hala daha devam eden ve özellikle belirttiğimiz halde salaya botnet gönderen arkadaşa teşekkürü borç biliyoruz ortalama dakikada 100-150k gelen botları için teşekkürler




Alıntı

05:00:52.006701 IP (tos 0x0, ttl 117, id 637, offset 0, flags [DF], proto TCP (6), length 580)
95.6.44.213.51979 > 178.20.231.2.http: Flags [P.], cksum 0x381c (correct), seq 18403:18943, ack 26657, win 16502, length 540
05:00:52.006902 IP (tos 0x0, ttl 64, id 10540, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51979: Flags [P.], cksum 0x281d (incorrect -> 0xc0d3), seq 26657:27441, ack 18943, win 501, length 784
05:00:52.038479 IP (tos 0x0, ttl 117, id 638, offset 0, flags [DF], proto TCP (6), length 581)
95.6.44.213.51979 > 178.20.231.2.http: Flags [P.], cksum 0x0808 (correct), seq 18943:19484, ack 27441, win 16698, length 541
05:00:52.038669 IP (tos 0x0, ttl 64, id 10541, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51979: Flags [P.], cksum 0x281d (incorrect -> 0xbba6), seq 27441:28225, ack 19484, win 501, length 784
05:00:52.048645 IP (tos 0x0, ttl 118, id 8946, offset 0, flags [DF], proto TCP (6), length 52)
88.254.201.179.58100 > 178.20.231.2.http: Flags [S], cksum 0x781c (correct), seq 1803406454, win 8192, options [mss 1452,nop,wscale 2,nop,nop,sackOK], length 0
05:00:52.048733 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 52)
178.20.231.2.http > 88.254.201.179.58100: Flags [S.], cksum 0x84a7 (correct), seq 3536521091, ack 1803406455, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
05:00:52.058444 IP (tos 0x0, ttl 118, id 8947, offset 0, flags [DF], proto TCP (6), length 40)
88.254.201.179.58100 > 178.20.231.2.http: Flags [.], cksum 0xbd47 (correct), seq 1, ack 1, win 16698, length 0
05:00:52.066396 IP (tos 0x0, ttl 118, id 8948, offset 0, flags [DF], proto TCP (6), length 643)
88.254.201.179.58100 > 178.20.231.2.http: Flags [P.], cksum 0xf7e8 (correct), seq 1:604, ack 1, win 16698, length 603
05:00:52.066457 IP (tos 0x0, ttl 64, id 9089, offset 0, flags [DF], proto TCP (6), length 40)
178.20.231.2.http > 88.254.201.179.58100: Flags [.], cksum 0xfbaa (correct), seq 1, ack 604, win 124, length 0
05:00:52.066628 IP (tos 0x0, ttl 64, id 9090, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 88.254.201.179.58100: Flags [P.], cksum 0xbef3 (incorrect -> 0x604a), seq 1:785, ack 604, win 124, length 784
05:00:52.069766 IP (tos 0x0, ttl 117, id 639, offset 0, flags [DF], proto TCP (6), length 583)
95.6.44.213.51979 > 178.20.231.2.http: Flags [P.], cksum 0x4ce7 (correct), seq 19484:20027, ack 28225, win 16502, length 543
05:00:52.069942 IP (tos 0x0, ttl 64, id 10542, offset 0, flags [DF], proto TCP (6), length 819)
178.20.231.2.http > 95.6.44.213.51979: Flags [P.], cksum 0x2818 (incorrect -> 0x6b96), seq 28225:29004, ack 20027, win 501, length 779
05:00:52.069986 IP (tos 0x0, ttl 64, id 10543, offset 0, flags [DF], proto TCP (6), length 40)
178.20.231.2.http > 95.6.44.213.51979: Flags [F.], cksum 0x4ecc (correct), seq 29004, ack 20027, win 501, length 0
05:00:52.092333 IP (tos 0x0, ttl 117, id 640, offset 0, flags [DF], proto TCP (6), length 40)
95.6.44.213.51979 > 178.20.231.2.http: Flags [.], cksum 0x0f87 (correct), seq 20027, ack 29005, win 16698, length 0
05:00:52.093793 IP (tos 0x0, ttl 117, id 641, offset 0, flags [DF], proto TCP (6), length 40)
95.6.44.213.51979 > 178.20.231.2.http: Flags [F.], cksum 0x0f86 (correct), seq 20027, ack 29005, win 16698, length 0
05:00:52.093843 IP (tos 0x0, ttl 64, id 10544, offset 0, flags [DF], proto TCP (6), length 40)
