Arch Linux

lezzbean

Member

Registered: 2026-05-31

Posts: 3

HTTP session disconnect on WI-FI disconnect

I've been having an issue causing the network to briefly disconnect (~1 second) every 10-15 minutes, ending my session on netacad.com and forcing me to reload the page. I would spend more time debugging this (especially since I am currently working towards acquiring my CCNA by the end of the summer), but I currently don't have multiple hours of spare time nor the knowledge to quickly debug and solve this problem.

I just recently downloaded a minimal installation of Arch (~3 days ago) and configured the Wi-Fi across two different networks with iwctl. Both networks have given me the same issue.

I ran tcpdump and discovered that the internet outage correlates to an ARP broadcast sent out by the router.

.....
11:57:56.393851 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
11:57:57.418033 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
11:57:58.442350 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
11:57:59.466004 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
11:58:00.387462 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
11:58:01.412015 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
11:58:05.632101 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from aa:fb:08:40:68:0b (oui Unknown), length 296
11:58:06.363656 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
11:58:07.453654 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
11:58:08.221984 ARP, Request who-has 192.168.0.2 tell _gateway, length 46
11:58:08.221984 ARP, Request who-has HPC85ACFC8055B.local tell _gateway, length 46
11:58:08.221985 ARP, Request who-has 192.168.0.4 tell _gateway, length 46
.....
11:58:08.483802 ARP, Request who-has 192.168.0.252 tell _gateway, length 46
11:58:08.483802 ARP, Request who-has 192.168.0.253 tell _gateway, length 46
11:58:08.483802 ARP, Request who-has 192.168.0.254 tell _gateway, length 46
11:58:08.483803 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
11:58:09.365977 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
11:58:10.366503 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
11:58:10.645088 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from aa:fb:08:40:68:0b (oui Unknown), length 298
11:58:10.647498 ARP, Request who-has 192.168.0.20 tell _gateway, length 46
11:58:11.367280 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
11:58:12.371435 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
11:58:12.661948 IP _gateway.bootps > 192.168.0.20.bootpc: BOOTP/DHCP, Reply, length 284
11:58:12.662480 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from aa:fb:08:40:68:0b (oui Unknown), length 302
11:58:12.667846 IP _gateway.bootps > 192.168.0.20.bootpc: BOOTP/DHCP, Reply, length 284
11:58:12.683817 ARP, Request who-has _gateway tell 192.168.0.20, length 28
11:58:12.694358 IP 192.168.0.20 > igmp.mcast.net: igmp v3 report, 2 group record(s)
11:58:12.779161 ARP, Reply _gateway is-at 84:e8:92:6e:d5:00 (oui Unknown), length 46
11:58:12.779235 IP 192.168.0.20.49535 > ntp1.glypnod.com.ntp: NTPv4, Client, length 48
11:58:12.779754 IP _gateway.50394 > 192.168.0.20.netbios-ns: UDP, length 50
11:58:12.779755 IP _gateway.50157 > 192.168.0.20.mdns: 0+ PTR (QM)? 20.0.168.192.in-addr.arpa. (43)
11:58:12.819276 IP 192.168.0.20 > igmp.mcast.net: igmp v3 report, 2 group record(s)
11:58:12.845580 IP 192.168.0.20.mdns > mdns.mcast.net.mdns: 0 [1n] ANY (QM)? system.local. (46)
11:58:12.845779 IP 192.168.0.20.llmnr > 224.0.0.252.llmnr: UDP, length 24
11:58:13.095533 IP 192.168.0.20.llmnr > 224.0.0.252.llmnr: UDP, length 24
11:58:13.095820 IP 192.168.0.20.mdns > mdns.mcast.net.mdns: 0 [1n] ANY (QM)? system.local. (46)
11:58:13.345794 IP 192.168.0.20.llmnr > 224.0.0.252.llmnr: UDP, length 24
11:58:13.369469 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
11:58:13.559312 IP 192.168.0.20.mdns > mdns.mcast.net.mdns: 0 [1n] ANY (QM)? system.local. (46)
11:58:13.560329 IP 192.168.0.20.56433 > _gateway.domain: 17372+ [1au] A? mercury-connection-partition1-r.wbx2.com. (69)
11:58:13.684239 IP 192.168.0.20.37924 > _gateway.domain: 14256+ [1au] A? detectportal.firefox.com. (53)
11:58:13.690155 IP 192.168.0.20.52059 > _gateway.domain: 41174+ [1au] A? example.org. (40)
11:58:13.694647 IP 192.168.0.20.53121 > _gateway.domain: 40532+ [1au] A? ipv4only.arpa. (42)
11:58:13.714759 IP 192.168.0.20.56616 > _gateway.domain: 6242+ [1au] A? profile.accounts.firefox.com. (57)
11:58:13.725276 IP 192.168.0.20.43447 > _gateway.domain: 27899+ [1au] A? push.services.mozilla.com. (54)
11:58:13.727960 IP _gateway.domain > 192.168.0.20.56433: 17372 5/0/1 CNAME prod-aore-mercury2.wbx2.com., CNAME wxt-mercury-ingressgateway-ds.wxtmer-prod-aore-mercury2.b81.prod.infra.webex.com., A 170.72.250.157, A 170.72.250.237, A 170.72.250.101 (244)
11:58:13.731574 IP 192.168.0.20.54680 > _gateway.domain: 34906+ [1au] A? sync-1-us-west1-g.sync.services.mozilla.com. (72)
11:58:13.748554 IP _gateway.domain > 192.168.0.20.37924: 14256 3/0/1 CNAME detectportal.prod.mozaws.net., CNAME prod.detectportal.prod.cloudops.mozgcp.net., A 34.107.221.82 (167)
11:58:13.753419 IP 192.168.0.20.55152 > 82.221.107.34.bc.googleusercontent.com.http: Flags [S], seq 2263503656, win 64240, options [mss 1460,sackOK,TS val 2645743060 ecr 0,nop,wscale 10], length 0
11:58:13.756291 IP 192.168.0.20.55164 > 82.221.107.34.bc.googleusercontent.com.http: Flags [S], seq 2251417715, win 64240, options [mss 1460,sackOK,TS val 4149655842 ecr 0,nop,wscale 10], length 0
11:58:13.759848 IP 192.168.0.20.37146 > 170.72.250.157.https: Flags [S], seq 3112231410, win 64240, options [mss 1460,sackOK,TS val 1448199682 ecr 0,nop,wscale 10], length 0
11:58:13.796530 IP _gateway.domain > 192.168.0.20.52059: 41174 2/0/1 A 104.20.26.136, A 172.66.157.237 (72)
11:58:13.796530 IP _gateway.domain > 192.168.0.20.53121: 40532 2/0/1 A 192.0.0.171, A 192.0.0.170 (74)
11:58:13.796530 IP _gateway.domain > 192.168.0.20.43447: 27899 1/0/1 A 34.107.243.93 (70)
11:58:13.796531 IP _gateway.domain > 192.168.0.20.56616: 6242 2/0/1 CNAME mozilla.map.fastly.net., A 151.101.21.91 (109)
11:58:13.796531 IP _gateway.domain > 192.168.0.20.54680: 34906 2/0/1 CNAME mozilla.map.fastly.net., A 151.101.21.91 (124)
11:58:13.803655 IP 192.168.0.20.33158 > 151.101.21.91.https: Flags [S], seq 3672424657, win 64240, options [mss 1460,sackOK,TS val 3075183610 ecr 0,nop,wscale 10], length 0
11:58:13.804968 IP 192.168.0.20.33168 > 151.101.21.91.https: Flags [S], seq 2663341689, win 64240, options [mss 1460,sackOK,TS val 255360080 ecr 0,nop,wscale 10], length 0
11:58:13.807105 IP 192.168.0.20.33182 > 151.101.21.91.https: Flags [S], seq 3436225439, win 64240, options [mss 1460,sackOK,TS val 3402537593 ecr 0,nop,wscale 10], length 0
11:58:13.807986 IP 192.168.0.20.35414 > 93.243.107.34.bc.googleusercontent.com.https: Flags [S], seq 2071836223, win 64240, options [mss 1460,sackOK,TS val 1453884737 ecr 0,nop,wscale 10], length 0
11:58:13.820693 IP 192.168.0.20.mdns > mdns.mcast.net.mdns: 0*- [0q] 2/0/0 (Cache flush) PTR system.local., (Cache flush) A 192.168.0.20 (79)
11:58:13.827667 IP 192.168.0.20.51878 > _gateway.domain: 31344+ [1au] PTR? 157.250.72.170.in-addr.arpa. (56)
11:58:13.852485 IP 82.221.107.34.bc.googleusercontent.com.http > 192.168.0.20.55164: Flags [S.], seq 2093420651, ack 2251417716, win 65535, options [mss 1412,sackOK,TS val 591458814 ecr 4149655842,nop,wscale 8], length 0
11:58:13.852486 IP 170.72.250.157.https > 192.168.0.20.37146: Flags [S.], seq 3522715029, ack 3112231411, win 62643, options [mss 1452,sackOK,TS val 3266331718 ecr 1448199682,nop,wscale 9], length 0
11:58:13.852487 IP 151.101.21.91.https > 192.168.0.20.33158: Flags [S.], seq 3563029259, ack 3672424658, win 65535, options [mss 1408,sackOK,TS val 2708447583 ecr 3075183610,nop,wscale 9], length 0
11:58:13.852487 IP 151.101.21.91.https > 192.168.0.20.33168: Flags [S.], seq 336607388, ack 2663341690, win 65535, options [mss 1408,sackOK,TS val 1836319427 ecr 255360080,nop,wscale 9], length 0
11:58:13.852487 IP 151.101.21.91.https > 192.168.0.20.33182: Flags [S.], seq 1979414239, ack 3436225440, win 65535, options [mss 1408,sackOK,TS val 2920377586 ecr 3402537593,nop,wscale 9], length 0
11:58:13.852487 IP 93.243.107.34.bc.googleusercontent.com.https > 192.168.0.20.35414: Flags [S.], seq 2808495882, ack 2071836224, win 65535, options [mss 1412,sackOK,TS val 3851159635 ecr 1453884737,nop,wscale 8], length 0
11:58:13.852626 IP 192.168.0.20.55164 > 82.221.107.34.bc.googleusercontent.com.http: Flags [.], ack 1, win 63, options [nop,nop,TS val 4149655939 ecr 591458814], length 0
11:58:13.852678 IP 192.168.0.20.37146 > 170.72.250.157.https: Flags [.], ack 1, win 63, options [nop,nop,TS val 1448199775 ecr 3266331718], length 0
11:58:13.852712 IP 192.168.0.20.33158 > 151.101.21.91.https: Flags [.], ack 1, win 63, options [nop,nop,TS val 3075183659 ecr 2708447583], length 0
11:58:13.852738 IP 192.168.0.20.33168 > 151.101.21.91.https: Flags [.], ack 1, win 63, options [nop,nop,TS val 255360128 ecr 1836319427], length 0
11:58:13.852755 IP 192.168.0.20.33182 > 151.101.21.91.https: Flags [.], ack 1, win 63, options [nop,nop,TS val 3402537639 ecr 2920377586], length 0
11:58:13.852773 IP 192.168.0.20.35414 > 93.243.107.34.bc.googleusercontent.com.https: Flags [.], ack 1, win 63, options [nop,nop,TS val 1453884782 ecr 3851159635], length 0
11:58:13.853096 IP 192.168.0.20.55164 > 82.221.107.34.bc.googleusercontent.com.http: Flags [P.], seq 1:306, ack 1, win 63, options [nop,nop,TS val 4149655939 ecr 591458814], length 305: HTTP: GET /canonical.html HTTP/1.1
11:58:13.855757 IP 192.168.0.20.37146 > 170.72.250.157.https: Flags [.], seq 1:1441, ack 1, win 63, options [nop,nop,TS val 1448199778 ecr 3266331718], length 1440
11:58:13.855773 IP 192.168.0.20.37146 > 170.72.250.157.https: Flags [P.], seq 1441:2431, ack 1, win 63, options [nop,nop,TS val 1448199778 ecr 3266331718], length 990
11:58:13.857840 IP 192.168.0.20.33168 > 151.101.21.91.https: Flags [.], seq 1:1397, ack 1, win 63, options [nop,nop,TS val 255360133 ecr 1836319427], length 1396
11:58:13.857855 IP 192.168.0.20.33168 > 151.101.21.91.https: Flags [P.], seq 1397:2359, ack 1, win 63, options [nop,nop,TS val 255360133 ecr 1836319427], length 962
11:58:13.861136 IP 192.168.0.20.33158 > 151.101.21.91.https: Flags [.], seq 1:1397, ack 1, win 63, options [nop,nop,TS val 3075183667 ecr 2708447583], length 1396
11:58:13.861162 IP 192.168.0.20.33158 > 151.101.21.91.https: Flags [P.], seq 1397:2359, ack 1, win 63, options [nop,nop,TS val 3075183667 ecr 2708447583], length 962
11:58:13.865430 IP 192.168.0.20.33182 > 151.101.21.91.https: Flags [.], seq 1:1397, ack 1, win 63, options [nop,nop,TS val 3402537652 ecr 2920377586], length 1396
11:58:13.865489 IP 192.168.0.20.33182 > 151.101.21.91.https: Flags [P.], seq 1397:2374, ack 1, win 63, options [nop,nop,TS val 3402537652 ecr 2920377586], length 977
11:58:13.865532 IP 192.168.0.20.33168 > 151.101.21.91.https: Flags [P.], seq 2359:3465, ack 1, win 63, options [nop,nop,TS val 255360141 ecr 1836319427], length 1106
