Overview: Siemens medical device IP address & port number: WAN: 172.16.8.192, LAN: 192.168.1.106, 8850 Laboratory Information System (LIS) IP address & port number: 172.16.0.6, 7775 Protocol: HL7
workflow:
1. Siemens query for test order from LIS via 7775
2. LIS sends query acknowledgement to Siemens via 7775
2. LIS sends order down to Siemens via 8850
3. Siemens acknowledges order to LIS via 8850
4. Siemens sends completed test result to LIS via 7775
5. LIS acknowledges test result from Siemens via 7775
note:
The LIS application is set to end and re-establish a new socket connection if there is idle time of 20 mins
Problem Statement:
Siemens does not receive order acknowledgement and test order from LIS even though Siemens sent order query to LIS via 7775. The LIS vendor said they did not receive our order query, hence they are not able to dispatch the test order to Siemens.
Findings on port 7775: 2022-08-15 20:48:50.769806 172.16.0.6 172.16.8.192 HL7 60 ACK (R22) 2022-08-15 20:48:50.769914 172.16.8.192 172.16.0.6 TCP 60 56478 → 7775 [ACK] Seq=98589 Ack=14381 Win=64348 Len=0 2022-08-15 20:48:50.769914 172.16.8.192 172.16.0.6 TCP 60 56478 → 7775 [ACK] Seq=98589 Ack=14383 Win=64346 Len=0 2022-08-15 20:50:30.769903 172.16.8.192 172.16.0.6 TCP 1054 56478 → 7775 [ACK] Seq=98589 Ack=14383 Win=64346 Len=1000 [TCP segment of a reassembled PDU] 2022-08-15 20:50:30.769904 172.16.8.192 172.16.0.6 HL7 267 OUL (R22) 2022-08-15 20:50:30.783142 172.16.0.6 172.16.8.192 TCP 60 7775 → 56478 [ACK] Seq=14383 Ack=99802 Win=65000 Len=0 2022-08-15 20:50:30.784068 172.16.0.6 172.16.8.192 TCP 60 7775 → 56478 [PSH, ACK] Seq=14383 Ack=99802 Win=65000 Len=1 [TCP segment of a reassembled PDU] 2022-08-15 20:50:30.784155 172.16.0.6 172.16.8.192 TCP 164 7775 → 56478 [PSH, ACK] Seq=14384 Ack=99802 Win=65000 Len=110 [TCP segment of a reassembled PDU] 2022-08-15 20:50:30.784155 172.16.0.6 172.16.8.192 TCP 94 7775 → 56478 [PSH, ACK] Seq=14494 Ack=99802 Win=65000 Len=40 [TCP segment of a reassembled PDU] 2022-08-15 20:50:30.784199 172.16.0.6 172.16.8.192 HL7 60 ACK (R22) 2022-08-15 20:50:30.784250 172.16.8.192 172.16.0.6 TCP 60 56478 → 7775 [ACK] Seq=99802 Ack=14534 Win=64195 Len=0 2022-08-15 20:50:30.784325 172.16.8.192 172.16.0.6 TCP 60 56478 → 7775 [ACK] Seq=99802 Ack=14536 Win=64193 Len=0 2022-08-15 21:09:42.258974 172.16.8.192 172.16.0.6 HL7 408 QBP (Q11) 2022-08-15 21:09:42.325714 172.16.0.6 172.16.8.192 TCP 60 7775 → 56478 [ACK] Seq=14536 Ack=100156 Win=64646 Len=0 2022-08-15 21:10:22.264483 172.16.0.6 172.16.8.192 TCP 60 7775 → 56478 [FIN, ACK] Seq=14536 Ack=100156 Win=64646 Len=0 2022-08-15 21:10:22.265109 172.16.8.192 172.16.0.6 TCP 60 56478 → 7775 [ACK] Seq=100156 Ack=14537 Win=64193 Len=0 2022-08-15 21:10:22.265406 172.16.8.192 172.16.0.6 TCP 60 56478 → 7775 [FIN, ACK] Seq=100156 Ack=14537 Win=64193 Len=0 2022-08-15 21:10:22.265906 172.16.8.192 172.16.0.6 TCP 62 62009 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:10:22.280088 172.16.0.6 172.16.8.192 TCP 60 7775 → 56478 [ACK] Seq=14537 Ack=100157 Win=64646 Len=0 2022-08-15 21:10:22.281542 172.16.0.6 172.16.8.192 TCP 60 7775 → 62009 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:10:22.797028 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 62009 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:10:22.811035 172.16.0.6 172.16.8.192 TCP 60 7775 → 62009 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:10:23.312635 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 62009 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:10:23.326570 172.16.0.6 172.16.8.192 TCP 60 7775 → 62009 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:10:23.827839 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 62009 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:10:23.842206 172.16.0.6 172.16.8.192 TCP 60 7775 → 62009 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:10:24.343419 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 62009 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:10:24.357354 172.16.0.6 172.16.8.192 TCP 60 7775 → 62009 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:10:29.372729 172.16.8.192 