Package: qemu Version: 0.6.1-1 Severity: important Note: I've reproduced the exact same behavior using 0.6.0.dfsg.1-1.
Hi again. I'm afraid I've got another challenge for you, or rather, for qemu upstream this time. I'm submitting this a a Debian bug report as I think you will be better able to judge where to go with this one. During a download of packages from a Debian mirror, the installation will freeze regularly when downloading larger debs. This freeze happens only when I use a fast (local) mirror for my test installations with Debian Installer in qemu, and is reproducible reliably. When I install from CD or when I use a remote mirror over my ADSL connection, the problem does not occur. I have found I can 'jumpstart' the communications again by doing a wget of a small file from a 2nd terminal within qemu. The freeze does _not_ solve itself if you just wait long enough; it needs intervention. In the end I ran a while [ 1 = 1 ]; do wget http://www.fjphome.nl; sleep 2; done on vt2 and that made the installation complete successfully. I have attached 2 network traces that clearly show what happens. Below is an explanation of my analisys. My analisys may not be completely correct, but I think the main idea of it is. I would guess there is an error in the handling of the package buffer in the implementation of the tun interface. Note ==== I also do S390 test installations for Debian Installer using the Hercules emulator. The freeze does _not_ happen there, which leads me to think the problem must be related to qemu rather than e.g. iptables or the kernel. However, I realize there are many layers of software involved... I'm willing to debug or test patches (however, I may need some help). Situation ========= My network is fjphome.nl (10.19.66.x). Elrond is a local server with 10.19.66.2 as main address and listening on 10.19.66.3 for HTTP. Sauron (10.19.91.101) is the new Debian installation within qemu with 10.19.91.1 as gateway. Strider (10.19.66.11) is my laptop running qemu; it also has 10.19.66.91 on eth0 that is forwarded to Sauron using NAT (iptables). $ sudo iptables -L -v -n -t nat Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 DNAT all -- any any anywhere 10.19.66.91 to:10.19.91.101 Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes) pkts bytes target prot opt in out source destination 0 0 SNAT all -- any any 10.19.91.101 anywhere to:10.19.66.91 I have put tcpdump on elrond for eth0 and on strider for eth0 and tun0. The analysis below is from elrond and tun0; eth0 on strider shows the same package flow and timing as elrond. In the logs I have added the Seq number for some of the "Continuation" data packets (between brackets). I've added empty lines where freezes happen. And now for what's happening ============================ At 4986 in elrond.eth0 the server sends the last data packet for the current file (apt-utils_<version>.deb). Some acks are received and then there is a pause for 5 seconds. At that time sauron is processing packet 134665. The buffer for tun0 on Strider must still be full, but for some reason nothing is processed. I think that after about 5 seconds I got impatient and did the manual wget. Exactly what triggers Elrond to resend packet 136113 (based on the last ACK received) in 4993 is not shown in the log, but somehow this releases the queue for tun0 and 11 waiting data packets from the queue are processed (sauron.tun0: 4966-4987). Again a freeze, now for almost 20 seconds. Again Elrond is somehow triggered to resend one packet (152041) and again 11 waiting data packets are processed. After a short freeze, we see a DNS request from Sauron (5010) triggered by my manual wget. This is immediately received by Elrond and answered (5017, 5018); the answer gets added to the queue for tun0 on Strider. This request does trigger processing of another 11 packets, including the last packet of the stream with Seq 182449 (5021). Sauron sends a FIN/ACK and after that we see the arrival of the duplicate packets send by the Elrond, and of the response to the DNS query (5033-5035). -- System Information: Debian Release: 3.1 APT prefers testing APT policy: (990, 'testing') Architecture: i386 (i686) Kernel: Linux 2.6.8-12.0412-1 Locale: LANG=en_US, LC_CTYPE=en_US (charmap=ISO-8859-1) Versions of packages qemu depends on: ii bochsbios 2.1.1-10 BIOS for the Bochs emulator ii libc6 2.3.2.ds1-20 GNU C Library: Shared libraries an ii libsdl1.2de 1.2.7+1.2.8cvs20041007-3.0.1 Simple DirectMedia Layer ii sharutils 1:4.2.1-11 shar, unshar, uuencode, uudecode ii vgabios 0.4c+20041014-1 VGA BIOS software for the Bochs an ii zlib1g 1:1.2.2-3 compression library - runtime
