Frame 1: 94 bytes on wire (752 bits), 94 bytes captured (752 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 6, 2026 20:46:10.721748000 CET UTC Arrival Time: Jan 6, 2026 19:46:10.721748000 UTC Epoch Arrival Time: 1767728770.721748000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.000000000 seconds] Frame Number: 1 Frame Length: 94 bytes (752 bits) Capture Length: 94 bytes (752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db), Dst: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Destination: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Address: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Address: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2001:41d0:302:2200::180, Dst: 2606:4700::6810:7b60 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... 1010 0000 1010 1110 0101 = Flow Label: 0xa0ae5 Payload Length: 40 Next Header: TCP (6) Hop Limit: 64 Source Address: 2001:41d0:302:2200::180 Destination Address: 2606:4700::6810:7b60 Transmission Control Protocol, Src Port: 56462, Dst Port: 443, Seq: 0, Len: 0 Source Port: 56462 Destination Port: 443 [Stream index: 0] [Conversation completeness: Incomplete (0)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 0... = Data: Absent .... .0.. = ACK: Absent .... ..0. = SYN-ACK: Absent .... ...0 = SYN: Absent [Completeness Flags: [ Null ]] [TCP Segment Len: 0] Sequence Number: 0 (relative sequence number) Sequence Number (raw): 1970382597 [Next Sequence Number: 1 (relative sequence number)] Acknowledgment Number: 0 Acknowledgment number (raw): 0 1010 .... = Header Length: 40 bytes (10) Flags: 0x002 (SYN) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...0 .... = Acknowledgment: Not set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish request (SYN): server port 443] [Connection establish request (SYN): server port 443] [Severity level: Chat] [Group: Sequence] .... .... ...0 = Fin: Not set [TCP Flags: ··········S·] Window: 64800 [Calculated window size: 64800] Checksum: 0xd8f8 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (20 bytes), Maximum segment size, SACK permitted, Timestamps, No-Operation (NOP), Window scale TCP Option - Maximum segment size: 1440 bytes Kind: Maximum Segment Size (2) Length: 4 MSS Value: 1440 TCP Option - SACK permitted Kind: SACK Permitted (4) Length: 2 TCP Option - Timestamps Kind: Time Stamp Option (8) Length: 10 Timestamp value: 2022119812: TSval 2022119812, TSecr 0 Timestamp echo reply: 0 TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Window scale: 10 (multiply by 1024) Kind: Window Scale (3) Length: 3 Shift count: 10 [Multiplier: 1024] [Timestamps] [Time since first frame in this TCP stream: 0.000000000 seconds] [Time since previous frame in this TCP stream: 0.000000000 seconds] Frame 2: 94 bytes on wire (752 bits), 94 bytes captured (752 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 6, 2026 20:46:10.727264000 CET UTC Arrival Time: Jan 6, 2026 19:46:10.727264000 UTC Epoch Arrival Time: 1767728770.727264000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.005516000 seconds] [Time delta from previous displayed frame: 0.005516000 seconds] [Time since reference or first frame: 0.005516000 seconds] Frame Number: 2 Frame Length: 94 bytes (752 bits) Capture Length: 94 bytes (752 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1), Dst: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Destination: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Address: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Address: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2606:4700::6810:7b60, Dst: 2001:41d0:302:2200::180 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... 0001 0010 0000 0001 1101 = Flow Label: 0x1201d Payload Length: 40 Next Header: TCP (6) Hop Limit: 50 Source Address: 2606:4700::6810:7b60 Destination Address: 2001:41d0:302:2200::180 Transmission Control Protocol, Src Port: 443, Dst Port: 56462, Seq: 0, Ack: 1, Len: 0 Source Port: 443 Destination Port: 56462 [Stream index: 0] [Conversation completeness: Incomplete, SYN_SENT (1)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 0... = Data: Absent .... .0.. = ACK: Absent .... ..0. = SYN-ACK: Absent .... ...1 = SYN: Present [Completeness Flags: ·····S] [TCP Segment Len: 0] Sequence Number: 0 (relative sequence number) Sequence Number (raw): 885784857 [Next Sequence Number: 1 (relative sequence number)] Acknowledgment Number: 1 (relative ack number) Acknowledgment number (raw): 1970382598 1010 .... = Header Length: 40 bytes (10) Flags: 0x012 (SYN, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..1. = Syn: Set [Expert Info (Chat/Sequence): Connection establish acknowledge (SYN+ACK): server port 443] [Connection establish acknowledge (SYN+ACK): server port 443] [Severity level: Chat] [Group: Sequence] .... .... ...0 = Fin: Not set [TCP Flags: ·······A··S·] Window: 65535 [Calculated window size: 65535] Checksum: 0x6f0a [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (20 bytes), Maximum segment size, SACK permitted, Timestamps, No-Operation (NOP), Window scale TCP Option - Maximum segment size: 1360 bytes Kind: Maximum Segment Size (2) Length: 4 MSS Value: 1360 TCP Option - SACK permitted Kind: SACK Permitted (4) Length: 2 TCP Option - Timestamps Kind: Time Stamp Option (8) Length: 10 Timestamp value: 4271324975: TSval 4271324975, TSecr 2022119812 Timestamp echo reply: 2022119812 TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Window scale: 13 (multiply by 8192) Kind: Window Scale (3) Length: 3 Shift count: 13 [Multiplier: 8192] [Timestamps] [Time since first frame in this TCP stream: 0.005516000 seconds] [Time since previous frame in this TCP stream: 0.005516000 seconds] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 1] [The RTT to ACK the segment was: 0.005516000 seconds] Frame 3: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 6, 2026 20:46:10.727287000 CET UTC Arrival Time: Jan 6, 2026 19:46:10.727287000 UTC Epoch Arrival Time: 1767728770.727287000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000023000 seconds] [Time delta from previous displayed frame: 0.000023000 seconds] [Time since reference or first frame: 0.005539000 seconds] Frame Number: 3 Frame Length: 86 bytes (688 bits) Capture Length: 86 bytes (688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db), Dst: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Destination: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Address: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Address: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2001:41d0:302:2200::180, Dst: 2606:4700::6810:7b60 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... 