172.16.0.6 TCP 62 62027 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:10:29.386482 172.16.0.6 172.16.8.192 TCP 60 7775 → 62027 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:10:29.892427 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 62027 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:10:29.906282 172.16.0.6 172.16.8.192 TCP 60 7775 → 62027 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:10:30.412291 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 62027 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:10:30.425874 172.16.0.6 172.16.8.192 TCP 60 7775 → 62027 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:10:30.932427 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 62027 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:10:30.946392 172.16.0.6 172.16.8.192 TCP 60 7775 → 62027 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:10:31.452325 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 62027 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:10:31.465929 172.16.0.6 172.16.8.192 TCP 60 7775 → 62027 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:10:36.482985 172.16.8.192 172.16.0.6 TCP 62 62031 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:10:36.498173 172.16.0.6 172.16.8.192 TCP 62 7775 → 62031 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1000 SACK_PERM=1 2022-08-15 21:10:36.498976 172.16.8.192 172.16.0.6 TCP 60 62031 → 7775 [ACK] Seq=1 Ack=1 Win=64240 Len=0 2022-08-15 21:30:42.541530 172.16.0.6 172.16.8.192 TCP 60 7775 → 62031 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:30:42.853859 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 7775 → 62031 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:30:43.447650 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 7775 → 62031 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:30:44.650743 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 7775 → 62031 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:30:47.059188 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 7775 → 62031 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:30:51.869532 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 7775 → 62031 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:31:01.479257 172.16.0.6 172.16.8.192 TCP 60 7775 → 62031 [RST, ACK] Seq=2 Ack=1 Win=0 Len=0 2022-08-15 21:49:55.046324 172.16.8.192 172.16.0.6 TCP 1054 62031 → 7775 [ACK] Seq=1 Ack=1 Win=64240 Len=1000 [TCP segment of a reassembled PDU] 2022-08-15 21:49:55.046325 172.16.8.192 172.16.0.6 HL7 635 OUL (R22) 2022-08-15 21:49:55.088035 172.16.8.192 172.16.0.6 TCP 1054 [TCP Retransmission] 62031 → 7775 [PSH, ACK] Seq=582 Ack=1 Win=64240 Len=1000 2022-08-15 21:49:55.400632 172.16.8.192 172.16.0.6 TCP 1054 [TCP Retransmission] 62031 → 7775 [ACK] Seq=1 Ack=1 Win=64240 Len=1000 2022-08-15 21:49:56.009864 172.16.8.192 172.16.0.6 TCP 1054 [TCP Retransmission] 62031 → 7775 [ACK] Seq=1 Ack=1 Win=64240 Len=1000 2022-08-15 21:49:57.212777 172.16.8.192 172.16.0.6 TCP 1054 [TCP Retransmission] 62031 → 7775 [ACK] Seq=1 Ack=1 Win=64240 Len=1000 2022-08-15 21:49:59.618324 172.16.8.192 172.16.0.6 TCP 60 62031 → 7775 [RST, ACK] Seq=1001 Ack=1 Win=0 Len=0 2022-08-15 21:49:59.619220 172.16.8.192 172.16.0.6 TCP 62 62942 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:49:59.632815 172.16.0.6 172.16.8.192 TCP 62 7775 → 62942 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1000 SACK_PERM=1 2022-08-15 21:49:59.633400 172.16.8.192 172.16.0.6 TCP 60 62942 → 7775 [ACK] Seq=1 Ack=1 Win=64240 Len=0 2022-08-15 21:51:02.644616 172.16.0.6 172.16.8.192 TCP 60 7775 → 62942 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:51:02.645064 172.16.8.192 172.16.0.6 TCP 60 62942 → 7775 [ACK] Seq=1 Ack=2 Win=64240 Len=0 2022-08-15 21:51:02.645502 172.16.8.192 172.16.0.6 TCP 60 62942 → 7775 [FIN, ACK] Seq=1 Ack=2 Win=64240 Len=0 2022-08-15 21:51:02.645859 172.16.8.192 172.16.0.6 TCP 62 62991 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:51:02.658587 172.16.0.6 172.16.8.192 TCP 60 7775 → 62942 [ACK] Seq=2 Ack=2 Win=65000 Len=0 2022-08-15 21:51:02.659581 172.16.0.6 172.16.8.192 TCP 60 