No. Time Source Destination Protocol Info 4952 00:36:02.356676 10.19.66.3 10.19.66.91 HTTP Continuation (149145) 4953 00:36:02.356700 10.19.66.3 10.19.66.91 HTTP Continuation 4954 00:36:02.357711 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=91225 Win=63712 Len=0 TSV=81638 TSER=34414306 4955 00:36:02.357772 10.19.66.3 10.19.66.91 HTTP Continuation 4956 00:36:02.357795 10.19.66.3 10.19.66.91 HTTP Continuation 4957 00:36:02.358980 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=94121 Win=63712 Len=0 TSV=81638 TSER=34414306 4958 00:36:02.359138 10.19.66.3 10.19.66.91 HTTP Continuation 4959 00:36:02.359167 10.19.66.3 10.19.66.91 HTTP Continuation 4960 00:36:02.360562 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=97017 Win=63712 Len=0 TSV=81638 TSER=34414307 4961 00:36:02.360652 10.19.66.3 10.19.66.91 HTTP Continuation 4962 00:36:02.360680 10.19.66.3 10.19.66.91 HTTP Continuation 4963 00:36:02.361568 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=99913 Win=63712 Len=0 TSV=81638 TSER=34414307 4964 00:36:02.361677 10.19.66.3 10.19.66.91 HTTP Continuation 4965 00:36:02.361705 10.19.66.3 10.19.66.91 HTTP Continuation 4966 00:36:02.362871 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=102809 Win=63712 Len=0 TSV=81638 TSER=34414307 4967 00:36:02.362934 10.19.66.3 10.19.66.91 HTTP Continuation 4968 00:36:02.362958 10.19.66.3 10.19.66.91 HTTP Continuation 4969 00:36:02.364410 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=105705 Win=63712 Len=0 TSV=81639 TSER=34414307 4970 00:36:02.364475 10.19.66.3 10.19.66.91 HTTP Continuation 4971 00:36:02.364499 10.19.66.3 10.19.66.91 HTTP Continuation (167969) 4972 00:36:02.365410 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=108601 Win=63712 Len=0 TSV=81639 TSER=34414307 4973 00:36:02.365473 10.19.66.3 10.19.66.91 HTTP Continuation (169417) 4974 00:36:02.365498 10.19.66.3 10.19.66.91 HTTP Continuation 4975 00:36:02.366686 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=111497 Win=63712 Len=0 TSV=81639 TSER=34414307 4976 00:36:02.366747 10.19.66.3 10.19.66.91 HTTP Continuation 4977 00:36:02.366772 10.19.66.3 10.19.66.91 HTTP Continuation 4978 00:36:02.368129 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=114393 Win=63712 Len=0 TSV=81639 TSER=34414307 4979 00:36:02.368190 10.19.66.3 10.19.66.91 HTTP Continuation 4980 00:36:02.368215 10.19.66.3 10.19.66.91 HTTP Continuation 4981 00:36:02.369284 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=117289 Win=63712 Len=0 TSV=81640 TSER=34414307 4982 00:36:02.369348 10.19.66.3 10.19.66.91 HTTP Continuation 4983 00:36:02.369372 10.19.66.3 10.19.66.91 HTTP Continuation 4984 00:36:02.370453 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=120185 Win=63712 Len=0 TSV=81640 TSER=34414307 4985 00:36:02.370515 10.19.66.3 10.19.66.91 HTTP Continuation (181001) 4986 00:36:02.370540 10.19.66.3 10.19.66.91 HTTP Continuation (182449) 4987 00:36:02.371832 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=123081 Win=63712 Len=0 TSV=81640 TSER=34414307 4988 00:36:02.372916 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=125977 Win=63712 Len=0 TSV=81640 TSER=34414307 4989 00:36:02.373616 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=128873 Win=63712 Len=0 TSV=81640 TSER=34414307 4990 00:36:02.374738 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=131769 Win=63712 Len=0 TSV=81641 TSER=34414308 4991 00:36:02.375918 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=134665 Win=63712 Len=0 TSV=81641 TSER=34414308 4992 00:36:02.397154 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=136113 Win=63712 Len=0 TSV=81645 TSER=34414308 4993 00:36:07.848953 10.19.66.3 10.19.66.91 HTTP Continuation (136113) 4994 00:36:07.850553 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=137561 Win=63712 Len=0 TSV=82594 TSER=34414308 4995 00:36:07.851176 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=139009 Win=63712 Len=0 TSV=82594 TSER=34414308 4996 00:36:07.851524 