1010 0000 1010 1110 0101 = Flow Label: 0xa0ae5 Payload Length: 32 Next Header: TCP (6) Hop Limit: 64 Source Address: 2001:41d0:302:2200::180 Destination Address: 2606:4700::6810:7b60 Transmission Control Protocol, Src Port: 56462, Dst Port: 443, Seq: 1, Ack: 1, Len: 0 Source Port: 56462 Destination Port: 443 [Stream index: 0] [Conversation completeness: Incomplete, CLIENT_ESTABLISHED (3)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 0... = Data: Absent .... .0.. = ACK: Absent .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ····SS] [TCP Segment Len: 0] Sequence Number: 1 (relative sequence number) Sequence Number (raw): 1970382598 [Next Sequence Number: 1 (relative sequence number)] Acknowledgment Number: 1 (relative ack number) Acknowledgment number (raw): 885784858 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 64 [Calculated window size: 65536] [Window size scaling factor: 1024] Checksum: 0xd8f0 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps Kind: Time Stamp Option (8) Length: 10 Timestamp value: 2022119818: TSval 2022119818, TSecr 4271324975 Timestamp echo reply: 4271324975 [Timestamps] [Time since first frame in this TCP stream: 0.005539000 seconds] [Time since previous frame in this TCP stream: 0.000023000 seconds] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 2] [The RTT to ACK the segment was: 0.000023000 seconds] [iRTT: 0.005539000 seconds] Frame 4: 492 bytes on wire (3936 bits), 492 bytes captured (3936 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 6, 2026 20:46:10.727585000 CET UTC Arrival Time: Jan 6, 2026 19:46:10.727585000 UTC Epoch Arrival Time: 1767728770.727585000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000298000 seconds] [Time delta from previous displayed frame: 0.000298000 seconds] [Time since reference or first frame: 0.005837000 seconds] Frame Number: 4 Frame Length: 492 bytes (3936 bits) Capture Length: 492 bytes (3936 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp:tls] Ethernet II, Src: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db), Dst: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Destination: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Address: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Address: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2001:41d0:302:2200::180, Dst: 2606:4700::6810:7b60 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... 1010 0000 1010 1110 0101 = Flow Label: 0xa0ae5 Payload Length: 438 Next Header: TCP (6) Hop Limit: 64 Source Address: 2001:41d0:302:2200::180 Destination Address: 2606:4700::6810:7b60 Transmission Control Protocol, Src Port: 56462, Dst Port: 443, Seq: 1, Ack: 1, Len: 406 Source Port: 56462 Destination Port: 443 [Stream index: 0] [Conversation completeness: Incomplete, ESTABLISHED (7)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 0... = Data: Absent .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ···ASS] [TCP Segment Len: 406] Sequence Number: 1 (relative sequence number) Sequence Number (raw): 1970382598 [Next Sequence Number: 407 (relative sequence number)] Acknowledgment Number: 1 (relative ack number) Acknowledgment number (raw): 885784858 1000 .... = Header Length: 32 bytes (8) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 64 [Calculated window size: 65536] [Window size scaling factor: 1024] Checksum: 0xda86 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps Kind: Time Stamp Option (8) Length: 10 Timestamp value: 2022119818: TSval 2022119818, TSecr 4271324975 Timestamp echo reply: 4271324975 [Timestamps] [Time since first frame in this TCP stream: 0.005837000 seconds] [Time since previous frame in this TCP stream: 0.000298000 seconds] [SEQ/ACK analysis] [iRTT: 0.005539000 seconds] [Bytes in flight: 406] [Bytes sent since last PSH flag: 406] TCP payload (406 bytes) Transport Layer Security TLSv1 Record Layer: Handshake Protocol: Client Hello Content Type: Handshake (22) Version: TLS 1.0 (0x0301) Length: 401 Handshake Protocol: Client Hello Handshake Type: Client Hello (1) Length: 397 Version: TLS 1.2 (0x0303) Random: 619ee1a491a891ed7d4443621ff9f4cf4ec52c8a783ab30adcedad784b4b4f29 GMT Unix Time: Nov 25, 2021 02:06:44.000000000 CET Random Bytes: 91a891ed7d4443621ff9f4cf4ec52c8a783ab30adcedad784b4b4f29 Session ID Length: 32 Session ID: e23e16aa1766b5cf69db4b3e8d60fe3d2c91993b3c4b7f86bc35b102d9dcad9d Cipher Suites Length: 58 Cipher Suites (29 suites) Cipher Suite: TLS_AES_256_GCM_SHA384 (0x1302) Cipher Suite: TLS_CHACHA20_POLY1305_SHA256 (0x1303) Cipher Suite: TLS_AES_128_GCM_SHA256 (0x1301) Cipher Suite: TLS_AES_128_CCM_SHA256 (0x1304) Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 (0xc02c) Cipher Suite: TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca9) Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_256_CCM (0xc0ad) Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA (0xc00a) Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b) Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_128_CCM (0xc0ac) Cipher Suite: TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA (0xc009) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030) Cipher Suite: TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xcca8) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA (0xc014) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) Cipher Suite: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA (0xc013) Cipher Suite: TLS_RSA_WITH_AES_256_GCM_SHA384 (0x009d) Cipher Suite: TLS_RSA_WITH_AES_256_CCM (0xc09d) Cipher Suite: TLS_RSA_WITH_AES_256_CBC_SHA (0x0035) Cipher Suite: TLS_RSA_WITH_AES_128_GCM_SHA256 (0x009c) Cipher Suite: TLS_RSA_WITH_AES_128_CCM (0xc09c) Cipher Suite: TLS_RSA_WITH_AES_128_CBC_SHA (0x002f) Cipher Suite: TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 (0x009f) Cipher Suite: TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 (0xccaa) Cipher Suite: TLS_DHE_RSA_WITH_AES_256_CCM (0xc09f) Cipher Suite: TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x0039) Cipher Suite: TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 (0x009e) Cipher Suite: TLS_DHE_RSA_WITH_AES_128_CCM (0xc09e) Cipher Suite: TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x0033) Compression Methods Length: 1 Compression Methods (1 method) Compression Method: null (0) Extensions Length: 266 Extension: ec_point_formats (len=2) Type: ec_point_formats (11) Length: 2 EC point formats Length: 1 Elliptic curves point formats (1) EC point format: uncompressed (0) Extension: key_share (len=107) secp256r1, x25519 Type: key_share (51) Length: 107 Key Share extension Client Key Share Length: 105 Key Share Entry: Group: secp256r1, Key Exchange length: 65 Group: secp256r1 (23) Key Exchange Length: 65 Key Exchange: 04baaae9e5261e75a052917c5266e92491905e012c8403dacdb3ae5cd4edc025d87d6d1131fb01e1c71d031cd5c1e4eaa49a8db64dceea2238a2f459206f5e592a Key Share Entry: Group: x25519, Key Exchange length: 32 Group: x25519 (29) Key Exchange Length: 32 Key Exchange: 81f6e52c0e771d320529cdff1729c1c290842a68044f86223a80cf608926be5d Extension: server_name (len=23) name=www.cloudflare.com Type: server_name (0) Length: 23 Server Name Indication extension Server Name list length: 21 Server Name Type: host_name (0) Server Name length: 18 Server Name: www.cloudflare.com Extension: status_request (len=5) Type: status_request (5) Length: 5 Certificate Status Type: OCSP (1) Responder ID list Length: 0 Request Extensions Length: 0 Extension: session_ticket (len=0) Type: session_ticket (35) Length: 0 Session Ticket: Extension: supported_groups (len=22) Type: supported_groups (10) Length: 22 Supported Groups List Length: 20 Supported Groups (10 groups) Supported Group: secp256r1 (0x0017) Supported Group: secp384r1 (0x0018) Supported Group: secp521r1 (0x0019) Supported Group: x25519 (0x001d) Supported Group: x448 (0x001e) Supported Group: ffdhe2048 (0x0100) Supported Group: ffdhe3072 (0x0101) Supported Group: ffdhe4096 (0x0102) Supported Group: ffdhe6144 (0x0103) Supported Group: ffdhe8192 (0x0104) Extension: record_size_limit (len=2) Type: record_size_limit (28) Length: 2 Record Size Limit: 16385 Extension: encrypt_then_mac (len=0) Type: encrypt_then_mac (22) Length: 0 Extension: supported_versions (len=9) TLS 1.3, TLS 1.2, TLS 1.1, TLS 1.0 Type: supported_versions (43) Length: 9 Supported Versions length: 8 Supported Version: TLS 1.3 (0x0304) Supported Version: TLS 1.2 (0x0303) Supported Version: TLS 1.1 (0x0302) Supported Version: TLS 1.0 (0x0301) Extension: psk_key_exchange_modes (len=3) Type: psk_key_exchange_modes (45) Length: 3 PSK Key Exchange Modes Length: 2 PSK Key Exchange Mode: PSK with (EC)DHE key establishment (psk_dhe_ke) (1) PSK Key Exchange Mode: PSK-only key establishment (psk_ke) (0) Extension: extended_master_secret (len=0) Type: extended_master_secret (23) Length: 0 Extension: signature_algorithms (len=40) Type: signature_algorithms (13) Length: 40 Signature Hash Algorithms Length: 38 Signature Hash Algorithms (19 algorithms) Signature Algorithm: Unknown SM2 (0x0904) Signature Hash Algorithm Hash: Unknown (9) Signature Hash Algorithm Signature: SM2 (4) Signature Algorithm: Unknown Unknown (0x0905) Signature Hash Algorithm Hash: Unknown (9) Signature Hash Algorithm Signature: Unknown (5) Signature Algorithm: Unknown Unknown (0x0906) Signature Hash Algorithm Hash: Unknown (9) Signature Hash Algorithm Signature: Unknown (6) Signature Algorithm: rsa_pkcs1_sha256 (0x0401) Signature Hash Algorithm Hash: SHA256 (4) Signature Hash Algorithm Signature: RSA (1) Signature Algorithm: rsa_pss_pss_sha256 (0x0809) Signature Hash Algorithm Hash: Unknown (8) Signature Hash Algorithm Signature: Unknown (9) Signature Algorithm: rsa_pss_rsae_sha256 (0x0804) Signature Hash Algorithm Hash: Unknown (8) Signature Hash Algorithm Signature: SM2 (4) Signature Algorithm: ecdsa_secp256r1_sha256 (0x0403) Signature Hash Algorithm Hash: SHA256 (4) Signature Hash Algorithm Signature: ECDSA (3) Signature Algorithm: ed25519 (0x0807) Signature Hash Algorithm Hash: Unknown (8) Signature Hash Algorithm Signature: Unknown (7) Signature Algorithm: rsa_pkcs1_sha384 (0x0501) Signature Hash Algorithm Hash: SHA384 (5) Signature Hash Algorithm Signature: RSA (1) Signature Algorithm: rsa_pss_pss_sha384 (0x080a) Signature Hash Algorithm Hash: Unknown (8) Signature Hash Algorithm Signature: Unknown (10) Signature Algorithm: rsa_pss_rsae_sha384 (0x0805) Signature Hash Algorithm Hash: Unknown (8) Signature Hash Algorithm Signature: Unknown (5) Signature Algorithm: ecdsa_secp384r1_sha384 (0x0503) Signature Hash Algorithm Hash: SHA384 (5) Signature Hash Algorithm Signature: ECDSA (3) Signature Algorithm: ed448 (0x0808) Signature Hash Algorithm Hash: Unknown (8) Signature Hash Algorithm Signature: Unknown (8) Signature Algorithm: rsa_pkcs1_sha512 (0x0601) Signature Hash Algorithm Hash: SHA512 (6) Signature Hash Algorithm Signature: RSA (1) Signature Algorithm: rsa_pss_pss_sha512 (0x080b) Signature Hash Algorithm Hash: Unknown (8) Signature Hash Algorithm Signature: Unknown (11) Signature Algorithm: rsa_pss_rsae_sha512 (0x0806) Signature Hash Algorithm Hash: Unknown (8) Signature Hash Algorithm Signature: Unknown (6) Signature Algorithm: ecdsa_secp521r1_sha512 (0x0603) Signature Hash Algorithm Hash: SHA512 (6) Signature Hash Algorithm Signature: ECDSA (3) Signature Algorithm: rsa_pkcs1_sha1 (0x0201) Signature Hash Algorithm Hash: SHA1 (2) Signature Hash Algorithm Signature: RSA (1) Signature Algorithm: ecdsa_sha1 (0x0203) Signature Hash Algorithm Hash: SHA1 (2) Signature Hash Algorithm Signature: ECDSA (3) Extension: renegotiation_info (len=1) Type: renegotiation_info (65281) Length: 1 Renegotiation Info extension Renegotiation info extension length: 0 [JA4: t13d291300_723694b0fccc_93e4b1f3c4eb] [JA4_r [truncated]: t13d291300_002f,0033,0035,0039,009c,009d,009e,009f,1301,1302,1303,1304,c009,c00a,c013,c014,c02b,c02c,c02f,c030,c09c,c09d,c09e,c09f,c0ac,c0ad,cca8,cca9,ccaa_0005,000a,000b,000d,0016,0017,001c,0023,002b,002d,0033,ff01_0904] [JA3 Fullstring [truncated]: 