11:58:13.867621 IP 192.168.0.20.33158 > 151.101.21.91.https: Flags [P.], seq 2359:2457, ack 1, win 63, options [nop,nop,TS val 3075183674 ecr 2708447583], length 98
11:58:13.868258 IP 192.168.0.20.33182 > 151.101.21.91.https: Flags [P.], seq 2374:3236, ack 1, win 63, options [nop,nop,TS val 3402537655 ecr 2920377586], length 862
11:58:13.871406 IP 192.168.0.20.35414 > 93.243.107.34.bc.googleusercontent.com.https: Flags [.], seq 1:1401, ack 1, win 63, options [nop,nop,TS val 1453884801 ecr 3851159635], length 1400
11:58:13.871441 IP 192.168.0.20.35414 > 93.243.107.34.bc.googleusercontent.com.https: Flags [P.], seq 1401:2524, ack 1, win 63, options [nop,nop,TS val 1453884801 ecr 3851159635], length 1123
11:58:13.903065 IP 82.221.107.34.bc.googleusercontent.com.http > 192.168.0.20.55164: Flags [.], ack 306, win 1049, options [nop,nop,TS val 591458882 ecr 4149655939], length 0
11:58:13.903066 IP 82.221.107.34.bc.googleusercontent.com.http > 192.168.0.20.55164: Flags [P.], seq 1:299, ack 306, win 1050, options [nop,nop,TS val 591458883 ecr 4149655939], length 298: HTTP: HTTP/1.1 200 OK
11:58:13.903153 IP 192.168.0.20.55164 > 82.221.107.34.bc.googleusercontent.com.http: Flags [.], ack 299, win 63, options [nop,nop,TS val 4149655989 ecr 591458883], length 0
11:58:13.906938 IP 192.168.0.20.48672 > 82.221.107.34.bc.googleusercontent.com.http: Flags [S], seq 667337978, win 64240, options [mss 1460,sackOK,TS val 1364906387 ecr 0,nop,wscale 10], length 0
11:58:13.910921 IP 170.72.250.157.https > 192.168.0.20.37146: Flags [.], ack 1441, win 158, options [nop,nop,TS val 3266331793 ecr 1448199778], length 0
11:58:13.913500 IP 151.101.21.91.https > 192.168.0.20.33168: Flags [.], ack 1397, win 272, options [nop,nop,TS val 1836319503 ecr 255360133], length 0
11:58:13.923085 IP 151.101.21.91.https > 192.168.0.20.33168: Flags [.], ack 2359, win 272, options [nop,nop,TS val 1836319513 ecr 255360133], length 0
11:58:13.924513 IP 151.101.21.91.https > 192.168.0.20.33168: Flags [.], seq 1:1393, ack 2359, win 273, options [nop,nop,TS val 1836319513 ecr 255360133], length 1392
11:58:13.924582 IP 192.168.0.20.33168 > 151.101.21.91.https: Flags [.], ack 1393, win 62, options [nop,nop,TS val 255360200 ecr 1836319513], length 0
11:58:13.925515 IP 151.101.21.91.https > 192.168.0.20.33168: Flags [P.], seq 1393:1554, ack 2359, win 273, options [nop,nop,TS val 1836319513 ecr 255360133], length 161
11:58:13.925516 IP 170.72.250.157.https > 192.168.0.20.37146: Flags [.], ack 2431, win 164, options [nop,nop,TS val 3266331807 ecr 1448199778], length 0
11:58:13.925575 IP 192.168.0.20.33168 > 151.101.21.91.https: Flags [.], ack 1554, win 62, options [nop,nop,TS val 255360201 ecr 1836319513], length 0
11:58:13.926625 IP 192.168.0.20.33168 > 151.101.21.91.https: Flags [P.], seq 3465:3549, ack 1554, win 62, options [nop,nop,TS val 255360202 ecr 1836319513], length 84
11:58:13.927976 IP 170.72.250.157.https > 192.168.0.20.37146: Flags [P.], seq 1:2881, ack 2431, win 164, options [nop,nop,TS val 3266331808 ecr 1448199778], length 2880
11:58:13.928042 IP 192.168.0.20.37146 > 170.72.250.157.https: Flags [.], ack 2881, win 61, options [nop,nop,TS val 1448199850 ecr 3266331808], length 0
11:58:13.928282 IP 170.72.250.157.https > 192.168.0.20.37146: Flags [.], seq 2881:4321, ack 2431, win 164, options [nop,nop,TS val 3266331808 ecr 1448199778], length 1440
11:58:13.928324 IP 192.168.0.20.37146 > 170.72.250.157.https: Flags [.], ack 4321, win 60, options [nop,nop,TS val 1448199851 ecr 3266331808], length 0
11:58:13.928660 IP 170.72.250.157.https > 192.168.0.20.37146: Flags [P.], seq 4321:5761, ack 2431, win 164, options [nop,nop,TS val 3266331808 ecr 1448199778], length 1440
11:58:13.928705 IP 192.168.0.20.37146 > 170.72.250.157.https: Flags [.], ack 5761, win 59, options [nop,nop,TS val 1448199851 ecr 3266331808], length 0
11:58:13.929700 IP 170.72.250.157.https > 192.168.0.20.37146: Flags [P.], seq 5761:6942, ack 2431, win 164, options [nop,nop,TS val 3266331808 ecr 1448199778], length 1181
11:58:13.929743 IP 192.168.0.20.37146 > 170.72.250.157.https: Flags [.], ack 6942, win 58, options [nop,nop,TS val 1448199852 ecr 3266331808], length 0
11:58:13.931483 IP 151.101.21.91.https > 192.168.0.20.33158: Flags [.], ack 1397, win 272, options [nop,nop,TS val 2708447678 ecr 3075183667], length 0
11:58:13.935279 IP 151.101.21.91.https > 192.168.0.20.33158: Flags [.], ack 2359, win 272, options [nop,nop,TS val 2708447682 ecr 3075183667], length 0
11:58:13.938076 IP 151.101.21.91.https > 192.168.0.20.33158: Flags [P.], seq 1:1554, ack 2359, win 273, options [nop,nop,TS val 2708447683 ecr 3075183667], length 1553
11:58:13.938127 IP 192.168.0.20.33158 > 151.101.21.91.https: Flags [.], ack 1554, win 62, options [nop,nop,TS val 3075183744 ecr 2708447683], length 0
11:58:13.940113 IP 192.168.0.20.33158 > 151.101.21.91.https: Flags [P.], seq 2457:2541, ack 1554, win 62, options [nop,nop,TS val 3075183746 ecr 2708447683], length 84
11:58:13.940845 IP 192.168.0.20.37146 > 170.72.250.157.https: Flags [P.], seq 2431:2495, ack 6942, win 58, options [nop,nop,TS val 1448199863 ecr 3266331808], length 64
11:58:13.942116 IP _gateway.domain > 192.168.0.20.51878: 31344 NXDomain 0/1/1 (149)
11:58:13.942118 IP 151.101.21.91.https > 192.168.0.20.33182: Flags [.], ack 1397, win 272, options [nop,nop,TS val 2920377689 ecr 3402537652], length 0
11:58:13.942402 IP 192.168.0.20.37146 > 170.72.250.157.https: Flags [P.], seq 2495:2587, ack 6942, win 58, options [nop,nop,TS val 1448199865 ecr 3266331808], length 92
11:58:13.947577 IP 151.101.21.91.https > 192.168.0.20.33182: Flags [.], ack 2374, win 272, options [nop,nop,TS val 2920377694 ecr 3402537652], length 0
11:58:13.953524 IP 151.101.21.91.https > 192.168.0.20.33182: Flags [P.], seq 1:1554, ack 2374, win 273, options [nop,nop,TS val 2920377698 ecr 3402537652], length 1553
11:58:13.953525 IP 151.101.21.91.https > 192.168.0.20.33168: Flags [.], ack 3465, win 272, options [nop,nop,TS val 1836319542 ecr 255360141], length 0
11:58:13.953525 IP 151.101.21.91.https > 192.168.0.20.33168: Flags [P.], seq 1554:1619, ack 3465, win 273, options [nop,nop,TS val 1836319543 ecr 255360141], length 65
11:58:13.953616 IP 192.168.0.20.33182 > 151.101.21.91.https: Flags [.], ack 1554, win 62, options [nop,nop,TS val 3402537740 ecr 2920377698], length 0
11:58:13.953703 IP 151.101.21.91.https > 192.168.0.20.33158: Flags [.], ack 2457, win 273, options [nop,nop,TS val 2708447700 ecr 3075183674], length 0
11:58:13.953705 IP 151.101.21.91.https > 192.168.0.20.33158: Flags [P.], seq 1554:1619, ack 2457, win 273, options [nop,nop,TS val 2708447700 ecr 3075183674], length 65
11:58:13.956653 IP 192.168.0.20.33182 > 151.101.21.91.https: Flags [P.], seq 3236:3320, ack 1554, win 62, options [nop,nop,TS val 3402537743 ecr 2920377698], length 84
11:58:13.957871 IP 151.101.21.91.https > 192.168.0.20.33182: Flags [.], ack 3236, win 272, options [nop,nop,TS val 2920377705 ecr 3402537655], length 0
11:58:13.958509 IP 192.168.0.20.33168 > 151.101.21.91.https: Flags [P.], seq 3549:3580, ack 1619, win 62, options [nop,nop,TS val 255360234 ecr 1836319543], length 31
11:58:13.958946 IP 192.168.0.20.33158 > 151.101.21.91.https: Flags [P.], seq 2541:2572, ack 1619, win 62, options [nop,nop,TS val 3075183765 ecr 2708447700], length 31
11:58:13.959410 IP 151.101.21.91.https > 192.168.0.20.33182: Flags [P.], seq 1554:1619, ack 3236, win 273, options [nop,nop,TS val 2920377706 ecr 3402537655], length 65
11:58:13.962359 IP 192.168.0.20.33182 > 151.101.21.91.https: Flags [P.], seq 3320:3351, ack 1619, win 62, options [nop,nop,TS val 3402537749 ecr 2920377706], length 31
11:58:13.971140 IP 93.243.107.34.bc.googleusercontent.com.https > 192.168.0.20.35414: Flags [.], ack 1401, win 1045, options [nop,nop,TS val 3851159759 ecr 1453884801], length 0
11:58:13.973291 IP 151.101.21.91.https > 192.168.0.20.33168: Flags [.], ack 3549, win 273, options [nop,nop,TS val 1836319563 ecr 255360202], length 0
11:58:13.976018 IP 93.243.107.34.bc.googleusercontent.com.https > 192.168.0.20.35414: Flags [.], ack 2524, win 1041, options [nop,nop,TS val 3851159765 ecr 1453884801], length 0
11:58:13.976741 IP 151.101.21.91.https > 192.168.0.20.33158: Flags [.], ack 2541, win 273, options [nop,nop,TS val 2708447724 ecr 3075183746], length 0
11:58:13.976741 IP 82.221.107.34.bc.googleusercontent.com.http > 192.168.0.20.48672: Flags [S.], seq 3191055041, ack 667337979, win 65535, options [mss 1412,sackOK,TS val 2748494894 ecr 1364906387,nop,wscale 8], length 0
11:58:13.976852 IP 192.168.0.20.48672 > 82.221.107.34.bc.googleusercontent.com.http: Flags [.], ack 1, win 63, options [nop,nop,TS val 1364906457 ecr 2748494894], length 0
11:58:13.977291 IP 93.243.107.34.bc.googleusercontent.com.https > 192.168.0.20.35414: Flags [P.], seq 1:213, ack 2524, win 1041, options [nop,nop,TS val 3851159766 ecr 1453884801], length 212
11:58:13.977342 IP 192.168.0.20.48672 > 82.221.107.34.bc.googleusercontent.com.http: Flags [P.], seq 1:323, ack 1, win 63, options [nop,nop,TS val 1364906458 ecr 2748494894], length 322: HTTP: GET /success.txt?ipv4 HTTP/1.1
11:58:13.977374 IP 192.168.0.20.35414 > 93.243.107.34.bc.googleusercontent.com.https: Flags [.], ack 213, win 63, options [nop,nop,TS val 1453884907 ecr 3851159766], length 0
11:58:13.979084 IP 192.168.0.20.35414 > 93.243.107.34.bc.googleusercontent.com.https: Flags [P.], seq 2524:2588, ack 213, win 63, options [nop,nop,TS val 1453884908 ecr 3851159766], length 64
11:58:13.979871 IP 192.168.0.20.35414 > 93.243.107.34.bc.googleusercontent.com.https: Flags [P.], seq 2588:2680, ack 213, win 63, options [nop,nop,TS val 1453884909 ecr 3851159766], length 92
11:58:13.986098 IP 170.72.250.157.https > 192.168.0.20.37146: Flags [.], ack 2587, win 164, options [nop,nop,TS val 3266331867 ecr 1448199863], length 0
11:58:13.986099 IP 170.72.250.157.https > 192.168.0.20.37146: Flags [P.], seq 6942:7469, ack 2587, win 164, options [nop,nop,TS val 3266331868 ecr 1448199863], length 527
11:58:13.988021 IP 192.168.0.20.37146 > 170.72.250.157.https: Flags [P.], seq 2587:2618, ack 7469, win 58, options [nop,nop,TS val 1448199910 ecr 3266331868], length 31
11:58:13.989552 IP 192.168.0.20.42440 > 170.72.250.157.https: Flags [S], seq 4161175776, win 64240, options [mss 1460,sackOK,TS val 254485141 ecr 0,nop,wscale 10], length 0
11:58:13.989660 IP 151.101.21.91.https > 192.168.0.20.33168: Flags [.], ack 3580, win 273, options [nop,nop,TS val 1836319580 ecr 255360234], length 0
11:58:13.991836 IP 151.101.21.91.https > 192.168.0.20.33158: Flags [.], ack 2572, win 273, options [nop,nop,TS val 2708447738 ecr 3075183765], length 0
11:58:13.993888 IP 151.101.21.91.https > 192.168.0.20.33182: Flags [.], ack 3320, win 273, options [nop,nop,TS val 2920377740 ecr 3402537743], length 0
11:58:13.996567 IP 151.101.21.91.https > 192.168.0.20.33182: Flags [.], ack 3351, win 273, options [nop,nop,TS val 2920377743 ecr 3402537749], length 0
.....