178.20.231.2.http > 95.6.44.213.51979: Flags [.], cksum 0x4ecb (correct), seq 29005, ack 20028, win 501, length 0
05:00:52.095341 IP (tos 0x0, ttl 117, id 642, offset 0, flags [DF], proto TCP (6), length 52)
95.6.44.213.51980 > 178.20.231.2.http: Flags [S], cksum 0xf3a4 (correct), seq 3322979609, win 8192, options [mss 1452,nop,wscale 2,nop,nop,sackOK], length 0
05:00:52.095414 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto TCP (6), length 52)
178.20.231.2.http > 95.6.44.213.51980: Flags [S.], cksum 0xa0bc (correct), seq 615650576, ack 3322979610, win 14600, options [mss 1460,nop,nop,sackOK,nop,wscale 7], length 0
05:00:52.109592 IP (tos 0x0, ttl 117, id 643, offset 0, flags [DF], proto TCP (6), length 40)
95.6.44.213.51980 > 178.20.231.2.http: Flags [.], cksum 0xd95c (correct), seq 1, ack 1, win 16698, length 0
05:00:52.139120 IP (tos 0x0, ttl 117, id 644, offset 0, flags [DF], proto TCP (6), length 578)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0x621f (correct), seq 1:539, ack 1, win 16698, length 538
05:00:52.139179 IP (tos 0x0, ttl 64, id 12585, offset 0, flags [DF], proto TCP (6), length 40)
178.20.231.2.http > 95.6.44.213.51980: Flags [.], cksum 0x1802 (correct), seq 1, ack 539, win 123, length 0
05:00:52.139351 IP (tos 0x0, ttl 64, id 12586, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x7ca1), seq 1:785, ack 539, win 123, length 784
05:00:52.226822 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 178.20.231.60 tell 178.20.231.1, length 46
05:00:52.239488 IP (tos 0x0, ttl 117, id 648, offset 0, flags [DF], proto TCP (6), length 586)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0xfa93 (correct), seq 539:1085, ack 785, win 16502, length 546
05:00:52.239748 IP (tos 0x0, ttl 64, id 12587, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x7767), seq 785:1569, ack 1085, win 131, length 784
05:00:52.272273 IP (tos 0x0, ttl 117, id 649, offset 0, flags [DF], proto TCP (6), length 580)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0x3755 (correct), seq 1085:1625, ack 1569, win 16698, length 540
05:00:52.272527 IP (tos 0x0, ttl 64, id 12588, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x7232), seq 1569:2353, ack 1625, win 140, length 784
05:00:52.289907 IP (tos 0x0, ttl 64, id 9091, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 88.254.201.179.58100: Flags [P.], cksum 0xbef3 (incorrect -> 0x604a), seq 1:785, ack 604, win 124, length 784
05:00:52.298927 IP (tos 0x0, ttl 118, id 8954, offset 0, flags [DF], proto TCP (6), length 40)
88.254.201.179.58100 > 178.20.231.2.http: Flags [.], cksum 0xb8a0 (correct), seq 604, ack 785, win 16502, length 0
05:00:52.304001 IP (tos 0x0, ttl 117, id 650, offset 0, flags [DF], proto TCP (6), length 581)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0x61b6 (correct), seq 1625:2166, ack 2353, win 16502, length 541
05:00:52.304224 IP (tos 0x0, ttl 64, id 12589, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x6cfc), seq 2353:3137, ack 2166, win 149, length 784
05:00:52.312421 IP (tos 0x0, ttl 118, id 8957, offset 0, flags [DF], proto TCP (6), length 52)
88.254.201.179.58100 > 178.20.231.2.http: Flags [.], cksum 0xcad9 (correct), seq 604, ack 785, win 16502, options [nop,nop,sack 1 {1:785}], length 0
05:00:52.338847 IP (tos 0x0, ttl 117, id 651, offset 0, flags [DF], proto TCP (6), length 585)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0x3623 (correct), seq 2166:2711, ack 3137, win 16698, length 545
05:00:52.339144 IP (tos 0x0, ttl 64, id 12590, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x67c3), seq 3137:3921, ack 2711, win 157, length 784
