topic http and icmp rules not working in Network Security

http and icmp rules not working (SOLVED)

IT Asitis — Mon, 11 Mar 2019 23:53:07 GMT

Hi,

i have the same setup for internal, dmz1 and dmz2. However i am able to surf and ping via internal but not via DMZ1 or DMZ2. is there something special needed there?

if i have the rule " any any ip allow " on those interfaces everything is fine, i just dont want that since i want to restrict traffic as much as possible.

Security levels

internal 100

DMZ1 60

DMZ2 50

I would appriciate all the help i can get.

/Hilmar

http and icmp rules not working

varrao — Wed, 12 Sep 2012 09:52:58 GMT

Hi Himar,

Can you share a copy of your configuration? We would be able to let you know after having a look at that.

Thanks,
Varun Rao
Security Team,
Cisco TAC

http and icmp rules not working

IT Asitis — Wed, 12 Sep 2012 11:19:15 GMT

i have attached it

/Hilmar

Re: http and icmp rules not working

fs0144733 — Wed, 12 Sep 2012 11:35:31 GMT

ACL looks good...

Run these command and attach the output.

packet-tracer input DMZ1 icmp 10.42.1.5 8 0 4.2.2.2

packet-tracer input DMZ2 icmp 10.42.2.5 8 0 4.2.2.2

packet-tracer input DMZ1 tcp 10.42.1.5 1024 4.2.2.2 80

packet-tracer input DMZ2 tcp 10.42.2.5 1024 4.2.2.2 80

- fsk

http and icmp rules not working

IT Asitis — Wed, 12 Sep 2012 11:50:36 GMT

Here you go. I cant see anything wrong here.

Result of the command: "packet-tracer input DMZ1 icmp 10.42.1.5 8 0 4.2.2.2"

Phase: 1
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 0.0.0.0 0.0.0.0 WAN1

Phase: 2
Type: ACCESS-LIST
Subtype: log
Result: ALLOW
Config:
access-group DMZ1_access_in_1 in interface DMZ1
access-list DMZ1_access_in_1 extended permit icmp any any
access-list DMZ1_access_in_1 remark Allows remote Desktop
Additional Information:

Phase: 3
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:

Phase: 4
Type: INSPECT
Subtype: np-inspect
Result: ALLOW
Config:
class-map inspection_default
match default-inspection-traffic
policy-map global_policy
class inspection_default
inspect icmp
service-policy global_policy global
Additional Information:

Phase: 5
Type: INSPECT
Subtype: np-inspect
Result: ALLOW
Config:
Additional Information:

Phase: 6
Type: NAT
Subtype:
Result: ALLOW
Config:
object network DMZ1-network
nat (DMZ1,WAN1) dynamic interface
Additional Information:
Dynamic translate 10.42.1.5/0 to 88.131.56.14/4064

Phase: 7
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:

Phase: 8
Type: FLOW-CREATION
Subtype:
Result: ALLOW
Config:
Additional Information:
New flow created with id 451226, packet dispatched to next module

Result:
input-interface: DMZ1
input-status: up
input-line-status: up
output-interface: WAN1
output-status: up
output-line-status: up
Action: allow

Result of the command: "packet-tracer input DMZ2 icmp 10.42.2.5 8 0 4.2.2.2"

Phase: 1
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 0.0.0.0 0.0.0.0 WAN1

Phase: 2
Type: ACCESS-LIST
Subtype: log
Result: ALLOW
Config:
access-group DMZ2_access_in in interface DMZ2
access-list DMZ2_access_in extended permit icmp any any
access-list DMZ2_access_in remark Allows Remote Desktop
Additional Information:

Phase: 3
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:

Phase: 5
Type: INSPECT
Subtype: np-inspect
Result: ALLOW
Config:
Additional Information:

Phase: 6
Type: NAT
Subtype:
Result: ALLOW
Config:
object network DMZ2-network
nat (DMZ2,WAN1) dynamic interface
Additional Information:
Dynamic translate 10.42.2.5/0 to 88.131.56.14/58413

Phase: 7
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:

Phase: 8
Type: FLOW-CREATION
Subtype:
Result: ALLOW
Config:
Additional Information:
New flow created with id 451227, packet dispatched to next module

Result:
input-interface: DMZ2
input-status: up
input-line-status: up
output-interface: WAN1
output-status: up
output-line-status: up
Action: allow

Result of the command: "packet-tracer input DMZ1 tcp 10.42.1.5 1024 4.2.2.2 80"

Phase: 1
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 0.0.0.0 0.0.0.0 WAN1

Phase: 2
Type: ACCESS-LIST
Subtype: log
Result: ALLOW
Config:
access-group DMZ1_access_in_1 in interface DMZ1
access-list DMZ1_access_in_1 extended permit object-group DM_INLINE_SERVICE_2 any any
access-list DMZ1_access_in_1 remark Allows Ping
object-group service DM_INLINE_SERVICE_2
service-object tcp-udp destination eq www
service-object tcp destination eq https
Additional Information:

Phase: 3
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:

Phase: 4
Type: NAT
Subtype:
Result: ALLOW
Config:
object network DMZ1-network
nat (DMZ1,WAN1) dynamic interface
Additional Information:
Dynamic translate 10.42.1.5/1024 to 88.131.56.14/1024

Phase: 5
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:

Phase: 6
Type: FLOW-CREATION
Subtype:
Result: ALLOW
Config:
Additional Information:
New flow created with id 451228, packet dispatched to next module

Result:
input-interface: DMZ1
input-status: up
input-line-status: up
output-interface: WAN1
output-status: up
output-line-status: up
Action: allow

Result of the command: "packet-tracer input DMZ2 tcp 10.42.2.5 1024 4.2.2.2 80"

Phase: 1
Type: ROUTE-LOOKUP
Subtype: input
Result: ALLOW
Config:
Additional Information:
in 0.0.0.0 0.0.0.0 WAN1

Phase: 2
Type: ACCESS-LIST
Subtype: log
Result: ALLOW
Config:
access-group DMZ2_access_in in interface DMZ2
access-list DMZ2_access_in extended permit object-group DM_INLINE_SERVICE_3 any any
access-list DMZ2_access_in remark allows ping
object-group service DM_INLINE_SERVICE_3
service-object tcp-udp destination eq www
service-object tcp destination eq https
Additional Information:

Phase: 3
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:

Phase: 4
Type: NAT
Subtype:
Result: ALLOW
Config:
object network DMZ2-network
nat (DMZ2,WAN1) dynamic interface
Additional Information:
Dynamic translate 10.42.2.5/1024 to 88.131.56.14/25560

Phase: 5
Type: IP-OPTIONS
Subtype:
Result: ALLOW
Config:
Additional Information:

Phase: 6
Type: FLOW-CREATION
Subtype:
Result: ALLOW
Config:
Additional Information:
New flow created with id 451229, packet dispatched to next module

Result:
input-interface: DMZ2
input-status: up
input-line-status: up
output-interface: WAN1
output-status: up
output-line-status: up
Action: allow

http and icmp rules not working

varrao — Wed, 12 Sep 2012 11:53:06 GMT

Hi Himar,

One of the issues I can see is your routes, ASA cannot have two default routes configured:

route WAN1 0.0.0.0 0.0.0.0 88.131.56.9 20

route Wan2 0.0.0.0 0.0.0.0 195.198.115.129 21

It would always take the first route and never the second. Can you please explain me, in which direction teh traffic is not flowing? Are the DMZ1 and DMZ2 not able to access internet??

As i see it, you have applied ACL's on the DMZ1 and DMZ2 interfaces, for denying mail, so as per the rules, you would definitey need to allow the traffic through an ACL explicitly for internet access. Let me explain you again, by default, higher to lower traffic is allowed, but if you apply an acl, then this rule become void, so to allow any traffic you would need to mention the network to be allowed in the ACL. And thats why it works with ip any any.

Hope that helps.

Thanks,
Varun Rao
Security Team,
Cisco TAC

Re: http and icmp rules not working

fs0144733 — Wed, 12 Sep 2012 11:55:19 GMT

Varun,

The second default route is with a higher metric.. Just a back-up one.. I don't think that can cause any issue.

http and icmp rules not working

varrao — Wed, 12 Sep 2012 12:04:11 GMT

Hi Fahad,

That will never cause an issue, but that will never work as well, since ASA can only have one default route, and even if the first route goes down, ASA doesn't have the mechanism to fall back to the next available route of higher availability until and unless you have the sla monitoring configured, here is an example:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

And still sla monitoring is not for load balancing of the traffic but only for ISP failover in case the primary link goes down.

Hope that helps.

Thanks,
Varun Rao
Security Team,
Cisco TAC

http and icmp rules not working

IT Asitis — Wed, 12 Sep 2012 12:20:58 GMT

Thanks for your replys.

I have deleted the route to wan2 ( dosent change a thing )

Yes it is correct that they are not able to access internet.

shouldnt " any any http/https allow " as an incoming rule for DMZ1/DMZ2 let traffic go to the internet?

internal also has exact the same rules and it works there with out a problem, shouldnt the same apply for DMZ1/DMZ2 ?

/Hilmar

http and icmp rules not working

IT Asitis — Wed, 12 Sep 2012 12:54:19 GMT

one more strange thing is that i am able to remote desktop to a maskin in the internal network. is there any reason why rdp should work and not icmp or http?

/Hilmar

Re: http and icmp rules not working

varrao — Wed, 12 Sep 2012 12:57:16 GMT

Hi Himar,

It should ideally work, I don't think it to be an issue, but still if its not working, you might need to check captures in this case.

For the captures you can confiugre:

access-list cap permit ip host 10.42.2.5 any

access-list cap permit ip any host 10.42.2.5

access-list cap permit ip any host 88.131.56.14

capture capo access-list cap interface wan1

capture capin access-list cap interface wan1

Once you have these captures placed, try pinging 4.2.2.2 and also accessing any website from the host 10.42.2.5

These captures should definitely let us know how traffic is flowing.

To view the captures, do "show cap capin" & "show cap capo"

Hope that helps.

Thanks,

Varun Rao
Security Team,
Cisco TAC

http and icmp rules not working

IT Asitis — Wed, 12 Sep 2012 14:31:10 GMT

i did as asked, however i used 10.42.2.140 since that is the maskin im using for testing.