I also grabbed the traffic for the session reconnect in case that's relevant:

12:18:28.877441 IP system.47655 > resolver.qwest.net.domain: 13253+ [1au] PTR? 25.3.171.205.in-addr.arpa. (54)
12:18:28.899868 IP resolver.qwest.net.domain > system.47655: 13253* 1/0/1 PTR resolver.qwest.net. (86)
12:18:28.903524 IP system.38481 > resolver.qwest.net.domain: 20395+ [1au] PTR? 251.0.0.224.in-addr.arpa. (53)
12:18:28.930547 IP resolver.qwest.net.domain > system.38481: 20395 1/0/1 PTR mdns.mcast.net. (81)
12:18:29.001921 IP system.41888 > 170.72.250.157.https: Flags [P.], seq 590684070:590684100, ack 2277625136, win 83, options [nop,nop,TS val 3158712422 ecr 427887804], length 30
12:18:29.008728 IP system.37461 > resolver.qwest.net.domain: 34460+ [1au] PTR? 157.250.72.170.in-addr.arpa. (56)
12:18:29.041262 IP 170.72.250.157.https > system.41888: Flags [.], ack 30, win 168, options [nop,nop,TS val 427901753 ecr 3158712422], length 0
12:18:29.042096 IP 170.72.250.157.https > system.41888: Flags [P.], seq 1:27, ack 30, win 168, options [nop,nop,TS val 427901754 ecr 3158712422], length 26
12:18:29.082281 IP system.41888 > 170.72.250.157.https: Flags [.], ack 27, win 83, options [nop,nop,TS val 3158712503 ecr 427901754], length 0
12:18:29.086950 IP resolver.qwest.net.domain > system.37461: 34460 NXDomain 0/1/1 (149)
12:18:29.150263 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [P.], seq 3214832391:3214832715, ack 717820107, win 36, options [nop,nop,TS val 2099581200 ecr 3559405339], length 324
12:18:29.208162 IP system.36100 > resolver.qwest.net.domain: 38366+ [1au] PTR? 18.217.238.18.in-addr.arpa. (55)
12:18:29.229973 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [.], ack 324, win 151, options [nop,nop,TS val 3559417580 ecr 2099581200], length 0
12:18:29.232353 IP resolver.qwest.net.domain > system.36100: 38366 1/0/1 PTR server-18-238-217-18.sea90.r.cloudfront.net. (112)
12:18:29.275579 IP system.57374 > resolver.qwest.net.domain: 55298+ [1au] A? mercury-connection-partition1-r.wbx2.com. (69)
12:18:29.298090 IP resolver.qwest.net.domain > system.57374: 55298 5/0/1 CNAME prod-aore-mercury2.wbx2.com., CNAME wxt-mercury-ingressgateway-ds.wxtmer-prod-aore-mercury2.b81.prod.infra.webex.com., A 170.72.250.157, A 170.72.250.237, A 170.72.250.101 (244)
12:18:29.315274 ARP, Request who-has DESKTOP-UOCCVVL.local (Broadcast) tell _gateway, length 46
12:18:29.315275 IP DESKTOP-UOCCVVL.local.mdns > mdns.mcast.net.mdns: 0*- [0q] 1/0/1 (Cache flush) PTR DESKTOP-UOCCVVL.local. (89)
12:18:29.315275 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
12:18:29.327950 IP system.54268 > 170.72.250.157.https: Flags [S], seq 1717434862, win 64240, options [mss 1460,sackOK,TS val 3098557691 ecr 0,nop,wscale 10], length 0
12:18:29.369117 IP 170.72.250.157.https > system.54268: Flags [S.], seq 2407621374, ack 1717434863, win 62643, options [mss 1452,sackOK,TS val 3145463075 ecr 3098557691,nop,wscale 9], length 0
12:18:29.369242 IP system.54268 > 170.72.250.157.https: Flags [.], ack 1, win 63, options [nop,nop,TS val 3098557732 ecr 3145463075], length 0
12:18:29.373128 IP system.54268 > 170.72.250.157.https: Flags [.], seq 1:1441, ack 1, win 63, options [nop,nop,TS val 3098557736 ecr 3145463075], length 1440
12:18:29.373180 IP system.54268 > 170.72.250.157.https: Flags [P.], seq 1441:2431, ack 1, win 63, options [nop,nop,TS val 3098557736 ecr 3145463075], length 990
12:18:29.403719 IP system.36564 > resolver.qwest.net.domain: 10663+ [1au] PTR? 8.0.168.192.in-addr.arpa. (53)
12:18:29.419056 IP 170.72.250.157.https > system.54268: Flags [.], ack 1441, win 158, options [nop,nop,TS val 3145463125 ecr 3098557736], length 0
12:18:29.423036 IP 170.72.250.157.https > system.54268: Flags [.], ack 2431, win 164, options [nop,nop,TS val 3145463130 ecr 3098557736], length 0
12:18:29.425684 IP 170.72.250.157.https > system.54268: Flags [.], seq 1:1441, ack 2431, win 164, options [nop,nop,TS val 3145463131 ecr 3098557736], length 1440
12:18:29.425780 IP system.54268 > 170.72.250.157.https: Flags [.], ack 1441, win 62, options [nop,nop,TS val 3098557789 ecr 3145463131], length 0
12:18:29.426281 IP 170.72.250.157.https > system.54268: Flags [P.], seq 1441:2881, ack 2431, win 164, options [nop,nop,TS val 3145463131 ecr 3098557736], length 1440
12:18:29.426347 IP system.54268 > 170.72.250.157.https: Flags [.], ack 2881, win 61, options [nop,nop,TS val 3098557790 ecr 3145463131], length 0
12:18:29.427096 IP 170.72.250.157.https > system.54268: Flags [P.], seq 2881:5761, ack 2431, win 164, options [nop,nop,TS val 3145463131 ecr 3098557736], length 2880
12:18:29.427158 IP system.54268 > 170.72.250.157.https: Flags [.], ack 5761, win 59, options [nop,nop,TS val 3098557790 ecr 3145463131], length 0
12:18:29.427654 IP 170.72.250.157.https > system.54268: Flags [P.], seq 5761:6942, ack 2431, win 164, options [nop,nop,TS val 3145463131 ecr 3098557736], length 1181
12:18:29.427708 IP system.54268 > 170.72.250.157.https: Flags [.], ack 6942, win 58, options [nop,nop,TS val 3098557791 ecr 3145463131], length 0
12:18:29.428582 IP resolver.qwest.net.domain > system.36564: 10663 NXDomain* 0/1/1 (148)
12:18:29.448182 IP system.54268 > 170.72.250.157.https: Flags [P.], seq 2431:2495, ack 6942, win 58, options [nop,nop,TS val 3098557811 ecr 3145463131], length 64
12:18:29.449982 IP system.54268 > 170.72.250.157.https: Flags [P.], seq 2495:2587, ack 6942, win 58, options [nop,nop,TS val 3098557813 ecr 3145463131], length 92
12:18:29.489318 IP 170.72.250.157.https > system.54268: Flags [.], ack 2587, win 164, options [nop,nop,TS val 3145463196 ecr 3098557811], length 0
12:18:29.489601 IP 170.72.250.157.https > system.54268: Flags [P.], seq 6942:7469, ack 2587, win 164, options [nop,nop,TS val 3145463196 ecr 3098557811], length 527
12:18:29.494476 IP system.54268 > 170.72.250.157.https: Flags [P.], seq 2587:2618, ack 7469, win 58, options [nop,nop,TS val 3098557858 ecr 3145463196], length 31
12:18:29.497709 IP system.54274 > 170.72.250.157.https: Flags [S], seq 4022273379, win 64240, options [mss 1460,sackOK,TS val 730921504 ecr 0,nop,wscale 10], length 0
12:18:29.537911 IP 170.72.250.157.https > system.54274: Flags [S.], seq 1485149846, ack 4022273380, win 62643, options [mss 1452,sackOK,TS val 2316863874 ecr 730921504,nop,wscale 9], length 0
12:18:29.538038 IP system.54274 > 170.72.250.157.https: Flags [.], ack 1, win 63, options [nop,nop,TS val 730921544 ecr 2316863874], length 0
12:18:29.542436 IP system.54274 > 170.72.250.157.https: Flags [.], seq 1:1441, ack 1, win 63, options [nop,nop,TS val 730921549 ecr 2316863874], length 1440
12:18:29.542481 IP system.54274 > 170.72.250.157.https: Flags [P.], seq 1441:2401, ack 1, win 63, options [nop,nop,TS val 730921549 ecr 2316863874], length 960
12:18:29.572942 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [.], seq 1:1429, ack 324, win 151, options [nop,nop,TS val 3559417921 ecr 2099581200], length 1428
12:18:29.573067 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 1429, win 35, options [nop,nop,TS val 2099581623 ecr 3559417921], length 0
12:18:29.573313 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 1429:2857, ack 324, win 151, options [nop,nop,TS val 3559417921 ecr 2099581200], length 1428
12:18:29.573373 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 2857, win 34, options [nop,nop,TS val 2099581624 ecr 3559417921], length 0
12:18:29.573449 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [.], seq 2857:4285, ack 324, win 151, options [nop,nop,TS val 3559417922 ecr 2099581200], length 1428
12:18:29.573491 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 4285, win 33, options [nop,nop,TS val 2099581624 ecr 3559417922], length 0
12:18:29.574410 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 4285:5671, ack 324, win 151, options [nop,nop,TS val 3559417922 ecr 2099581200], length 1386
12:18:29.574411 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 5671:5702, ack 324, win 151, options [nop,nop,TS val 3559417923 ecr 2099581200], length 31
12:18:29.574412 IP 170.72.250.157.https > system.54268: Flags [.], ack 2618, win 164, options [nop,nop,TS val 3145463281 ecr 3098557858], length 0
12:18:29.574489 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 5671, win 35, options [nop,nop,TS val 2099581625 ecr 3559417922], length 0
12:18:29.574547 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 5702, win 35, options [nop,nop,TS val 2099581625 ecr 3559417923], length 0
12:18:29.587960 IP 170.72.250.157.https > system.54274: Flags [.], ack 1441, win 158, options [nop,nop,TS val 2316863924 ecr 730921549], length 0
12:18:29.592273 IP 170.72.250.157.https > system.54274: Flags [.], ack 2401, win 164, options [nop,nop,TS val 2316863929 ecr 730921549], length 0
12:18:29.594515 IP 170.72.250.157.https > system.54274: Flags [.], seq 1:1441, ack 2401, win 164, options [nop,nop,TS val 2316863930 ecr 730921549], length 1440
12:18:29.594607 IP system.54274 > 170.72.250.157.https: Flags [.], ack 1441, win 62, options [nop,nop,TS val 730921601 ecr 2316863930], length 0
12:18:29.595255 IP 170.72.250.157.https > system.54274: Flags [P.], seq 1441:2881, ack 2401, win 164, options [nop,nop,TS val 2316863930 ecr 730921549], length 1440
12:18:29.595315 IP system.54274 > 170.72.250.157.https: Flags [.], ack 2881, win 61, options [nop,nop,TS val 730921602 ecr 2316863930], length 0
12:18:29.595837 IP 170.72.250.157.https > system.54274: Flags [.], seq 2881:4321, ack 2401, win 164, options [nop,nop,TS val 2316863930 ecr 730921549], length 1440
12:18:29.595888 IP system.54274 > 170.72.250.157.https: Flags [.], ack 4321, win 60, options [nop,nop,TS val 730921602 ecr 2316863930], length 0
12:18:29.596486 ARP, Request who-has DESKTOP-UOCCVVL.local tell system, length 28
12:18:29.597396 IP 170.72.250.157.https > system.54274: Flags [P.], seq 4321:5761, ack 2401, win 164, options [nop,nop,TS val 2316863930 ecr 730921549], length 1440
12:18:29.597397 IP 170.72.250.157.https > system.54274: Flags [P.], seq 5761:6948, ack 2401, win 164, options [nop,nop,TS val 2316863930 ecr 730921549], length 1187
12:18:29.597480 IP system.54274 > 170.72.250.157.https: Flags [.], ack 5761, win 59, options [nop,nop,TS val 730921604 ecr 2316863930], length 0
12:18:29.597534 IP system.54274 > 170.72.250.157.https: Flags [.], ack 6948, win 58, options [nop,nop,TS val 730921604 ecr 2316863930], length 0
12:18:29.598886 ARP, Reply DESKTOP-UOCCVVL.local is-at 1c:69:7a:de:b6:f6 (oui Unknown), length 46
12:18:29.598957 IP system.35744 > DESKTOP-UOCCVVL.local.llmnr: Flags [S], seq 2811154916, win 64240, options [mss 1460,sackOK,TS val 1950102108 ecr 0,nop,wscale 10,tfo  cookiereq,nop,nop], length 0
12:18:29.622150 IP system.54274 > 170.72.250.157.https: Flags [P.], seq 2401:2465, ack 6948, win 58, options [nop,nop,TS val 730921628 ecr 2316863930], length 64
12:18:29.624008 IP system.54274 > 170.72.250.157.https: Flags [P.], seq 2465:3241, ack 6948, win 58, options [nop,nop,TS val 730921630 ecr 2316863930], length 776
12:18:29.666942 IP 170.72.250.157.https > system.54274: Flags [.], ack 3241, win 168, options [nop,nop,TS val 2316864003 ecr 730921628], length 0
12:18:29.673818 IP 170.72.250.157.https > system.54274: Flags [P.], seq 6948:7826, ack 3241, win 168, options [nop,nop,TS val 2316864010 ecr 730921628], length 878
12:18:29.714279 IP system.54274 > 170.72.250.157.https: Flags [.], ack 7826, win 58, options [nop,nop,TS val 730921721 ecr 2316864010], length 0
12:18:29.809738 IP system.54274 > 170.72.250.157.https: Flags [P.], seq 3241:3507, ack 7826, win 58, options [nop,nop,TS val 730921816 ecr 2316864010], length 266
12:18:29.819579 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [P.], seq 324:483, ack 5702, win 36, options [nop,nop,TS val 2099581870 ecr 3559417923], length 159
12:18:29.820163 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [P.], seq 483:560, ack 5702, win 36, options [nop,nop,TS val 2099581870 ecr 3559417923], length 77
