On 8/29/22 12:17, David Ferreira wrote:

I tried to capture the http trafic with the following tcpdump:

tcpdump -i any -nn port 80|grep -i http

I am not cool enough to easily grok this kind of output. Please share (a link to) the packet capture file instead (tcpdump -s0 -w filename ...).

Thank you,

Alex.


Notes:
- 1.2.3.4 is the webserver ip
- 10.185.23.202 is the squid machine outbound interface

Here's the results:

Squid 4.15(Working one):

tcpdump -i any -nn port 80 |grep -i http
dropped privs to tcpdump
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked v1), capture size 262144 bytes

17:06:29.784338 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [P.], seq 1:626, ack 1, win 229, options [nop,nop,TS val 2986079115 ecr 3365651782], length 625: HTTP: POST /webserver/index.php HTTP/1.1 17:06:29.820186 IP 1.2.3.4.80 > 10.185.23.202.37490: Flags [P.], seq 1:26, ack 626, win 110, options [nop,nop,TS val 3365651818 ecr 2986079115], length 25: HTTP: HTTP/1.1 100 Continue 17:06:29.820796 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 626:3522, ack 26, win 229, options [nop,nop,TS val 2986079151 ecr 3365651818], length 2896: HTTP 17:06:29.820801 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [P.], seq 3522:4722, ack 26, win 229, options [nop,nop,TS val 2986079151 ecr 3365651818], length 1200: HTTP 17:06:29.820827 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [P.], seq 4722:5006, ack 26, win 229, options [nop,nop,TS val 2986079151 ecr 3365651818], length 284: HTTP 17:06:29.820880 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 5006:7902, ack 26, win 229, options [nop,nop,TS val 2986079151 ecr 3365651818], length 2896: HTTP 17:06:29.820889 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [P.], seq 7902:9102, ack 26, win 229, options [nop,nop,TS val 2986079151 ecr 3365651818], length 1200: HTTP 17:06:29.820909 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [P.], seq 9102:9386, ack 26, win 229, options [nop,nop,TS val 2986079151 ecr 3365651818], length 284: HTTP 17:06:29.821001 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 9386:12282, ack 26, win 229, options [nop,nop,TS val 2986079151 ecr 3365651818], length 2896: HTTP 17:06:29.856418 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 12282:15178, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr 3365651854], length 2896: HTTP 17:06:29.856437 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 15178:18074, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr 3365651854], length 2896: HTTP 17:06:29.856490 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 18074:20970, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr 3365651854], length 2896: HTTP 17:06:29.856495 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 20970:23866, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr 3365651854], length 2896: HTTP 17:06:29.856516 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 23866:25314, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr 3365651854], length 1448: HTTP 17:06:29.856521 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 25314:28210, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr 3365651854], length 2896: HTTP 17:06:29.856525 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 28210:31106, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr 3365651854], length 2896: HTTP 17:06:29.856607 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 31106:34002, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr 3365651854], length 2896: HTTP 17:06:29.856612 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 34002:36898, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr 3365651854], length 2896: HTTP 17:06:29.856634 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 36898:38346, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr 3365651854], length 1448: HTTP 17:06:29.856640 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 38346:41242, ack 26, win 229, options [nop,nop,TS val 2986079187 ecr 3365651854], length 2896: HTTP 17:06:29.892036 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 41242:44138, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr 3365651890], length 2896: HTTP 17:06:29.892051 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 44138:47034, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr 3365651890], length 2896: HTTP 17:06:29.892123 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 47034:49930, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr 3365651890], length 2896: HTTP 17:06:29.892128 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 49930:52826, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr 3365651890], length 2896: HTTP 17:06:29.892150 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 52826:55722, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr 3365651890], length 2896: HTTP 17:06:29.892155 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 55722:58618, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr 3365651890], length 2896: HTTP 17:06:29.892181 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 58618:61514, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr 3365651890], length 2896: HTTP 17:06:29.892190 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 61514:64410, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr 3365651890], length 2896: HTTP 17:06:29.892243 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 64410:67306, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr 3365651890], length 2896: HTTP 17:06:29.892247 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 67306:68754, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr 3365651890], length 1448: HTTP 17:06:29.892252 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 68754:71650, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr 3365651890], length 2896: HTTP 17:06:29.892266 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 71650:74546, ack 26, win 229, options [nop,nop,TS val 2986079222 ecr 3365651890], length 2896: HTTP 17:06:29.892286 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 74546:77442, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr 3365651890], length 2896: HTTP 17:06:29.892291 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 77442:80338, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr 3365651890], length 2896: HTTP 17:06:29.892310 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 80338:83234, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr 3365651890], length 2896: HTTP 17:06:29.892314 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 83234:86130, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr 3365651890], length 2896: HTTP 17:06:29.892334 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 86130:89026, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr 3365651890], length 2896: HTTP 17:06:29.892338 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 89026:91922, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr 3365651890], length 2896: HTTP 17:06:29.892358 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 91922:94818, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr 3365651890], length 2896: HTTP 17:06:29.892362 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 94818:97714, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr 3365651890], length 2896: HTTP 17:06:29.892381 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 97714:99162, ack 26, win 229, options [nop,nop,TS val 2986079223 ecr 3365651890], length 1448: HTTP 17:06:29.927666 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 99162:102058, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651925], length 2896: HTTP 17:06:29.927675 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 102058:104954, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651925], length 2896: HTTP 17:06:29.927706 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 104954:107850, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651925], length 2896: HTTP 17:06:29.927772 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 107850:110746, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651925], length 2896: HTTP 17:06:29.927777 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 110746:113642, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651925], length 2896: HTTP 17:06:29.927797 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 113642:116538, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 2896: HTTP 17:06:29.927801 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 116538:119434, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 2896: HTTP 17:06:29.927820 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 119434:122330, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 2896: HTTP 17:06:29.927824 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 122330:125226, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 2896: HTTP 17:06:29.927844 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 125226:128122, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 2896: HTTP 17:06:29.927848 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 