771,4866-4867-4865-4868-49196-52393-49325-49162-49195-49324-49161-49200-52392-49172-49199-49171-157-49309-53-156-49308-47-159-52394-49311-57-158-49310-51,11-51-0-5-35-10-28-22-43-45-23-13-65281,23-24-25-29-30-25] [JA3: 15747c033bb2b7f812028c920d726887] Frame 5: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 6, 2026 20:46:10.733135000 CET UTC Arrival Time: Jan 6, 2026 19:46:10.733135000 UTC Epoch Arrival Time: 1767728770.733135000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.005550000 seconds] [Time delta from previous displayed frame: 0.005550000 seconds] [Time since reference or first frame: 0.011387000 seconds] Frame Number: 5 Frame Length: 86 bytes (688 bits) Capture Length: 86 bytes (688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1), Dst: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Destination: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Address: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Address: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2606:4700::6810:7b60, Dst: 2001:41d0:302:2200::180 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... 0001 0010 0000 0001 1101 = Flow Label: 0x1201d Payload Length: 32 Next Header: TCP (6) Hop Limit: 50 Source Address: 2606:4700::6810:7b60 Destination Address: 2001:41d0:302:2200::180 Transmission Control Protocol, Src Port: 443, Dst Port: 56462, Seq: 1, Ack: 407, Len: 0 Source Port: 443 Destination Port: 56462 [Stream index: 0] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 0] Sequence Number: 1 (relative sequence number) Sequence Number (raw): 885784858 [Next Sequence Number: 1 (relative sequence number)] Acknowledgment Number: 407 (relative ack number) Acknowledgment number (raw): 1970383004 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 16 [Calculated window size: 131072] [Window size scaling factor: 8192] Checksum: 0x9bc6 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps Kind: Time Stamp Option (8) Length: 10 Timestamp value: 4271324981: TSval 4271324981, TSecr 2022119818 Timestamp echo reply: 2022119818 [Timestamps] [Time since first frame in this TCP stream: 0.011387000 seconds] [Time since previous frame in this TCP stream: 0.005550000 seconds] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 4] [The RTT to ACK the segment was: 0.005550000 seconds] [iRTT: 0.005539000 seconds] Frame 6: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 6, 2026 20:46:10.735271000 CET UTC Arrival Time: Jan 6, 2026 19:46:10.735271000 UTC Epoch Arrival Time: 1767728770.735271000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.002136000 seconds] [Time delta from previous displayed frame: 0.002136000 seconds] [Time since reference or first frame: 0.013523000 seconds] Frame Number: 6 Frame Length: 1434 bytes (11472 bits) Capture Length: 1434 bytes (11472 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp:tls] Ethernet II, Src: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1), Dst: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Destination: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Address: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Address: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2606:4700::6810:7b60, Dst: 2001:41d0:302:2200::180 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... 0001 0010 0000 0001 1101 = Flow Label: 0x1201d Payload Length: 1380 Next Header: TCP (6) Hop Limit: 50 Source Address: 2606:4700::6810:7b60 Destination Address: 2001:41d0:302:2200::180 Transmission Control Protocol, Src Port: 443, Dst Port: 56462, Seq: 1, Ack: 407, Len: 1348 Source Port: 443 Destination Port: 56462 [Stream index: 0] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1348] Sequence Number: 1 (relative sequence number) Sequence Number (raw): 885784858 [Next Sequence Number: 1349 (relative sequence number)] Acknowledgment Number: 407 (relative ack number) Acknowledgment number (raw): 1970383004 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 16 [Calculated window size: 131072] [Window size scaling factor: 8192] Checksum: 0x2cf6 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps Kind: Time Stamp Option (8) Length: 10 Timestamp value: 4271324983: TSval 4271324983, TSecr 2022119818 Timestamp echo reply: 2022119818 [Timestamps] [Time since first frame in this TCP stream: 0.013523000 seconds] [Time since previous frame in this TCP stream: 0.002136000 seconds] [SEQ/ACK analysis] [iRTT: 0.005539000 seconds] [Bytes in flight: 1348] [Bytes sent since last PSH flag: 1348] TCP payload (1348 bytes) TCP segment data (1215 bytes) Transport Layer Security TLSv1.2 Record Layer: Handshake Protocol: Server Hello Content Type: Handshake (22) Version: TLS 1.2 (0x0303) Length: 122 Handshake Protocol: Server Hello Handshake Type: Server Hello (2) Length: 118 Version: TLS 1.2 (0x0303) Random: 77e5dbd235235e6b3a89588f35efed03cea1ac2b3723008894b9c037b2c57d92 Session ID Length: 32 Session ID: e23e16aa1766b5cf69db4b3e8d60fe3d2c91993b3c4b7f86bc35b102d9dcad9d Cipher Suite: TLS_AES_256_GCM_SHA384 (0x1302) Compression Method: null (0) Extensions Length: 46 Extension: key_share (len=36) x25519 Type: key_share (51) Length: 36 Key Share extension Key Share Entry: Group: x25519, Key Exchange length: 32 Group: x25519 (29) Key Exchange Length: 32 Key Exchange: f21daaecc033cbd83f16307f4cf8cee7eaa8146e373a14638f2fd8231ab75040 Extension: supported_versions (len=2) TLS 1.3 Type: supported_versions (43) Length: 2 Supported Version: TLS 1.3 (0x0304) [JA3S Fullstring: 771,4866,51-43] [JA3S: 907bf3ecef1c987c889946b737b43de8] TLSv1.3 Record Layer: Change Cipher Spec Protocol: Change Cipher Spec Content Type: Change Cipher Spec (20) Version: TLS 1.2 (0x0303) Length: 1 Change Cipher Spec Message TLS segment data (1215 bytes) Frame 7: 520 bytes on wire (4160 bits), 520 bytes captured (4160 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 6, 2026 20:46:10.735271000 CET UTC Arrival Time: Jan 6, 2026 19:46:10.735271000 UTC Epoch Arrival Time: 1767728770.735271000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.013523000 seconds] Frame Number: 7 Frame Length: 520 bytes (4160 bits) Capture Length: 520 bytes (4160 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1), Dst: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Destination: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Address: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Address: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2606:4700::6810:7b60, Dst: 2001:41d0:302:2200::180 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... 