12:18:29.852280 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [.], ack 483, win 156, options [nop,nop,TS val 3559418202 ecr 2099581870], length 0
12:18:29.853256 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [.], ack 560, win 156, options [nop,nop,TS val 3559418203 ecr 2099581870], length 0
12:18:29.854264 IP 170.72.250.157.https > system.54274: Flags [P.], seq 7826:7863, ack 3507, win 168, options [nop,nop,TS val 2316864191 ecr 730921816], length 37
12:18:29.854265 IP 170.72.250.157.https > system.54274: Flags [P.], seq 7863:8138, ack 3507, win 168, options [nop,nop,TS val 2316864191 ecr 730921816], length 275
12:18:29.854387 IP system.54274 > 170.72.250.157.https: Flags [.], ack 7863, win 58, options [nop,nop,TS val 730921861 ecr 2316864191], length 0
12:18:29.854477 IP system.54274 > 170.72.250.157.https: Flags [.], ack 8138, win 58, options [nop,nop,TS val 730921861 ecr 2316864191], length 0
12:18:29.854828 IP system.54274 > 170.72.250.157.https: Flags [P.], seq 3507:3548, ack 8138, win 58, options [nop,nop,TS val 730921861 ecr 2316864191], length 41
12:18:29.857328 IP system.54274 > 170.72.250.157.https: Flags [P.], seq 3548:3630, ack 8138, win 58, options [nop,nop,TS val 730921864 ecr 2316864191], length 82
12:18:29.858907 IP system.54274 > 170.72.250.157.https: Flags [P.], seq 3630:3705, ack 8138, win 58, options [nop,nop,TS val 730921865 ecr 2316864191], length 75
12:18:29.896360 IP 170.72.250.157.https > system.54274: Flags [.], ack 3630, win 168, options [nop,nop,TS val 2316864233 ecr 730921861], length 0
12:18:29.898849 IP 170.72.250.157.https > system.54274: Flags [P.], seq 8138:8234, ack 3705, win 168, options [nop,nop,TS val 2316864235 ecr 730921865], length 96
12:18:29.901063 IP system.54274 > 170.72.250.157.https: Flags [P.], seq 3705:3742, ack 8234, win 58, options [nop,nop,TS val 730921907 ecr 2316864235], length 37
12:18:29.980508 IP 170.72.250.157.https > system.54274: Flags [.], ack 3742, win 168, options [nop,nop,TS val 2316864317 ecr 730921907], length 0
12:18:30.075874 IP system.41888 > 170.72.250.157.https: Flags [P.], seq 30:54, ack 27, win 83, options [nop,nop,TS val 3158713496 ecr 427901754], length 24
12:18:30.075946 IP system.41888 > 170.72.250.157.https: Flags [F.], seq 54, ack 27, win 83, options [nop,nop,TS val 3158713496 ecr 427901754], length 0
12:18:30.116128 IP 170.72.250.157.https > system.41888: Flags [P.], seq 27:51, ack 55, win 168, options [nop,nop,TS val 427902827 ecr 3158713496], length 24
12:18:30.116129 IP 170.72.250.157.https > system.41888: Flags [R.], seq 51, ack 55, win 168, options [nop,nop,TS val 427902827 ecr 3158713496], length 0
12:18:30.116268 IP system.41888 > 170.72.250.157.https: Flags [R], seq 590684125, win 0, length 0
12:18:30.121726 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 5702:6057, ack 560, win 156, options [nop,nop,TS val 3559418471 ecr 2099581870], length 355
12:18:30.121845 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 6057, win 36, options [nop,nop,TS val 2099582172 ecr 3559418471], length 0
12:18:30.270690 IP system.56172 > resolver.qwest.net.domain: 37481+ [1au] A? storage.googleapis.com. (51)
12:18:30.286475 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [P.], seq 560:704, ack 6057, win 36, options [nop,nop,TS val 2099582337 ecr 3559418471], length 144
12:18:30.293358 IP resolver.qwest.net.domain > system.56172: 37481 11/0/1 A 142.250.73.123, A 173.194.43.207, A 142.250.107.207, A 142.250.69.187, A 142.251.188.207, A 142.250.73.91, A 142.251.33.219, A 142.250.73.155, A 142.251.34.219, A 142.251.45.155, A 172.253.117.207 (227)
12:18:30.306607 IP system.57821 > resolver.qwest.net.domain: 61321+ [1au] A? locus-r.wbx2.com. (45)
12:18:30.318670 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [.], ack 704, win 162, options [nop,nop,TS val 3559418668 ecr 2099582337], length 0
12:18:30.335511 IP system.54274 > 170.72.250.157.https: Flags [P.], seq 3742:3772, ack 8234, win 58, options [nop,nop,TS val 730922342 ecr 2316864317], length 30
12:18:30.336275 IP system.49769 > pnseaa-an-in-f27.1e100.net.https: UDP, length 1252
12:18:30.336317 IP system.49769 > pnseaa-an-in-f27.1e100.net.https: UDP, length 1252
12:18:30.336335 IP system.49769 > pnseaa-an-in-f27.1e100.net.https: UDP, length 1252
12:18:30.338806 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
12:18:30.347809 IP resolver.qwest.net.domain > system.57821: 61321 5/0/1 CNAME prod-aore-meet1.wbx2.com., CNAME wxt-meet-ingressgateway-ds.wxtm-prod-aore-meet1.b80.prod.infra.webex.com., A 170.72.250.201, A 170.72.250.231, A 170.72.250.15 (209)
12:18:30.373517 IP pnseaa-an-in-f27.1e100.net.https > system.49769: UDP, length 44
12:18:30.373824 IP 170.72.250.157.https > system.54274: Flags [.], ack 3772, win 168, options [nop,nop,TS val 2316864711 ecr 730922342], length 0
12:18:30.375027 IP 170.72.250.157.https > system.54274: Flags [P.], seq 8234:8260, ack 3772, win 168, options [nop,nop,TS val 2316864712 ecr 730922342], length 26
12:18:30.380350 IP pnseaa-an-in-f27.1e100.net.https > system.49769: UDP, length 44
12:18:30.385516 IP system.47013 > resolver.qwest.net.domain: 26397+ [1au] HTTPS? auth.netacad.com. (45)
12:18:30.386745 IP system.59139 > resolver.qwest.net.domain: 23113+ [1au] HTTPS? api.netacad.com. (44)
12:18:30.387875 IP pnseaa-an-in-f27.1e100.net.https > system.49769: UDP, length 1252
12:18:30.388853 IP pnseaa-an-in-f27.1e100.net.https > system.49769: UDP, length 1252
12:18:30.389289 IP pnseaa-an-in-f27.1e100.net.https > system.49769: UDP, length 1252
12:18:30.391598 IP system.39598 > resolver.qwest.net.domain: 966+ [1au] A? auth.netacad.com. (45)
12:18:30.393923 IP system.40269 > resolver.qwest.net.domain: 62453+ [1au] A? api.netacad.com. (44)
12:18:30.395012 IP pnseaa-an-in-f27.1e100.net.https > system.49769: UDP, length 1252
12:18:30.395715 IP pnseaa-an-in-f27.1e100.net.https > system.49769: UDP, length 1252
12:18:30.396232 IP pnseaa-an-in-f27.1e100.net.https > system.49769: UDP, length 1047
12:18:30.408980 IP system.59153 > resolver.qwest.net.domain: 63457+ [1au] PTR? 123.73.250.142.in-addr.arpa. (56)
12:18:30.415293 IP system.54274 > 170.72.250.157.https: Flags [.], ack 8260, win 58, options [nop,nop,TS val 730922422 ecr 2316864712], length 0
12:18:30.422382 IP resolver.qwest.net.domain > system.47013: 26397 1/1/1 CNAME keycloak-alb-prod-conv-1430470243.us-east-1.elb.amazonaws.com. (205)
12:18:30.422563 IP system.49769 > pnseaa-an-in-f27.1e100.net.https: UDP, length 1252
12:18:30.424322 IP system.56714 > resolver.qwest.net.domain: 53129+ [1au] HTTPS? keycloak-alb-prod-conv-1430470243.us-east-1.elb.amazonaws.com. (90)
12:18:30.426633 IP resolver.qwest.net.domain > system.39598: 966 3/0/1 CNAME keycloak-alb-prod-conv-1430470243.us-east-1.elb.amazonaws.com., A 3.233.172.61, A 18.205.34.199 (152)
12:18:30.431757 IP resolver.qwest.net.domain > system.59153: 63457 1/0/1 PTR pnseaa-an-in-f27.1e100.net. (96)
12:18:30.432553 IP resolver.qwest.net.domain > system.59139: 23113 1/1/1 CNAME core-alb-prod-1815909382.us-east-1.elb.amazonaws.com. (195)
12:18:30.435522 IP system.53990 > resolver.qwest.net.domain: 16160+ [1au] HTTPS? core-alb-prod-1815909382.us-east-1.elb.amazonaws.com. (81)
12:18:30.439952 IP resolver.qwest.net.domain > system.40269: 62453 3/0/1 CNAME core-alb-prod-1815909382.us-east-1.elb.amazonaws.com., A 34.233.187.75, A 52.203.181.60 (142)
12:18:30.443875 IP system.49769 > pnseaa-an-in-f27.1e100.net.https: UDP, length 179
12:18:30.458173 IP resolver.qwest.net.domain > system.56714: 53129 0/1/1 (175)
12:18:30.459667 IP resolver.qwest.net.domain > system.53990: 16160 0/1/1 (166)
12:18:30.463918 IP system.37794 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [S], seq 3675269412, win 64240, options [mss 1460,sackOK,TS val 3556693266 ecr 0,nop,wscale 10], length 0
12:18:30.471977 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [S], seq 2575244541, win 64240, options [mss 1460,sackOK,TS val 337261325 ecr 0,nop,wscale 10], length 0
12:18:30.475865 IP pnseaa-an-in-f27.1e100.net.https > system.49769: UDP, length 742
12:18:30.480716 IP system.49769 > pnseaa-an-in-f27.1e100.net.https: UDP, length 32
12:18:30.501298 IP pnseaa-an-in-f27.1e100.net.https > system.49769: UDP, length 27
12:18:30.505744 IP system.43072 > resolver.qwest.net.domain: 15530+ [1au] PTR? 199.34.205.18.in-addr.arpa. (55)
12:18:30.545249 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37794: Flags [S.], seq 3879230086, ack 3675269413, win 26847, options [mss 1452,sackOK,TS val 872258973 ecr 3556693266,nop,wscale 8], length 0
12:18:30.545384 IP system.37794 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 1, win 63, options [nop,nop,TS val 3556693348 ecr 872258973], length 0
12:18:30.552024 IP resolver.qwest.net.domain > system.43072: 15530 1/0/1 PTR ec2-18-205-34-199.compute-1.amazonaws.com. (110)
12:18:30.555926 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [S.], seq 1030717699, ack 2575244542, win 26847, options [mss 1452,sackOK,TS val 2478261837 ecr 337261325,nop,wscale 8], length 0
12:18:30.556047 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [.], ack 1, win 63, options [nop,nop,TS val 337261409 ecr 2478261837], length 0
12:18:30.558146 IP system.37794 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], seq 1:1441, ack 1, win 63, options [nop,nop,TS val 3556693360 ecr 872258973], length 1440
12:18:30.558228 IP system.37794 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [P.], seq 1441:2273, ack 1, win 63, options [nop,nop,TS val 3556693360 ecr 872258973], length 832
12:18:30.560258 IP system.37602 > resolver.qwest.net.domain: 45789+ [1au] PTR? 75.187.233.34.in-addr.arpa. (55)
12:18:30.569489 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [.], seq 1:1441, ack 1, win 63, options [nop,nop,TS val 337261423 ecr 2478261837], length 1440
12:18:30.569543 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [P.], seq 1441:2272, ack 1, win 63, options [nop,nop,TS val 337261423 ecr 2478261837], length 831
12:18:30.574724 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 6057:7340, ack 704, win 162, options [nop,nop,TS val 3559418923 ecr 2099582337], length 1283
12:18:30.574725 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 7340:7371, ack 704, win 162, options [nop,nop,TS val 3559418924 ecr 2099582337], length 31
12:18:30.574840 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 7340, win 36, options [nop,nop,TS val 2099582625 ecr 3559418923], length 0
12:18:30.574906 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 7371, win 36, options [nop,nop,TS val 2099582625 ecr 3559418924], length 0
12:18:30.617187 IP resolver.qwest.net.domain > system.37602: 45789 1/0/1 PTR ec2-34-233-187-75.compute-1.amazonaws.com. (110)
12:18:30.646110 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37794: Flags [.], ack 1441, win 175, options [nop,nop,TS val 872259074 ecr 3556693360], length 0
12:18:30.649468 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37794: Flags [.], ack 2273, win 187, options [nop,nop,TS val 872259078 ecr 3556693360], length 0
12:18:30.650716 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37794: Flags [.], seq 1:1441, ack 2273, win 187, options [nop,nop,TS val 872259079 ecr 3556693360], length 1440
12:18:30.650789 IP system.37794 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 1441, win 62, options [nop,nop,TS val 3556693453 ecr 872259079], length 0
12:18:30.651695 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37794: Flags [.], seq 1441:2881, ack 2273, win 187, options [nop,nop,TS val 872259079 ecr 3556693360], length 1440
12:18:30.651739 IP system.37794 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 2881, win 61, options [nop,nop,TS val 3556693454 ecr 872259079], length 0
12:18:30.652521 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37794: Flags [.], seq 2881:4321, ack 2273, win 187, options [nop,nop,TS val 872259079 ecr 3556693360], length 1440
12:18:30.652521 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37794: Flags [P.], seq 4321:4398, ack 2273, win 187, options [nop,nop,TS val 872259080 ecr 3556693360], length 77