128122:131018, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 2896: HTTP 17:06:29.927876 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 131018:133914, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 2896: HTTP 17:06:29.927886 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 133914:136810, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 2896: HTTP 17:06:29.927902 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 136810:139706, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 2896: HTTP 17:06:29.927907 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 139706:144050, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 4344: HTTP 17:06:29.927925 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 144050:148394, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 4344: HTTP 17:06:29.927945 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 148394:152738, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 4344: HTTP 17:06:29.927949 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 152738:157082, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 4344: HTTP 17:06:29.927970 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 157082:161426, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 4344: HTTP 17:06:29.927975 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 161426:165770, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 4344: HTTP 17:06:29.927993 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 165770:170114, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 4344: HTTP 17:06:29.928018 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 170114:174458, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 4344: HTTP 17:06:29.928023 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 174458:180250, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 5792: HTTP 17:06:29.928027 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 180250:186042, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 5792: HTTP 17:06:29.928065 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 186042:191834, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 5792: HTTP 17:06:29.928069 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 191834:197626, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 5792: HTTP 17:06:29.928090 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 197626:203418, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 5792: HTTP 17:06:29.928095 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 203418:209210, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 5792: HTTP 17:06:29.928115 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 209210:215002, ack 26, win 229, options [nop,nop,TS val 2986079258 ecr 3365651926], length 5792: HTTP 17:06:29.963296 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 215002:220794, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651961], length 5792: HTTP 17:06:29.963393 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 220794:226586, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651961], length 5792: HTTP 17:06:29.963399 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 226586:232378, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651961], length 5792: HTTP 17:06:29.963517 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 232378:238170, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651961], length 5792: HTTP 17:06:29.963532 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 238170:245410, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651961], length 7240: HTTP 17:06:29.963540 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 245410:252650, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651961], length 7240: HTTP 17:06:29.963880 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 252650:259890, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651961], length 7240: HTTP 17:06:29.963892 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 259890:267130, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651961], length 7240: HTTP 17:06:29.963942 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 267130:274370, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651962], length 7240: HTTP 17:06:29.963947 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 274370:280162, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651962], length 5792: HTTP 17:06:29.963955 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 280162:291746, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651962], length 11584: HTTP 17:06:29.963989 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 291746:303330, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651962], length 11584: HTTP 17:06:29.963999 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 303330:314914, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651962], length 11584: HTTP 17:06:29.964021 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 314914:326498, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651962], length 11584: HTTP 17:06:29.964035 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 326498:338082, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651962], length 11584: HTTP 17:06:29.964060 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 338082:345322, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651962], length 7240: HTTP 17:06:29.964067 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 345322:356906, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651962], length 11584: HTTP 17:06:29.964075 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 356906:368490, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651962], length 11584: HTTP 17:06:29.964110 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 368490:380074, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651962], length 11584: HTTP 17:06:29.964118 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 380074:391658, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651962], length 11584: HTTP 17:06:29.964139 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 391658:403242, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651962], length 11584: HTTP 17:06:29.964155 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 403242:410482, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651962], length 7240: HTTP 17:06:29.964161 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 410482:422066, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651962], length 11584: HTTP 17:06:29.964181 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 422066:433650, ack 26, win 229, options [nop,nop,TS val 2986079294 ecr 3365651962], length 11584: HTTP 17:06:29.998905 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 433650:443786, ack 26, win 229, options [nop,nop,TS val 2986079329 ecr 3365651997], length 10136: HTTP 17:06:29.999021 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 443786:455370, ack 26, win 229, options [nop,nop,TS val 2986079329 ecr 3365651997], length 11584: HTTP 17:06:29.999031 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 455370:466954, ack 26, win 229, options [nop,nop,TS val 2986079329 ecr 3365651997], length 11584: HTTP 17:06:29.999056 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 466954:475642, ack 26, win 229, options [nop,nop,TS val 2986079329 ecr 3365651997], length 8688: HTTP 17:06:29.999137 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 475642:487226, ack 26, win 229, options [nop,nop,TS val 2986079329 ecr 3365651997], length 11584: HTTP 17:06:29.999264 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 487226:500258, ack 26, win 229, options [nop,nop,TS val 2986079329 ecr 3365651997], length 13032: HTTP 17:06:29.999272 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 500258:513290, ack 26, win 229, options [nop,nop,TS val 2986079329 ecr 3365651997], length 13032: HTTP 17:06:29.999396 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 513290:521978, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651997], length 8688: HTTP 17:06:29.999507 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 521978:535010, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651997], length 13032: HTTP 17:06:29.999518 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 535010:540802, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651997], length 5792: HTTP 17:06:29.999631 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 540802:555282, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651997], length 14480: HTTP 17:06:29.999648 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 555282:569762, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651997], length 14480: HTTP 17:06:29.999656 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 569762:585690, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651997], length 15928: HTTP 17:06:29.999743 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 585690:601618, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651997], length 15928: HTTP 17:06:29.999752 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 601618:605962, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651997], length 