7775 → 62991 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:51:03.191554 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 62991 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:51:03.205591 172.16.0.6 172.16.8.192 TCP 60 7775 → 62991 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:51:03.712982 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 62991 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:51:03.726889 172.16.0.6 172.16.8.192 TCP 60 7775 → 62991 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:51:04.228439 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 62991 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:51:04.242473 172.16.0.6 172.16.8.192 TCP 60 7775 → 62991 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:51:04.744083 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 62991 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:51:04.757794 172.16.0.6 172.16.8.192 TCP 60 7775 → 62991 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:51:04.758836 172.16.8.192 172.16.0.6 TCP 62 63002 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:51:04.772315 172.16.0.6 172.16.8.192 TCP 60 7775 → 63002 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:51:05.289703 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 63002 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:51:05.303171 172.16.0.6 172.16.8.192 TCP 60 7775 → 63002 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:51:05.809751 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 63002 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:51:05.823337 172.16.0.6 172.16.8.192 TCP 60 7775 → 63002 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:51:06.329836 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 63002 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:51:06.343377 172.16.0.6 172.16.8.192 TCP 60 7775 → 63002 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:51:06.849972 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 63002 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:51:06.863809 172.16.0.6 172.16.8.192 TCP 60 7775 → 63002 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:51:09.769292 172.16.8.192 172.16.0.6 TCP 62 63019 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:51:09.782813 172.16.0.6 172.16.8.192 TCP 60 7775 → 63019 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:51:10.289503 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 63019 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:51:10.302941 172.16.0.6 172.16.8.192 TCP 60 7775 → 63019 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:51:10.809062 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 63019 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:51:10.822947 172.16.0.6 172.16.8.192 TCP 60 7775 → 63019 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:51:11.329365 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 63019 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:51:11.342929 172.16.0.6 172.16.8.192 TCP 60 7775 → 63019 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:51:11.849124 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 63019 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:51:11.862810 172.16.0.6 172.16.8.192 TCP 60 7775 → 63019 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:51:16.869334 172.16.8.192 172.16.0.6 TCP 62 63020 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:51:16.883291 172.16.0.6 172.16.8.192 TCP 62 7775 → 63020 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1000 SACK_PERM=1 2022-08-15 21:51:16.883815 172.16.8.192 172.16.0.6 TCP 60 63020 → 7775 [ACK] Seq=1 Ack=1 Win=64240 Len=0 2022-08-15 21:51:16.926249 172.16.8.192 172.16.0.6 TCP 1054 63020 → 7775 [ACK] Seq=1 Ack=1 Win=64240 Len=1000 [TCP segment of a reassembled PDU] 2022-08-15 21:51:16.926250 172.16.8.192 172.16.0.6 HL7 635 OUL (R22) 2022-08-15 21:51:16.939874 172.16.0.6 172.16.8.192 TCP 60 7775 → 63020 [ACK] Seq=1 Ack=1582 Win=65000 Len=0 2022-08-15 21:51:16.951969 172.16.0.6 172.16.8.192 TCP 60 7775 → 63020 [PSH, ACK] Seq=1 Ack=1582 Win=65000 Len=1 [TCP segment of a reassembled PDU] 