], length 1448: HTTP
> 16:37:24.976063 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 24642:26090, ack 1740, win 119, options [nop,nop,TS val
> 3363906972 ecr 670569968], length 1448: HTTP
> 16:37:24.976069 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 26090:27538, ack 1740, win 119, options [nop,nop,TS val
> 3363906972 ecr 670569968], length 1448: HTTP
> 16:37:24.976072 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 27538:28986, ack 1740, win 119, options [nop,nop,TS val
> 3363906972 ecr 670569968], length 1448: HTTP
> 16:37:24.976172 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 28986:30434, ack 1740, win 119, options [nop,nop,TS val
> 3363906972 ecr 670569968], length 1448: HTTP
> 16:37:24.976190 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 30434:31882, ack 1740, win 119, options [nop,nop,TS val
> 3363906972 ecr 670569968], length 1448: HTTP
> 16:37:24.976292 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 31882:33330, ack 1740, win 119, options [nop,nop,TS val
> 3363906973 ecr 670569968], length 1448: HTTP
> 16:37:24.976301 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 33330:34778, ack 1740, win 119, options [nop,nop,TS val
> 3363906973 ecr 670569968], length 1448: HTTP
> 16:37:24.976304 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 34778:36226, ack 1740, win 119, options [nop,nop,TS val
> 3363906973 ecr 670569968], length 1448: HTTP
> 16:37:24.976306 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 36226:37674, ack 1740, win 119, options [nop,nop,TS val
> 3363906973 ecr 670569968], length 1448: HTTP
> 16:37:24.976308 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 37674:39122, ack 1740, win 119, options [nop,nop,TS val
> 3363906973 ecr 670569968], length 1448: HTTP
> 16:37:24.976412 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 39122:40570, ack 1740, win 119, options [nop,nop,TS val
> 3363906973 ecr 670569968], length 1448: HTTP
> 16:37:24.976418 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [P.], seq 40570:42018, ack 1740, win 119, options [nop,nop,TS val
> 3363906973 ecr 670569968], length 1448: HTTP
> 16:37:24.976421 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 42018:43466, ack 1740, win 119, options [nop,nop,TS val
> 3363906973 ecr 670569968], length 1448: HTTP
> 16:37:25.011828 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 43466:44914, ack 1740, win 119, options [nop,nop,TS val
> 3363907008 ecr 670570004], length 1448: HTTP
> 16:37:25.011864 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 44914:46362, ack 1740, win 119, options [nop,nop,TS val
> 3363907008 ecr 670570004], length 1448: HTTP
> 16:37:25.011908 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 46362:47810, ack 1740, win 119, options [nop,nop,TS val
> 3363907008 ecr 670570004], length 1448: HTTP
> 16:37:25.011911 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 47810:49258, ack 1740, win 119, options [nop,nop,TS val
> 3363907008 ecr 670570004], length 1448: HTTP
> 16:37:25.012052 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 49258:50706, ack 1740, win 119, options [nop,nop,TS val
> 3363907008 ecr 670570004], length 1448: HTTP
> 16:37:25.012069 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 50706:52154, ack 1740, win 119, options [nop,nop,TS val
> 3363907008 ecr 670570004], length 1448: HTTP
> 16:37:25.012080 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 52154:53602, ack 1740, win 119, options [nop,nop,TS val
> 3363907008 ecr 670570004], length 1448: HTTP
> 16:37:25.012091 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 53602:55050, ack 1740, win 119, options [nop,nop,TS val
> 3363907008 ecr 670570004], length 1448: HTTP
> 16:37:25.012153 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 55050:56498, ack 1740, win 119, options [nop,nop,TS val
> 3363907008 ecr 670570004], length 1448: HTTP
> 16:37:25.012164 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 56498:57946, ack 1740, win 119, options [nop,nop,TS val
> 3363907008 ecr 670570004], length 1448: HTTP
> 16:37:25.012180 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 57946:59394, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570004], length 1448: HTTP
> 16:37:25.012189 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 59394:60842, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570004], length 1448: HTTP
> 16:37:25.012262 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 60842:62290, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570004], length 1448: HTTP
> 16:37:25.012275 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [P.], seq 62290:63738, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570004], length 1448: HTTP
> 16:37:25.012386 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 63738:65186, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012403 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 65186:66634, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012412 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 66634:68082, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012421 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 68082:69530, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012504 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 69530:70978, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012519 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 70978:72426, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012528 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 72426:73874, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012538 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 73874:75322, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012625 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 75322:76770, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012639 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 76770:78218, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012749 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 78218:79666, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012763 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 79666:81114, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012774 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 81114:82562, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012783 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 82562:84010, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012868 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 84010:85458, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012881 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 85458:86906, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012890 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 86906:88354, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012901 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 88354:89802, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.012989 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 89802:91250, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.013003 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 91250:92698, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.013013 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 92698:94146, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.013022 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 94146:95594, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.013109 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 95594:97042, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.013122 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [P.], seq 97042:98490, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.013132 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 98490:99938, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.013140 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 99938:101386, ack 1740, win 119, options [nop,nop,TS val
> 3363907009 ecr 670570005], length 1448: HTTP
> 16:37:25.048047 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 101386:102834, ack 1740, win 119, options [nop,nop,TS val
> 3363907044 ecr 670570040], length 1448: HTTP