Ping worked but browsing did not

Result of the command: "show cap capin"

580 packets captured

1: 11:39:18.937100 10.42.10.32 > 4.2.2.2: icmp: echo request
2: 11:39:23.847795 10.42.10.32 > 4.2.2.2: icmp: echo request
3: 11:39:28.848649 10.42.10.32 > 4.2.2.2: icmp: echo request
4: 11:39:33.847597 10.42.10.32 > 4.2.2.2: icmp: echo request
5: 11:41:00.617445 192.168.74.10 > 4.2.2.2: icmp: echo request
6: 13:19:20.088069 10.42.10.32 > 4.2.2.2: icmp: echo request
7: 05:17:20.239260 10.42.10.32 > 4.2.2.2: icmp: echo request
8: 13:46:19.154471 199.47.216.144.80 > 88.131.56.14.51881: P 2741469454:2741469633(179) ack 1566359261 win 126
9: 13:46:19.352307 199.47.216.144.80 > 88.131.56.14.51881: . ack 1566359475 win 126
10: 13:47:14.508121 199.47.216.144.80 > 88.131.56.14.51881: P 2741469633:2741469812(179) ack 1566359475 win 126
11: 13:47:14.705835 199.47.216.144.80 > 88.131.56.14.51881: . ack 1566359689 win 126
12: 13:48:09.895903 199.47.216.144.80 > 88.131.56.14.51881: P 2741469812:2741469991(179) ack 1566359689 win 126
13: 13:48:10.093912 199.47.216.144.80 > 88.131.56.14.51881: . ack 1566359903 win 126
14: 13:49:05.770483 199.47.216.144.80 > 88.131.56.14.51881: P 2741469991:2741470170(179) ack 1566359903 win 126
15: 13:49:05.968318 199.47.216.144.80 > 88.131.56.14.51881: . ack 1566360117 win 126
16: 13:49:47.335447 10.42.10.32.52146 > 10.42.2.140.3389: P 695302320:695302357(37) ack 746307219 win 16669
17: 13:49:47.350506 10.42.2.140.3389 > 10.42.10.32.52146: P 746307219:746307304(85) ack 695302357 win 256
18: 13:49:47.420357 10.42.10.32.52146 > 10.42.2.140.3389: P 695302357:695302394(37) ack 746307304 win 16648
19: 13:49:47.444068 10.42.2.140.3389 > 10.42.10.32.52146: P 746307304:746307357(53) ack 695302394 win 256
20: 13:49:47.649868 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746307357 win 16635
21: 13:49:48.437797 10.42.10.32.52146 > 10.42.2.140.3389: P 695302394:695302431(37) ack 746307357 win 16635
22: 13:49:48.442649 10.42.2.140.3389 > 10.42.10.32.52146: P 746307357:746307426(69) ack 695302431 win 256
23: 13:49:48.527881 10.42.10.32.52146 > 10.42.2.140.3389: P 695302431:695302468(37) ack 746307426 win 16618
24: 13:49:48.536242 10.42.2.140.3389 > 10.42.10.32.52146: P 746307426:746307479(53) ack 695302468 win 260
25: 13:49:48.737541 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746307479 win 16604
26: 13:49:51.539416 10.42.10.32.52146 > 10.42.2.140.3389: P 695302468:695302505(37) ack 746307479 win 16604
27: 13:49:51.547579 10.42.2.140.3389 > 10.42.10.32.52146: P 746307479:746307564(85) ack 695302505 win 260
28: 13:49:51.653042 10.42.10.32.52146 > 10.42.2.140.3389: P 695302505:695302542(37) ack 746307564 win 16583
29: 13:49:51.781560 10.42.2.140.3389 > 10.42.10.32.52146: P 746307564:746307617(53) ack 695302542 win 260
30: 13:49:51.874786 10.42.10.32.52146 > 10.42.2.140.3389: P 695302542:695302579(37) ack 746307617 win 16570
31: 13:49:51.890777 10.42.2.140.3389 > 10.42.10.32.52146: P 746307617:746307718(101) ack 695302579 win 260
32: 13:49:51.969508 10.42.10.32.52146 > 10.42.2.140.3389: P 695302579:695302616(37) ack 746307718 win 16545
33: 13:49:52.171652 10.42.2.140.3389 > 10.42.10.32.52146: . ack 695302616 win 260
34: 13:49:52.312087 10.42.2.140.3389 > 10.42.10.32.52146: P 746307718:746307771(53) ack 695302616 win 260
35: 13:49:52.520709 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746307771 win 16531
36: 13:49:52.675837 10.42.10.32.52146 > 10.42.2.140.3389: P 695302616:695302653(37) ack 746307771 win 16531
37: 13:49:52.686518 10.42.2.140.3389 > 10.42.10.32.52146: P 746307771:746307840(69) ack 695302653 win 260
38: 13:49:52.752173 10.42.10.32.52146 > 10.42.2.140.3389: P 695302653:695302690(37) ack 746307840 win 16514
39: 13:49:52.764502 10.42.2.140.3389 > 10.42.10.32.52146: P 746307840:746307893(53) ack 695302690 win 259
40: 13:49:52.791768 10.42.10.32.52146 > 10.42.2.140.3389: P 695302690:695302727(37) ack 746307893 win 16501
41: 13:49:52.795567 10.42.2.140.3389 > 10.42.10.32.52146: P 746307893:746307946(53) ack 695302727 win 259
42: 13:49:52.869492 10.42.10.32.52146 > 10.42.2.140.3389: P 695302727:695302764(37) ack 746307946 win 16488
43: 13:49:52.958293 10.42.10.32.52146 > 10.42.2.140.3389: P 695302764:695302801(37) ack 746307946 win 16488
44: 13:49:52.958675 10.42.2.140.3389 > 10.42.10.32.52146: . ack 695302801 win 259
45: 13:49:52.967341 10.42.2.140.3389 > 10.42.10.32.52146: P 746307946:746308015(69) ack 695302801 win 259
46: 13:49:53.037702 10.42.10.32.52146 > 10.42.2.140.3389: P 695302801:695302838(37) ack 746308015 win 16470
47: 13:49:53.068340 10.42.10.32.52146 > 10.42.2.140.3389: P 695302838:695302875(37) ack 746308015 win 16470
48: 13:49:53.068706 10.42.2.140.3389 > 10.42.10.32.52146: . ack 695302875 win 259
49: 13:49:53.076610 10.42.2.140.3389 > 10.42.10.32.52146: P 746308015:746308084(69) ack 695302875 win 259
50: 13:49:53.147987 10.42.10.32.52146 > 10.42.2.140.3389: P 695302875:695302912(37) ack 746308084 win 16453
51: 13:49:53.195744 10.42.10.32.52146 > 10.42.2.140.3389: P 695302912:695302949(37) ack 746308084 win 16453
52: 13:49:53.196156 10.42.2.140.3389 > 10.42.10.32.52146: . ack 695302949 win 258
53: 13:49:53.201436 10.42.2.140.3389 > 10.42.10.32.52146: P 746308084:746308137(53) ack 695302949 win 258
54: 13:49:53.265214 10.42.10.32.52146 > 10.42.2.140.3389: P 695302949:695302986(37) ack 746308137 win 16440
55: 13:49:53.279404 10.42.2.140.3389 > 10.42.10.32.52146: P 746308137:746308190(53) ack 695302986 win 258
56: 13:49:53.475866 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746308190 win 16427
57: 13:49:58.323790 10.42.10.32.52146 > 10.42.2.140.3389: P 695302986:695303023(37) ack 746308190 win 16427
58: 13:49:58.334958 10.42.2.140.3389 > 10.42.10.32.52146: P 746308190:746308803(613) ack 695303023 win 258
59: 13:49:58.350705 10.42.2.140.3389 > 10.42.10.32.52146: P 746308803:746308920(117) ack 695303023 win 258
60: 13:49:58.350995 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746308920 win 16695
61: 13:49:58.375453 4.2.2.2 > 88.131.56.14: icmp: echo reply
62: 13:49:58.427101 10.42.10.32.52146 > 10.42.2.140.3389: P 695303023:695303060(37) ack 746308920 win 16695
63: 13:49:58.428276 10.42.2.140.3389 > 10.42.10.32.52146: P 746308920:746309133(213) ack 695303060 win 258
64: 13:49:58.444221 10.42.2.140.3389 > 10.42.10.32.52146: . 746309133:746310393(1260) ack 695303060 win 258
65: 13:49:58.444282 10.42.2.140.3389 > 10.42.10.32.52146: P 746310393:746310914(521) ack 695303060 win 258
66: 13:49:58.444450 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746310393 win 16695
67: 13:49:58.651775 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746310914 win 16564
68: 13:49:59.239672 10.42.2.140.3389 > 10.42.10.32.52146: P 746310914:746310967(53) ack 695303060 win 258
69: 13:49:59.372783 4.2.2.2 > 88.131.56.14: icmp: echo reply
70: 13:49:59.439399 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746310967 win 16551
71: 13:49:59.473684 10.42.2.140.3389 > 10.42.10.32.52146: P 746310967:746311052(85) ack 695303060 win 258
72: 13:49:59.681925 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746311052 win 16530
73: 13:50:00.300674 10.42.2.140.3389 > 10.42.10.32.52146: P 746311052:746311105(53) ack 695303060 win 258
74: 13:50:00.347180 10.42.10.32.52146 > 10.42.2.140.3389: P 695303060:695303097(37) ack 746311105 win 16517
75: 13:50:00.371089 4.2.2.2 > 88.131.56.14: icmp: echo reply
76: 13:50:00.378703 10.42.2.140.3389 > 10.42.10.32.52146: P 746311105:746311158(53) ack 695303097 win 258
77: 13:50:00.579590 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746311158 win 16503
78: 13:50:00.707482 10.42.10.32.52146 > 10.42.2.140.3389: P 695303097:695303214(117) ack 746311158 win 16503
79: 13:50:00.909010 10.42.2.140.3389 > 10.42.10.32.52146: . ack 695303214 win 257
80: 13:50:01.042997 10.42.10.32.52146 > 10.42.2.140.3389: P 695303214:695303299(85) ack 746311158 win 16503
81: 13:50:01.148841 10.42.10.32.52146 > 10.42.2.140.3389: P 695303299:695303416(117) ack 746311158 win 16503
82: 13:50:01.149238 10.42.2.140.3389 > 10.42.10.32.52146: . ack 695303416 win 257
83: 13:50:01.283630 10.42.2.140.3389 > 10.42.10.32.52146: P 746311158:746311211(53) ack 695303416 win 257
84: 13:50:01.369411 4.2.2.2 > 88.131.56.14: icmp: echo reply
85: 13:50:01.392908 10.42.2.140.3389 > 10.42.10.32.52146: P 746311211:746311472(261) ack 695303416 win 257
86: 13:50:01.393091 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746311472 win 16425
87: 13:50:01.413827 10.42.10.32.52146 > 10.42.2.140.3389: P 695303416:695303453(37) ack 746311472 win 16425
88: 13:50:01.518039 10.42.10.32.52146 > 10.42.2.140.3389: P 695303453:695303538(85) ack 746311472 win 16425
89: 13:50:01.518451 10.42.2.140.3389 > 10.42.10.32.52146: . ack 695303538 win 256
90: 13:50:01.533190 10.42.2.140.3389 > 10.42.10.32.52146: P 746311472:746311541(69) ack 695303538 win 256
91: 13:50:01.629209 10.42.10.32.52146 > 10.42.2.140.3389: P 695303538:695303639(101) ack 746311541 win 16408
92: 13:50:01.642804 10.42.2.140.3389 > 10.42.10.32.52146: . 746311541:746312801(1260) ack 695303639 win 256
93: 13:50:01.642850 10.42.2.140.3389 > 10.42.10.32.52146: P 746312801:746313450(649) ack 695303639 win 256
94: 13:50:01.643124 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746313450 win 16695
95: 13:50:01.699991 199.47.216.144.80 > 88.131.56.14.51881: P 2741470170:2741470349(179) ack 1566360117 win 126
96: 13:50:01.746848 10.42.10.32.52146 > 10.42.2.140.3389: P 695303639:695303692(53) ack 746313450 win 16695
97: 13:50:01.897841 199.47.216.144.80 > 88.131.56.14.51881: . ack 1566360331 win 126
98: 13:50:01.954403 10.42.2.140.3389 > 10.42.10.32.52146: . ack 695303692 win 256
99: 13:50:02.422570 10.42.2.140.3389 > 10.42.10.32.52146: P 746313450:746313503(53) ack 695303692 win 256
100: 13:50:02.437553 10.42.10.32.52146 > 10.42.2.140.3389: P 695303692:695303745(53) ack 746313503 win 16681