0001 0010 0000 0001 1101 = Flow Label: 0x1201d Payload Length: 466 Next Header: TCP (6) Hop Limit: 50 Source Address: 2606:4700::6810:7b60 Destination Address: 2001:41d0:302:2200::180 Transmission Control Protocol, Src Port: 443, Dst Port: 56462, Seq: 2697, Ack: 407, Len: 434 Source Port: 443 Destination Port: 56462 [Stream index: 0] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 434] Sequence Number: 2697 (relative sequence number) Sequence Number (raw): 885787554 [Next Sequence Number: 3131 (relative sequence number)] Acknowledgment Number: 407 (relative ack number) Acknowledgment number (raw): 1970383004 1000 .... = Header Length: 32 bytes (8) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 16 [Calculated window size: 131072] [Window size scaling factor: 8192] Checksum: 0xd899 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps Kind: Time Stamp Option (8) Length: 10 Timestamp value: 4271324983: TSval 4271324983, TSecr 2022119818 Timestamp echo reply: 2022119818 [Timestamps] [Time since first frame in this TCP stream: 0.013523000 seconds] [Time since previous frame in this TCP stream: 0.000000000 seconds] [SEQ/ACK analysis] [iRTT: 0.005539000 seconds] [TCP Analysis Flags] [Expert Info (Warning/Sequence): Previous segment(s) not captured (common at capture start)] [Previous segment(s) not captured (common at capture start)] [Severity level: Warning] [Group: Sequence] TCP payload (434 bytes) TCP segment data (434 bytes) Frame 8: 1434 bytes on wire (11472 bits), 1434 bytes captured (11472 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 6, 2026 20:46:10.735271000 CET UTC Arrival Time: Jan 6, 2026 19:46:10.735271000 UTC Epoch Arrival Time: 1767728770.735271000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000000000 seconds] [Time delta from previous displayed frame: 0.000000000 seconds] [Time since reference or first frame: 0.013523000 seconds] Frame Number: 8 Frame Length: 1434 bytes (11472 bits) Capture Length: 1434 bytes (11472 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1), Dst: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Destination: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Address: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Address: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2606:4700::6810:7b60, Dst: 2001:41d0:302:2200::180 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... 0001 0010 0000 0001 1101 = Flow Label: 0x1201d Payload Length: 1380 Next Header: TCP (6) Hop Limit: 50 Source Address: 2606:4700::6810:7b60 Destination Address: 2001:41d0:302:2200::180 Transmission Control Protocol, Src Port: 443, Dst Port: 56462, Seq: 1349, Ack: 407, Len: 1348 Source Port: 443 Destination Port: 56462 [Stream index: 0] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 1348] Sequence Number: 1349 (relative sequence number) Sequence Number (raw): 885786206 [Next Sequence Number: 2697 (relative sequence number)] Acknowledgment Number: 407 (relative ack number) Acknowledgment number (raw): 1970383004 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 16 [Calculated window size: 131072] [Window size scaling factor: 8192] Checksum: 0x7091 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps Kind: Time Stamp Option (8) Length: 10 Timestamp value: 4271324983: TSval 4271324983, TSecr 2022119818 Timestamp echo reply: 2022119818 [Timestamps] [Time since first frame in this TCP stream: 0.013523000 seconds] [Time since previous frame in this TCP stream: 0.000000000 seconds] [SEQ/ACK analysis] [iRTT: 0.005539000 seconds] [TCP Analysis Flags] [Expert Info (Warning/Sequence): This frame is a (suspected) out-of-order segment] [This frame is a (suspected) out-of-order segment] [Severity level: Warning] [Group: Sequence] TCP payload (1348 bytes) TCP segment data (1348 bytes) [3 Reassembled TCP Segments (2997 bytes): #6(1215), #8(1348), #7(434)] [Frame: 6, payload: 0-1214 (1215 bytes)] [Frame: 8, payload: 1215-2562 (1348 bytes)] [Frame: 7, payload: 2563-2996 (434 bytes)] [Segment count: 3] [Reassembled TCP length: 2997] [Reassembled TCP Data [truncated]: 1703030bb0ac81fee391e31ed73f7462c96d33d21b238c73fc4bd09ee9a1836c084f48d4dfb8bfec5ef26b4cb4eb746a872021af659605e38b5bb863962b9428cec6729d92ffcff63637107163ea5a6458df17d58982b29c556579f74c073a743cd7ff8071802] Frame 9: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 6, 2026 20:46:10.735291000 CET UTC Arrival Time: Jan 6, 2026 19:46:10.735291000 UTC Epoch Arrival Time: 1767728770.735291000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000020000 seconds] [Time delta from previous displayed frame: 0.000020000 seconds] [Time since reference or first frame: 0.013543000 seconds] Frame Number: 9 Frame Length: 86 bytes (688 bits) Capture Length: 86 bytes (688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db), Dst: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Destination: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Address: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Address: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2001:41d0:302:2200::180, Dst: 2606:4700::6810:7b60 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... 