12:18:30.652565 IP system.37794 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 4321, win 60, options [nop,nop,TS val 3556693455 ecr 872259079], length 0
12:18:30.652595 IP system.37794 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 4398, win 60, options [nop,nop,TS val 3556693455 ecr 872259080], length 0
12:18:30.661732 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [.], ack 1441, win 117, options [nop,nop,TS val 2478261942 ecr 337261423], length 0
12:18:30.664467 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [.], ack 2272, win 187, options [nop,nop,TS val 2478261946 ecr 337261423], length 0
12:18:30.665400 IP system.37794 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [P.], seq 2273:2337, ack 4398, win 60, options [nop,nop,TS val 3556693468 ecr 872259080], length 64
12:18:30.665964 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [.], seq 1:1441, ack 2272, win 187, options [nop,nop,TS val 2478261947 ecr 337261423], length 1440
12:18:30.666026 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [.], ack 1441, win 62, options [nop,nop,TS val 337261519 ecr 2478261947], length 0
12:18:30.666504 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [.], seq 1441:2881, ack 2272, win 187, options [nop,nop,TS val 2478261947 ecr 337261423], length 1440
12:18:30.666552 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [.], ack 2881, win 61, options [nop,nop,TS val 337261520 ecr 2478261947], length 0
12:18:30.667417 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [P.], seq 2881:4398, ack 2272, win 187, options [nop,nop,TS val 2478261948 ecr 337261423], length 1517
12:18:30.667456 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [.], ack 4398, win 60, options [nop,nop,TS val 337261521 ecr 2478261948], length 0
12:18:30.670605 IP system.37794 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [P.], seq 2337:2429, ack 4398, win 60, options [nop,nop,TS val 3556693473 ecr 872259080], length 92
12:18:30.679435 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [P.], seq 2272:2336, ack 4398, win 60, options [nop,nop,TS val 337261533 ecr 2478261948], length 64
12:18:30.680616 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [P.], seq 2336:2428, ack 4398, win 60, options [nop,nop,TS val 337261534 ecr 2478261948], length 92
12:18:30.746649 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37794: Flags [.], ack 2337, win 187, options [nop,nop,TS val 872259175 ecr 3556693468], length 0
12:18:30.746649 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37794: Flags [P.], seq 4398:4577, ack 2337, win 187, options [nop,nop,TS val 872259175 ecr 3556693468], length 179
12:18:30.746773 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37794: Flags [P.], seq 4577:4639, ack 2337, win 187, options [nop,nop,TS val 872259175 ecr 3556693468], length 62
12:18:30.748281 IP system.37794 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 4639, win 60, options [nop,nop,TS val 3556693551 ecr 872259175], length 0
12:18:30.748546 IP system.37794 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [P.], seq 2429:2460, ack 4639, win 60, options [nop,nop,TS val 3556693551 ecr 872259175], length 31
12:18:30.750760 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37794: Flags [P.], seq 4639:4670, ack 2429, win 187, options [nop,nop,TS val 872259180 ecr 3556693473], length 31
12:18:30.762634 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [.], ack 2336, win 187, options [nop,nop,TS val 2478262044 ecr 337261533], length 0
12:18:30.762636 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [P.], seq 4398:4577, ack 2336, win 187, options [nop,nop,TS val 2478262044 ecr 337261533], length 179
12:18:30.762791 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [P.], seq 4577:4639, ack 2336, win 187, options [nop,nop,TS val 2478262044 ecr 337261533], length 62
12:18:30.764326 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [.], ack 4639, win 60, options [nop,nop,TS val 337261618 ecr 2478262044], length 0
12:18:30.764587 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [P.], seq 2428:2459, ack 4639, win 60, options [nop,nop,TS val 337261618 ecr 2478262044], length 31
12:18:30.764850 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [P.], seq 4639:4670, ack 2428, win 187, options [nop,nop,TS val 2478262045 ecr 337261534], length 31
12:18:30.791273 IP system.37794 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 4670, win 60, options [nop,nop,TS val 3556693594 ecr 872259180], length 0
12:18:30.805268 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [.], ack 4670, win 60, options [nop,nop,TS val 337261659 ecr 2478262045], length 0
12:18:30.872578 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37794: Flags [.], ack 2460, win 187, options [nop,nop,TS val 872259301 ecr 3556693551], length 0
12:18:30.891423 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [.], ack 2459, win 187, options [nop,nop,TS val 2478262173 ecr 337261618], length 0
12:18:31.338795 IP system.38410 > 209.126.35.79.https: Flags [P.], seq 2525371658:2525371697, ack 2646118152, win 63, options [nop,nop,TS val 1504046674 ecr 3443079236], length 39
12:18:31.366040 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
12:18:31.373054 IP 209.126.35.79.https > system.38410: Flags [.], ack 39, win 278, options [nop,nop,TS val 3443137230 ecr 1504046674], length 0
12:18:31.378136 IP system.54274 > 170.72.250.157.https: Flags [P.], seq 3772:3796, ack 8260, win 58, options [nop,nop,TS val 730923384 ecr 2316864712], length 24
12:18:31.378290 IP system.54274 > 170.72.250.157.https: Flags [F.], seq 3796, ack 8260, win 58, options [nop,nop,TS val 730923385 ecr 2316864712], length 0
12:18:31.404650 IP system.52439 > resolver.qwest.net.domain: 61400+ [1au] PTR? 79.35.126.209.in-addr.arpa. (55)
12:18:31.419107 IP 170.72.250.157.https > system.54274: Flags [P.], seq 8260:8284, ack 3797, win 168, options [nop,nop,TS val 2316865754 ecr 730923384], length 24
12:18:31.419108 IP 170.72.250.157.https > system.54274: Flags [R.], seq 8284, ack 3797, win 168, options [nop,nop,TS val 2316865754 ecr 730923384], length 0
12:18:31.419282 IP system.54274 > 170.72.250.157.https: Flags [R], seq 4022277176, win 0, length 0
12:18:31.505942 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [P.], seq 704:797, ack 7371, win 36, options [nop,nop,TS val 2099583556 ecr 3559418924], length 93
12:18:31.507538 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [P.], seq 2559695859:2559696161, ack 2049094295, win 60, options [nop,nop,TS val 265460864 ecr 872247993], length 302
12:18:31.530119 IP 209.126.35.79.https > system.38410: Flags [P.], seq 1:40, ack 39, win 278, options [nop,nop,TS val 3443137387 ecr 1504046674], length 39
12:18:31.540105 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [.], ack 797, win 162, options [nop,nop,TS val 3559419888 ecr 2099583556], length 0
12:18:31.571329 IP system.38410 > 209.126.35.79.https: Flags [.], ack 40, win 63, options [nop,nop,TS val 1504046907 ecr 3443137387], length 0
12:18:31.601021 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [P.], seq 1:3228, ack 302, win 290, options [nop,nop,TS val 872260027 ecr 265460864], length 3227
12:18:31.601021 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [P.], seq 3228:3259, ack 302, win 290, options [nop,nop,TS val 872260027 ecr 265460864], length 31
12:18:31.601099 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 3228, win 57, options [nop,nop,TS val 265460957 ecr 872260027], length 0
12:18:31.601158 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 3259, win 57, options [nop,nop,TS val 265460957 ecr 872260027], length 0
12:18:31.677367 IP resolver.qwest.net.domain > system.52439: 61400 ServFail 0/0/1 (55)
12:18:31.677671 IP system.52439 > resolver.qwest.net.domain: 61400+ [1au] PTR? 79.35.126.209.in-addr.arpa. (55)
12:18:31.701709 IP resolver.qwest.net.domain > system.52439: 61400 ServFail 0/0/1 (55)
12:18:31.701978 IP system.52439 > resolver.qwest.net.domain: 61400+ PTR? 79.35.126.209.in-addr.arpa. (44)
12:18:31.727133 IP resolver.qwest.net.domain > system.52439: 61400 ServFail 0/0/0 (44)
12:18:31.727919 IP system.36168 > _gateway.domain: 61400+ [1au] PTR? 79.35.126.209.in-addr.arpa. (55)
12:18:31.754184 IP _gateway.domain > system.36168: 61400 ServFail 0/0/1 (55)
12:18:31.754466 IP system.36168 > _gateway.domain: 61400+ [1au] PTR? 79.35.126.209.in-addr.arpa. (55)
12:18:31.780448 IP _gateway.domain > system.36168: 61400 ServFail 0/0/1 (55)
12:18:31.780662 IP system.36168 > _gateway.domain: 61400+ PTR? 79.35.126.209.in-addr.arpa. (44)
12:18:31.785889 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [P.], seq 302:645, ack 3259, win 57, options [nop,nop,TS val 265461142 ecr 872260027], length 343
12:18:31.801935 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 7371:8652, ack 797, win 162, options [nop,nop,TS val 3559420150 ecr 2099583556], length 1281
12:18:31.801998 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 8652, win 35, options [nop,nop,TS val 2099583852 ecr 3559420150], length 0
12:18:31.803229 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 8652:8683, ack 797, win 162, options [nop,nop,TS val 3559420151 ecr 2099583556], length 31
12:18:31.803289 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 8683, win 36, options [nop,nop,TS val 2099583854 ecr 3559420151], length 0
12:18:31.806371 IP _gateway.domain > system.36168: 61400 ServFail 0/0/0 (44)
12:18:31.851493 IP system.42855 > _gateway.domain: 13198+ [1au] A? storage.googleapis.com. (51)
12:18:31.878644 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [P.], seq 3259:4853, ack 645, win 301, options [nop,nop,TS val 872260305 ecr 265461142], length 1594
12:18:31.878645 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [P.], seq 4853:4884, ack 645, win 301, options [nop,nop,TS val 872260305 ecr 265461142], length 31
12:18:31.878718 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 4853, win 56, options [nop,nop,TS val 265461235 ecr 872260305], length 0
12:18:31.878755 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 4884, win 56, options [nop,nop,TS val 265461235 ecr 872260305], length 0
12:18:31.880744 IP _gateway.domain > system.42855: 13198 11/0/1 A 142.251.34.219, A 142.250.69.187, A 142.251.33.219, A 142.250.73.91, A 142.250.73.123, A 142.251.188.207, A 142.250.73.155, A 173.194.43.207, A 142.250.107.207, A 142.251.45.155, A 172.253.117.207 (227)
12:18:32.059197 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [P.], seq 645:790, ack 4884, win 56, options [nop,nop,TS val 265461415 ecr 872260305], length 145
12:18:32.155413 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [.], seq 4884:6324, ack 790, win 313, options [nop,nop,TS val 872260582 ecr 265461415], length 1440
12:18:32.155513 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 6324, win 55, options [nop,nop,TS val 265461512 ecr 872260582], length 0
12:18:32.155950 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [.], seq 6324:7764, ack 790, win 313, options [nop,nop,TS val 872260582 ecr 265461415], length 1440
12:18:32.155992 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 7764, win 54, options [nop,nop,TS val 265461512 ecr 872260582], length 0
12:18:32.156412 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [.], seq 7764:9204, ack 790, win 313, options [nop,nop,TS val 872260582 ecr 265461415], length 1440
12:18:32.156456 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 9204, win 53, options [nop,nop,TS val 265461513 ecr 872260582], length 0
12:18:32.157023 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [.], seq 9204:10644, ack 790, win 313, options [nop,nop,TS val 872260582 ecr 265461415], length 1440
12:18:32.157065 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 10644, win 52, options [nop,nop,TS val 265461513 ecr 872260582], length 0
12:18:32.157131 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [P.], seq 10644:11517, ack 790, win 313, options [nop,nop,TS val 872260582 ecr 265461415], length 873