4344: HTTP 17:06:29.999758 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 605962:621890, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651997], length 15928: HTTP 17:06:29.999780 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 621890:639266, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651997], length 17376: HTTP 17:06:29.999791 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 639266:656642, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651997], length 17376: HTTP 17:06:29.999874 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 656642:671122, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651998], length 14480: HTTP 17:06:29.999882 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 671122:689946, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651998], length 18824: HTTP 17:06:29.999889 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 689946:708770, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651998], length 18824: HTTP 17:06:29.999979 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 708770:727594, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651998], length 18824: HTTP 17:06:29.999989 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 727594:736282, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651998], length 8688: HTTP 17:06:30.000016 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 736282:758002, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651998], length 21720: HTTP 17:06:30.000027 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 758002:779722, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651998], length 21720: HTTP 17:06:30.000106 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 779722:801442, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651998], length 21720: HTTP 17:06:30.000224 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 801442:824610, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651998], length 23168: HTTP 17:06:30.000234 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 824610:847778, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651998], length 23168: HTTP 17:06:30.000263 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 847778:866602, ack 26, win 229, options [nop,nop,TS val 2986079330 ecr 3365651998], length 18824: HTTP 17:06:30.000302 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 866602:883978, ack 26, win 229, options [nop,nop,TS val 2986079331 ecr 3365651998], length 17376: HTTP 17:06:30.034540 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 883978:892666, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr 3365652032], length 8688: HTTP 17:06:30.034772 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 892666:917282, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr 3365652032], length 24616: HTTP 17:06:30.034790 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 917282:931762, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr 3365652032], length 14480: HTTP 17:06:30.034803 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 931762:957826, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr 3365652032], length 26064: HTTP 17:06:30.034835 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 957826:983890, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr 3365652033], length 26064: HTTP 17:06:30.034882 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 983890:996922, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr 3365652033], length 13032: HTTP 17:06:30.035003 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 996922:1024434, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr 3365652033], length 27512: HTTP 17:06:30.035033 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1024434:1053394, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr 3365652033], length 28960: HTTP 17:06:30.035122 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1053394:1062082, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr 3365652033], length 8688: HTTP 17:06:30.035243 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1062082:1091042, ack 26, win 229, options [nop,nop,TS val 2986079365 ecr 3365652033], length 28960: HTTP 17:06:30.035296 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1091042:1095386, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr 3365652033], length 4344: HTTP 17:06:30.035373 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1095386:1125794, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr 3365652033], length 30408: HTTP 17:06:30.035395 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1125794:1127242, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr 3365652033], length 1448: HTTP 17:06:30.035409 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1127242:1159098, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr 3365652033], length 31856: HTTP 17:06:30.035489 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1159098:1190954, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr 3365652033], length 31856: HTTP 17:06:30.035496 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1190954:1192402, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr 3365652033], length 1448: HTTP 17:06:30.035524 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1192402:1225706, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr 3365652033], length 33304: HTTP 17:06:30.035608 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1225706:1257562, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr 3365652033], length 31856: HTTP 17:06:30.035731 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1257562:1292314, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr 3365652033], length 34752: HTTP 17:06:30.035744 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1292314:1322722, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr 3365652033], length 30408: HTTP 17:06:30.035860 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1322722:1360370, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr 3365652034], length 37648: HTTP 17:06:30.035875 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1360370:1387882, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr 3365652034], length 27512: HTTP 17:06:30.036092 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1387882:1426978, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr 3365652034], length 39096: HTTP 17:06:30.036112 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1426978:1453042, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr 3365652034], length 26064: HTTP 17:06:30.036210 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1453042:1493586, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr 3365652034], length 40544: HTTP 17:06:30.036226 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1493586:1518202, ack 26, win 229, options [nop,nop,TS val 2986079366 ecr 3365652034], length 24616: HTTP 17:06:30.036298 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1518202:1544266, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr 3365652034], length 26064: HTTP 17:06:30.036348 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1544266:1583362, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr 3365652034], length 39096: HTTP 17:06:30.036451 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1583362:1628250, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr 3365652034], length 44888: HTTP 17:06:30.036500 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1628250:1648522, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr 3365652034], length 20272: HTTP 17:06:30.036567 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1648522:1693410, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr 3365652034], length 44888: HTTP 17:06:30.036584 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1693410:1713682, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr 3365652034], length 20272: HTTP 17:06:30.036698 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1713682:1761466, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr 3365652034], length 47784: HTTP 17:06:30.036748 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1761466:1778842, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr 3365652034], length 17376: HTTP 17:06:30.036754 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1778842:1784634, ack 26, win 229, options [nop,nop,TS val 2986079367 ecr 3365652034], length 5792: HTTP 17:06:30.070180 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1784634:1802010, ack 26, win 229, options [nop,nop,TS val 2986079400 ecr 3365652068], length 17376: HTTP 17:06:30.070368 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1802010:1813594, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr 3365652068], length 11584: HTTP 17:06:30.070497 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1813594:1844002, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr 3365652068], length 30408: HTTP 17:06:30.070635 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1844002:1896130, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr 3365652068], length 52128: HTTP 17:06:30.070673 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1896130:1909162, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr 3365652068], length 13032: HTTP 17:06:30.070748 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1909162:1962738, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr 3365652068], length 53576: HTTP 17:06:30.070851 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1962738:1974322, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr 3365652069], length 11584: HTTP 17:06:30.070875 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 1974322:2029346, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr 3365652069], length 55024: HTTP 17:06:30.070969 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2029346:2039482, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr 3365652069], length 10136: HTTP 17:06:30.071153 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2039482:2095954, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr 3365652069], length 56472: HTTP 17:06:30.071175 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2095954:2104642, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr 3365652069], length 8688: HTTP 17:06:30.071248 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2104642:2162562, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr 3365652069], length 57920: HTTP 17:06:30.071261 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2162562:2169802, ack 26, win 229, options [nop,nop,TS val 2986079401 ecr 3365652069], length 7240: HTTP 17:06:30.071306 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2169802:2195866, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr 3365652069], length 26064: HTTP 17:06:30.071354 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2195866:2234962, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr 3365652069], length 39096: HTTP 17:06:30.071604 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2234962:2297226, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr 3365652069], length 62264: HTTP 17:06:30.071624 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2297226:2300122, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr 3365652069], length 2896: HTTP 17:06:30.071713 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2300122:2363834, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr 3365652069], length 63712: HTTP 17:06:30.071724 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2363834:2365282, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr 3365652069], length 1448: HTTP 17:06:30.071823 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2365282:2430442, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr 3365652070], length 65160: HTTP 17:06:30.071950 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2430442:2495602, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr 3365652070], length 65160: HTTP 17:06:30.072180 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2495602:2560762, ack 26, win 229, options [nop,nop,TS val 2986079402 ecr 3365652070], length 65160: HTTP 17:06:30.072310 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2560762:2604202, ack 26, win 229, options [nop,nop,TS val 2986079403 ecr 3365652070], length 43440: HTTP 17:06:30.072326 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2604202:2625922, ack 26, win 229, options [nop,nop,TS val 2986079403 ecr 3365652070], length 21720: HTTP 17:06:30.072424 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2625922:2691082, ack 26, win 229, options [nop,nop,TS val 2986079403 ecr 3365652070], length 65160: HTTP 17:06:30.072666 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2691082:2756242, ack 26, win 229, options [nop,nop,TS val 2986079403 ecr 3365652070], length 65160: HTTP 17:06:30.072797 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2756242:2821402, ack 26, win 229, options [nop,nop,TS val 2986079403 ecr 3365652070], length 65160: HTTP 17:06:30.072926 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2821402:2886562, ack 26, win 229, options [nop,nop,TS val 2986079403 ecr 3365652071], length 65160: HTTP 17:06:30.073023 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2886562:2951722, ack 26, win 229, options [nop,nop,TS val 2986079403 ecr 3365652071], length 65160: HTTP 17:06:30.073262 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 2951722:3016882, ack 26, win 229, options [nop,nop,TS val 2986079403 ecr 3365652071], length 65160: HTTP 17:06:30.073379 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3016882:3061770, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr 3365652071], length 44888: HTTP 17:06:30.073390 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3061770:3082042, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr 3365652071], length 20272: HTTP 17:06:30.073504 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3082042:3147202, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr 3365652071], length 65160: HTTP 17:06:30.073629 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3147202:3212362, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr 3365652071], length 65160: HTTP 17:06:30.073751 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3212362:3277522, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr 3365652071], length 65160: HTTP 17:06:30.073872 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3277522:3342682, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr 3365652072], length 65160: HTTP 17:06:30.074054 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3342682:3407842, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr 3365652072], length 65160: HTTP 17:06:30.074107 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3407842:3473002, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr 3365652072], length 65160: HTTP 17:06:30.074226 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3473002:3538162, ack 26, win 229, options [nop,nop,TS val 2986079404 ecr 3365652072], length 65160: HTTP 17:06:30.074333 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3538162:3556986, ack 26, win 229, options [nop,nop,TS val 2986079405 ecr 3365652072], length 18824: HTTP 17:06:30.074347 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3556986:3585946, ack 26, win 229, options [nop,nop,TS val 2986079405 ecr 3365652072], length 28960: HTTP 17:06:30.105764 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3585946:3591738, ack 26, win 229, options [nop,nop,TS val 2986079436 ecr 3365652104], length 5792: HTTP 17:06:30.105873 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3591738:3603322, ack 26, win 229, options [nop,nop,TS val 2986079436 ecr 3365652104], length 11584: HTTP 17:06:30.106239 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3603322:3668482, ack 26, win 229, options [nop,nop,TS val 2986079436 ecr 3365652104], length 65160: HTTP 17:06:30.106363 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3668482:3719162, ack 26, win 229, options [nop,nop,TS val 2986079437 ecr 3365652104], length 50680: HTTP 17:06:30.106375 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3719162:3733642, ack 26, win 229, options [nop,nop,TS val 2986079437 ecr 3365652104], length 14480: HTTP 17:06:30.106487 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3733642:3798802, ack 26, win 229, options [nop,nop,TS val 2986079437 ecr 3365652104], length 65160: HTTP 17:06:30.106608 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3798802:3863962, ack 26, win 229, options [nop,nop,TS val 2986079437 ecr 3365652104], length 65160: HTTP 17:06:30.106737 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3863962:3929122, ack 26, win 229, options [nop,nop,TS val 2986079437 ecr 3365652104], length 65160: HTTP 17:06:30.106856 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3929122:3994282, ack 26, win 229, options [nop,nop,TS val 2986079437 ecr 3365652105], length 65160: HTTP 17:06:30.107092 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 3994282:4059442, ack 26, win 229, options [nop,nop,TS val 2986079437 ecr 3365652105], length 65160: HTTP 17:06:30.107204 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 4059442:4124602, ack 26, win 229, options [nop,nop,TS val 2986079437 ecr 3365652105], length 65160: HTTP 17:06:30.107319 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 4124602:4156458, ack 26, win 229, options [nop,nop,TS val 2986079438 ecr 3365652105], length 31856: HTTP 17:06:30.107336 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 4156458:4189762, ack 26, win 229, options [nop,nop,TS val 2986079438 ecr 3365652105], length 33304: HTTP 17:06:30.107449 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [.], seq 4189762:4254922, ack 26, win 229, options [nop,nop,TS val 2986079438 ecr 3365652105], length 65160: HTTP 17:06:30.107671 IP 10.185.23.202.37490 > 1.2.3.4.80: Flags [P.], seq 4254922:4269395, ack 26, win 229, options [nop,nop,TS val 2986079438 ecr 3365652105], length 14473: HTTP 17:06:30.956704 IP 1.2.3.4.80 > 10.185.23.202.37490: Flags [.], seq 26:1474, ack 4269395, win 9881, options [nop,nop,TS val 3365652954 ecr 2986079438], length 1448: HTTP: HTTP/1.1 200 OK