1010 0000 1010 1110 0101 = Flow Label: 0xa0ae5 Payload Length: 32 Next Header: TCP (6) Hop Limit: 64 Source Address: 2001:41d0:302:2200::180 Destination Address: 2606:4700::6810:7b60 Transmission Control Protocol, Src Port: 56462, Dst Port: 443, Seq: 407, Ack: 1349, Len: 0 Source Port: 56462 Destination Port: 443 [Stream index: 0] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 0] Sequence Number: 407 (relative sequence number) Sequence Number (raw): 1970383004 [Next Sequence Number: 407 (relative sequence number)] Acknowledgment Number: 1349 (relative ack number) Acknowledgment number (raw): 885786206 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 67 [Calculated window size: 68608] [Window size scaling factor: 1024] Checksum: 0xd8f0 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps Kind: Time Stamp Option (8) Length: 10 Timestamp value: 2022119826: TSval 2022119826, TSecr 4271324983 Timestamp echo reply: 4271324983 [Timestamps] [Time since first frame in this TCP stream: 0.013543000 seconds] [Time since previous frame in this TCP stream: 0.000020000 seconds] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 6] [The RTT to ACK the segment was: 0.000020000 seconds] [iRTT: 0.005539000 seconds] Frame 10: 98 bytes on wire (784 bits), 98 bytes captured (784 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 6, 2026 20:46:10.735303000 CET UTC Arrival Time: Jan 6, 2026 19:46:10.735303000 UTC Epoch Arrival Time: 1767728770.735303000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000012000 seconds] [Time delta from previous displayed frame: 0.000012000 seconds] [Time since reference or first frame: 0.013555000 seconds] Frame Number: 10 Frame Length: 98 bytes (784 bits) Capture Length: 98 bytes (784 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db), Dst: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Destination: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Address: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Address: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2001:41d0:302:2200::180, Dst: 2606:4700::6810:7b60 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... 1010 0000 1010 1110 0101 = Flow Label: 0xa0ae5 Payload Length: 44 Next Header: TCP (6) Hop Limit: 64 Source Address: 2001:41d0:302:2200::180 Destination Address: 2606:4700::6810:7b60 Transmission Control Protocol, Src Port: 56462, Dst Port: 443, Seq: 407, Ack: 1349, Len: 0 Source Port: 56462 Destination Port: 443 [Stream index: 0] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 0] Sequence Number: 407 (relative sequence number) Sequence Number (raw): 1970383004 [Next Sequence Number: 407 (relative sequence number)] Acknowledgment Number: 1349 (relative ack number) Acknowledgment number (raw): 885786206 1011 .... = Header Length: 44 bytes (11) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 67 [Calculated window size: 68608] [Window size scaling factor: 1024] Checksum: 0xd8fc [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (24 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps, No-Operation (NOP), No-Operation (NOP), SACK TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps Kind: Time Stamp Option (8) Length: 10 Timestamp value: 2022119826: TSval 2022119826, TSecr 4271324983 Timestamp echo reply: 4271324983 TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - SACK 2697-3131 Kind: SACK (5) Length: 10 left edge = 2697 (relative) right edge = 3131 (relative) [TCP SACK Count: 1] [Timestamps] [Time since first frame in this TCP stream: 0.013555000 seconds] [Time since previous frame in this TCP stream: 0.000012000 seconds] [SEQ/ACK analysis] [iRTT: 0.005539000 seconds] [TCP Analysis Flags] [This is a TCP duplicate ack] [Duplicate ACK #: 1] [Duplicate to the ACK in frame: 9] [Expert Info (Note/Sequence): Duplicate ACK (#1)] [Duplicate ACK (#1)] [Severity level: Note] [Group: Sequence] Frame 11: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 6, 2026 20:46:10.735308000 CET UTC Arrival Time: Jan 6, 2026 19:46:10.735308000 UTC Epoch Arrival Time: 1767728770.735308000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000005000 seconds] [Time delta from previous displayed frame: 0.000005000 seconds] [Time since reference or first frame: 0.013560000 seconds] Frame Number: 11 Frame Length: 86 bytes (688 bits) Capture Length: 86 bytes (688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db), Dst: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Destination: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Address: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Address: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2001:41d0:302:2200::180, Dst: 2606:4700::6810:7b60 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... 1010 0000 1010 1110 0101 = Flow Label: 0xa0ae5 Payload Length: 32 Next Header: TCP (6) Hop Limit: 64 Source Address: 2001:41d0:302:2200::180 Destination Address: 2606:4700::6810:7b60 Transmission Control Protocol, Src Port: 56462, Dst Port: 443, Seq: 407, Ack: 3131, Len: 0 Source Port: 56462 Destination Port: 443 [Stream index: 0] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 0] Sequence Number: 407 (relative sequence number) Sequence Number (raw): 1970383004 [Next Sequence Number: 407 (relative sequence number)] Acknowledgment Number: 3131 (relative ack number) Acknowledgment number (raw): 885787988 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 67 [Calculated window size: 68608] [Window size scaling factor: 1024] Checksum: 0xd8f0 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps Kind: Time Stamp Option (8) Length: 10 Timestamp value: 2022119826: TSval 2022119826, TSecr 4271324983 Timestamp echo reply: 4271324983 [Timestamps] [Time since first frame in this TCP stream: 0.013560000 seconds] [Time since previous frame in this TCP stream: 0.000005000 seconds] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 7] [The RTT to ACK the segment was: 0.000037000 seconds] [iRTT: 0.005539000 seconds] Frame 12: 92 bytes on wire (736 bits), 92 bytes captured (736 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 6, 2026 20:46:10.735547000 CET UTC Arrival Time: Jan 6, 2026 19:46:10.735547000 UTC Epoch Arrival Time: 1767728770.735547000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000239000 seconds] [Time delta from previous displayed frame: 0.000239000 seconds] [Time since reference or first frame: 0.013799000 seconds] Frame Number: 12 Frame Length: 92 bytes (736 bits) Capture Length: 92 bytes (736 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp:tls] Ethernet II, Src: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db), Dst: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Destination: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Address: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Address: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2001:41d0:302:2200::180, Dst: 2606:4700::6810:7b60 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... 