12:18:32.157133 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [P.], seq 11517:11548, ack 790, win 313, options [nop,nop,TS val 872260582 ecr 265461415], length 31
12:18:32.157188 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 11517, win 52, options [nop,nop,TS val 265461513 ecr 872260582], length 0
12:18:32.157256 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 11548, win 52, options [nop,nop,TS val 265461514 ecr 872260582], length 0
12:18:32.343391 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [P.], seq 790:1114, ack 11548, win 52, options [nop,nop,TS val 265461700 ecr 872260582], length 324
12:18:32.388876 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
12:18:32.444428 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [P.], seq 11548:12278, ack 1114, win 324, options [nop,nop,TS val 872260870 ecr 265461700], length 730
12:18:32.444504 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 12278, win 52, options [nop,nop,TS val 265461801 ecr 872260870], length 0
12:18:32.482061 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [P.], seq 1114:1572, ack 12278, win 52, options [nop,nop,TS val 265461838 ecr 872260870], length 458
12:18:32.490028 IP system.49891 > pnseab-ab-in-f27.1e100.net.https: UDP, length 1252
12:18:32.490073 IP system.49891 > pnseab-ab-in-f27.1e100.net.https: UDP, length 1252
12:18:32.490084 IP system.49891 > pnseab-ab-in-f27.1e100.net.https: UDP, length 1252
12:18:32.503762 IP system.50374 > _gateway.domain: 16366+ [1au] PTR? 219.34.251.142.in-addr.arpa. (56)
12:18:32.529763 IP pnseab-ab-in-f27.1e100.net.https > system.49891: UDP, length 43
12:18:32.532739 IP _gateway.domain > system.50374: 16366 2/0/1 PTR pnseab-ab-in-f27.1e100.net., PTR qro02s27-in-f27.1e100.net. (126)
12:18:32.533518 IP pnseab-ab-in-f27.1e100.net.https > system.49891: UDP, length 43
12:18:32.541311 IP pnseab-ab-in-f27.1e100.net.https > system.49891: UDP, length 1252
12:18:32.541949 IP pnseab-ab-in-f27.1e100.net.https > system.49891: UDP, length 1252
12:18:32.542642 IP pnseab-ab-in-f27.1e100.net.https > system.49891: UDP, length 1252
12:18:32.544720 IP system.49891 > pnseab-ab-in-f27.1e100.net.https: UDP, length 1252
12:18:32.549145 IP pnseab-ab-in-f27.1e100.net.https > system.49891: UDP, length 1252
12:18:32.549629 IP pnseab-ab-in-f27.1e100.net.https > system.49891: UDP, length 2289
12:18:32.549837 IP system.49891 > pnseab-ab-in-f27.1e100.net.https: UDP, length 42
12:18:32.552881 IP system.49891 > pnseab-ab-in-f27.1e100.net.https: UDP, length 43
12:18:32.560895 IP system.49891 > pnseab-ab-in-f27.1e100.net.https: UDP, length 183
12:18:32.561644 IP system.49891 > pnseab-ab-in-f27.1e100.net.https: UDP, length 356
12:18:32.594330 IP pnseab-ab-in-f27.1e100.net.https > system.49891: UDP, length 742
12:18:32.596232 IP system.49891 > pnseab-ab-in-f27.1e100.net.https: UDP, length 32
12:18:32.597614 IP pnseab-ab-in-f27.1e100.net.https > system.49891: UDP, length 183
12:18:32.597614 IP pnseab-ab-in-f27.1e100.net.https > system.49891: UDP, length 30
12:18:32.598556 IP system.49891 > pnseab-ab-in-f27.1e100.net.https: UDP, length 37
12:18:32.608501 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [.], ack 1572, win 335, options [nop,nop,TS val 872261037 ecr 265461838], length 0
12:18:32.622196 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [P.], seq 12278:14454, ack 1572, win 335, options [nop,nop,TS val 872261050 ecr 265461838], length 2176
12:18:32.622433 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 14454, win 50, options [nop,nop,TS val 265461979 ecr 872261050], length 0
12:18:32.652085 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [P.], seq 797:952, ack 8683, win 36, options [nop,nop,TS val 2099584702 ecr 3559420151], length 155
12:18:32.655867 IP pnseab-ab-in-f27.1e100.net.https > system.49891: UDP, length 30
12:18:32.685556 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [.], ack 952, win 168, options [nop,nop,TS val 3559421035 ecr 2099584702], length 0
12:18:32.691372 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [.], seq 8683:10111, ack 952, win 168, options [nop,nop,TS val 3559421040 ecr 2099584702], length 1428
12:18:32.691446 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 10111, win 35, options [nop,nop,TS val 2099584742 ecr 3559421040], length 0
12:18:32.691668 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 10111:11539, ack 952, win 168, options [nop,nop,TS val 3559421040 ecr 2099584702], length 1428
12:18:32.691716 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 11539, win 35, options [nop,nop,TS val 2099584742 ecr 3559421040], length 0
12:18:32.692490 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [.], seq 11539:12967, ack 952, win 168, options [nop,nop,TS val 3559421040 ecr 2099584702], length 1428
12:18:32.692555 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 12967, win 35, options [nop,nop,TS val 2099584743 ecr 3559421040], length 0
12:18:32.692618 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 12967:14356, ack 952, win 168, options [nop,nop,TS val 3559421040 ecr 2099584702], length 1389
12:18:32.692652 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 14356, win 34, options [nop,nop,TS val 2099584743 ecr 3559421040], length 0
12:18:32.692940 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 14356:14387, ack 952, win 168, options [nop,nop,TS val 3559421041 ecr 2099584702], length 31
12:18:32.692975 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 14387, win 36, options [nop,nop,TS val 2099584743 ecr 3559421041], length 0
12:18:33.105953 IP 209.126.35.79.https > system.38410: Flags [P.], seq 40:79, ack 39, win 278, options [nop,nop,TS val 3443138935 ecr 1504046907], length 39
12:18:33.106067 IP system.38410 > 209.126.35.79.https: Flags [.], ack 79, win 63, options [nop,nop,TS val 1504048441 ecr 3443138935], length 0
12:18:33.106456 IP system.38410 > 209.126.35.79.https: Flags [P.], seq 39:78, ack 79, win 63, options [nop,nop,TS val 1504048442 ecr 3443138935], length 39
12:18:33.106581 IP 209.126.35.79.https > system.38410: Flags [F.], seq 79:103, ack 39, win 278, options [nop,nop,TS val 3443138935 ecr 1504046907], length 24
12:18:33.107463 IP system.38410 > 209.126.35.79.https: Flags [P.], seq 78:102, ack 104, win 63, options [nop,nop,TS val 1504048443 ecr 3443138935], length 24
12:18:33.107530 IP system.38410 > 209.126.35.79.https: Flags [F.], seq 102, ack 104, win 63, options [nop,nop,TS val 1504048443 ecr 3443138935], length 0
12:18:33.139367 IP 209.126.35.79.https > system.38410: Flags [.], ack 78, win 278, options [nop,nop,TS val 3443138998 ecr 1504048442], length 0
12:18:33.140149 IP 209.126.35.79.https > system.38410: Flags [.], ack 102, win 278, options [nop,nop,TS val 3443138999 ecr 1504048443], length 0
12:18:33.141172 IP 209.126.35.79.https > system.38410: Flags [.], ack 103, win 278, options [nop,nop,TS val 3443139000 ecr 1504048443], length 0
12:18:33.218747 IP pnseab-aa-in-f14.1e100.net.https > system.45572: UDP, length 41
12:18:33.219347 IP system.45572 > pnseab-aa-in-f14.1e100.net.https: UDP, length 32
12:18:33.303639 IP system.37240 > _gateway.domain: 23891+ [1au] PTR? 142.45.251.142.in-addr.arpa. (56)
12:18:33.308376 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
12:18:33.327839 IP _gateway.domain > system.37240: 23891 1/0/1 PTR pnseab-aa-in-f14.1e100.net. (96)
12:18:33.506508 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [P.], seq 952:1045, ack 14387, win 36, options [nop,nop,TS val 2099585557 ecr 3559421041], length 93
12:18:33.511724 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [P.], seq 1572:2736, ack 14454, win 50, options [nop,nop,TS val 265462868 ecr 872261050], length 1164
12:18:33.599995 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [.], ack 1045, win 168, options [nop,nop,TS val 3559421950 ecr 2099585557], length 0
12:18:33.601390 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [.], ack 2736, win 346, options [nop,nop,TS val 872262029 ecr 265462868], length 0
12:18:33.607766 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [.], seq 14454:15894, ack 2736, win 346, options [nop,nop,TS val 872262035 ecr 265462868], length 1440
12:18:33.608397 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [P.], seq 15894:17682, ack 2736, win 346, options [nop,nop,TS val 872262035 ecr 265462868], length 1788
12:18:33.608397 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [P.], seq 17682:17713, ack 2736, win 346, options [nop,nop,TS val 872262035 ecr 265462868], length 31
12:18:33.608675 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 17713, win 47, options [nop,nop,TS val 265462965 ecr 872262035], length 0
12:18:33.822783 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 14387:15666, ack 1045, win 168, options [nop,nop,TS val 3559422138 ecr 2099585557], length 1279
12:18:33.822784 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 15666:15698, ack 1045, win 168, options [nop,nop,TS val 3559422139 ecr 2099585557], length 32
12:18:33.822885 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 15666, win 36, options [nop,nop,TS val 2099585873 ecr 3559422138], length 0
12:18:33.822950 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 15698, win 36, options [nop,nop,TS val 2099585873 ecr 3559422139], length 0
12:18:33.823346 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 15698:15729, ack 1045, win 168, options [nop,nop,TS val 3559422139 ecr 2099585557], length 31
12:18:33.823389 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 15729, win 36, options [nop,nop,TS val 2099585874 ecr 3559422139], length 0
12:18:33.889610 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [P.], seq 2736:3729, ack 17713, win 47, options [nop,nop,TS val 265463246 ecr 872262035], length 993
12:18:33.984894 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [P.], seq 17713:19308, ack 3729, win 416, options [nop,nop,TS val 872262412 ecr 265463246], length 1595
12:18:33.984895 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [P.], seq 19308:19339, ack 3729, win 416, options [nop,nop,TS val 872262412 ecr 265463246], length 31
12:18:33.985301 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 19339, win 46, options [nop,nop,TS val 265463342 ecr 872262412], length 0
12:18:34.300360 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [P.], seq 3729:4095, ack 19339, win 46, options [nop,nop,TS val 265463657 ecr 872262412], length 366
12:18:34.332496 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
12:18:34.394970 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [.], seq 19339:22219, ack 4095, win 425, options [nop,nop,TS val 872262822 ecr 265463657], length 2880
12:18:34.395338 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 22219, win 44, options [nop,nop,TS val 265463752 ecr 872262822], length 0
12:18:34.395547 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [.], seq 22219:23659, ack 4095, win 425, options [nop,nop,TS val 872262822 ecr 265463657], length 1440
12:18:34.396248 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [.], seq 23659:25099, ack 4095, win 425, options [nop,nop,TS val 872262822 ecr 265463657], length 1440
12:18:34.396371 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [P.], seq 25099:26004, ack 4095, win 425, options [nop,nop,TS val 872262822 ecr 265463657], length 905
12:18:34.396494 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 26004, win 41, options [nop,nop,TS val 265463753 ecr 872262822], length 0
12:18:34.435248 IP Android.local.mdns > mdns.mcast.net.mdns: 0*- [0q] 1/0/1 (Cache flush) PTR Android.local. (81)
12:18:34.504399 IP system.41996 > _gateway.domain: 4179+ [1au] PTR? 5.0.168.192.in-addr.arpa. (53)
12:18:34.539516 IP _gateway.domain > system.41996: 4179 NXDomain* 0/1/1 (148)
12:18:34.545381 IP system.49891 > pnseab-ab-in-f27.1e100.net.https: UDP, length 257
12:18:34.595848 ARP, Request who-has Android.local tell system, length 28