05:00:52.370613 IP (tos 0x0, ttl 117, id 652, offset 0, flags [DF], proto TCP (6), length 582)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0xfb80 (correct), seq 2711:3253, ack 3921, win 16502, length 542
05:00:52.370881 IP (tos 0x0, ttl 64, id 12591, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x628c), seq 3921:4705, ack 3253, win 166, length 784
05:00:52.403309 IP (tos 0x0, ttl 117, id 653, offset 0, flags [DF], proto TCP (6), length 577)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0x0439 (correct), seq 3253:3790, ack 4705, win 16698, length 537
05:00:52.403579 IP (tos 0x0, ttl 64, id 12592, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x5d5b), seq 4705:5489, ack 3790, win 174, length 784
05:00:52.438052 IP (tos 0x0, ttl 117, id 654, offset 0, flags [DF], proto TCP (6), length 577)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0x0688 (correct), seq 3790:4327, ack 5489, win 16502, length 537
05:00:52.438310 IP (tos 0x0, ttl 64, id 12593, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x5829), seq 5489:6273, ack 4327, win 183, length 784
05:00:52.469919 IP (tos 0x0, ttl 64, id 47344, offset 0, flags [DF], proto TCP (6), length 60)
178.20.231.2.50247 > 95.173.188.26.http: Flags [S], cksum 0x01f9 (correct), seq 435508197, win 14600, options [mss 1460,sackOK,TS val 861601 ecr 0,nop,wscale 7], length 0
05:00:52.470120 IP (tos 0x0, ttl 117, id 655, offset 0, flags [DF], proto TCP (6), length 579)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0xae4e (correct), seq 4327:4866, ack 6273, win 16698, length 539
05:00:52.470312 IP (tos 0x0, ttl 64, id 12594, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x52f6), seq 6273:7057, ack 4866, win 191, length 784
05:00:52.501080 IP (tos 0x0, ttl 117, id 656, offset 0, flags [DF], proto TCP (6), length 582)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0xdf1c (correct), seq 4866:5408, ack 7057, win 16502, length 542
05:00:52.501172 IP (tos 0x0, ttl 64, id 12595, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x4dc0), seq 7057:7841, ack 5408, win 199, length 784
05:00:52.501838 IP (tos 0x0, ttl 64, id 38989, offset 0, flags [DF], proto TCP (6), length 8440)
178.20.231.2.http > 94.122.69.235.18091: Flags [.], cksum 0x5e67 (incorrect -> 0x9662), seq 3993815494:3993823894, ack 983909216, win 124, length 8400
05:00:52.501851 IP (tos 0x0, ttl 64, id 38995, offset 0, flags [DF], proto TCP (6), length 430)
178.20.231.2.http > 94.122.69.235.18091: Flags [P.], cksum 0x3f1d (incorrect -> 0x4d8c), seq 8400:8790, ack 1, win 124, length 390
05:00:52.513219 IP (tos 0x0, ttl 64, id 9675, offset 0, flags [DF], proto UDP (17), length 58)
178.20.231.2.40647 > 208.67.222.222.domain: [bad udp cksum 23c1!] 39591+ A? whmcslab.com. (30)
05:00:52.513233 IP (tos 0x0, ttl 64, id 9676, offset 0, flags [DF], proto UDP (17), length 58)
178.20.231.2.40647 > 208.67.222.222.domain: [bad udp cksum 368d!] 52857+ AAAA? whmcslab.com. (30)
05:00:52.515854 IP (tos 0x0, ttl 64, id 6177, offset 0, flags [DF], proto TCP (6), length 60)
178.20.231.2.50248 > 95.173.188.26.http: Flags [S], cksum 0xc970 (correct), seq 3003708202, win 14600, options [mss 1460,sackOK,TS val 861647 ecr 0,nop,wscale 7], length 0
05:00:52.538044 IP (tos 0x0, ttl 117, id 657, offset 0, flags [DF], proto TCP (6), length 581)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0x5491 (correct), seq 5408:5949, ack 7841, win 16698, length 541
05:00:52.538171 IP (tos 0x0, ttl 64, id 12596, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x488a), seq 7841:8625, ack 5949, win 208, length 784