> 16:37:25.048154 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 102834:104282, ack 1740, win 119, options [nop,nop,TS val
> 3363907044 ecr 670570040], length 1448: HTTP
> 16:37:25.048163 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 104282:105730, ack 1740, win 119, options [nop,nop,TS val
> 3363907044 ecr 670570040], length 1448: HTTP
> 16:37:25.048171 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 105730:107178, ack 1740, win 119, options [nop,nop,TS val
> 3363907044 ecr 670570040], length 1448: HTTP
> 16:37:25.048178 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 107178:108626, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570040], length 1448: HTTP
> 16:37:25.048184 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 108626:110074, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570040], length 1448: HTTP
> 16:37:25.048298 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 110074:111522, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570040], length 1448: HTTP
> 16:37:25.048306 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 111522:112970, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570040], length 1448: HTTP
> 16:37:25.048310 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 112970:114418, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570040], length 1448: HTTP
> 16:37:25.048318 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 114418:115866, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570040], length 1448: HTTP
> 16:37:25.048389 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 115866:117314, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570040], length 1448: HTTP
> 16:37:25.048405 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 117314:118762, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570040], length 1448: HTTP
> 16:37:25.048515 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 118762:120210, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570040], length 1448: HTTP
> 16:37:25.048525 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 120210:121658, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570040], length 1448: HTTP
> 16:37:25.048532 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 121658:123106, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.048536 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 123106:124554, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.048537 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 124554:126002, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.048632 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 126002:127450, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.048642 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 127450:128898, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.048649 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 128898:130346, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.048655 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 130346:131794, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.048661 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 131794:133242, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.048664 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 133242:134690, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.048749 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 134690:136138, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.048760 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 136138:137586, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.048767 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 137586:139034, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.048911 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [P.], seq 139034:140482, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.048920 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 140482:141930, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.048951 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 141930:143378, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.048960 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 143378:144826, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.048993 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [P.], seq 144826:146274, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.048999 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 146274:147722, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.049004 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 147722:149170, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.049010 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 149170:150618, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.049016 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 150618:152066, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.049018 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 152066:153514, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.049020 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 153514:154962, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.049021 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 154962:156410, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.049127 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 156410:157858, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.049137 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 157858:159306, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.049144 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 159306:160754, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.049150 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 160754:162202, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.049152 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 162202:163650, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.049155 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 163650:165098, ack 1740, win 119, options [nop,nop,TS val
> 3363907045 ecr 670570041], length 1448: HTTP
> 16:37:25.049239 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 165098:166546, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049249 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 166546:167994, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049255 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 167994:169442, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049258 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 169442:170890, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049259 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 170890:172338, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049261 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 172338:173786, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049355 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 173786:175234, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049365 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 175234:176682, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049373 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 176682:178130, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049377 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 178130:179578, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049378 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 179578:181026, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049473 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 181026:182474, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049478 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 182474:183922, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049480 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 183922:185370, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049482 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 185370:186818, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049594 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 186818:188266, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049601 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 