Squid 5.2:

tcpdump -i any -nn port 80 |grep -i http
tcpdump: data link type LINUX_SLL2
dropped privs to tcpdump
tcpdump: verbose output suppressed, use -v[v]... for full protocol decode
listening on any, link-type LINUX_SLL2 (Linux cooked v2), snapshot length 262144 bytes

16:37:18.523520 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 1:625, ack 1, win 502, options [nop,nop,TS val 670563552 ecr 3363900519], length 624: HTTP: POST /webserver/index.php HTTP/1.1 16:37:18.559373 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.56572: Flags [P.], seq 1:26, ack 625, win 110, options [nop,nop,TS val 3363900556 ecr 670563552], length 25: HTTP: HTTP/1.1 100 Continue 16:37:18.560439 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 625:3521, ack 26, win 502, options [nop,nop,TS val 670563589 ecr 3363900556], length 2896: HTTP 16:37:18.560474 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 3521:6417, ack 26, win 502, options [nop,nop,TS val 670563589 ecr 3363900556], length 2896: HTTP 16:37:18.560482 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 6417:7640, ack 26, win 502, options [nop,nop,TS val 670563589 ecr 3363900556], length 1223: HTTP 16:37:18.560516 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 7640:10536, ack 26, win 502, options [nop,nop,TS val 670563589 ecr 3363900556], length 2896: HTTP 16:37:18.560524 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 10536:13432, ack 26, win 502, options [nop,nop,TS val 670563589 ecr 3363900556], length 2896: HTTP 16:37:18.560552 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [.], seq 13432:14880, ack 26, win 502, options [nop,nop,TS val 670563589 ecr 3363900556], length 1448: HTTP 16:37:18.596062 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 14880:17776, ack 26, win 502, options [nop,nop,TS val 670563624 ecr 3363900592], length 2896: HTTP 16:37:18.596084 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 17776:20672, ack 26, win 502, options [nop,nop,TS val 670563624 ecr 3363900592], length 2896: HTTP 16:37:18.596154 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 20672:23568, ack 26, win 502, options [nop,nop,TS val 670563624 ecr 3363900593], length 2896: HTTP 16:37:18.596159 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 23568:26464, ack 26, win 502, options [nop,nop,TS val 670563624 ecr 3363900593], length 2896: HTTP 16:37:18.596264 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [.], seq 26464:27912, ack 26, win 502, options [nop,nop,TS val 670563624 ecr 3363900593], length 1448: HTTP 16:37:18.596271 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 27912:30808, ack 26, win 502, options [nop,nop,TS val 670563624 ecr 3363900593], length 2896: HTTP 16:37:18.596275 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 30808:33704, ack 26, win 502, options [nop,nop,TS val 670563624 ecr 3363900593], length 2896: HTTP 16:37:18.596321 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 33704:36600, ack 26, win 502, options [nop,nop,TS val 670563624 ecr 3363900593], length 2896: HTTP 16:37:18.596333 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 36600:39496, ack 26, win 502, options [nop,nop,TS val 670563624 ecr 3363900593], length 2896: HTTP 16:37:18.596349 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [.], seq 39496:40944, ack 26, win 502, options [nop,nop,TS val 670563625 ecr 3363900593], length 1448: HTTP 16:37:18.631831 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 40944:43840, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 2896: HTTP 16:37:18.631848 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 43840:46736, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 2896: HTTP 16:37:18.631930 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 46736:49632, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 2896: HTTP 16:37:18.631950 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 49632:52528, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 2896: HTTP 16:37:18.631964 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 52528:55424, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 2896: HTTP 16:37:18.631976 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 55424:58320, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 2896: HTTP 16:37:18.632006 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [.], seq 58320:59768, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 1448: HTTP 16:37:18.632012 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 59768:62664, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 2896: HTTP 16:37:18.632015 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 62664:65560, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 2896: HTTP 16:37:18.632042 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 65560:68456, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 2896: HTTP 16:37:18.632050 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 68456:71352, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 2896: HTTP 16:37:18.632072 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 71352:74248, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 2896: HTTP 16:37:18.632078 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 74248:77144, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 2896: HTTP 16:37:18.632098 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 77144:80040, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 2896: HTTP 16:37:18.632105 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 80040:82936, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 2896: HTTP 16:37:18.632126 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 82936:85832, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 2896: HTTP 16:37:18.632133 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 85832:88728, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 2896: HTTP 16:37:18.632153 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 88728:91624, ack 26, win 502, options [nop,nop,TS val 670563660 ecr 3363900628], length 2896: HTTP 16:37:18.667587 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 91624:94520, ack 26, win 502, options [nop,nop,TS val 670563696 ecr 3363900664], length 2896: HTTP 16:37:18.667605 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 94520:97416, ack 26, win 502, options [nop,nop,TS val 670563696 ecr 3363900664], length 2896: HTTP 16:37:18.667681 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 97416:100312, ack 26, win 502, options [nop,nop,TS val 670563696 ecr 3363900664], length 2896: HTTP 16:37:18.667692 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 100312:103208, ack 26, win 502, options [nop,nop,TS val 670563696 ecr 3363900664], length 2896: HTTP 16:37:18.667716 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 103208:106104, ack 26, win 502, options [nop,nop,TS val 670563696 ecr 3363900664], length 2896: HTTP 16:37:18.667722 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 106104:110448, ack 26, win 502, options [nop,nop,TS val 670563696 ecr 3363900664], length 4344: HTTP 16:37:18.667741 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [P.], seq 110448:111896, ack 26, win 502, options [nop,nop,TS val 670563696 ecr 3363900664], length 1448: HTTP 16:37:18.667748 ens224 Out IP 10.185.23.202.56572 > 1.2.3.4.80: Flags [FP.], seq 111896:114340, ack 26, win 502, options [nop,nop,TS val 670563696 ecr 3363900664], length 2444: HTTP 16:37:18.703502 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.56572: Flags [P.], seq 26:81, ack 114341, win 557, options [nop,nop,TS val 3363900700 ecr 670563696], length 55: HTTP: HTTP/1.1 503 Service Unavailable. 16:37:24.675580 ens224 Out IP 10.185.23.202.49786 > 1.2.3.4.80: Flags [P.], seq 1:620, ack 1, win 502, options [nop,nop,TS val 670569704 ecr 3363906672], length 619: HTTP: POST /webserver/index.php HTTP/1.1 16:37:24.711626 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [P.], seq 1:26, ack 620, win 110, options [nop,nop,TS val 3363906708 ecr 670569704], length 25: HTTP: HTTP/1.1 100 Continue 16:37:24.712318 ens224 Out IP 10.185.23.202.49786 > 1.2.3.4.80: Flags [P.], seq 620:1740, ack 26, win 502, options [nop,nop,TS val 670569740 ecr 3363906708], length 1120: HTTP 16:37:24.939742 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 26:1474, ack 1740, win 119, options [nop,nop,TS val 3363906936 ecr 670569740], length 1448: HTTP: HTTP/1.1 200 OK 16:37:24.939852 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 1474:2922, ack 1740, win 119, options [nop,nop,TS val 3363906936 ecr 670569740], length 1448: HTTP 16:37:24.939861 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 2922:4370, ack 1740, win 119, options [nop,nop,TS val 3363906936 ecr 670569740], length 1448: HTTP 16:37:24.939875 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 4370:5818, ack 1740, win 119, options [nop,nop,TS val 3363906936 ecr 670569740], length 1448: HTTP 16:37:24.939885 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 5818:7266, ack 1740, win 119, options [nop,nop,TS val 3363906936 ecr 670569740], length 1448: HTTP 16:37:24.939895 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 7266:8714, ack 1740, win 119, options [nop,nop,TS val 3363906936 ecr 670569740], length 1448: HTTP 16:37:24.939963 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 8714:10162, ack 1740, win 119, options [nop,nop,TS val 3363906936 ecr 670569740], length 1448: HTTP 16:37:24.939972 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 10162:11610, ack 1740, win 119, options [nop,nop,TS val 3363906936 ecr 670569740], length 1448: HTTP 16:37:24.939981 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 11610:13058, ack 1740, win 119, options [nop,nop,TS val 3363906936 ecr 670569740], length 1448: HTTP 16:37:24.939990 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 13058:14506, ack 1740, win 119, options [nop,nop,TS val 3363906936 ecr 670569740], length 1448: HTTP 16:37:24.975855 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 14506:15954, ack 1740, win 119, options [nop,nop,TS val 3363906972 ecr 670569968], length 1448: HTTP 16:37:24.975899 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 15954:17402, ack 1740, win 119, options [nop,nop,TS val 3363906972 ecr 670569968], length 1448: HTTP 16:37:24.975943 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 17402:18850, ack 1740, win 119, options [nop,nop,TS val 3363906972 ecr 670569968], length 1448: HTTP 16:37:24.975946 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 18850:20298, ack 1740, win 119, options [nop,nop,TS val 3363906972 ecr 670569968], length 1448: HTTP 16:37:24.975948 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 20298:21746, ack 1740, win 119, options [nop,nop,TS val 3363906972 ecr 670569968], length 1448: HTTP 16:37:24.975949 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 