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=140457 Win=63712 Len=0 TSV=82594 TSER=34414308 4997 00:36:07.852848 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=141905 Win=63712 Len=0 TSV=82594 TSER=34414308 4998 00:36:07.853202 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=143353 Win=63712 Len=0 TSV=82594 TSER=34414308 4999 00:36:07.853534 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=144801 Win=63712 Len=0 TSV=82594 TSER=34414308 5000 00:36:07.854325 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=146249 Win=63712 Len=0 TSV=82594 TSER=34414308 5001 00:36:07.854674 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=147697 Win=63712 Len=0 TSV=82594 TSER=34414308 5002 00:36:07.854988 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=149145 Win=63712 Len=0 TSV=82594 TSER=34414308 5003 00:36:07.855790 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=150593 Win=63712 Len=0 TSV=82595 TSER=34414308 5004 00:36:07.856137 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=152041 Win=63712 Len=0 TSV=82595 TSER=34414308 5005 00:36:24.179446 10.19.66.3 10.19.66.91 HTTP Continuation (152041) 5006 00:36:24.181000 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=153489 Win=63712 Len=0 TSV=84703 TSER=34414308 5007 00:36:24.183132 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=154937 Win=62264 Len=0 TSV=84704 TSER=34414308 5008 00:36:24.184726 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=156385 Win=63712 Len=0 TSV=84704 TSER=34414309 5009 00:36:24.185225 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=157833 Win=63712 Len=0 TSV=84704 TSER=34414309 5010 00:36:24.186318 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=159281 Win=63712 Len=0 TSV=84704 TSER=34414309 5011 00:36:24.186788 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=160729 Win=63712 Len=0 TSV=84704 TSER=34414309 5012 00:36:24.187820 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=162177 Win=63712 Len=0 TSV=84704 TSER=34414309 5013 00:36:24.188333 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=163625 Win=63712 Len=0 TSV=84704 TSER=34414309 5014 00:36:24.188786 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=165073 Win=63712 Len=0 TSV=84704 TSER=34414309 5015 00:36:24.189814 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=166521 Win=63712 Len=0 TSV=84704 TSER=34414309 5016 00:36:24.190312 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=167969 Win=63712 Len=0 TSV=84704 TSER=34414309 5017 00:36:28.210570 10.19.66.91 10.19.66.2 DNS Standard query A www.fjphome.nl 5018 00:36:28.211704 10.19.66.2 10.19.66.91 DNS Standard query response A 10.19.66.3[Short Frame] 5019 00:36:28.237873 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=169417 Win=63712 Len=0 TSV=85104 TSER=34414309 5020 00:36:28.238439 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=170865 Win=62264 Len=0 TSV=85104 TSER=34414309 5021 00:36:28.242443 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=172313 Win=63712 Len=0 TSV=85105 TSER=34414309 5022 00:36:28.243875 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=173761 Win=63712 Len=0 TSV=85105 TSER=34414309 5023 00:36:28.245941 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=175209 Win=63712 Len=0 TSV=85105 TSER=34414309 5024 00:36:28.246850 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=176657 Win=63712 Len=0 TSV=85105 TSER=34414309 5025 00:36:28.247542 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=178105 Win=63712 Len=0 TSV=85105 TSER=34414309 5026 00:36:28.248742 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=179553 Win=63712 Len=0 TSV=85105 TSER=34414310 5027 00:36:28.249419 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=181001 Win=63712 Len=0 TSV=85105 TSER=34414310 5028 00:36:28.250015 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=182449 Win=63712 Len=0 TSV=85105 TSER=34414310 5029 00:36:28.259051 10.19.66.91 10.19.66.3 TCP 1030 > www [FIN, ACK] Seq=126 Ack=183041 Win=63712 Len=0 TSV=85106 TSER=34414310 5030 00:36:28.259133 10.19.66.3 10.19.66.91 TCP www > 1030 [ACK] Seq=183041 Ack=127 Win=5792 Len=0 TSV=34416898TSER=85106 5031 00:36:28.262176 10.19.66.91 10.19.66.3 TCP 1030 > www [ACK] Seq=127 Ack=183041 Win=63712 Len=0 TSV=85107 TSER=34414310 SLE=1809145796 SRE=1809147244 5032 00:36:28.268271 10.19.66.91 10.19.66.3 TCP [TCP Dup ACK 5031#1] 1030 > www [ACK] Seq=127 Ack=183041 Win=63712 Len=0 TSV=85107 TSER=34414310 SLE=1809161724 SRE=1809163172