1010 0000 1010 1110 0101 = Flow Label: 0xa0ae5 Payload Length: 38 Next Header: TCP (6) Hop Limit: 64 Source Address: 2001:41d0:302:2200::180 Destination Address: 2606:4700::6810:7b60 Transmission Control Protocol, Src Port: 56462, Dst Port: 443, Seq: 407, Ack: 3131, Len: 6 Source Port: 56462 Destination Port: 443 [Stream index: 0] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 6] Sequence Number: 407 (relative sequence number) Sequence Number (raw): 1970383004 [Next Sequence Number: 413 (relative sequence number)] Acknowledgment Number: 3131 (relative ack number) Acknowledgment number (raw): 885787988 1000 .... = Header Length: 32 bytes (8) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window: 67 [Calculated window size: 68608] [Window size scaling factor: 1024] Checksum: 0xd8f6 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps Kind: Time Stamp Option (8) Length: 10 Timestamp value: 2022119826: TSval 2022119826, TSecr 4271324983 Timestamp echo reply: 4271324983 [Timestamps] [Time since first frame in this TCP stream: 0.013799000 seconds] [Time since previous frame in this TCP stream: 0.000239000 seconds] [SEQ/ACK analysis] [iRTT: 0.005539000 seconds] [Bytes in flight: 6] [Bytes sent since last PSH flag: 6] TCP payload (6 bytes) Transport Layer Security TLSv1.3 Record Layer: Change Cipher Spec Protocol: Change Cipher Spec Content Type: Change Cipher Spec (20) Version: TLS 1.2 (0x0303) Length: 1 Change Cipher Spec Message Frame 13: 160 bytes on wire (1280 bits), 160 bytes captured (1280 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 6, 2026 20:46:10.750519000 CET UTC Arrival Time: Jan 6, 2026 19:46:10.750519000 UTC Epoch Arrival Time: 1767728770.750519000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.014972000 seconds] [Time delta from previous displayed frame: 0.014972000 seconds] [Time since reference or first frame: 0.028771000 seconds] Frame Number: 13 Frame Length: 160 bytes (1280 bits) Capture Length: 160 bytes (1280 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp:tls] Ethernet II, Src: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db), Dst: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Destination: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Address: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Address: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2001:41d0:302:2200::180, Dst: 2606:4700::6810:7b60 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... 1010 0000 1010 1110 0101 = Flow Label: 0xa0ae5 Payload Length: 106 Next Header: TCP (6) Hop Limit: 64 Source Address: 2001:41d0:302:2200::180 Destination Address: 2606:4700::6810:7b60 Transmission Control Protocol, Src Port: 56462, Dst Port: 443, Seq: 413, Ack: 3131, Len: 74 Source Port: 56462 Destination Port: 443 [Stream index: 0] [Conversation completeness: Incomplete, DATA (15)] ..0. .... = RST: Absent ...0 .... = FIN: Absent .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ··DASS] [TCP Segment Len: 74] Sequence Number: 413 (relative sequence number) Sequence Number (raw): 1970383010 [Next Sequence Number: 488 (relative sequence number)] Acknowledgment Number: 3131 (relative ack number) Acknowledgment number (raw): 885787988 1000 .... = Header Length: 32 bytes (8) Flags: 0x019 (FIN, PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...1 = Fin: Set [Expert Info (Chat/Sequence): Connection finish (FIN)] [Connection finish (FIN)] [Severity level: Chat] [Group: Sequence] [TCP Flags: ·······AP··F] [Expert Info (Note/Sequence): This frame initiates the connection closing] [This frame initiates the connection closing] [Severity level: Note] [Group: Sequence] Window: 68 [Calculated window size: 69632] [Window size scaling factor: 1024] Checksum: 0xd93a [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps Kind: Time Stamp Option (8) Length: 10 Timestamp value: 2022119841: TSval 2022119841, TSecr 4271324983 Timestamp echo reply: 4271324983 [Timestamps] [Time since first frame in this TCP stream: 0.028771000 seconds] [Time since previous frame in this TCP stream: 0.014972000 seconds] [SEQ/ACK analysis] [iRTT: 0.005539000 seconds] [Bytes in flight: 80] [Bytes sent since last PSH flag: 74] TCP payload (74 bytes) Transport Layer Security TLSv1.3 Record Layer: Application Data Protocol: Hypertext Transfer Protocol Opaque Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 69 Encrypted Application Data: 60ee7198e2467ff394acacd83cbb10ace9a73cc74871edb7334e20b5c646b57cc9bee1fa49735f37a4500eb2ba222281ffcb24a4605d3d124fb6b83fe67e1fbca31b846652 [Application Data Protocol: Hypertext Transfer Protocol] Frame 14: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 6, 2026 20:46:10.755998000 CET UTC Arrival Time: Jan 6, 2026 19:46:10.755998000 UTC Epoch Arrival Time: 1767728770.755998000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.005479000 seconds] [Time delta from previous displayed frame: 0.005479000 seconds] [Time since reference or first frame: 0.034250000 seconds] Frame Number: 14 Frame Length: 86 bytes (688 bits) Capture Length: 86 bytes (688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1), Dst: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Destination: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Address: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Address: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2606:4700::6810:7b60, Dst: 2001:41d0:302:2200::180 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... 0001 0010 0000 0001 1101 = Flow Label: 0x1201d Payload Length: 32 Next Header: TCP (6) Hop Limit: 50 Source Address: 2606:4700::6810:7b60 Destination Address: 2001:41d0:302:2200::180 Transmission Control Protocol, Src Port: 443, Dst Port: 56462, Seq: 3131, Ack: 488, Len: 0 Source Port: 443 Destination Port: 56462 [Stream index: 0] [Conversation completeness: Complete, WITH_DATA (31)] ..0. .... = RST: Absent ...1 .... = FIN: Present .