21746:23194, ack 1740, win 119, options [nop,nop,TS val 3363906972 ecr 670569968], length 1448: HTTP 16:37:24.976058 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 23194:24642, ack 1740, win 119, options [nop,nop,TS val 3363906972 ecr 670569968], length 1448: HTTP 16:37:24.976063 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 24642:26090, ack 1740, win 119, options [nop,nop,TS val 3363906972 ecr 670569968], length 1448: HTTP 16:37:24.976069 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 26090:27538, ack 1740, win 119, options [nop,nop,TS val 3363906972 ecr 670569968], length 1448: HTTP 16:37:24.976072 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 27538:28986, ack 1740, win 119, options [nop,nop,TS val 3363906972 ecr 670569968], length 1448: HTTP 16:37:24.976172 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 28986:30434, ack 1740, win 119, options [nop,nop,TS val 3363906972 ecr 670569968], length 1448: HTTP 16:37:24.976190 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 30434:31882, ack 1740, win 119, options [nop,nop,TS val 3363906972 ecr 670569968], length 1448: HTTP 16:37:24.976292 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 31882:33330, ack 1740, win 119, options [nop,nop,TS val 3363906973 ecr 670569968], length 1448: HTTP 16:37:24.976301 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 33330:34778, ack 1740, win 119, options [nop,nop,TS val 3363906973 ecr 670569968], length 1448: HTTP 16:37:24.976304 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 34778:36226, ack 1740, win 119, options [nop,nop,TS val 3363906973 ecr 670569968], length 1448: HTTP 16:37:24.976306 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 36226:37674, ack 1740, win 119, options [nop,nop,TS val 3363906973 ecr 670569968], length 1448: HTTP 16:37:24.976308 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 37674:39122, ack 1740, win 119, options [nop,nop,TS val 3363906973 ecr 670569968], length 1448: HTTP 16:37:24.976412 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 39122:40570, ack 1740, win 119, options [nop,nop,TS val 3363906973 ecr 670569968], length 1448: HTTP 16:37:24.976418 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [P.], seq 40570:42018, ack 1740, win 119, options [nop,nop,TS val 3363906973 ecr 670569968], length 1448: HTTP 16:37:24.976421 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 42018:43466, ack 1740, win 119, options [nop,nop,TS val 3363906973 ecr 670569968], length 1448: HTTP 16:37:25.011828 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 43466:44914, ack 1740, win 119, options [nop,nop,TS val 3363907008 ecr 670570004], length 1448: HTTP 16:37:25.011864 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 44914:46362, ack 1740, win 119, options [nop,nop,TS val 3363907008 ecr 670570004], length 1448: HTTP 16:37:25.011908 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 46362:47810, ack 1740, win 119, options [nop,nop,TS val 3363907008 ecr 670570004], length 1448: HTTP 16:37:25.011911 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 47810:49258, ack 1740, win 119, options [nop,nop,TS val 3363907008 ecr 670570004], length 1448: HTTP 16:37:25.012052 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 49258:50706, ack 1740, win 119, options [nop,nop,TS val 3363907008 ecr 670570004], length 1448: HTTP 16:37:25.012069 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 50706:52154, ack 1740, win 119, options [nop,nop,TS val 3363907008 ecr 670570004], length 1448: HTTP 16:37:25.012080 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 52154:53602, ack 1740, win 119, options [nop,nop,TS val 3363907008 ecr 670570004], length 1448: HTTP 16:37:25.012091 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 53602:55050, ack 1740, win 119, options [nop,nop,TS val 3363907008 ecr 670570004], length 1448: HTTP 16:37:25.012153 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 55050:56498, ack 1740, win 119, options [nop,nop,TS val 3363907008 ecr 670570004], length 1448: HTTP 16:37:25.012164 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 56498:57946, ack 1740, win 119, options [nop,nop,TS val 3363907008 ecr 670570004], length 1448: HTTP 16:37:25.012180 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 57946:59394, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570004], length 1448: HTTP 16:37:25.012189 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 59394:60842, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570004], length 1448: HTTP 16:37:25.012262 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 60842:62290, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570004], length 1448: HTTP 16:37:25.012275 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [P.], seq 62290:63738, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570004], length 1448: HTTP 16:37:25.012386 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 63738:65186, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012403 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 65186:66634, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012412 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 66634:68082, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012421 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 68082:69530, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012504 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 69530:70978, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012519 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 70978:72426, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012528 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 72426:73874, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012538 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 73874:75322, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012625 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 75322:76770, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012639 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 76770:78218, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012749 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 78218:79666, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012763 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 79666:81114, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012774 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 81114:82562, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012783 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 82562:84010, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012868 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 84010:85458, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012881 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 85458:86906, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012890 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 86906:88354, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012901 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 88354:89802, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.012989 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 89802:91250, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.013003 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 91250:92698, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.013013 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 92698:94146, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.013022 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 94146:95594, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.013109 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 95594:97042, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.013122 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [P.], seq 97042:98490, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.013132 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 98490:99938, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.013140 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 99938:101386, ack 1740, win 119, options [nop,nop,TS val 3363907009 ecr 670570005], length 1448: HTTP 16:37:25.048047 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 101386:102834, ack 1740, win 119, options [nop,nop,TS val 3363907044 ecr 670570040], length 1448: HTTP 16:37:25.048154 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 102834:104282, ack 1740, win 119, options [nop,nop,TS val 3363907044 ecr 670570040], length 1448: HTTP 16:37:25.048163 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 104282:105730, ack 1740, win 119, options [nop,nop,TS val 3363907044 ecr 670570040], length 1448: HTTP 16:37:25.048171 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 105730:107178, ack 1740, win 119, options [nop,nop,TS val 3363907044 ecr 670570040], length 1448: HTTP 16:37:25.048178 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 107178:108626, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570040], length 1448: HTTP 16:37:25.048184 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 108626:110074, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570040], length 1448: HTTP 16:37:25.048298 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 110074:111522, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570040], length 1448: HTTP 16:37:25.048306 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 111522:112970, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570040], length 1448: HTTP 16:37:25.048310 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 112970:114418, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570040], length 1448: HTTP 16:37:25.048318 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 114418:115866, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570040], length 1448: HTTP 16:37:25.048389 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 115866:117314, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570040], length 1448: HTTP 16:37:25.048405 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 117314:118762, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570040], length 1448: HTTP 16:37:25.048515 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 118762:120210, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570040], length 1448: HTTP 16:37:25.048525 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 120210:121658, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570040], length 1448: HTTP 16:37:25.048532 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 121658:123106, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.048536 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 123106:124554, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.048537 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 