No. Time Source Destination Protocol Info 4950 00:36:02.367248 10.19.66.3 10.19.91.101 HTTP Continuation (125977) 4951 00:36:02.368112 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=114393 Win=63712 Len=0 TSV=81639 TSER=34414307 4952 00:36:02.368682 10.19.66.3 10.19.91.101 HTTP Continuation 4953 00:36:02.368688 10.19.66.3 10.19.91.101 HTTP Continuation 4954 00:36:02.368692 10.19.66.3 10.19.91.101 HTTP Continuation 4955 00:36:02.369269 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=117289 Win=63712 Len=0 TSV=81640 TSER=34414307 4956 00:36:02.369842 10.19.66.3 10.19.91.101 HTTP Continuation 4957 00:36:02.370443 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=120185 Win=63712 Len=0 TSV=81640 TSER=34414307 4958 00:36:02.371009 10.19.66.3 10.19.91.101 HTTP Continuation 4959 00:36:02.371015 10.19.66.3 10.19.91.101 HTTP Continuation (134665) 4960 00:36:02.371817 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=123081 Win=63712 Len=0 TSV=81640 TSER=34414307 4961 00:36:02.372898 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=125977 Win=63712 Len=0 TSV=81640 TSER=34414307 4962 00:36:02.373606 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=128873 Win=63712 Len=0 TSV=81640 TSER=34414307 4963 00:36:02.374721 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=131769 Win=63712 Len=0 TSV=81641 TSER=34414308 4964 00:36:02.375900 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=134665 Win=63712 Len=0 TSV=81641 TSER=34414308 4965 00:36:02.397138 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=136113 Win=63712 Len=0 TSV=81645 TSER=34414308 4966 00:36:07.849475 10.19.66.3 10.19.91.101 HTTP Continuation (136113) 4967 00:36:07.849481 10.19.66.3 10.19.91.101 HTTP Continuation 4968 00:36:07.849484 10.19.66.3 10.19.91.101 HTTP Continuation 4969 00:36:07.849488 10.19.66.3 10.19.91.101 HTTP Continuation 4970 00:36:07.849491 10.19.66.3 10.19.91.101 HTTP Continuation 4971 00:36:07.849495 10.19.66.3 10.19.91.101 HTTP Continuation 4972 00:36:07.849499 10.19.66.3 10.19.91.101 HTTP Continuation 4973 00:36:07.849502 10.19.66.3 10.19.91.101 HTTP Continuation 4974 00:36:07.849506 10.19.66.3 10.19.91.101 HTTP Continuation 4975 00:36:07.849509 10.19.66.3 10.19.91.101 HTTP Continuation (149145) 4976 00:36:07.849513 10.19.66.3 10.19.91.101 HTTP Continuation (150593) 4977 00:36:07.850529 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=137561 Win=63712 Len=0 TSV=82594 TSER=34414308 4978 00:36:07.851159 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=139009 Win=63712 Len=0 TSV=82594 TSER=34414308 4979 00:36:07.851514 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=140457 Win=63712 Len=0 TSV=82594 TSER=34414308 4980 00:36:07.852826 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=141905 Win=63712 Len=0 TSV=82594 TSER=34414308 4981 00:36:07.853194 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=143353 Win=63712 Len=0 TSV=82594 TSER=34414308 4982 00:36:07.853527 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=144801 Win=63712 Len=0 TSV=82594 TSER=34414308 4983 00:36:07.854308 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=146249 Win=63712 Len=0 TSV=82594 TSER=34414308 4984 00:36:07.854666 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=147697 Win=63712 Len=0 TSV=82594 TSER=34414308 4985 00:36:07.854982 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=149145 Win=63712 Len=0 TSV=82594 TSER=34414308 4986 00:36:07.855771 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=150593 Win=63712 Len=0 TSV=82595 TSER=34414308 4987 00:36:07.856131 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=152041 Win=63712 Len=0 TSV=82595 TSER=34414308 4988 00:36:24.179954 10.19.66.3 10.19.91.101 HTTP Continuation (152041) 4989 00:36:24.179960 10.19.66.3 10.19.91.101 HTTP Continuation (153489) 4990 00:36:24.179964 10.19.66.3 10.19.91.101 HTTP Continuation 4991 00:36:24.179968 10.19.66.3 10.19.91.101 HTTP Continuation 4992 00:36:24.179972 10.19.66.3 10.19.91.101 HTTP Continuation 4993 00:36:24.179976 10.19.66.3 10.19.91.101 HTTP Continuation 4994 00:36:24.179980 10.19.66.3 10.19.91.101 HTTP Continuation 4995 00:36:24.179984 10.19.66.3 10.19.91.101 HTTP Continuation 4996 00:36:24.179988 10.19.66.3 10.19.91.101 