12:18:34.624391 IP pnseab-ab-in-f27.1e100.net.https > system.49891: UDP, length 58
12:18:34.625160 IP system.49891 > pnseab-ab-in-f27.1e100.net.https: UDP, length 36
12:18:34.668424 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [P.], seq 4095:4430, ack 26004, win 41, options [nop,nop,TS val 265464025 ecr 872262822], length 335
12:18:34.668531 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [P.], seq 4430:4904, ack 26004, win 41, options [nop,nop,TS val 265464025 ecr 872262822], length 474
12:18:34.682136 IP pnseab-ab-in-f27.1e100.net.https > system.49891: UDP, length 30
12:18:34.757297 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [.], ack 4904, win 425, options [nop,nop,TS val 872263185 ecr 265464025], length 0
12:18:34.801984 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [.], seq 26004:27444, ack 4904, win 425, options [nop,nop,TS val 872263229 ecr 265464025], length 1440
12:18:34.802083 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [.], seq 27444:28884, ack 4904, win 425, options [nop,nop,TS val 872263229 ecr 265464025], length 1440
12:18:34.802303 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 28884, win 39, options [nop,nop,TS val 265464159 ecr 872263229], length 0
12:18:34.802866 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [.], seq 28884:30324, ack 4904, win 425, options [nop,nop,TS val 872263229 ecr 265464025], length 1440
12:18:34.803549 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [P.], seq 30324:30798, ack 4904, win 425, options [nop,nop,TS val 872263229 ecr 265464025], length 474
12:18:34.803553 IP ec2-18-205-34-199.compute-1.amazonaws.com.https > system.37408: Flags [P.], seq 30798:30829, ack 4904, win 425, options [nop,nop,TS val 872263229 ecr 265464025], length 31
12:18:34.803729 IP system.37408 > ec2-18-205-34-199.compute-1.amazonaws.com.https: Flags [.], ack 30829, win 38, options [nop,nop,TS val 265464160 ecr 872263229], length 0
12:18:35.149426 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [P.], seq 1045:1270, ack 15729, win 36, options [nop,nop,TS val 2099587200 ecr 3559422139], length 225
12:18:35.153585 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [P.], seq 1270:1457, ack 15729, win 36, options [nop,nop,TS val 2099587204 ecr 3559422139], length 187
12:18:35.183710 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [.], ack 1270, win 173, options [nop,nop,TS val 3559423533 ecr 2099587200], length 0
12:18:35.185324 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [.], ack 1457, win 179, options [nop,nop,TS val 3559423535 ecr 2099587204], length 0
12:18:35.188825 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 15729:16197, ack 1457, win 179, options [nop,nop,TS val 3559423538 ecr 2099587204], length 468
12:18:35.188927 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 16197, win 36, options [nop,nop,TS val 2099587239 ecr 3559423538], length 0
12:18:35.193999 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [P.], seq 2459:2845, ack 4670, win 60, options [nop,nop,TS val 337266047 ecr 2478262173], length 386
12:18:35.279684 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [.], ack 2845, win 198, options [nop,nop,TS val 2478266560 ecr 337266047], length 0
12:18:35.282866 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [P.], seq 4670:5479, ack 2845, win 198, options [nop,nop,TS val 2478266564 ecr 337266047], length 809
12:18:35.282958 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [.], ack 5479, win 60, options [nop,nop,TS val 337266136 ecr 2478266564], length 0
12:18:35.289621 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [P.], seq 2845:4151, ack 5479, win 60, options [nop,nop,TS val 337266143 ecr 2478266564], length 1306
12:18:35.290253 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [P.], seq 4151:5326, ack 5479, win 60, options [nop,nop,TS val 337266143 ecr 2478266564], length 1175
12:18:35.356519 5c:e9:31:24:fe:df (oui Unknown) > Broadcast, Realtek unknown type 0x25
12:18:35.385255 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [.], ack 5326, win 279, options [nop,nop,TS val 2478266666 ecr 337266143], length 0
12:18:35.447964 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [P.], seq 5479:7031, ack 5326, win 279, options [nop,nop,TS val 2478266728 ecr 337266143], length 1552
12:18:35.447964 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [P.], seq 7031:7062, ack 5326, win 279, options [nop,nop,TS val 2478266728 ecr 337266143], length 31
12:18:35.448287 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [.], ack 7062, win 59, options [nop,nop,TS val 337266302 ecr 2478266728], length 0
12:18:35.459439 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 16197:19053, ack 1457, win 179, options [nop,nop,TS val 3559423807 ecr 2099587239], length 2856
12:18:35.459538 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 19053, win 34, options [nop,nop,TS val 2099587510 ecr 3559423807], length 0
12:18:35.459790 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 19053:21909, ack 1457, win 179, options [nop,nop,TS val 3559423808 ecr 2099587239], length 2856
12:18:35.459842 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 21909, win 34, options [nop,nop,TS val 2099587510 ecr 3559423808], length 0
12:18:35.460592 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [.], seq 21909:23337, ack 1457, win 179, options [nop,nop,TS val 3559423809 ecr 2099587239], length 1428
12:18:35.460687 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 23337, win 35, options [nop,nop,TS val 2099587511 ecr 3559423809], length 0
12:18:35.461512 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 23337:24765, ack 1457, win 179, options [nop,nop,TS val 3559423809 ecr 2099587239], length 1428
12:18:35.461570 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 24765, win 35, options [nop,nop,TS val 2099587512 ecr 3559423809], length 0
12:18:35.461669 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [.], seq 24765:26193, ack 1457, win 179, options [nop,nop,TS val 3559423810 ecr 2099587239], length 1428
12:18:35.461712 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 26193, win 35, options [nop,nop,TS val 2099587512 ecr 3559423810], length 0
12:18:35.462160 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 26193:27621, ack 1457, win 179, options [nop,nop,TS val 3559423810 ecr 2099587239], length 1428
12:18:35.462240 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 27621, win 35, options [nop,nop,TS val 2099587512 ecr 3559423810], length 0
12:18:35.463285 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [.], seq 27621:29049, ack 1457, win 179, options [nop,nop,TS val 3559423810 ecr 2099587239], length 1428
12:18:35.463355 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 29049, win 35, options [nop,nop,TS val 2099587514 ecr 3559423810], length 0
12:18:35.463460 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 29049:30477, ack 1457, win 179, options [nop,nop,TS val 3559423810 ecr 2099587239], length 1428
12:18:35.463519 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 30477, win 35, options [nop,nop,TS val 2099587514 ecr 3559423810], length 0
12:18:35.464035 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 30477:31149, ack 1457, win 179, options [nop,nop,TS val 3559423811 ecr 2099587239], length 672
12:18:35.464100 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 31149, win 35, options [nop,nop,TS val 2099587514 ecr 3559423811], length 0
12:18:35.604260 ARP, Request who-has Android.local tell system, length 28
12:18:35.629493 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [P.], seq 5326:6570, ack 7062, win 59, options [nop,nop,TS val 337266483 ecr 2478266728], length 1244
12:18:35.630100 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [P.], seq 6570:6982, ack 7062, win 59, options [nop,nop,TS val 337266483 ecr 2478266728], length 412
12:18:35.631349 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [P.], seq 6982:8227, ack 7062, win 59, options [nop,nop,TS val 337266485 ecr 2478266728], length 1245
12:18:35.631897 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [P.], seq 8227:8582, ack 7062, win 59, options [nop,nop,TS val 337266485 ecr 2478266728], length 355
12:18:35.632989 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [P.], seq 8582:9827, ack 7062, win 59, options [nop,nop,TS val 337266486 ecr 2478266728], length 1245
12:18:35.633539 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [P.], seq 9827:10962, ack 7062, win 59, options [nop,nop,TS val 337266487 ecr 2478266728], length 1135
12:18:35.720926 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [.], ack 6982, win 360, options [nop,nop,TS val 2478267002 ecr 337266483], length 0
12:18:35.725042 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [P.], seq 1457:1550, ack 31149, win 36, options [nop,nop,TS val 2099587775 ecr 3559423811], length 93
12:18:35.728630 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [.], ack 8582, win 425, options [nop,nop,TS val 2478267010 ecr 337266485], length 0
12:18:35.741714 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [.], ack 10962, win 425, options [nop,nop,TS val 2478267023 ecr 337266486], length 0
12:18:35.752464 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [P.], seq 7062:8721, ack 10962, win 425, options [nop,nop,TS val 2478267033 ecr 337266486], length 1659
12:18:35.752465 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [P.], seq 8721:8752, ack 10962, win 425, options [nop,nop,TS val 2478267033 ecr 337266486], length 31
12:18:35.752813 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [.], ack 8752, win 58, options [nop,nop,TS val 337266606 ecr 2478267033], length 0
12:18:35.753726 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [P.], seq 8752:10991, ack 10962, win 425, options [nop,nop,TS val 2478267034 ecr 337266486], length 2239
12:18:35.753727 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [P.], seq 10991:11022, ack 10962, win 425, options [nop,nop,TS val 2478267034 ecr 337266486], length 31
12:18:35.754167 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [.], ack 11022, win 56, options [nop,nop,TS val 337266607 ecr 2478267034], length 0
12:18:35.754489 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [P.], seq 11022:12106, ack 10962, win 425, options [nop,nop,TS val 2478267035 ecr 337266486], length 1084
12:18:35.754491 IP ec2-34-233-187-75.compute-1.amazonaws.com.https > system.57492: Flags [P.], seq 12106:12137, ack 10962, win 425, options [nop,nop,TS val 2478267035 ecr 337266486], length 31
12:18:35.755544 IP system.57492 > ec2-34-233-187-75.compute-1.amazonaws.com.https: Flags [.], ack 12137, win 55, options [nop,nop,TS val 337266609 ecr 2478267035], length 0
12:18:35.810023 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [.], ack 1550, win 179, options [nop,nop,TS val 3559424160 ecr 2099587775], length 0
12:18:36.076800 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 31149:32434, ack 1550, win 179, options [nop,nop,TS val 3559424339 ecr 2099587775], length 1285
12:18:36.076801 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 32434:32465, ack 1550, win 179, options [nop,nop,TS val 3559424339 ecr 2099587775], length 31
12:18:36.076802 IP server-18-238-217-18.sea90.r.cloudfront.net.https > system.38618: Flags [P.], seq 32434:32465, ack 1550, win 179, options [nop,nop,TS val 3559424420 ecr 2099587775], length 31
12:18:36.076894 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 32434, win 35, options [nop,nop,TS val 2099588127 ecr 3559424339], length 0
12:18:36.076944 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 32465, win 35, options [nop,nop,TS val 2099588127 ecr 3559424339], length 0
12:18:36.076969 IP system.38618 > server-18-238-217-18.sea90.r.cloudfront.net.https: Flags [.], ack 32465, win 35, options [nop,nop,TS val 2099588127 ecr 3559424420,nop,nop,sack 1 {32434:32465}], length 0
12:18:36.391196 IP 0.0.0.0.bootpc > 255.255.255.255.bootps: BOOTP/DHCP, Request from 22:c9:65:73:81:fb (oui Unknown), length 296