101: 13:50:02.578812 10.42.2.140.3389 > 10.42.10.32.52146: P 746313503:746314628(1125) ack 695303745 win 260
102: 13:50:02.782445 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746314628 win 16400
103: 13:50:03.589797 10.42.10.32.52146 > 10.42.2.140.3389: P 695303745:695303782(37) ack 746314628 win 16400
104: 13:50:03.592773 10.42.2.140.3389 > 10.42.10.32.52146: P 746314628:746314745(117) ack 695303782 win 260
105: 13:50:03.612135 10.42.2.140.3389 > 10.42.10.32.52146: . 746314745:746316005(1260) ack 695303782 win 260
106: 13:50:03.612242 10.42.2.140.3389 > 10.42.10.32.52146: . 746316005:746317265(1260) ack 695303782 win 260
107: 13:50:03.612349 10.42.2.140.3389 > 10.42.10.32.52146: . 746317265:746318525(1260) ack 695303782 win 260
108: 13:50:03.612440 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746316005 win 16695
109: 13:50:03.612486 10.42.2.140.3389 > 10.42.10.32.52146: . 746318525:746319785(1260) ack 695303782 win 260
110: 13:50:03.612547 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746318525 win 16695
111: 13:50:03.612578 10.42.2.140.3389 > 10.42.10.32.52146: . 746319785:746321045(1260) ack 695303782 win 260
112: 13:50:03.612669 10.42.2.140.3389 > 10.42.10.32.52146: . 746321045:746322305(1260) ack 695303782 win 260
113: 13:50:03.612791 10.42.2.140.3389 > 10.42.10.32.52146: . 746322305:746323565(1260) ack 695303782 win 260
114: 13:50:03.612822 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746321045 win 16695
115: 13:50:03.612898 10.42.2.140.3389 > 10.42.10.32.52146: . 746323565:746324825(1260) ack 695303782 win 260
116: 13:50:03.612959 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746323565 win 16695
117: 13:50:03.613005 10.42.2.140.3389 > 10.42.10.32.52146: . 746324825:746326085(1260) ack 695303782 win 260
118: 13:50:03.613020 10.42.2.140.3389 > 10.42.10.32.52146: P 746326085:746326526(441) ack 695303782 win 260
119: 13:50:03.613203 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746326085 win 16695
120: 13:50:03.625959 10.42.2.140.3389 > 10.42.10.32.52146: . 746326526:746327786(1260) ack 695303782 win 260
121: 13:50:03.626050 10.42.2.140.3389 > 10.42.10.32.52146: . 746327786:746329046(1260) ack 695303782 win 260
122: 13:50:03.626157 10.42.2.140.3389 > 10.42.10.32.52146: . 746329046:746330306(1260) ack 695303782 win 260
123: 13:50:03.626264 10.42.2.140.3389 > 10.42.10.32.52146: . 746330306:746331566(1260) ack 695303782 win 260
124: 13:50:03.626279 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746327786 win 16695
125: 13:50:03.626340 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746330306 win 16695
126: 13:50:03.626386 10.42.2.140.3389 > 10.42.10.32.52146: . 746331566:746332826(1260) ack 695303782 win 260
127: 13:50:03.626478 10.42.2.140.3389 > 10.42.10.32.52146: . 746332826:746334086(1260) ack 695303782 win 260
128: 13:50:03.626493 10.42.2.140.3389 > 10.42.10.32.52146: P 746334086:746334403(317) ack 695303782 win 260
129: 13:50:03.626569 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746332826 win 16695
130: 13:50:03.626661 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746334403 win 16695
131: 13:50:03.637311 10.42.2.140.3389 > 10.42.10.32.52146: . 746334403:746335663(1260) ack 695303782 win 260
132: 13:50:03.637418 10.42.2.140.3389 > 10.42.10.32.52146: . 746335663:746336923(1260) ack 695303782 win 260
133: 13:50:03.637509 10.42.2.140.3389 > 10.42.10.32.52146: . 746336923:746338183(1260) ack 695303782 win 260
134: 13:50:03.637555 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746336923 win 16695
135: 13:50:03.637631 10.42.2.140.3389 > 10.42.10.32.52146: . 746338183:746339443(1260) ack 695303782 win 260
136: 13:50:03.637753 10.42.2.140.3389 > 10.42.10.32.52146: . 746339443:746340703(1260) ack 695303782 win 260
137: 13:50:03.637845 10.42.2.140.3389 > 10.42.10.32.52146: . 746340703:746341963(1260) ack 695303782 win 260
138: 13:50:03.637860 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746339443 win 16695
139: 13:50:03.637952 10.42.2.140.3389 > 10.42.10.32.52146: . 746341963:746343223(1260) ack 695303782 win 260
140: 13:50:03.637982 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746341963 win 16695
141: 13:50:03.638059 10.42.2.140.3389 > 10.42.10.32.52146: . 746343223:746344483(1260) ack 695303782 win 260
142: 13:50:03.638165 10.42.2.140.3389 > 10.42.10.32.52146: . 746344483:746345743(1260) ack 695303782 win 260
143: 13:50:03.638196 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746344483 win 16695
144: 13:50:03.638257 10.42.2.140.3389 > 10.42.10.32.52146: . 746345743:746347003(1260) ack 695303782 win 260
145: 13:50:03.638348 10.42.2.140.3389 > 10.42.10.32.52146: P 746347003:746348008(1005) ack 695303782 win 260
146: 13:50:03.638471 10.42.2.140.3389 > 10.42.10.32.52146: . 746348008:746349268(1260) ack 695303782 win 260
147: 13:50:03.638486 10.42.2.140.3389 > 10.42.10.32.52146: P 746349268:746349645(377) ack 695303782 win 260
148: 13:50:03.638501 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746347003 win 16695
149: 13:50:03.638638 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746349268 win 16695
150: 13:50:03.707498 10.42.10.32.52146 > 10.42.2.140.3389: P 695303782:695303819(37) ack 746349645 win 16600
151: 13:50:03.717705 10.42.2.140.3389 > 10.42.10.32.52146: P 746349645:746350306(661) ack 695303819 win 260
152: 13:50:03.917661 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746350306 win 16435
153: 13:50:04.092036 10.42.2.140.3389 > 10.42.10.32.52146: P 746350306:746350375(69) ack 695303819 win 260
154: 13:50:04.290237 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746350375 win 16418
155: 13:50:04.651852 10.42.10.32.52146 > 10.42.2.140.3389: P 695303819:695303856(37) ack 746350375 win 16418
156: 13:50:04.653622 10.42.2.140.3389 > 10.42.10.32.52146: P 746350375:746350492(117) ack 695303856 win 260
157: 13:50:04.654064 10.42.2.140.3389 > 10.42.10.32.52146: P 746350492:746350529(37) ack 695303856 win 260
158: 13:50:04.654247 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746350529 win 16695
159: 13:50:04.669643 10.42.2.140.3389 > 10.42.10.32.52146: . 746350529:746351789(1260) ack 695303856 win 260
160: 13:50:04.669688 10.42.2.140.3389 > 10.42.10.32.52146: P 746351789:746352390(601) ack 695303856 win 260
161: 13:50:04.669856 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746352390 win 16695
162: 13:50:04.726662 10.42.10.32.52146 > 10.42.2.140.3389: P 695303856:695303893(37) ack 746352390 win 16695
163: 13:50:04.731651 10.42.2.140.3389 > 10.42.10.32.52146: P 746352390:746352571(181) ack 695303893 win 260
164: 13:50:04.856614 10.42.2.140.3389 > 10.42.10.32.52146: P 746352571:746352912(341) ack 695303893 win 260
165: 13:50:04.856828 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746352912 win 16564
166: 13:50:04.965739 10.42.2.140.3389 > 10.42.10.32.52146: P 746352912:746353109(197) ack 695303893 win 260
167: 13:50:05.075008 10.42.2.140.3389 > 10.42.10.32.52146: P 746353109:746353354(245) ack 695303893 win 260
168: 13:50:05.075221 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746353354 win 16454
169: 13:50:05.184423 10.42.2.140.3389 > 10.42.10.32.52146: P 746353354:746353615(261) ack 695303893 win 260
170: 13:50:05.293487 10.42.2.140.3389 > 10.42.10.32.52146: P 746353615:746353924(309) ack 695303893 win 260
171: 13:50:05.293701 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746353924 win 16695
172: 13:50:05.402628 10.42.2.140.3389 > 10.42.10.32.52146: P 746353924:746354121(197) ack 695303893 win 260
173: 13:50:05.511844 10.42.2.140.3389 > 10.42.10.32.52146: P 746354121:746354222(101) ack 695303893 win 260
174: 13:50:05.512043 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746354222 win 16620
175: 13:50:05.621031 10.42.2.140.3389 > 10.42.10.32.52146: P 746354222:746354323(101) ack 695303893 win 260
176: 13:50:05.730263 10.42.2.140.3389 > 10.42.10.32.52146: P 746354323:746354424(101) ack 695303893 win 260
177: 13:50:05.730461 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746354424 win 16570
178: 13:50:05.839510 10.42.2.140.3389 > 10.42.10.32.52146: P 746354424:746354509(85) ack 695303893 win 260
179: 13:50:05.948666 10.42.2.140.3389 > 10.42.10.32.52146: P 746354509:746354610(101) ack 695303893 win 260
180: 13:50:05.948879 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746354610 win 16523
181: 13:50:06.057949 10.42.2.140.3389 > 10.42.10.32.52146: P 746354610:746354711(101) ack 695303893 win 260
182: 13:50:06.167151 10.42.2.140.3389 > 10.42.10.32.52146: P 746354711:746354796(85) ack 695303893 win 260
183: 13:50:06.167365 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746354796 win 16477
184: 13:50:06.276291 10.42.2.140.3389 > 10.42.10.32.52146: P 746354796:746354849(53) ack 695303893 win 260
185: 13:50:06.385645 10.42.2.140.3389 > 10.42.10.32.52146: P 746354849:746354902(53) ack 695303893 win 260
186: 13:50:06.385798 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746354902 win 16450
187: 13:50:06.494816 10.42.2.140.3389 > 10.42.10.32.52146: P 746354902:746354955(53) ack 695303893 win 260
188: 13:50:06.603972 10.42.2.140.3389 > 10.42.10.32.52146: P 746354955:746355008(53) ack 695303893 win 260
189: 13:50:06.604186 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746355008 win 16424
190: 13:50:06.713204 10.42.2.140.3389 > 10.42.10.32.52146: P 746355008:746355061(53) ack 695303893 win 260
191: 13:50:06.822421 10.42.2.140.3389 > 10.42.10.32.52146: P 746355061:746355114(53) ack 695303893 win 260
192: 13:50:06.822604 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746355114 win 16397
193: 13:50:06.931622 10.42.2.140.3389 > 10.42.10.32.52146: P 746355114:746355167(53) ack 695303893 win 260
194: 13:50:07.040906 10.42.2.140.3389 > 10.42.10.32.52146: P 746355167:746355220(53) ack 695303893 win 260
195: 13:50:07.041074 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746355220 win 16695
196: 13:50:07.150092 10.42.2.140.3389 > 10.42.10.32.52146: P 746355220:746355273(53) ack 695303893 win 260
197: 13:50:07.259340 10.42.2.140.3389 > 10.42.10.32.52146: P 746355273:746355326(53) ack 695303893 win 260
198: 13:50:07.259569 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746355326 win 16668
199: 13:50:07.368541 10.42.2.140.3389 > 10.42.10.32.52146: P 746355326:746355379(53) ack 695303893 win 260
200: 13:50:07.477789 10.42.2.140.3389 > 10.42.10.32.52146: P 746355379:746355432(53) ack 695303893 win 260
201: 13:50:07.477972 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746355432 win 16642
202: 13:50:07.586975 10.42.2.140.3389 > 10.42.10.32.52146: P 746355432:746355485(53) ack 695303893 win 260
203: 13:50:07.696268 10.42.2.140.3389 > 10.42.10.32.52146: P 746355485:746355538(53) ack 695303893 win 260
204: 13:50:07.696436 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746355538 win 16615
205: 13:50:07.805393 10.42.2.140.3389 > 10.42.10.32.52146: P 746355538:746355591(53) ack 695303893 win 260
206: 13:50:07.914595 10.42.2.140.3389 > 10.42.10.32.52146: P 746355591:746355644(53) ack 695303893 win 260
207: 13:50:07.914778 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746355644 win 16589
208: 13:50:08.023848 10.42.2.140.3389 > 10.42.10.32.52146: P 746355644:746355697(53) ack 695303893 win 260
209: 13:50:08.133065 10.42.2.140.3389 > 10.42.10.32.52146: P 746355697:746355750(53) ack 695303893 win 260
210: 13:50:08.133248 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746355750 win 16562
211: 13:50:08.242327 10.42.2.140.3389 > 10.42.10.32.52146: P 746355750:746355803(53) ack 695303893 win 260
212: 13:50:08.351483 10.42.2.140.3389 > 10.42.10.32.52146: P 746355803:746355856(53) ack 695303893 win 260
213: 13:50:08.351696 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746355856 win 16536
214: 13:50:08.460684 10.42.2.140.3389 > 10.42.10.32.52146: P 746355856:746355909(53) ack 695303893 win 260
215: 13:50:08.569947 10.42.2.140.3389 > 10.42.10.32.52146: P 746355909:746355962(53) ack 695303893 win 260
216: 13:50:08.570176 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746355962 win 16509
217: 13:50:08.679118 10.42.2.140.3389 > 10.42.10.32.52146: P 746355962:746356015(53) ack 695303893 win 260
218: 13:50:08.788411 10.42.2.140.3389 > 10.42.10.32.52146: P 746356015:746356068(53) ack 695303893 win 260
219: 13:50:08.788579 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746356068 win 16483
220: 13:50:08.897536 10.42.2.140.3389 > 10.42.10.32.52146: P 746356068:746356121(53) ack 695303893 win 260
221: 13:50:09.006835 10.42.2.140.3389 > 10.42.10.32.52146: P 746356121:746356174(53) ack 695303893 win 260
222: 13:50:09.007049 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746356174 win 16456
223: 13:50:09.116037 10.42.2.140.3389 > 10.42.10.32.52146: P 746356174:746356227(53) ack 695303893 win 260
224: 13:50:09.225253 10.42.2.140.3389 > 10.42.10.32.52146: P 746356227:746356280(53) ack 695303893 win 260
225: 13:50:09.225436 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746356280 win 16430
226: 13:50:09.334470 10.42.2.140.3389 > 10.42.10.32.52146: P 746356280:746356333(53) ack 695303893 win 260
227: 13:50:09.443672 10.42.2.140.3389 > 10.42.10.32.52146: P 746356333:746356386(53) ack 695303893 win 260
228: 13:50:09.443824 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746356386 win 16403
229: 13:50:09.552888 10.42.2.140.3389 > 10.42.10.32.52146: P 746356386:746356439(53) ack 695303893 win 260
230: 13:50:09.662105 10.42.2.140.3389 > 10.42.10.32.52146: P 746356439:746356492(53) ack 695303893 win 260
231: 13:50:09.662288 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746356492 win 16695
232: 13:50:09.771322 10.42.2.140.3389 > 10.42.10.32.52146: P 746356492:746356545(53) ack 695303893 win 260
233: 13:50:09.880523 10.42.2.140.3389 > 10.42.10.32.52146: P 746356545:746356598(53) ack 695303893 win 260
234: 13:50:09.880707 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746356598 win 16668
235: 13:50:09.989725 10.42.2.140.3389 > 10.42.10.32.52146: P 746356598:746356651(53) ack 695303893 win 260
236: 13:50:10.098978 10.42.2.140.3389 > 10.42.10.32.52146: P 746356651:746356704(53) ack 695303893 win 260
237: 13:50:10.099177 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746356704 win 16642
238: 13:50:10.208302 10.42.2.140.3389 > 10.42.10.32.52146: P 746356704:746356757(53) ack 695303893 win 260
239: 13:50:10.317457 10.42.2.140.3389 > 10.42.10.32.52146: P 746356757:746356810(53) ack 695303893 win 260
240: 13:50:10.317702 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746356810 win 16615
241: 13:50:10.426644 10.42.2.140.3389 > 10.42.10.32.52146: P 746356810:746356863(53) ack 695303893 win 260
242: 13:50:10.535860 10.42.2.140.3389 > 10.42.10.32.52146: P 746356863:746356916(53) ack 695303893 win 260
243: 13:50:10.536074 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746356916 win 16589
244: 13:50:10.645077 10.42.2.140.3389 > 10.42.10.32.52146: P 746356916:746356969(53) ack 695303893 win 260
245: 13:50:10.754294 10.42.2.140.3389 > 10.42.10.32.52146: P 746356969:746357022(53) ack 695303893 win 260
246: 13:50:10.754523 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746357022 win 16562
247: 13:50:10.863495 10.42.2.140.3389 > 10.42.10.32.52146: P 746357022:746357075(53) ack 695303893 win 260
248: 13:50:10.972773 10.42.2.140.3389 > 10.42.10.32.52146: P 746357075:746357128(53) ack 695303893 win 260
249: 13:50:10.972941 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746357128 win 16536
250: 13:50:11.081965 10.42.2.140.3389 > 10.42.10.32.52146: P 746357128:746357181(53) ack 695303893 win 260
251: 13:50:11.191304 10.42.2.140.3389 > 10.42.10.32.52146: P 746357181:746357234(53) ack 695303893 win 260
252: 13:50:11.191442 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746357234 win 16509
253: 13:50:11.300384 10.42.2.140.3389 > 10.42.10.32.52146: P 746357234:746357287(53) ack 695303893 win 260
254: 13:50:11.409570 10.42.2.140.3389 > 10.42.10.32.52146: P 746357287:746357340(53) ack 695303893 win 260
255: 13:50:11.409768 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746357340 win 16483
256: 13:50:11.518848 10.42.2.140.3389 > 10.42.10.32.52146: P 746357340:746357393(53) ack 695303893 win 260
257: 13:50:11.628004 10.42.2.140.3389 > 10.42.10.32.52146: P 746357393:746357446(53) ack 695303893 win 260
258: 13:50:11.628202 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746357446 win 16456
259: 13:50:11.737236 10.42.2.140.3389 > 10.42.10.32.52146: P 746357446:746357499(53) ack 695303893 win 260
260: 13:50:11.846452 10.42.2.140.3389 > 10.42.10.32.52146: P 746357499:746357552(53) ack 695303893 win 260
261: 13:50:11.846605 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746357552 win 16430
262: 13:50:11.955669 10.42.2.140.3389 > 10.42.10.32.52146: P 746357552:746357605(53) ack 695303893 win 260
263: 13:50:12.064907 10.42.2.140.3389 > 10.42.10.32.52146: P 746357605:746357658(53) ack 695303893 win 260
264: 13:50:12.065121 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746357658 win 16403
265: 13:50:12.174109 10.42.2.140.3389 > 10.42.10.32.52146: P 746357658:746357711(53) ack 695303893 win 260
266: 13:50:12.283356 10.42.2.140.3389 > 10.42.10.32.52146: P 746357711:746357764(53) ack 695303893 win 260
267: 13:50:12.283569 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746357764 win 16695
268: 13:50:12.392557 10.42.2.140.3389 > 10.42.10.32.52146: P 746357764:746357817(53) ack 695303893 win 260
269: 13:50:12.501774 10.42.2.140.3389 > 10.42.10.32.52146: P 746357817:746357870(53) ack 695303893 win 260
270: 13:50:12.501927 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746357870 win 16668
271: 13:50:12.610991 10.42.2.140.3389 > 10.42.10.32.52146: P 746357870:746357923(53) ack 695303893 win 260
272: 13:50:12.720192 10.42.2.140.3389 > 10.42.10.32.52146: P 746357923:746357976(53) ack 695303893 win 260
273: 13:50:12.720375 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746357976 win 16642
274: 13:50:12.829394 10.42.2.140.3389 > 10.42.10.32.52146: P 746357976:746358029(53) ack 695303893 win 260
275: 13:50:12.938595 10.42.2.140.3389 > 10.42.10.32.52146: P 746358029:746358082(53) ack 695303893 win 260
276: 13:50:12.938824 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746358082 win 16615
277: 13:50:13.047879 10.42.2.140.3389 > 10.42.10.32.52146: P 746358082:746358135(53) ack 695303893 win 260
278: 13:50:13.157096 10.42.2.140.3389 > 10.42.10.32.52146: P 746358135:746358188(53) ack 695303893 win 260
279: 13:50:13.157294 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746358188 win 16589
280: 13:50:13.266313 10.42.2.140.3389 > 10.42.10.32.52146: P 746358188:746358241(53) ack 695303893 win 260
281: 13:50:13.375499 10.42.2.140.3389 > 10.42.10.32.52146: P 746358241:746358294(53) ack 695303893 win 260
282: 13:50:13.375728 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746358294 win 16562
283: 13:50:13.470526 10.42.10.32.52146 > 10.42.2.140.3389: P 695303893:695303930(37) ack 746358294 win 16562
284: 13:50:13.484899 10.42.2.140.3389 > 10.42.10.32.52146: P 746358294:746358587(293) ack 695303930 win 260
285: 13:50:13.579712 10.42.10.32.52146 > 10.42.2.140.3389: P 695303930:695304047(117) ack 746358587 win 16489
286: 13:50:13.593932 10.42.2.140.3389 > 10.42.10.32.52146: P 746358587:746358656(69) ack 695304047 win 259
287: 13:50:13.718743 10.42.2.140.3389 > 10.42.10.32.52146: P 746358656:746358709(53) ack 695304047 win 259
288: 13:50:13.718972 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746358709 win 16458
289: 13:50:13.827960 10.42.2.140.3389 > 10.42.10.32.52146: P 746358709:746358762(53) ack 695304047 win 259
290: 13:50:13.937161 10.42.2.140.3389 > 10.42.10.32.52146: P 746358762:746358815(53) ack 695304047 win 259
291: 13:50:13.937390 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746358815 win 16432
292: 13:50:14.029753 10.42.10.32.52146 > 10.42.2.140.3389: P 695304047:695304132(85) ack 746358815 win 16432