05:00:52.540406 IP (tos 0x0, ttl 64, id 38996, offset 0, flags [DF], proto TCP (6), length 60)
178.20.231.2.http > 94.122.69.235.18091: Flags [P.], cksum 0x3dab (incorrect -> 0x4fee), seq 8790:8810, ack 1, win 124, length 20
05:00:52.562595 IP (tos 0x0, ttl 51, id 0, offset 0, flags [DF], proto UDP (17), length 74)
208.67.222.222.domain > 178.20.231.2.40647: [udp sum ok] 39591 q: A? whmcslab.com. 1/0/0 whmcslab.com. A 95.173.188.26 (46)
05:00:52.562628 IP (tos 0x0, ttl 51, id 0, offset 0, flags [DF], proto UDP (17), length 128)
208.67.222.222.domain > 178.20.231.2.40647: [udp sum ok] 52857 q: AAAA? whmcslab.com. 0/1/0 ns: whmcslab.com. SOA ns1.whmcslab.com. whmcslab.gmail.com. 2014022508 86400 7200 3600000 86400 (100)
05:00:52.563197 IP (tos 0x0, ttl 64, id 62483, offset 0, flags [DF], proto TCP (6), length 60)
178.20.231.2.50268 > 95.173.188.26.http: Flags [S], cksum 0xd4aa (correct), seq 3368604141, win 14600, options [mss 1460,sackOK,TS val 861694 ecr 0,nop,wscale 7], length 0
05:00:52.570355 IP (tos 0x0, ttl 117, id 658, offset 0, flags [DF], proto TCP (6), length 583)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0x22c7 (correct), seq 5949:6492, ack 8625, win 16502, length 543
05:00:52.570600 IP (tos 0x0, ttl 64, id 12597, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x4353), seq 8625:9409, ack 6492, win 216, length 784
05:00:52.602450 IP (tos 0x0, ttl 117, id 659, offset 0, flags [DF], proto TCP (6), length 581)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0x3b93 (correct), seq 6492:7033, ack 9409, win 16698, length 541
05:00:52.602683 IP (tos 0x0, ttl 64, id 12598, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x3e1d), seq 9409:10193, ack 7033, win 225, length 784
05:00:52.638057 IP (tos 0x0, ttl 117, id 660, offset 0, flags [DF], proto TCP (6), length 579)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0x661c (correct), seq 7033:7572, ack 10193, win 16502, length 539
05:00:52.638141 IP (tos 0x0, ttl 64, id 12599, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x38ea), seq 10193:10977, ack 7572, win 233, length 784
05:00:52.672888 IP (tos 0x0, ttl 117, id 661, offset 0, flags [DF], proto TCP (6), length 584)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0x13e5 (correct), seq 7572:8116, ack 10977, win 16698, length 544
05:00:52.673262 IP (tos 0x0, ttl 64, id 12600, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x33b1), seq 10977:11761, ack 8116, win 242, length 784
05:00:52.704967 IP (tos 0x0, ttl 117, id 662, offset 0, flags [DF], proto TCP (6), length 582)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0xb874 (correct), seq 8116:8658, ack 11761, win 16502, length 542
05:00:52.705326 IP (tos 0x0, ttl 64, id 12601, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x2e7b), seq 11761:12545, ack 8658, win 250, length 784
05:00:52.708889 IP (tos 0x0, ttl 64, id 38997, offset 0, flags [DF], proto TCP (6), length 1440)
178.20.231.2.http > 94.122.69.235.18091: Flags [.], cksum 0x430f (incorrect -> 0xdf52), seq 0:1400, ack 1, win 124, length 1400
05:00:52.730430 IP (tos 0x20, ttl 116, id 8162, offset 0, flags [none], proto ICMP (1), length 60)
95.173.191.72 > 178.20.231.2: ICMP echo request, id 3, seq 10974, length 40
05:00:52.730508 IP (tos 0x20, ttl 64, id 27846, offset 0, flags [none], proto ICMP (1), length 60)
178.20.231.2 > 95.173.191.72: ICMP echo reply, id 3, seq 10974, length 40
05:00:52.738427 IP (tos 0x0, ttl 117, id 663, offset 0, flags [DF], proto TCP (6), length 581)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0xe3c4 (correct), seq 8658:9199, ack 12545, win 16698, length 541
05:00:52.738697 IP (tos 0x0, ttl 64, id 12602, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x2945), seq 12545:13329, ack 9199, win 259, length 784
05:00:52.750920 IP (tos 0x0, ttl 64, id 60298, offset 0, flags [DF], proto TCP (6), length 60)
178.20.231.2.50250 > 95.173.188.26.http: Flags [S], cksum 0xae64 (correct), seq 3098412964, win 14600, options [mss 1460,sackOK,TS val 861882 ecr 0,nop,wscale 7], length 0
05:00:52.760959 IP (tos 0x0, ttl 116, id 7332, offset 0, flags [DF], proto TCP (6), length 48)
78.135.28.21.52224 > 178.20.231.2.https: Flags [S], cksum 0xfe47 (correct), seq 872374141, win 8192, options [mss 1440,nop,nop,sackOK], length 0
05:00:52.770684 IP (tos 0x0, ttl 117, id 664, offset 0, flags [DF], proto TCP (6), length 583)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0x5c48 (correct), seq 9199:9742, ack 13329, win 16502, length 543
05:00:52.770970 IP (tos 0x0, ttl 64, id 12603, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x240e), seq 13329:14113, ack 9742, win 267, length 784
05:00:52.802956 IP (tos 0x0, ttl 117, id 665, offset 0, flags [DF], proto TCP (6), length 579)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0x2e61 (correct), seq 9742:10281, ack 14113, win 16698, length 539
05:00:52.803197 IP (tos 0x0, ttl 64, id 12604, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x1eda), seq 14113:14897, ack 10281, win 276, length 784
05:00:52.838193 IP (tos 0x0, ttl 117, id 666, offset 0, flags [DF], proto TCP (6), length 581)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0xe80c (correct), seq 10281:10822, ack 14897, win 16502, length 541
05:00:52.838434 IP (tos 0x0, ttl 64, id 12605, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x19a5), seq 14897:15681, ack 10822, win 284, length 784
05:00:52.869246 IP (tos 0x0, ttl 117, id 667, offset 0, flags [DF], proto TCP (6), length 578)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0xd620 (correct), seq 10822:11360, ack 15681, win 16698, length 538
05:00:52.869521 IP (tos 0x0, ttl 64, id 12606, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x1472), seq 15681:16465, ack 11360, win 293, length 784
05:00:52.900920 IP (tos 0x0, ttl 117, id 668, offset 0, flags [DF], proto TCP (6), length 585)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0x9b3f (correct), seq 11360:11905, ack 16465, win 16502, length 545
05:00:52.900994 IP (tos 0x0, ttl 64, id 12607, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x0f39), seq 16465:17249, ack 11905, win 301, length 784
05:00:52.911386 ARP, Ethernet (len 6), IPv4 (len 4), Request who-has 178.20.231.82 tell 178.20.231.1, length 46
05:00:52.938927 IP (tos 0x0, ttl 117, id 669, offset 0, flags [DF], proto TCP (6), length 579)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0xce5e (correct), seq 11905:12444, ack 17249, win 16698, length 539
05:00:52.939169 IP (tos 0x0, ttl 64, id 12608, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x0a05), seq 17249:18033, ack 12444, win 310, length 784
05:00:52.979112 IP (tos 0x0, ttl 117, id 671, offset 0, flags [DF], proto TCP (6), length 585)
95.6.44.213.51980 > 178.20.231.2.http: Flags [P.], cksum 0x4a3b (correct), seq 12444:12989, ack 18033, win 16502, length 545
05:00:52.979355 IP (tos 0x0, ttl 64, id 12609, offset 0, flags [DF], proto TCP (6), length 824)
178.20.231.2.http > 95.6.44.213.51980: Flags [P.], cksum 0x281d (incorrect -> 0x04cc), seq 18033:18817, ack 12989, win 318, length 784