HTTP Continuation 4997 00:36:24.179992 10.19.66.3 10.19.91.101 HTTP Continuation 4998 00:36:24.179996 10.19.66.3 10.19.91.101 HTTP Continuation (166521) 4999 00:36:24.180963 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=153489 Win=63712 Len=0 TSV=84703 TSER=34414308 5000 00:36:24.183094 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=154937 Win=62264 Len=0 TSV=84704 TSER=34414308 5001 00:36:24.184689 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=156385 Win=63712 Len=0 TSV=84704 TSER=34414309 5002 00:36:24.185201 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=157833 Win=63712 Len=0 TSV=84704 TSER=34414309 5003 00:36:24.186286 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=159281 Win=63712 Len=0 TSV=84704 TSER=34414309 5004 00:36:24.186764 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=160729 Win=63712 Len=0 TSV=84704 TSER=34414309 5005 00:36:24.187787 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=162177 Win=63712 Len=0 TSV=84704 TSER=34414309 5006 00:36:24.188309 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=163625 Win=63712 Len=0 TSV=84704 TSER=34414309 5007 00:36:24.188765 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=165073 Win=63712 Len=0 TSV=84704 TSER=34414309 5008 00:36:24.189779 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=166521 Win=63712 Len=0 TSV=84704 TSER=34414309 5009 00:36:24.190289 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=167969 Win=63712 Len=0 TSV=84704 TSER=34414309 5010 00:36:28.210515 10.19.91.101 10.19.66.2 DNS Standard query A www.fjphome.nl 5011 00:36:28.211884 10.19.66.3 10.19.91.101 HTTP Continuation (167969) 5012 00:36:28.211891 10.19.66.3 10.19.91.101 HTTP Continuation 5013 00:36:28.211895 10.19.66.3 10.19.91.101 HTTP Continuation 5014 00:36:28.211899 10.19.66.3 10.19.91.101 HTTP Continuation 5015 00:36:28.211902 10.19.66.3 10.19.91.101 HTTP Continuation 5016 00:36:28.211906 10.19.66.3 10.19.91.101 HTTP Continuation 5017 00:36:28.211910 10.19.66.3 10.19.91.101 HTTP Continuation 5018 00:36:28.211914 10.19.66.3 10.19.91.101 HTTP Continuation 5019 00:36:28.211918 10.19.66.3 10.19.91.101 HTTP Continuation 5020 00:36:28.211922 10.19.66.3 10.19.91.101 HTTP Continuation 5021 00:36:28.211926 10.19.66.3 10.19.91.101 HTTP Continuation (182449) 5022 00:36:28.237826 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=169417 Win=63712 Len=0 TSV=85104 TSER=34414309 5023 00:36:28.238414 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=170865 Win=62264 Len=0 TSV=85104 TSER=34414309 5024 00:36:28.242398 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=172313 Win=63712 Len=0 TSV=85105 TSER=34414309 5025 00:36:28.243836 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=173761 Win=63712 Len=0 TSV=85105 TSER=34414309 5026 00:36:28.245901 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=175209 Win=63712 Len=0 TSV=85105 TSER=34414309 5027 00:36:28.246812 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=176657 Win=63712 Len=0 TSV=85105 TSER=34414309 5028 00:36:28.247510 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=178105 Win=63712 Len=0 TSV=85105 TSER=34414309 5029 00:36:28.248703 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=179553 Win=63712 Len=0 TSV=85105 TSER=34414310 5030 00:36:28.249387 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=181001 Win=63712 Len=0 TSV=85105 TSER=34414310 5031 00:36:28.249984 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=126 Ack=182449 Win=63712 Len=0 TSV=85105 TSER=34414310 5032 00:36:28.259006 10.19.91.101 10.19.66.3 TCP 1030 > www [FIN, ACK] Seq=126 Ack=183041 Win=63712 Len=0 TSV=85106 TSER=34414310 5033 00:36:28.259250 10.19.66.3 10.19.91.101 HTTP Continuation (136113) 5034 00:36:28.259255 10.19.66.3 10.19.91.101 HTTP Continuation (152041) 5035 00:36:28.259259 10.19.66.2 10.19.91.101 DNS Standard query response A 10.19.66.3 5036 00:36:28.259263 10.19.66.3 10.19.91.101 TCP www > 1030 [ACK] Seq=183041 Ack=127 Win=5792 Len=0 TSV=34416898TSER=85106 5037 00:36:28.262129 10.19.91.101 10.19.66.3 TCP 1030 > www [ACK] Seq=127 Ack=183041 Win=63712 Len=0 TSV=85107 TSER=34414310 SLE=1809145796 SRE=1809147244 5038 00:36:28.268227 10.19.91.101 10.19.66.3 TCP [TCP Dup ACK 5037#1] 1030 > www [ACK] Seq=127 Ack=183041 Win=63712 Len=0 TSV=85107 TSER=34414310 SLE=1809161724 SRE=1809163172