293: 13:50:14.030653 10.42.2.140.3389 > 10.42.10.32.52146: P 746358815:746358868(53) ack 695304132 win 259
294: 13:50:14.147331 10.42.10.32.52146 > 10.42.2.140.3389: P 695304132:695304249(117) ack 746358868 win 16419
295: 13:50:14.155646 10.42.2.140.3389 > 10.42.10.32.52146: P 746358868:746358921(53) ack 695304249 win 258
296: 13:50:14.280503 10.42.2.140.3389 > 10.42.10.32.52146: P 746358921:746358974(53) ack 695304249 win 258
297: 13:50:14.280701 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746358974 win 16392
298: 13:50:14.389658 10.42.2.140.3389 > 10.42.10.32.52146: P 746358974:746359027(53) ack 695304249 win 258
299: 13:50:14.498875 10.42.2.140.3389 > 10.42.10.32.52146: P 746359027:746359080(53) ack 695304249 win 258
300: 13:50:14.499058 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746359080 win 16695
301: 13:50:14.500553 10.42.10.32.52146 > 10.42.2.140.3389: P 695304249:695304302(53) ack 746359080 win 16695
302: 13:50:14.530093 10.42.2.140.3389 > 10.42.10.32.52146: P 746359080:746359133(53) ack 695304302 win 258
303: 13:50:14.607115 10.42.10.32.52146 > 10.42.2.140.3389: P 695304302:695304403(101) ack 746359133 win 16681
304: 13:50:14.607909 10.42.2.140.3389 > 10.42.10.32.52146: P 746359133:746359186(53) ack 695304403 win 258
305: 13:50:14.732918 10.42.2.140.3389 > 10.42.10.32.52146: P 746359186:746359239(53) ack 695304403 win 258
306: 13:50:14.733116 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746359239 win 16655
307: 13:50:14.842150 10.42.2.140.3389 > 10.42.10.32.52146: P 746359239:746359292(53) ack 695304403 win 258
308: 13:50:14.951336 10.42.2.140.3389 > 10.42.10.32.52146: P 746359292:746359345(53) ack 695304403 win 258
309: 13:50:14.951519 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746359345 win 16628
310: 13:50:15.060589 10.42.2.140.3389 > 10.42.10.32.52146: P 746359345:746359398(53) ack 695304403 win 258
311: 13:50:15.169806 10.42.2.140.3389 > 10.42.10.32.52146: P 746359398:746359451(53) ack 695304403 win 258
312: 13:50:15.169989 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746359451 win 16602
313: 13:50:15.279053 10.42.2.140.3389 > 10.42.10.32.52146: P 746359451:746359504(53) ack 695304403 win 258
314: 13:50:15.388224 10.42.2.140.3389 > 10.42.10.32.52146: P 746359504:746359557(53) ack 695304403 win 258
315: 13:50:15.388407 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746359557 win 16575
316: 13:50:15.497441 10.42.2.140.3389 > 10.42.10.32.52146: P 746359557:746359610(53) ack 695304403 win 258
317: 13:50:15.606673 10.42.2.140.3389 > 10.42.10.32.52146: P 746359610:746359663(53) ack 695304403 win 258
318: 13:50:15.606871 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746359663 win 16549
319: 13:50:15.622236 10.42.10.32.52146 > 10.42.2.140.3389: P 695304403:695304440(37) ack 746359663 win 16549
320: 13:50:15.653515 10.42.2.140.3389 > 10.42.10.32.52146: P 746359663:746359716(53) ack 695304440 win 258
321: 13:50:15.762701 10.42.2.140.3389 > 10.42.10.32.52146: P 746359716:746359769(53) ack 695304440 win 258
322: 13:50:15.762838 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746359769 win 16522
323: 13:50:15.871918 10.42.2.140.3389 > 10.42.10.32.52146: P 746359769:746359822(53) ack 695304440 win 258
324: 13:50:15.981119 10.42.2.140.3389 > 10.42.10.32.52146: P 746359822:746359875(53) ack 695304440 win 258
325: 13:50:15.981318 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746359875 win 16496
326: 13:50:16.090373 10.42.2.140.3389 > 10.42.10.32.52146: P 746359875:746359928(53) ack 695304440 win 258
327: 13:50:16.199605 10.42.2.140.3389 > 10.42.10.32.52146: P 746359928:746359981(53) ack 695304440 win 258
328: 13:50:16.199788 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746359981 win 16469
329: 13:50:16.308776 10.42.2.140.3389 > 10.42.10.32.52146: P 746359981:746360034(53) ack 695304440 win 258
330: 13:50:16.418008 10.42.2.140.3389 > 10.42.10.32.52146: P 746360034:746360087(53) ack 695304440 win 258
331: 13:50:16.418206 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746360087 win 16443
332: 13:50:16.527240 10.42.2.140.3389 > 10.42.10.32.52146: P 746360087:746360140(53) ack 695304440 win 258
333: 13:50:16.636426 10.42.2.140.3389 > 10.42.10.32.52146: P 746360140:746360193(53) ack 695304440 win 258
334: 13:50:16.636624 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746360193 win 16416
335: 13:50:16.745658 10.42.2.140.3389 > 10.42.10.32.52146: P 746360193:746360246(53) ack 695304440 win 258
336: 13:50:16.854859 10.42.2.140.3389 > 10.42.10.32.52146: P 746360246:746360299(53) ack 695304440 win 258
337: 13:50:16.854982 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746360299 win 16390
338: 13:50:16.964061 10.42.2.140.3389 > 10.42.10.32.52146: P 746360299:746360352(53) ack 695304440 win 258
339: 13:50:17.073345 10.42.2.140.3389 > 10.42.10.32.52146: P 746360352:746360405(53) ack 695304440 win 258
340: 13:50:17.073528 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746360405 win 16695
341: 13:50:17.182806 10.42.2.140.3389 > 10.42.10.32.52146: P 746360405:746360458(53) ack 695304440 win 258
342: 13:50:17.291748 10.42.2.140.3389 > 10.42.10.32.52146: P 746360458:746360511(53) ack 695304440 win 258
343: 13:50:17.291946 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746360511 win 16668
344: 13:50:17.400980 10.42.2.140.3389 > 10.42.10.32.52146: P 746360511:746360564(53) ack 695304440 win 258
345: 13:50:17.510166 10.42.2.140.3389 > 10.42.10.32.52146: P 746360564:746360617(53) ack 695304440 win 258
346: 13:50:17.510349 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746360617 win 16642
347: 13:50:17.619367 10.42.2.140.3389 > 10.42.10.32.52146: P 746360617:746360670(53) ack 695304440 win 258
348: 13:50:17.728661 10.42.2.140.3389 > 10.42.10.32.52146: P 746360670:746360723(53) ack 695304440 win 258
349: 13:50:17.728859 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746360723 win 16615
350: 13:50:17.837832 10.42.2.140.3389 > 10.42.10.32.52146: P 746360723:746360776(53) ack 695304440 win 258
351: 13:50:17.947018 10.42.2.140.3389 > 10.42.10.32.52146: P 746360776:746360829(53) ack 695304440 win 258
352: 13:50:17.947201 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746360829 win 16589
353: 13:50:18.056332 10.42.2.140.3389 > 10.42.10.32.52146: P 746360829:746360882(53) ack 695304440 win 258
354: 13:50:18.165488 10.42.2.140.3389 > 10.42.10.32.52146: P 746360882:746360935(53) ack 695304440 win 258
355: 13:50:18.165671 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746360935 win 16562
356: 13:50:18.274720 10.42.2.140.3389 > 10.42.10.32.52146: P 746360935:746360988(53) ack 695304440 win 258
357: 13:50:18.383921 10.42.2.140.3389 > 10.42.10.32.52146: P 746360988:746361041(53) ack 695304440 win 258
358: 13:50:18.384104 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746361041 win 16536
359: 13:50:18.493138 10.42.2.140.3389 > 10.42.10.32.52146: P 746361041:746361094(53) ack 695304440 win 258
360: 13:50:18.602370 10.42.2.140.3389 > 10.42.10.32.52146: P 746361094:746361147(53) ack 695304440 win 258
361: 13:50:18.602568 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746361147 win 16509
362: 13:50:18.711556 10.42.2.140.3389 > 10.42.10.32.52146: P 746361147:746361200(53) ack 695304440 win 258
363: 13:50:18.820758 10.42.2.140.3389 > 10.42.10.32.52146: P 746361200:746361253(53) ack 695304440 win 258
364: 13:50:18.820956 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746361253 win 16483
365: 13:50:18.929990 10.42.2.140.3389 > 10.42.10.32.52146: P 746361253:746361306(53) ack 695304440 win 258
366: 13:50:19.039258 10.42.2.140.3389 > 10.42.10.32.52146: P 746361306:746361359(53) ack 695304440 win 258
367: 13:50:19.039441 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746361359 win 16456
368: 13:50:19.148475 10.42.2.140.3389 > 10.42.10.32.52146: P 746361359:746361412(53) ack 695304440 win 258
369: 13:50:19.257707 10.42.2.140.3389 > 10.42.10.32.52146: P 746361412:746361465(53) ack 695304440 win 258
370: 13:50:19.257829 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746361465 win 16430
371: 13:50:19.366878 10.42.2.140.3389 > 10.42.10.32.52146: P 746361465:746361518(53) ack 695304440 win 258
372: 13:50:19.476095 10.42.2.140.3389 > 10.42.10.32.52146: P 746361518:746361571(53) ack 695304440 win 258
373: 13:50:19.476278 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746361571 win 16403
374: 13:50:19.585327 10.42.2.140.3389 > 10.42.10.32.52146: P 746361571:746361624(53) ack 695304440 win 258
375: 13:50:19.694574 10.42.2.140.3389 > 10.42.10.32.52146: P 746361624:746361677(53) ack 695304440 win 258
376: 13:50:19.694773 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746361677 win 16695
377: 13:50:19.803745 10.42.2.140.3389 > 10.42.10.32.52146: P 746361677:746361730(53) ack 695304440 win 258
378: 13:50:19.912931 10.42.2.140.3389 > 10.42.10.32.52146: P 746361730:746361783(53) ack 695304440 win 258
379: 13:50:19.913053 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746361783 win 16668
380: 13:50:20.022215 10.42.2.140.3389 > 10.42.10.32.52146: P 746361783:746361836(53) ack 695304440 win 258
381: 13:50:20.131447 10.42.2.140.3389 > 10.42.10.32.52146: P 746361836:746361889(53) ack 695304440 win 258
382: 13:50:20.131630 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746361889 win 16642
383: 13:50:20.240679 10.42.2.140.3389 > 10.42.10.32.52146: P 746361889:746361942(53) ack 695304440 win 258
384: 13:50:20.349865 10.42.2.140.3389 > 10.42.10.32.52146: P 746361942:746361995(53) ack 695304440 win 258
385: 13:50:20.350049 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746361995 win 16615
386: 13:50:20.459052 10.42.2.140.3389 > 10.42.10.32.52146: P 746361995:746362048(53) ack 695304440 win 258
387: 13:50:20.568268 10.42.2.140.3389 > 10.42.10.32.52146: P 746362048:746362101(53) ack 695304440 win 258
388: 13:50:20.568436 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746362101 win 16589