I apologize for not properly filtering out unrelated traffic, but I've already spent an hour getting this together.

What I've tried:
* pacman -Syu
* Changing networks
* Disabling Network Manager

Edit:
Changed wctl to iwctl

Last edited by lezzbean (Yesterday 01:27:43)

-thc

Member

Registered: 2017-03-15

Posts: 1,145

Re: HTTP session disconnect on WI-FI disconnect

Those broadcasts are "Realtek loop detection" packets that look like a coincidence.

Your WiFi adapters loses the IP configuration completely and restarts from scratch with DHCP/BOOTP packets similar to a PC startup.
Please post your complete journal +/- 5 minutes around such an incident.

lezzbean

Member

Registered: 2026-05-31

Posts: 3

Re: HTTP session disconnect on WI-FI disconnect

I've made a github repo to show the output. Not sure if there's a better way to deal with sending larger files.

19:10 - start capture
19:15 - internet disconnect and reconnect
19:17 - reload webpage
19:20 - capture end

https://github.com/TheWalrusSyndicate/D … cpdump.txt

-thc

Member

Registered: 2017-03-15

Posts: 1,145

Re: HTTP session disconnect on WI-FI disconnect

You misunderstood me - I meant the system journal. Five minutes after one disconnect event:

sudo journalctl -S -10m | curl -s -H "Accept: application/json, */*" --upload-file - 'https://paste.c-net.org/'

seth

Member

From: Won't reply 2 private help req

Registered: 2012-09-03

Posts: 75,718

Re: HTTP session disconnect on WI-FI disconnect

The tcpdump won't help here - if you're losing the lease the symptoms aren't overly surprising.
Common causes are concurrent network daemons or spurious roaming.

If you need help with that, please post your complete system journal for the boot:

sudo journalctl -b | curl -s -H "Accept: application/json, */*" --upload-file - 'https://paste.c-net.org/'

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc

lezzbean

Member

Registered: 2026-05-31

Posts: 3

Re: HTTP session disconnect on WI-FI disconnect

Disconnect was at 16:05

Jun 03 16:02:25 system kernel: warning: `ThreadPoolForeg' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
Jun 03 16:02:26 system systemd[691]: Started app-org.chromium.Chromium-2463.scope.
Jun 03 16:02:26 system systemd[691]: Starting Portal service (GTK/GNOME implementation)...
Jun 03 16:02:26 system xdg-desktop-portal-gtk[2629]: cannot open display: 
Jun 03 16:02:26 system systemd[691]: xdg-desktop-portal-gtk.service: Main process exited, code=exited, status=1/FAILURE
Jun 03 16:02:26 system systemd[691]: xdg-desktop-portal-gtk.service: Failed with result 'exit-code'.
Jun 03 16:02:26 system systemd[691]: Failed to start Portal service (GTK/GNOME implementation).
Jun 03 16:02:51 system rtkit-daemon[791]: Successfully made thread 2694 of process 2223 owned by '1000' RT at priority 10.
Jun 03 16:02:58 system iwd[536]: event: roam-scan,
Jun 03 16:02:58 system iwd[536]: event: roam-scan,
Jun 03 16:02:59 system iwd[536]: invalid HE capabilities for 02:c5:7d:2e:03:be
Jun 03 16:02:59 system iwd[536]: invalid HE capabilities for de:36:0c:3c:4d:68
Jun 03 16:03:59 system iwd[536]: event: roam-scan,
Jun 03 16:03:59 system iwd[536]: event: roam-scan,
Jun 03 16:04:01 system iwd[536]: invalid HE capabilities for 02:c5:7d:2e:03:be
Jun 03 16:04:01 system iwd[536]: invalid HE capabilities for 02:c5:7d:2e:03:bd
Jun 03 16:04:55 system kernel: wlan0: deauthenticating from 84:e8:92:6e:d5:04 by local choice (Reason: 3=DEAUTH_LEAVING)
Jun 03 16:04:55 system iwd[536]: Received Deauthentication event, reason: 3, from_ap: false
Jun 03 16:04:55 system iwd[536]: event: disconnect-info, reason: 3
Jun 03 16:04:55 system iwd[536]: event: state, old: connected, new: disconnected
Jun 03 16:04:55 system iwd[536]: event: state, old: disconnected, new: autoconnect_quick
Jun 03 16:04:55 system systemd-networkd[399]: wlan0: Link DOWN
Jun 03 16:04:55 system systemd-networkd[399]: wlan0: Lost carrier
Jun 03 16:04:55 system systemd-networkd[399]: wlan0: DHCP lease lost
Jun 03 16:04:55 system iwd[536]: event: state, old: autoconnect_quick, new: autoconnect_full
Jun 03 16:04:55 system iwd[536]: Received error during CMD_TRIGGER_SCAN: Network is down (100)
Jun 03 16:04:55 system NetworkManager[534]: <info>  [1780524295.2170] device (wlan0): set-hw-addr: set MAC address to 4E:FE:12:A9:B0:BA (scanning)
Jun 03 16:04:55 system iwd[536]: event: state, old: disconnected, new: autoconnect_quick
Jun 03 16:04:55 system NetworkManager[534]: <info>  [1780524295.2288] device (wlan0): supplicant interface state: inactive -> interface_disabled
Jun 03 16:04:55 system NetworkManager[534]: <info>  [1780524295.2290] device (p2p-dev-wlan0): supplicant management interface state: inactive -> interface_disabled
Jun 03 16:04:55 system NetworkManager[534]: <info>  [1780524295.2358] device (wlan0): supplicant interface state: interface_disabled -> inactive
Jun 03 16:04:55 system systemd-timesyncd[389]: No network connectivity, watching for changes.
Jun 03 16:04:55 system systemd-networkd[399]: wlan0: Link UP
Jun 03 16:04:55 system NetworkManager[534]: <info>  [1780524295.2416] device (p2p-dev-wlan0): supplicant management interface state: interface_disabled -> inactive
Jun 03 16:04:57 system iwd[536]: invalid HE capabilities for 02:c5:7d:2e:03:be
Jun 03 16:04:57 system iwd[536]: event: connect-info, ssid: BPon4th, bss: 84:e8:92:6e:d5:04, signal: -48, load: 5/255
Jun 03 16:04:57 system iwd[536]: event: state, old: autoconnect_quick, new: connecting (auto)
Jun 03 16:04:57 system kernel: wlan0: authenticate with 84:e8:92:6e:d5:04 (local address=4e:fe:12:a9:b0:ba)
Jun 03 16:04:57 system kernel: wlan0: send auth to 84:e8:92:6e:d5:04 (try 1/3)
Jun 03 16:04:57 system kernel: wlan0: authenticated
Jun 03 16:04:57 system kernel: wlan0: associate with 84:e8:92:6e:d5:04 (try 1/3)
Jun 03 16:04:57 system kernel: wlan0: RX AssocResp from 84:e8:92:6e:d5:04 (capab=0x11 status=0 aid=3)
Jun 03 16:04:58 system kernel: wlan0: associated
Jun 03 16:04:58 system systemd-networkd[399]: wlan0: Connected WiFi access point: BPon4th (84:e8:92:6e:d5:04)
Jun 03 16:04:58 system wpa_supplicant[636]: wlan0: No network configuration found for the current AP
Jun 03 16:04:58 system wpa_supplicant[636]: wlan0: CTRL-EVENT-DISCONNECTED bssid=84:e8:92:6e:d5:04 reason=3 locally_generated=1
Jun 03 16:04:58 system NetworkManager[534]: <info>  [1780524298.0146] device (wlan0): supplicant interface state: inactive -> associated
Jun 03 16:04:58 system wpa_supplicant[636]: wlan0: Added BSSID 84:e8:92:6e:d5:04 into ignore list, ignoring for 10 seconds
Jun 03 16:04:58 system NetworkManager[534]: <info>  [1780524298.0147] device (p2p-dev-wlan0): supplicant management interface state: inactive -> associated
Jun 03 16:04:58 system wpa_supplicant[636]: wlan0: CTRL-EVENT-DSCP-POLICY clear_all
Jun 03 16:04:58 system wpa_supplicant[636]: wlan0: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
Jun 03 16:04:58 system NetworkManager[534]: <info>  [1780524298.0239] device (wlan0): supplicant interface state: associated -> disconnected
Jun 03 16:04:58 system NetworkManager[534]: <info>  [1780524298.0241] device (p2p-dev-wlan0): supplicant management interface state: associated -> disconnected
Jun 03 16:04:58 system iwd[536]: event: state, old: connecting (auto), new: connected
Jun 03 16:04:58 system systemd-networkd[399]: wlan0: Gained carrier
Jun 03 16:04:58 system NetworkManager[534]: <info>  [1780524298.1145] device (wlan0): supplicant interface state: disconnected -> inactive
Jun 03 16:04:58 system NetworkManager[534]: <info>  [1780524298.1147] device (p2p-dev-wlan0): supplicant management interface state: disconnected -> inactive
Jun 03 16:05:01 system systemd-networkd[399]: wlan0: DHCPv4 address 192.168.0.29/24, gateway 192.168.0.1 acquired from 192.168.0.1
Jun 03 16:05:01 system systemd-timesyncd[389]: Network configuration changed, trying to establish connection.
Jun 03 16:05:02 system wpa_supplicant[636]: wlan0: Reject scan trigger since one is already pending
Jun 03 16:05:11 system systemd-timesyncd[389]: Timed out waiting for reply from 72.14.186.59:123 (1.arch.pool.ntp.org).
Jun 03 16:05:11 system systemd-timesyncd[389]: Contacted time server 216.66.48.42:123 (2.arch.pool.ntp.org).
Jun 03 16:10:12 system sudo[2930]:    hazel : TTY=pts/0 ; PWD=/home/hazel ; USER=root ; COMMAND=/usr/bin/journalctl -S -10m
Jun 03 16:10:12 system sudo[2930]: pam_unix(sudo:session): session opened for user root(uid=0) by hazel(uid=1000)

seth

Member

From: Won't reply 2 private help req

Registered: 2012-09-03

Posts: 75,718

Re: HTTP session disconnect on WI-FI disconnect

You've at least NM, networkd and iwd running - choose one service and stop/disable the others.
Please post the output of

find /etc/systemd -type l -exec test -f {} \; -print | awk -F'/' '{ printf ("%-40s | %s\n", $(NF-0), $(NF-1)) }' | sort -f

If you want to use iwd as NM backend see https://wiki.archlinux.org/title/Networ … Fi_backend

No idea whether there're problems beyond that

If you need help with that, please post your complete system journal for the boot

Not some random snippets until we inched us towards the solution.

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc