Wireshark Capture --------------------------------- Frame #312 Frame 312: 128 bytes on wire (1024 bits), 128 bytes captured (1024 bits) on interface \Device\NPF_{9F88D104-5960-41B2-AD70-42539FAF1475}, id 0 Interface id: 0 (\Device\NPF_{9F88D104-5960-41B2-AD70-42539FAF1475}) Interface name: \Device\NPF_{9F88D104-5960-41B2-AD70-42539FAF1475} Interface description: Local Area Connection Encapsulation type: Ethernet (1) Arrival Time: Sep 8, 2020 14:28:24.385475000 India Standard Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1599555504.385475000 seconds [Time delta from previous captured frame: 0.103046000 seconds] [Time delta from previous displayed frame: 0.103046000 seconds] [Time since reference or first frame: 150.767587000 seconds] Frame Number: 312 Frame Length: 128 bytes (1024 bits) Capture Length: 128 bytes (1024 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:tls] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: 02:00:00:00:00:00 (02:00:00:00:00:00), Dst: ASRockIn_1e:f7:5f (d0:50:99:1e:f7:5f) Destination: ASRockIn_1e:f7:5f (d0:50:99:1e:f7:5f) Address: ASRockIn_1e:f7:5f (d0:50:99:1e:f7:5f) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: 02:00:00:00:00:00 (02:00:00:00:00:00) Address: 02:00:00:00:00:00 (02:00:00:00:00:00) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.33, Dst: 192.168.1.34 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 114 Identification: 0x006e (110) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: TCP (6) Header checksum: 0x3784 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.33 Destination: 192.168.1.34 Transmission Control Protocol, Src Port: 52032, Dst Port: 8883, Seq: 6649, Ack: 2878, Len: 74 Source Port: 52032 Destination Port: 8883 [Stream index: 0] [TCP Segment Len: 74] Sequence number: 6649 (relative sequence number) Sequence number (raw): 13158 [Next sequence number: 6723 (relative sequence number)] Acknowledgment number: 2878 (relative ack number) Acknowledgment number (raw): 1810031797 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 1534 [Calculated window size: 1534] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x2b99 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 311] [The RTT to ACK the segment was: 0.103046000 seconds] [iRTT: 0.083492000 seconds] [Bytes in flight: 74] [Bytes sent since last PSH flag: 74] [Timestamps] [Time since first frame in this TCP stream: 145.124480000 seconds] [Time since previous frame in this TCP stream: 0.103046000 seconds] TCP payload (74 bytes) Transport Layer Security TLSv1.2 Record Layer: Application Data Protocol: mqtt Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 36 Encrypted Application Data: 000000000000004d90af9c3ec1457a89558feecfbff40e2a… TLSv1.2 Record Layer: Application Data Protocol: mqtt Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 28 Encrypted Application Data: 000000000000004e3f91a3027bffd2a83a03edcb2280bec3… Frame #313 Frame 313: 54 bytes on wire (432 bits), 54 bytes captured (432 bits) on interface \Device\NPF_{9F88D104-5960-41B2-AD70-42539FAF1475}, id 0 Interface id: 0 (\Device\NPF_{9F88D104-5960-41B2-AD70-42539FAF1475}) Interface name: \Device\NPF_{9F88D104-5960-41B2-AD70-42539FAF1475} Interface description: Local Area Connection Encapsulation type: Ethernet (1) Arrival Time: Sep 8, 2020 14:28:24.586886000 India Standard Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1599555504.586886000 seconds [Time delta from previous captured frame: 0.201411000 seconds] [Time delta from previous displayed frame: 0.201411000 seconds] [Time since reference or first frame: 150.968998000 seconds] Frame Number: 313 Frame Length: 54 bytes (432 bits) Capture Length: 54 bytes (432 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ASRockIn_1e:f7:5f (d0:50:99:1e:f7:5f), Dst: 02:00:00:00:00:00 (02:00:00:00:00:00) Destination: 02:00:00:00:00:00 (02:00:00:00:00:00) Address: 02:00:00:00:00:00 (02:00:00:00:00:00) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: ASRockIn_1e:f7:5f (d0:50:99:1e:f7:5f) Address: ASRockIn_1e:f7:5f (d0:50:99:1e:f7:5f) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.34, Dst: 192.168.1.33 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 40 Identification: 0x7818 (30744) Flags: 0x4000, Don't fragment 0... .... .... .... = Reserved bit: Not set .1.. .... .... .... = Don't fragment: Set ..0. .... .... .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x0000 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.34 Destination: 192.168.1.33 Transmission Control Protocol, Src Port: 8883, Dst Port: 52032, Seq: 2878, Ack: 6723, Len: 0 Source Port: 8883 Destination Port: 52032 [Stream index: 0] [TCP Segment Len: 0] Sequence number: 2878 (relative sequence number) Sequence number (raw): 1810031797 [Next sequence number: 2878 (relative sequence number)] Acknowledgment number: 6723 (relative ack number) Acknowledgment number (raw): 13232 0101 .... = Header Length: 20 bytes (5) Flags: 0x010 (ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 0... = Push: Not set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······A····] Window size value: 63600 [Calculated window size: 63600] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x83ae [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 312] [The RTT to ACK the segment was: 0.201411000 seconds] [iRTT: 0.083492000 seconds] [Timestamps] [Time since first frame in this TCP stream: 145.325891000 seconds] [Time since previous frame in this TCP stream: 0.201411000 seconds] Frame #314 Frame 314: 207 bytes on wire (1656 bits), 207 bytes captured (1656 bits) on interface \Device\NPF_{9F88D104-5960-41B2-AD70-42539FAF1475}, id 0 Interface id: 0 (\Device\NPF_{9F88D104-5960-41B2-AD70-42539FAF1475}) Interface name: \Device\NPF_{9F88D104-5960-41B2-AD70-42539FAF1475} Interface description: Local Area Connection Encapsulation type: Ethernet (1) Arrival Time: Sep 8, 2020 14:28:24.636018000 India Standard Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1599555504.636018000 seconds [Time delta from previous captured frame: 0.049132000 seconds] [Time delta from previous displayed frame: 0.049132000 seconds] [Time since reference or first frame: 151.018130000 seconds] Frame Number: 314 Frame Length: 207 bytes (1656 bits) Capture Length: 207 bytes (1656 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:tls] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: 02:00:00:00:00:00 (02:00:00:00:00:00), Dst: ASRockIn_1e:f7:5f (d0:50:99:1e:f7:5f) Destination: ASRockIn_1e:f7:5f (d0:50:99:1e:f7:5f) Address: ASRockIn_1e:f7:5f (d0:50:99:1e:f7:5f) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: 02:00:00:00:00:00 (02:00:00:00:00:00) Address: 02:00:00:00:00:00 (02:00:00:00:00:00) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.33, Dst: 192.168.1.34 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 193 Identification: 0x006f (111) Flags: 0x0000 0... .... .... .... = Reserved bit: Not set .0.. .... .... .... = Don't fragment: Not set ..0. .... .... .... = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: TCP (6) Header checksum: 0x3734 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.33 Destination: 192.168.1.34 Transmission Control Protocol, Src Port: 52032, Dst Port: 8883, Seq: 6723, Ack: 2878, Len: 153 Source Port: 52032 Destination Port: 8883 [Stream index: 0] [TCP Segment Len: 153] Sequence number: 6723 (relative sequence number) Sequence number (raw): 13232 [Next sequence number: 6876 (relative sequence number)] Acknowledgment number: 2878 (relative ack number) Acknowledgment number (raw): 1810031797 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 1534 [Calculated window size: 1534] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x1794 [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [iRTT: 0.083492000 seconds] [Bytes in flight: 153] [Bytes sent since last PSH flag: 153] [Timestamps] [Time since first frame in this TCP stream: 145.375023000 seconds] [Time since previous frame in this TCP stream: 0.049132000 seconds] TCP payload (153 bytes) Transport Layer Security TLSv1.2 Record Layer: Application Data Protocol: mqtt Content Type: Application Data (23) Version: TLS 1.2 (0x0303) Length: 28 Encrypted Application Data: 000000000000004e3f91a3027bffd2a83a03edcb2280bec3… Ignored Unknown Record [Expert Info (Warning/Protocol): Ignored Unknown Record] [Ignored Unknown Record] [Severity level: Warning] [Group: Protocol] Frame #315 Frame 315: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface \Device\NPF_{9F88D104-5960-41B2-AD70-42539FAF1475}, id 0 Interface id: 0 (\Device\NPF_{9F88D104-5960-41B2-AD70-42539FAF1475}) Interface name: \Device\NPF_{9F88D104-5960-41B2-AD70-42539FAF1475} Interface description: Local Area Connection Encapsulation type: Ethernet (1) Arrival Time: Sep 8, 2020 14:28:24.636179000 India Standard Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1599555504.636179000 seconds [Time delta from previous captured frame: 0.000161000 seconds] [Time delta from previous displayed frame: 0.000161000 seconds] [Time since reference or first frame: 151.018291000 seconds] Frame Number: 315 Frame Length: 85 bytes (680 bits) Capture Length: 85 bytes (680 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:tls] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ASRockIn_1e:f7:5f (d0:50:99:1e:f7:5f), Dst: 02:00:00:00:00:00 (02:00:00:00:00:00) Destination: 02:00:00:00:00:00 (02:00:00:00:00:00) Address: 02:00:00:00:00:00 (02:00:00:00:00:00) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: ASRockIn_1e:f7:5f (d0:50:99:1e:f7:5f) Address: ASRockIn_1e:f7:5f (d0:50:99:1e:f7:5f) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.34, Dst: 192.168.1.33 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 71 Identification: 0x7819 (30745) Flags: 0x4000, Don't fragment 0... .... .... .... = Reserved bit: Not set .1.. .... .... .... = Don't fragment: Set ..0. .... .... .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x0000 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.34 Destination: 192.168.1.33 Transmission Control Protocol, Src Port: 8883, Dst Port: 52032, Seq: 2878, Ack: 6876, Len: 31 Source Port: 8883 Destination Port: 52032 [Stream index: 0] [TCP Segment Len: 31] Sequence number: 2878 (relative sequence number) Sequence number (raw): 1810031797 [Next sequence number: 2909 (relative sequence number)] Acknowledgment number: 6876 (relative ack number) Acknowledgment number (raw): 13385 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 63447 [Calculated window size: 63447] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x83cd [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 314] [The RTT to ACK the segment was: 0.000161000 seconds] [iRTT: 0.083492000 seconds] [Bytes in flight: 31] [Bytes sent since last PSH flag: 31] [Timestamps] [Time since first frame in this TCP stream: 145.375184000 seconds] [Time since previous frame in this TCP stream: 0.000161000 seconds] TCP payload (31 bytes) Transport Layer Security TLSv1.2 Record Layer: Encrypted Alert Content Type: Alert (21) Version: TLS 1.2 (0x0303) Length: 26 Alert Message: Encrypted Alert Frame #316 Frame 315: 85 bytes on wire (680 bits), 85 bytes captured (680 bits) on interface \Device\NPF_{9F88D104-5960-41B2-AD70-42539FAF1475}, id 0 Interface id: 0 (\Device\NPF_{9F88D104-5960-41B2-AD70-42539FAF1475}) Interface name: \Device\NPF_{9F88D104-5960-41B2-AD70-42539FAF1475} Interface description: Local Area Connection Encapsulation type: Ethernet (1) Arrival Time: Sep 8, 2020 14:28:24.636179000 India Standard Time [Time shift for this packet: 0.000000000 seconds] Epoch Time: 1599555504.636179000 seconds [Time delta from previous captured frame: 0.000161000 seconds] [Time delta from previous displayed frame: 0.000161000 seconds] [Time since reference or first frame: 151.018291000 seconds] Frame Number: 315 Frame Length: 85 bytes (680 bits) Capture Length: 85 bytes (680 bits) [Frame is marked: False] [Frame is ignored: False] [Protocols in frame: eth:ethertype:ip:tcp:tls] [Coloring Rule Name: TCP] [Coloring Rule String: tcp] Ethernet II, Src: ASRockIn_1e:f7:5f (d0:50:99:1e:f7:5f), Dst: 02:00:00:00:00:00 (02:00:00:00:00:00) Destination: 02:00:00:00:00:00 (02:00:00:00:00:00) Address: 02:00:00:00:00:00 (02:00:00:00:00:00) .... ..1. .... .... .... .... = LG bit: Locally administered address (this is NOT the factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Source: ASRockIn_1e:f7:5f (d0:50:99:1e:f7:5f) Address: ASRockIn_1e:f7:5f (d0:50:99:1e:f7:5f) .... ..0. .... .... .... .... = LG bit: Globally unique address (factory default) .... ...0 .... .... .... .... = IG bit: Individual address (unicast) Type: IPv4 (0x0800) Internet Protocol Version 4, Src: 192.168.1.34, Dst: 192.168.1.33 0100 .... = Version: 4 .... 0101 = Header Length: 20 bytes (5) Differentiated Services Field: 0x00 (DSCP: CS0, ECN: Not-ECT) 0000 00.. = Differentiated Services Codepoint: Default (0) .... ..00 = Explicit Congestion Notification: Not ECN-Capable Transport (0) Total Length: 71 Identification: 0x7819 (30745) Flags: 0x4000, Don't fragment 0... .... .... .... = Reserved bit: Not set .1.. .... .... .... = Don't fragment: Set ..0. .... .... .... = More fragments: Not set Fragment offset: 0 Time to live: 128 Protocol: TCP (6) Header checksum: 0x0000 [validation disabled] [Header checksum status: Unverified] Source: 192.168.1.34 Destination: 192.168.1.33 Transmission Control Protocol, Src Port: 8883, Dst Port: 52032, Seq: 2878, Ack: 6876, Len: 31 Source Port: 8883 Destination Port: 52032 [Stream index: 0] [TCP Segment Len: 31] Sequence number: 2878 (relative sequence number) Sequence number (raw): 1810031797 [Next sequence number: 2909 (relative sequence number)] Acknowledgment number: 6876 (relative ack number) Acknowledgment number (raw): 13385 0101 .... = Header Length: 20 bytes (5) Flags: 0x018 (PSH, ACK) 000. .... .... = Reserved: Not set ...0 .... .... = Nonce: Not set .... 0... .... = Congestion Window Reduced (CWR): Not set .... .0.. .... = ECN-Echo: Not set .... ..0. .... = Urgent: Not set .... ...1 .... = Acknowledgment: Set .... .... 1... = Push: Set .... .... .0.. = Reset: Not set .... .... ..0. = Syn: Not set .... .... ...0 = Fin: Not set [TCP Flags: ·······AP···] Window size value: 63447 [Calculated window size: 63447] [Window size scaling factor: -2 (no window scaling used)] Checksum: 0x83cd [unverified] [Checksum Status: Unverified] Urgent pointer: 0 [SEQ/ACK analysis] [This is an ACK to the segment in frame: 314] [The RTT to ACK the segment was: 0.000161000 seconds] [iRTT: 0.083492000 seconds] [Bytes in flight: 31] [Bytes sent since last PSH flag: 31] [Timestamps] [Time since first frame in this TCP stream: 145.375184000 seconds] [Time since previous frame in this TCP stream: 0.000161000 seconds] TCP payload (31 bytes) Transport Layer Security TLSv1.2 Record Layer: Encrypted Alert Content Type: Alert (21) Version: TLS 1.2 (0x0303) Length: 26 Alert Message: Encrypted Alert