124554:126002, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.048632 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 126002:127450, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.048642 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 127450:128898, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.048649 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 128898:130346, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.048655 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 130346:131794, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.048661 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 131794:133242, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.048664 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 133242:134690, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.048749 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 134690:136138, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.048760 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 136138:137586, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.048767 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 137586:139034, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.048911 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [P.], seq 139034:140482, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.048920 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 140482:141930, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.048951 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 141930:143378, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.048960 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 143378:144826, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.048993 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [P.], seq 144826:146274, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.048999 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 146274:147722, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.049004 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 147722:149170, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.049010 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 149170:150618, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.049016 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 150618:152066, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.049018 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 152066:153514, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.049020 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 153514:154962, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.049021 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 154962:156410, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.049127 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 156410:157858, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.049137 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 157858:159306, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.049144 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 159306:160754, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.049150 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 160754:162202, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.049152 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 162202:163650, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.049155 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 163650:165098, ack 1740, win 119, options [nop,nop,TS val 3363907045 ecr 670570041], length 1448: HTTP 16:37:25.049239 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 165098:166546, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049249 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 166546:167994, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049255 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 167994:169442, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049258 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 169442:170890, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049259 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 170890:172338, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049261 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 172338:173786, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049355 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 173786:175234, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049365 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 175234:176682, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049373 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 176682:178130, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049377 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 178130:179578, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049378 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 179578:181026, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049473 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 181026:182474, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049478 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 182474:183922, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049480 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 183922:185370, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049482 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 185370:186818, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049594 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 186818:188266, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049601 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 188266:189714, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049605 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 189714:191162, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049607 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 191162:192610, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049609 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 192610:194058, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049611 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 194058:195506, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049724 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 195506:196954, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049727 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 196954:198402, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049729 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [P.], seq 198402:199850, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049731 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 199850:201298, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049734 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 201298:202746, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049736 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 202746:204194, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049840 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 204194:205642, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049845 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 205642:207090, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049847 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 207090:208538, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049850 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 208538:209986, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049851 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 209986:211434, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049959 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 211434:212882, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049969 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 212882:214330, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049971 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 214330:215778, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.049974 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 215778:217226, ack 1740, win 119, options [nop,nop,TS val 3363907046 ecr 670570041], length 1448: HTTP 16:37:25.083957 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 217226:218674, ack 1740, win 119, options [nop,nop,TS val 3363907080 ecr 670570076], length 1448: HTTP 16:37:25.084068 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 218674:220122, ack 1740, win 119, options [nop,nop,TS val 3363907080 ecr 670570076], length 1448: HTTP 16:37:25.087156 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 220122:221570, ack 1740, win 119, options [nop,nop,TS val 3363907081 ecr 670570076], length 1448: HTTP 16:37:25.087170 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 221570:223018, ack 1740, win 119, options [nop,nop,TS val 3363907081 ecr 670570076], length 1448: HTTP 16:37:25.087174 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 223018:224466, ack 1740, win 119, options [nop,nop,TS val 3363907081 ecr 670570076], length 1448: HTTP 16:37:25.087177 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 224466:225914, ack 1740, win 119, options [nop,nop,TS val 3363907081 ecr 670570076], length 1448: HTTP 16:37:25.087179 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 225914:227362, ack 1740, win 119, options [nop,nop,TS val 3363907081 ecr 670570076], length 1448: HTTP 16:37:25.087181 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 227362:228810, ack 1740, win 119, options [nop,nop,TS val 3363907081 ecr 670570076], length 1448: HTTP 16:37:25.087183 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 228810:230258, ack 1740, win 119, options [nop,nop,TS val 3363907081 ecr 670570076], length 1448: HTTP 16:37:25.087190 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 230258:231706, ack 1740, win 119, options [nop,nop,TS val 3363907081 ecr 670570076], length 1448: HTTP 16:37:25.087193 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 231706:233154, ack 1740, win 119, options [nop,nop,TS val 3363907081 ecr 670570076], length 1448: HTTP 16:37:25.087195 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 233154:234602, ack 1740, win 119, options [nop,nop,TS val 3363907081 ecr 670570076], length 1448: HTTP 16:37:25.087197 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 234602:236050, ack 1740, win 119, options [nop,nop,TS val 3363907081 ecr 670570076], length 1448: HTTP 16:37:25.087199 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 236050:237498, ack 1740, win 119, options [nop,nop,TS val 3363907081 ecr 670570076], length 1448: HTTP 16:37:25.087202 ens224 In  IP 1.2.3.4.80 > 10.185.23.202.49786: Flags [.], seq 237498:238946, ack 1740, win 119, options [nop,nop,TS val 3363907081 ecr 670570076], length 1448: HTTP