389: 13:50:20.677470 10.42.2.140.3389 > 10.42.10.32.52146: P 746362101:746362154(53) ack 695304440 win 258
390: 13:50:20.786732 10.42.2.140.3389 > 10.42.10.32.52146: P 746362154:746362207(53) ack 695304440 win 258
391: 13:50:20.786961 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746362207 win 16562
392: 13:50:20.895934 10.42.2.140.3389 > 10.42.10.32.52146: P 746362207:746362260(53) ack 695304440 win 258
393: 13:50:21.005172 10.42.2.140.3389 > 10.42.10.32.52146: P 746362260:746362313(53) ack 695304440 win 258
394: 13:50:21.005340 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746362313 win 16536
395: 13:50:21.114389 10.42.2.140.3389 > 10.42.10.32.52146: P 746362313:746362366(53) ack 695304440 win 258
396: 13:50:21.223605 10.42.2.140.3389 > 10.42.10.32.52146: P 746362366:746362419(53) ack 695304440 win 258
397: 13:50:21.223743 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746362419 win 16509
398: 13:50:21.332670 10.42.2.140.3389 > 10.42.10.32.52146: P 746362419:746362472(53) ack 695304440 win 258
399: 13:50:21.442054 10.42.2.140.3389 > 10.42.10.32.52146: P 746362472:746362525(53) ack 695304440 win 258
400: 13:50:21.442253 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746362525 win 16483
401: 13:50:21.551271 10.42.2.140.3389 > 10.42.10.32.52146: P 746362525:746362578(53) ack 695304440 win 258
402: 13:50:21.660442 10.42.2.140.3389 > 10.42.10.32.52146: P 746362578:746362631(53) ack 695304440 win 258
403: 13:50:21.660656 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746362631 win 16456
404: 13:50:21.769689 10.42.2.140.3389 > 10.42.10.32.52146: P 746362631:746362684(53) ack 695304440 win 258
405: 13:50:21.878891 10.42.2.140.3389 > 10.42.10.32.52146: P 746362684:746362737(53) ack 695304440 win 258
406: 13:50:21.879104 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746362737 win 16430
407: 13:50:21.988092 10.42.2.140.3389 > 10.42.10.32.52146: P 746362737:746362790(53) ack 695304440 win 258
408: 13:50:22.097361 10.42.2.140.3389 > 10.42.10.32.52146: P 746362790:746362843(53) ack 695304440 win 258
409: 13:50:22.097544 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746362843 win 16403
410: 13:50:22.206578 10.42.2.140.3389 > 10.42.10.32.52146: P 746362843:746362896(53) ack 695304440 win 258
411: 13:50:22.315794 10.42.2.140.3389 > 10.42.10.32.52146: P 746362896:746362949(53) ack 695304440 win 258
412: 13:50:22.315962 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746362949 win 16695
413: 13:50:22.424981 10.42.2.140.3389 > 10.42.10.32.52146: P 746362949:746363002(53) ack 695304440 win 258
414: 13:50:22.534213 10.42.2.140.3389 > 10.42.10.32.52146: P 746363002:746363055(53) ack 695304440 win 258
415: 13:50:22.534396 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746363055 win 16668
416: 13:50:22.643536 10.42.2.140.3389 > 10.42.10.32.52146: P 746363055:746363108(53) ack 695304440 win 258
417: 13:50:22.752631 10.42.2.140.3389 > 10.42.10.32.52146: P 746363108:746363161(53) ack 695304440 win 258
418: 13:50:22.752860 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746363161 win 16642
419: 13:50:22.861863 10.42.2.140.3389 > 10.42.10.32.52146: P 746363161:746363214(53) ack 695304440 win 258
420: 13:50:22.971064 10.42.2.140.3389 > 10.42.10.32.52146: P 746363214:746363267(53) ack 695304440 win 258
421: 13:50:22.971293 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746363267 win 16615
422: 13:50:23.080333 10.42.2.140.3389 > 10.42.10.32.52146: P 746363267:746363320(53) ack 695304440 win 258
423: 13:50:23.189687 10.42.2.140.3389 > 10.42.10.32.52146: P 746363320:746363373(53) ack 695304440 win 258
424: 13:50:23.189870 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746363373 win 16589
425: 13:50:23.298751 10.42.2.140.3389 > 10.42.10.32.52146: P 746363373:746363426(53) ack 695304440 win 258
426: 13:50:23.407968 10.42.2.140.3389 > 10.42.10.32.52146: P 746363426:746363479(53) ack 695304440 win 258
427: 13:50:23.408243 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746363479 win 16562
428: 13:50:23.517154 10.42.2.140.3389 > 10.42.10.32.52146: P 746363479:746363532(53) ack 695304440 win 258
429: 13:50:23.626386 10.42.2.140.3389 > 10.42.10.32.52146: P 746363532:746363585(53) ack 695304440 win 258
430: 13:50:23.626569 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746363585 win 16536
431: 13:50:23.735649 10.42.2.140.3389 > 10.42.10.32.52146: P 746363585:746363638(53) ack 695304440 win 258
432: 13:50:23.844789 10.42.2.140.3389 > 10.42.10.32.52146: P 746363638:746363691(53) ack 695304440 win 258
433: 13:50:23.844988 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746363691 win 16509
434: 13:50:23.954006 10.42.2.140.3389 > 10.42.10.32.52146: P 746363691:746363744(53) ack 695304440 win 258
435: 13:50:24.063274 10.42.2.140.3389 > 10.42.10.32.52146: P 746363744:746363797(53) ack 695304440 win 258
436: 13:50:24.063458 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746363797 win 16483
437: 13:50:24.172567 10.42.2.140.3389 > 10.42.10.32.52146: P 746363797:746363850(53) ack 695304440 win 258
438: 13:50:24.281784 10.42.2.140.3389 > 10.42.10.32.52146: P 746363850:746363903(53) ack 695304440 win 258
439: 13:50:24.281983 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746363903 win 16456
440: 13:50:24.390925 10.42.2.140.3389 > 10.42.10.32.52146: P 746363903:746363956(53) ack 695304440 win 258
441: 13:50:24.500126 10.42.2.140.3389 > 10.42.10.32.52146: P 746363956:746364009(53) ack 695304440 win 258
442: 13:50:24.500309 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746364009 win 16430
443: 13:50:24.609343 10.42.2.140.3389 > 10.42.10.32.52146: P 746364009:746364062(53) ack 695304440 win 258
444: 13:50:24.718544 10.42.2.140.3389 > 10.42.10.32.52146: P 746364062:746364115(53) ack 695304440 win 258
445: 13:50:24.718712 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746364115 win 16403
446: 13:50:24.827792 10.42.2.140.3389 > 10.42.10.32.52146: P 746364115:746364168(53) ack 695304440 win 258
447: 13:50:24.936932 10.42.2.140.3389 > 10.42.10.32.52146: P 746364168:746364221(53) ack 695304440 win 258
448: 13:50:24.937131 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746364221 win 16695
449: 13:50:25.046246 10.42.2.140.3389 > 10.42.10.32.52146: P 746364221:746364274(53) ack 695304440 win 258
450: 13:50:25.155433 10.42.2.140.3389 > 10.42.10.32.52146: P 746364274:746364327(53) ack 695304440 win 258
451: 13:50:25.155631 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746364327 win 16668
452: 13:50:25.264665 10.42.2.140.3389 > 10.42.10.32.52146: P 746364327:746364380(53) ack 695304440 win 258
453: 13:50:25.373897 10.42.2.140.3389 > 10.42.10.32.52146: P 746364380:746364433(53) ack 695304440 win 258
454: 13:50:25.374019 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746364433 win 16642
455: 13:50:25.483083 10.42.2.140.3389 > 10.42.10.32.52146: P 746364433:746364486(53) ack 695304440 win 258
456: 13:50:25.592300 10.42.2.140.3389 > 10.42.10.32.52146: P 746364486:746364539(53) ack 695304440 win 258
457: 13:50:25.592498 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746364539 win 16615
458: 13:50:25.701486 10.42.2.140.3389 > 10.42.10.32.52146: P 746364539:746364592(53) ack 695304440 win 258
459: 13:50:25.810749 10.42.2.140.3389 > 10.42.10.32.52146: P 746364592:746364645(53) ack 695304440 win 258
460: 13:50:25.810947 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746364645 win 16589
461: 13:50:25.919920 10.42.2.140.3389 > 10.42.10.32.52146: P 746364645:746364698(53) ack 695304440 win 258
462: 13:50:26.029188 10.42.2.140.3389 > 10.42.10.32.52146: P 746364698:746364751(53) ack 695304440 win 258
463: 13:50:26.029371 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746364751 win 16562
464: 13:50:26.138405 10.42.2.140.3389 > 10.42.10.32.52146: P 746364751:746364804(53) ack 695304440 win 258
465: 13:50:26.247637 10.42.2.140.3389 > 10.42.10.32.52146: P 746364804:746364857(53) ack 695304440 win 258
466: 13:50:26.247850 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746364857 win 16536
467: 13:50:26.356884 10.42.2.140.3389 > 10.42.10.32.52146: P 746364857:746364910(53) ack 695304440 win 258
468: 13:50:26.466070 10.42.2.140.3389 > 10.42.10.32.52146: P 746364910:746364963(53) ack 695304440 win 258
469: 13:50:26.466269 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746364963 win 16509
470: 13:50:26.575257 10.42.2.140.3389 > 10.42.10.32.52146: P 746364963:746365016(53) ack 695304440 win 258
471: 13:50:26.684473 10.42.2.140.3389 > 10.42.10.32.52146: P 746365016:746365069(53) ack 695304440 win 258
472: 13:50:26.684672 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746365069 win 16483
473: 13:50:26.793690 10.42.2.140.3389 > 10.42.10.32.52146: P 746365069:746365122(53) ack 695304440 win 258
474: 13:50:26.902922 10.42.2.140.3389 > 10.42.10.32.52146: P 746365122:746365175(53) ack 695304440 win 258
475: 13:50:26.903105 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746365175 win 16456
476: 13:50:27.012175 10.42.2.140.3389 > 10.42.10.32.52146: P 746365175:746365228(53) ack 695304440 win 258
477: 13:50:27.121377 10.42.2.140.3389 > 10.42.10.32.52146: P 746365228:746365281(53) ack 695304440 win 258
478: 13:50:27.121575 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746365281 win 16430
479: 13:50:27.230594 10.42.2.140.3389 > 10.42.10.32.52146: P 746365281:746365334(53) ack 695304440 win 258
480: 13:50:27.340894 10.42.2.140.3389 > 10.42.10.32.52146: P 746365334:746365387(53) ack 695304440 win 258
481: 13:50:27.341306 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746365387 win 16403
482: 13:50:27.449027 10.42.2.140.3389 > 10.42.10.32.52146: P 746365387:746365440(53) ack 695304440 win 258
483: 13:50:27.558244 10.42.2.140.3389 > 10.42.10.32.52146: P 746365440:746365493(53) ack 695304440 win 258
484: 13:50:27.558442 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746365493 win 16695
485: 13:50:27.667430 10.42.2.140.3389 > 10.42.10.32.52146: P 746365493:746365546(53) ack 695304440 win 258
486: 13:50:27.776845 10.42.2.140.3389 > 10.42.10.32.52146: P 746365546:746366479(933) ack 695304440 win 258
487: 13:50:27.777074 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746366479 win 16448
488: 13:50:27.885848 10.42.2.140.3389 > 10.42.10.32.52146: P 746366479:746366548(69) ack 695304440 win 258
489: 13:50:27.995050 10.42.2.140.3389 > 10.42.10.32.52146: P 746366548:746366601(53) ack 695304440 win 258
490: 13:50:27.995248 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746366601 win 16418
491: 13:50:28.104425 10.42.2.140.3389 > 10.42.10.32.52146: P 746366601:746366654(53) ack 695304440 win 258
492: 13:50:28.213566 10.42.2.140.3389 > 10.42.10.32.52146: P 746366654:746366707(53) ack 695304440 win 258
493: 13:50:28.213764 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746366707 win 16391
494: 13:50:28.322782 10.42.2.140.3389 > 10.42.10.32.52146: P 746366707:746366760(53) ack 695304440 win 258
495: 13:50:28.431969 10.42.2.140.3389 > 10.42.10.32.52146: P 746366760:746366813(53) ack 695304440 win 258
496: 13:50:28.432167 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746366813 win 16695
497: 13:50:28.541201 10.42.2.140.3389 > 10.42.10.32.52146: P 746366813:746366866(53) ack 695304440 win 258
498: 13:50:28.650387 10.42.2.140.3389 > 10.42.10.32.52146: P 746366866:746366919(53) ack 695304440 win 258
499: 13:50:28.650585 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746366919 win 16668
500: 13:50:28.759711 10.42.2.140.3389 > 10.42.10.32.52146: P 746366919:746366972(53) ack 695304440 win 258
501: 13:50:28.868821 10.42.2.140.3389 > 10.42.10.32.52146: P 746366972:746367025(53) ack 695304440 win 258
502: 13:50:28.869004 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746367025 win 16642
503: 13:50:28.978053 10.42.2.140.3389 > 10.42.10.32.52146: P 746367025:746367078(53) ack 695304440 win 258
504: 13:50:29.087336 10.42.2.140.3389 > 10.42.10.32.52146: P 746367078:746367131(53) ack 695304440 win 258
505: 13:50:29.087519 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746367131 win 16615
506: 13:50:29.196736 10.42.2.140.3389 > 10.42.10.32.52146: P 746367131:746367184(53) ack 695304440 win 258
507: 13:50:29.305755 10.42.2.140.3389 > 10.42.10.32.52146: P 746367184:746367237(53) ack 695304440 win 258
508: 13:50:29.305968 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746367237 win 16589
509: 13:50:29.414926 10.42.2.140.3389 > 10.42.10.32.52146: P 746367237:746367290(53) ack 695304440 win 258
510: 13:50:29.524142 10.42.2.140.3389 > 10.42.10.32.52146: P 746367290:746367343(53) ack 695304440 win 258
511: 13:50:29.524325 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746367343 win 16562
512: 13:50:29.633390 10.42.2.140.3389 > 10.42.10.32.52146: P 746367343:746367396(53) ack 695304440 win 258
513: 13:50:29.742606 10.42.2.140.3389 > 10.42.10.32.52146: P 746367396:746367449(53) ack 695304440 win 258
514: 13:50:29.742805 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746367449 win 16536
515: 13:50:29.851777 10.42.2.140.3389 > 10.42.10.32.52146: P 746367449:746367502(53) ack 695304440 win 258
516: 13:50:29.960979 10.42.2.140.3389 > 10.42.10.32.52146: P 746367502:746367555(53) ack 695304440 win 258
517: 13:50:29.961147 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746367555 win 16509
518: 13:50:30.070247 10.42.2.140.3389 > 10.42.10.32.52146: P 746367555:746367608(53) ack 695304440 win 258
519: 13:50:30.179464 10.42.2.140.3389 > 10.42.10.32.52146: P 746367608:746367661(53) ack 695304440 win 258
520: 13:50:30.179662 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746367661 win 16483
521: 13:50:30.288696 10.42.2.140.3389 > 10.42.10.32.52146: P 746367661:746367714(53) ack 695304440 win 258
522: 13:50:30.397898 10.42.2.140.3389 > 10.42.10.32.52146: P 746367714:746367767(53) ack 695304440 win 258
523: 13:50:30.398111 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746367767 win 16456
524: 13:50:30.507099 10.42.2.140.3389 > 10.42.10.32.52146: P 746367767:746367820(53) ack 695304440 win 258
525: 13:50:30.617186 10.42.2.140.3389 > 10.42.10.32.52146: P 746367820:746367873(53) ack 695304440 win 258
526: 13:50:30.618803 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746367873 win 16430
527: 13:50:30.725533 10.42.2.140.3389 > 10.42.10.32.52146: P 746367873:746367926(53) ack 695304440 win 258
528: 13:50:30.834765 10.42.2.140.3389 > 10.42.10.32.52146: P 746367926:746367979(53) ack 695304440 win 258
529: 13:50:30.834887 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746367979 win 16403
530: 13:50:30.943951 10.42.2.140.3389 > 10.42.10.32.52146: P 746367979:746368032(53) ack 695304440 win 258
531: 13:50:31.053219 10.42.2.140.3389 > 10.42.10.32.52146: P 746368032:746368085(53) ack 695304440 win 258
532: 13:50:31.053448 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746368085 win 16695
533: 13:50:31.162451 10.42.2.140.3389 > 10.42.10.32.52146: P 746368085:746368138(53) ack 695304440 win 258
534: 13:50:31.271683 10.42.2.140.3389 > 10.42.10.32.52146: P 746368138:746368191(53) ack 695304440 win 258
535: 13:50:31.271882 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746368191 win 16668
536: 13:50:31.380854 10.42.2.140.3389 > 10.42.10.32.52146: P 746368191:746368244(53) ack 695304440 win 258
537: 13:50:31.490117 10.42.2.140.3389 > 10.42.10.32.52146: P 746368244:746368297(53) ack 695304440 win 258
538: 13:50:31.490285 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746368297 win 16642
539: 13:50:31.599273 10.42.2.140.3389 > 10.42.10.32.52146: P 746368297:746368350(53) ack 695304440 win 258
540: 13:50:31.708474 10.42.2.140.3389 > 10.42.10.32.52146: P 746368350:746368403(53) ack 695304440 win 258
541: 13:50:31.708673 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746368403 win 16615
542: 13:50:31.817737 10.42.2.140.3389 > 10.42.10.32.52146: P 746368403:746368456(53) ack 695304440 win 258
543: 13:50:31.926938 10.42.2.140.3389 > 10.42.10.32.52146: P 746368456:746368509(53) ack 695304440 win 258
544: 13:50:31.927137 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746368509 win 16589
545: 13:50:32.036161 10.42.2.140.3389 > 10.42.10.32.52146: P 746368509:746368562(53) ack 695304440 win 258
546: 13:50:32.145439 10.42.2.140.3389 > 10.42.10.32.52146: P 746368562:746368615(53) ack 695304440 win 258
547: 13:50:32.145591 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746368615 win 16562
548: 13:50:32.256654 10.42.2.140.3389 > 10.42.10.32.52146: P 746368615:746368668(53) ack 695304440 win 258
549: 13:50:32.363842 10.42.2.140.3389 > 10.42.10.32.52146: P 746368668:746368721(53) ack 695304440 win 258
550: 13:50:32.364025 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746368721 win 16536
551: 13:50:32.473043 10.42.2.140.3389 > 10.42.10.32.52146: P 746368721:746368774(53) ack 695304440 win 258
552: 13:50:32.582230 10.42.2.140.3389 > 10.42.10.32.52146: P 746368774:746368827(53) ack 695304440 win 258
553: 13:50:32.582413 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746368827 win 16509
554: 13:50:32.691446 10.42.2.140.3389 > 10.42.10.32.52146: P 746368827:746368880(53) ack 695304440 win 258
555: 13:50:32.800663 10.42.2.140.3389 > 10.42.10.32.52146: P 746368880:746368933(53) ack 695304440 win 258
556: 13:50:32.800846 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746368933 win 16483
557: 13:50:32.909865 10.42.2.140.3389 > 10.42.10.32.52146: P 746368933:746368986(53) ack 695304440 win 258
558: 13:50:33.019133 10.42.2.140.3389 > 10.42.10.32.52146: P 746368986:746369039(53) ack 695304440 win 258
559: 13:50:33.019377 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746369039 win 16456
560: 13:50:33.128335 10.42.2.140.3389 > 10.42.10.32.52146: P 746369039:746369092(53) ack 695304440 win 258
561: 13:50:33.237567 10.42.2.140.3389 > 10.42.10.32.52146: P 746369092:746369145(53) ack 695304440 win 258
562: 13:50:33.237734 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746369145 win 16430
563: 13:50:33.346768 10.42.2.140.3389 > 10.42.10.32.52146: P 746369145:746369198(53) ack 695304440 win 258
564: 13:50:33.456290 10.42.2.140.3389 > 10.42.10.32.52146: P 746369198:746369987(789) ack 695304440 win 258
565: 13:50:33.456504 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746369987 win 16695
566: 13:50:33.532076 10.42.2.140.3389 > 10.42.10.32.52146: . 746369987:746371247(1260) ack 695304440 win 258
567: 13:50:33.532168 10.42.2.140.3389 > 10.42.10.32.52146: . 746371247:746372507(1260) ack 695304440 win 258
568: 13:50:33.532275 10.42.2.140.3389 > 10.42.10.32.52146: . 746372507:746373767(1260) ack 695304440 win 258
569: 13:50:33.532290 10.42.2.140.3389 > 10.42.10.32.52146: P 746373767:746373768(1) ack 695304440 win 258
570: 13:50:33.532458 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746372507 win 16695
571: 13:50:33.532488 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746373768 win 16695
572: 13:50:33.627775 10.42.2.140.3389 > 10.42.10.32.52146: P 746373768:746374397(629) ack 695304440 win 258
573: 13:50:33.825320 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746374397 win 16537
574: 13:50:33.971019 10.42.2.140.3389 > 10.42.10.32.52146: P 746374397:746374466(69) ack 695304440 win 258
575: 13:50:34.170370 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746374466 win 16520
576: 13:50:35.515888 10.42.2.140.3389 > 10.42.10.32.52146: . 746374466:746375726(1260) ack 695304440 win 258
577: 13:50:35.515918 10.42.2.140.3389 > 10.42.10.32.52146: P 746375726:746376247(521) ack 695304440 win 258
578: 13:50:35.516147 10.42.10.32.52146 > 10.42.2.140.3389: . ack 746376247 win 16695
579: 13:50:57.146492 199.47.216.144.80 > 88.131.56.14.51881: P 2741470349:2741470528(179) ack 1566360331 win 126
580: 13:50:57.344662 199.47.216.144.80 > 88.131.56.14.51881: . ack 1566360545 win 126
580 packets shown