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ·FDASS] [TCP Segment Len: 0] Sequence Number: 3131 (relative sequence number) Sequence Number (raw): 885787988 [Next Sequence Number: 3131 (relative sequence number)] Acknowledgment Number: 488 (relative ack number) Acknowledgment number (raw): 1970383085 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 16 [Calculated window size: 131072] [Window size scaling factor: 8192] Checksum: 0x8f1c [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps Kind: Time Stamp Option (8) Length: 10 Timestamp value: 4271325004: TSval 4271325004, TSecr 2022119826 Timestamp echo reply: 2022119826 [Timestamps] [Time since first frame in this TCP stream: 0.034250000 seconds] [Time since previous frame in this TCP stream: 0.005479000 seconds] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 13] [The RTT to ACK the segment was: 0.005479000 seconds] [iRTT: 0.005539000 seconds] Frame 15: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 6, 2026 20:46:10.757548000 CET UTC Arrival Time: Jan 6, 2026 19:46:10.757548000 UTC Epoch Arrival Time: 1767728770.757548000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.001550000 seconds] [Time delta from previous displayed frame: 0.001550000 seconds] [Time since reference or first frame: 0.035800000 seconds] Frame Number: 15 Frame Length: 86 bytes (688 bits) Capture Length: 86 bytes (688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1), Dst: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Destination: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Address: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Address: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2606:4700::6810:7b60, Dst: 2001:41d0:302:2200::180 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... 0001 0010 0000 0001 1101 = Flow Label: 0x1201d Payload Length: 32 Next Header: TCP (6) Hop Limit: 50 Source Address: 2606:4700::6810:7b60 Destination Address: 2001:41d0:302:2200::180 Transmission Control Protocol, Src Port: 443, Dst Port: 56462, Seq: 3131, Ack: 488, Len: 0 Source Port: 443 Destination Port: 56462 [Stream index: 0] [Conversation completeness: Complete, WITH_DATA (31)] ..0. .... = RST: Absent ...1 .... = FIN: Present .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ·FDASS] [TCP Segment Len: 0] Sequence Number: 3131 (relative sequence number) Sequence Number (raw): 885787988 [Next Sequence Number: 3132 (relative sequence number)] Acknowledgment Number: 488 (relative ack number) Acknowledgment number (raw): 1970383085 1000 .... = Header Length: 32 bytes (8) Flags: 0x011 (FIN, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...1 = Fin: Set [Expert Info (Chat/Sequence): Connection finish (FIN)] [Connection finish (FIN)] [Severity level: Chat] [Group: Sequence] [TCP Flags: ·······A···F] [Expert Info (Note/Sequence): This frame undergoes the connection closing] [This frame undergoes the connection closing] [Severity level: Note] [Group: Sequence] Window: 16 [Calculated window size: 131072] [Window size scaling factor: 8192] Checksum: 0x8f1a [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps Kind: Time Stamp Option (8) Length: 10 Timestamp value: 4271325005: TSval 4271325005, TSecr 2022119826 Timestamp echo reply: 2022119826 [Timestamps] [Time since first frame in this TCP stream: 0.035800000 seconds] [Time since previous frame in this TCP stream: 0.001550000 seconds] Frame 16: 86 bytes on wire (688 bits), 86 bytes captured (688 bits) Encapsulation type: Ethernet (1) Arrival Time: Jan 6, 2026 20:46:10.757569000 CET UTC Arrival Time: Jan 6, 2026 19:46:10.757569000 UTC Epoch Arrival Time: 1767728770.757569000 [Time shift for this packet: 0.000000000 seconds] [Time delta from previous captured frame: 0.000021000 seconds] [Time delta from previous displayed frame: 0.000021000 seconds] [Time since reference or first frame: 0.035821000 seconds] Frame Number: 16 Frame Length: 86 bytes (688 bits) Capture Length: 86 bytes (688 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ipv6:tcp] Ethernet II, Src: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db), Dst: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Destination: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) Address: 86:c0:b6:cf:6d:e1 (86:c0:b6:cf:6d:e1) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) Address: fa:16:3e:f2:47:db (fa:16:3e:f2:47:db) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv6 (0x86dd) Internet Protocol Version 6, Src: 2001:41d0:302:2200::180, Dst: 2606:4700::6810:7b60 0110 .... = Version: 6 .... 0000 0000 .... .... .... .... .... = Traffic Class: 0x00 (DSCP: CS0, ECN: Not-ECT) .... 0000 00.. .... .... .... .... .... = Differentiated Services Codepoint: Default (0) .... .... ..00 .... .... .... .... .... = Explicit Congestion Notification: Not ECN-Capable Transport (0) .... 1010 0000 1010 1110 0101 = Flow Label: 0xa0ae5 Payload Length: 32 Next Header: TCP (6) Hop Limit: 64 Source Address: 2001:41d0:302:2200::180 Destination Address: 2606:4700::6810:7b60 Transmission Control Protocol, Src Port: 56462, Dst Port: 443, Seq: 488, Ack: 3132, Len: 0 Source Port: 56462 Destination Port: 443 [Stream index: 0] [Conversation completeness: Complete, WITH_DATA (31)] ..0. .... = RST: Absent ...1 .... = FIN: Present .... 1... = Data: Present .... .1.. = ACK: Present .... ..1. = SYN-ACK: Present .... ...1 = SYN: Present [Completeness Flags: ·FDASS] [TCP Segment Len: 0] Sequence Number: 488 (relative sequence number) Sequence Number (raw): 1970383085 [Next Sequence Number: 488 (relative sequence number)] Acknowledgment Number: 3132 (relative ack number) Acknowledgment number (raw): 885787989 1000 .... = Header Length: 32 bytes (8) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Accurate ECN: Not set .... 0... .... = Congestion Window Reduced: Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window: 68 [Calculated window size: 69632] [Window size scaling factor: 1024] Checksum: 0xd8f0 [unverified] [Checksum Status: Unverified] Urgent Pointer: 0 Options: (12 bytes), No-Operation (NOP), No-Operation (NOP), Timestamps TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - No-Operation (NOP) Kind: No-Operation (1) TCP Option - Timestamps Kind: Time Stamp Option (8) Length: 10 Timestamp value: 2022119848: TSval 2022119848, TSecr 4271325005 Timestamp echo reply: 4271325005 [Timestamps] [Time since first frame in this TCP stream: 0.035821000 seconds] [Time since previous frame in this TCP stream: 0.000021000 seconds] [SEQ/ACK analysis] [This is an ACK to the segment in frame: 15] [The RTT to ACK the segment was: 0.000021000 seconds] [iRTT: 0.005539000 seconds]