---
Im not that familiar with tcpdump, if there's a better way to capture please say so, im also gonna build a squid v5 to test it out.

Again, thanks for your time


On Mon, 29 Aug 2022 at 13:52, Alex Rousskov <rouss...@measurement-factory.com <mailto:rouss...@measurement-factory.com>> wrote:

    On 8/29/22 06:17, David Ferreira wrote:

     > I have some squid's running on rocky linux 8 with verion 4.15,
    recently
     > been testing squid version 5.2(stable version that comes with
    Rocky 9)to
     > upgrade the current ones and most of the configs/acls seem to
    work fine.
     >
     > Unfortualy theres an application that we use that everytime it
    tries to
     > upload files it fails on squid 5.2, on 4.15 is works completly
    fine, so
     > far ive test on squid 5.2 and 5.5 and it's the same behavior, im
    testing
     > this with default configurations and it always works on 4.15,
    access log
     > only shows this:
     >
     > Squid 4.15:
     > 26/Aug/2022:15:36:08 +0100    273 172.19.222.132TCP_MISS/200 745
    POST http://websiteurl/index.php <http://websiteurl/index.php> -
    HIER_DIRECT/websitedomain text/xml
     >
     > Squid 5.2:
     > 25/Aug/2022:15:10:00 +0100    139 172.19.222.132
    TCP_MISS_ABORTED/100 0 POST http://websiteurl <http://websiteurl>
    HIER_DIRECT/websitedomain -
     >
     > anyone has an ideia of what may be happening here?, been
    searching about
     > http errors 100 and so far i did not find anything that points me
    to the
     > problem.
     >
     > On the application side the error it shows when it tries to
    upload is:
     > "
     > Error storing the document on the server
     > Detail HTTP error 100
     > Send failure: Connection was aborted (55)
     > "

    Squid v5.2 has many serious bugs. I would not use it in production.
    Build the latest Squid v5 from sources if you have to.


    If the latest Squid v5 shows the same problem then this is probably a
    client application or Squid bug/misconfiguration. There were quite a
    few
    changes in HTTP 1xx control message handling since Squid v4, and one of
    those changes is probably affecting your client. For example, either
    Squid v4 does not deliver that 100 control message to the client at all
    or it is delivering a slightly different 100 control message that your
    client is happy with.
       If you share what HTTP messages are exchanged between client and
    Squid
    and between Squid and the origin server, in both successful and failing
    use cases, we may be able to tell you more. I would use tcpdump,
    wireshark, or a similar tool to collect HTTP traffic since these are
    non-TLS transactions.


    HTH,

    Alex.
    _______________________________________________
    squid-users mailing list
    squid-users@lists.squid-cache.org
    <mailto:squid-users@lists.squid-cache.org>
    http://lists.squid-cache.org/listinfo/squid-users
    <http://lists.squid-cache.org/listinfo/squid-users>



--
Com os melhores cumprimentos,

David Ferreira

_______________________________________________
squid-users mailing list
squid-users@lists.squid-cache.org
http://lists.squid-cache.org/listinfo/squid-users

Reply via email to