Result of the command: "show cap capo"

18 packets captured

1: 13:45:23.240450 199.47.216.144.80 > 88.131.56.14.51881: P 2741469275:2741469454(179) ack 1566359047 win 126
2: 13:45:23.439308 199.47.216.144.80 > 88.131.56.14.51881: . ack 1566359261 win 126
3: 13:46:19.154471 199.47.216.144.80 > 88.131.56.14.51881: P 2741469454:2741469633(179) ack 1566359261 win 126
4: 13:46:19.352307 199.47.216.144.80 > 88.131.56.14.51881: . ack 1566359475 win 126
5: 13:47:14.508121 199.47.216.144.80 > 88.131.56.14.51881: P 2741469633:2741469812(179) ack 1566359475 win 126
6: 13:47:14.705835 199.47.216.144.80 > 88.131.56.14.51881: . ack 1566359689 win 126
7: 13:48:09.895903 199.47.216.144.80 > 88.131.56.14.51881: P 2741469812:2741469991(179) ack 1566359689 win 126
8: 13:48:10.093912 199.47.216.144.80 > 88.131.56.14.51881: . ack 1566359903 win 126
9: 13:49:05.770483 199.47.216.144.80 > 88.131.56.14.51881: P 2741469991:2741470170(179) ack 1566359903 win 126
10: 13:49:05.968318 199.47.216.144.80 > 88.131.56.14.51881: . ack 1566360117 win 126
11: 13:49:58.375453 4.2.2.2 > 88.131.56.14: icmp: echo reply
12: 13:49:59.372783 4.2.2.2 > 88.131.56.14: icmp: echo reply
13: 13:50:00.371074 4.2.2.2 > 88.131.56.14: icmp: echo reply
14: 13:50:01.369411 4.2.2.2 > 88.131.56.14: icmp: echo reply
15: 13:50:01.699976 199.47.216.144.80 > 88.131.56.14.51881: P 2741470170:2741470349(179) ack 1566360117 win 126
16: 13:50:01.897841 199.47.216.144.80 > 88.131.56.14.51881: . ack 1566360331 win 126
17: 13:50:57.146492 199.47.216.144.80 > 88.131.56.14.51881: P 2741470349:2741470528(179) ack 1566360331 win 126
18: 13:50:57.344662 199.47.216.144.80 > 88.131.56.14.51881: . ack 1566360545 win 126
18 packets shown

http and icmp rules not working

IT Asitis — Thu, 13 Sep 2012 06:11:25 GMT

Does this give you guys any idea of what can be the problem?

/Hilmar

http and icmp rules not working

fs0144733 — Thu, 13 Sep 2012 06:15:13 GMT

Did you try any alternate bowsers? Like Firefox or something?

http and icmp rules not working

IT Asitis — Thu, 13 Sep 2012 07:11:33 GMT

yes - no luck

network and shareing center also says no internet access

I just cant understand how this can work for internal and not the other networks since they are configured in the same way.

http and icmp rules not working

IT Asitis — Thu, 13 Sep 2012 08:17:11 GMT

Now it works.

I added a rule fro DNS (tcp/udp Domain) and then everything started to work

maby it was not needed for internal since the dns server is in that network?

anyway this is solved. Thanks alot for your input guys.

/Hilmar