188266:189714, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049605 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 189714:191162, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049607 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 191162:192610, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049609 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 192610:194058, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049611 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 194058:195506, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049724 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 195506:196954, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049727 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 196954:198402, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049729 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [P.], seq 198402:199850, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049731 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 199850:201298, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049734 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 201298:202746, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049736 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 202746:204194, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049840 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 204194:205642, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049845 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 205642:207090, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049847 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 207090:208538, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049850 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 208538:209986, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049851 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 209986:211434, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049959 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 211434:212882, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049969 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 212882:214330, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049971 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 214330:215778, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.049974 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 215778:217226, ack 1740, win 119, options [nop,nop,TS val
> 3363907046 ecr 670570041], length 1448: HTTP
> 16:37:25.083957 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 217226:218674, ack 1740, win 119, options [nop,nop,TS val
> 3363907080 ecr 670570076], length 1448: HTTP
> 16:37:25.084068 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 218674:220122, ack 1740, win 119, options [nop,nop,TS val
> 3363907080 ecr 670570076], length 1448: HTTP
> 16:37:25.087156 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 220122:221570, ack 1740, win 119, options [nop,nop,TS val
> 3363907081 ecr 670570076], length 1448: HTTP
> 16:37:25.087170 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 221570:223018, ack 1740, win 119, options [nop,nop,TS val
> 3363907081 ecr 670570076], length 1448: HTTP
> 16:37:25.087174 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 223018:224466, ack 1740, win 119, options [nop,nop,TS val
> 3363907081 ecr 670570076], length 1448: HTTP
> 16:37:25.087177 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 224466:225914, ack 1740, win 119, options [nop,nop,TS val
> 3363907081 ecr 670570076], length 1448: HTTP
> 16:37:25.087179 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 225914:227362, ack 1740, win 119, options [nop,nop,TS val
> 3363907081 ecr 670570076], length 1448: HTTP
> 16:37:25.087181 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 227362:228810, ack 1740, win 119, options [nop,nop,TS val
> 3363907081 ecr 670570076], length 1448: HTTP
> 16:37:25.087183 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 228810:230258, ack 1740, win 119, options [nop,nop,TS val
> 3363907081 ecr 670570076], length 1448: HTTP
> 16:37:25.087190 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 230258:231706, ack 1740, win 119, options [nop,nop,TS val
> 3363907081 ecr 670570076], length 1448: HTTP
> 16:37:25.087193 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 231706:233154, ack 1740, win 119, options [nop,nop,TS val
> 3363907081 ecr 670570076], length 1448: HTTP
> 16:37:25.087195 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 233154:234602, ack 1740, win 119, options [nop,nop,TS val
> 3363907081 ecr 670570076], length 1448: HTTP
> 16:37:25.087197 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 234602:236050, ack 1740, win 119, options [nop,nop,TS val
> 3363907081 ecr 670570076], length 1448: HTTP
> 16:37:25.087199 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 236050:237498, ack 1740, win 119, options [nop,nop,TS val
> 3363907081 ecr 670570076], length 1448: HTTP
> 16:37:25.087202 ens224 In IP 1.2.3.4.80 > 10.185.23.202.49786: Flags
> [.], seq 237498:238946, ack 1740, win 119, options [nop,nop,TS val
> 3363907081 ecr 670570076], length 1448: HTTP
>
> ---
> Im not that familiar with tcpdump, if there's a better way to capture
> please say so, im also gonna build a squid v5 to test it out.
>
> Again, thanks for your time
>
>
> On Mon, 29 Aug 2022 at 13:52, Alex Rousskov
> <rousskov at measurement-factory.com
> <mailto:rousskov at measurement-factory.com>> wrote:
>
> On 8/29/22 06:17, David Ferreira wrote:
>
> > I have some squid's running on rocky linux 8 with verion 4.15,
> recently
> > been testing squid version 5.2(stable version that comes with
> Rocky 9)to
> > upgrade the current ones and most of the configs/acls seem to
> work fine.
> >
> > Unfortualy theres an application that we use that everytime it
> tries to
> > upload files it fails on squid 5.2, on 4.15 is works completly
> fine, so
> > far ive test on squid 5.2 and 5.5 and it's the same behavior, im
> testing
> > this with default configurations and it always works on 4.15,
> access log
> > only shows this:
> >
> > Squid 4.15:
> > 26/Aug/2022:15:36:08 +0100 273 172.19.222.132TCP_MISS/200 745
> POST http://websiteurl/index.php <http://websiteurl/index.php> -
> HIER_DIRECT/websitedomain text/xml
> >
> > Squid 5.2:
> > 25/Aug/2022:15:10:00 +0100 139 172.19.222.132
> TCP_MISS_ABORTED/100 0 POST http://websiteurl <http://websiteurl>
> HIER_DIRECT/websitedomain -
> >
> > anyone has an ideia of what may be happening here?, been
> searching about
> > http errors 100 and so far i did not find anything that points me
> to the
> > problem.
> >
> > On the application side the error it shows when it tries to
> upload is:
> > "
> > Error storing the document on the server
> > Detail HTTP error 100
> > Send failure: Connection was aborted (55)
> > "
>
> Squid v5.2 has many serious bugs. I would not use it in production.
> Build the latest Squid v5 from sources if you have to.
>
>
> If the latest Squid v5 shows the same problem then this is probably a
> client application or Squid bug/misconfiguration. There were quite a
> few
> changes in HTTP 1xx control message handling since Squid v4, and one of
> those changes is probably affecting your client. For example, either
> Squid v4 does not deliver that 100 control message to the client at all
> or it is delivering a slightly different 100 control message that your
> client is happy with.
> If you share what HTTP messages are exchanged between client and
> Squid
> and between Squid and the origin server, in both successful and failing
> use cases, we may be able to tell you more. I would use tcpdump,
> wireshark, or a similar tool to collect HTTP traffic since these are
> non-TLS transactions.
>
>
> HTH,
>
> Alex.
> _______________________________________________
> squid-users mailing list
> squid-users at lists.squid-cache.org
> <mailto:squid-users at lists.squid-cache.org>
> http://lists.squid-cache.org/listinfo/squid-users
> <http://lists.squid-cache.org/listinfo/squid-users>
>
>
>
> --
> Com os melhores cumprimentos,
>
> David Ferreira
More information about the squid-users
mailing list