2022-08-15 21:51:16.951971 172.16.0.6 172.16.8.192 TCP 164 7775 → 63020 [PSH, ACK] Seq=2 Ack=1582 Win=65000 Len=110 [TCP segment of a reassembled PDU] 2022-08-15 21:51:16.951971 172.16.0.6 172.16.8.192 TCP 94 7775 → 63020 [PSH, ACK] Seq=112 Ack=1582 Win=65000 Len=40 [TCP segment of a reassembled PDU] 2022-08-15 21:51:16.953404 172.16.8.192 172.16.0.6 TCP 60 63020 → 7775 [ACK] Seq=1582 Ack=152 Win=64089 Len=0 2022-08-15 21:51:16.955273 172.16.0.6 172.16.8.192 HL7 60 ACK (R22) 2022-08-15 21:51:16.955643 172.16.8.192 172.16.0.6 TCP 60 63020 → 7775 [ACK] Seq=1582 Ack=154 Win=64087 Len=0 2022-08-15 22:11:17.007496 172.16.0.6 172.16.8.192 TCP 60 7775 → 63020 [FIN, ACK] Seq=154 Ack=1582 Win=65000 Len=0 2022-08-15 22:11:17.319814 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 7775 → 63020 [FIN, ACK] Seq=154 Ack=1582 Win=65000 Len=0 2022-08-15 22:11:17.929153 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 7775 → 63020 [FIN, ACK] Seq=154 Ack=1582 Win=65000 Len=0 2022-08-15 22:11:19.132210 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 7775 → 63020 [FIN, ACK] Seq=154 Ack=1582 Win=65000 Len=0 2022-08-15 22:11:21.538521 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 7775 → 63020 [FIN, ACK] Seq=154 Ack=1582 Win=65000 Len=0 2022-08-15 22:11:26.351207 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 7775 → 63020 [FIN, ACK] Seq=154 Ack=1582 Win=65000 Len=0 2022-08-15 22:11:35.960814 172.16.0.6 172.16.8.192 TCP 60 7775 → 63020 [RST, ACK] Seq=155 Ack=1582 Win=0 Len=0 2022-08-16 00:42:31.048742 172.16.8.192 172.16.0.6 HL7 410 QBP (Q11) 2022-08-16 00:42:31.271724 172.16.8.192 172.16.0.6 TCP 410 [TCP Retransmission] 63020 → 7775 [PSH, ACK] Seq=1582 Ack=154 Win=64087 Len=356 2022-08-16 00:42:31.584167 172.16.8.192 172.16.0.6 TCP 410 [TCP Retransmission] 63020 → 7775 [PSH, ACK] Seq=1582 Ack=154 Win=64087 Len=356 2022-08-16 00:42:32.193560 172.16.8.192 172.16.0.6 TCP 410 [TCP Retransmission] 63020 → 7775 [PSH, ACK] Seq=1582 Ack=154 Win=64087 Len=356 2022-08-16 00:42:33.396299 172.16.8.192 172.16.0.6 TCP 410 [TCP Retransmission] 63020 → 7775 [PSH, ACK] Seq=1582 Ack=154 Win=64087 Len=356 2022-08-16 00:42:35.802317 172.16.8.192 172.16.0.6 TCP 60 63020 → 7775 [RST, ACK] Seq=1938 Ack=154 Win=0 Len=0 2022-08-16 00:42:35.802867 172.16.8.192 172.16.0.6 TCP 62 50735 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:42:35.816412 172.16.0.6 172.16.8.192 TCP 62 7775 → 50735 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1000 SACK_PERM=1 2022-08-16 00:42:35.817003 172.16.8.192 172.16.0.6 TCP 60 50735 → 7775 [ACK] Seq=1 Ack=1 Win=64240 Len=0 2022-08-16 00:42:36.308410 172.16.8.192 172.16.0.6 HL7 411 QBP (Q11) 2022-08-16 00:42:36.321923 172.16.0.6 172.16.8.192 TCP 60 7775 → 50735 [PSH, ACK] Seq=1 Ack=358 Win=65000 Len=1 [TCP segment of a reassembled PDU] 2022-08-16 00:42:36.321923 172.16.0.6 172.16.8.192 TCP 164 7775 → 50735 [PSH, ACK] Seq=2 Ack=358 Win=65000 Len=110 [TCP segment of a reassembled PDU] 2022-08-16 00:42:36.322022 172.16.0.6 172.16.8.192 TCP 94 7775 → 50735 [PSH, ACK] Seq=112 Ack=358 Win=65000 Len=40 [TCP segment of a reassembled PDU] 2022-08-16 00:42:36.322023 172.16.0.6 172.16.8.192 HL7 60 ACK (R22) 2022-08-16 00:42:36.322023 172.16.8.192 172.16.0.6 TCP 60 50735 → 7775 [ACK] Seq=358 Ack=112 Win=64129 Len=0 2022-08-16 00:42:36.322116 172.16.8.192 172.16.0.6 TCP 60 50735 → 7775 [ACK] Seq=358 Ack=154 Win=64087 Len=0 2022-08-16 00:50:46.428665 192.168.1.106 172.16.0.6 HL7 410 QBP (Q11) 2022-08-16 00:50:46.653301 192.168.1.106 172.16.0.6 TCP 410 [TCP Retransmission] 50735 → 7775 [PSH, ACK] Seq=1 Ack=1 Win=64087 Len=356 2022-08-16 00:50:46.965835 192.168.1.106 172.16.0.6 TCP 410 [TCP Retransmission] 50735 → 7775 [PSH, ACK] Seq=1 Ack=1 Win=64087 Len=356 2022-08-16 00:50:47.574936 192.168.1.106 172.16.0.6 TCP 410 [TCP Retransmission] 50735 → 7775 [PSH, ACK] Seq=1 Ack=1 Win=64087 Len=356 2022-08-16 00:50:48.777923 192.168.1.106 172.16.0.6 TCP 410 [TCP Retransmission] 50735 → 7775 [PSH, ACK] Seq=1 Ack=1 Win=64087 Len=356 2022-08-16 00:50:51.183650 172.16.8.192 172.16.0.6 TCP 60 50735 → 7775 [RST, ACK] Seq=714 Ack=154 Win=0 Len=0 2022-08-16 00:50:51.184279 172.16.8.192 172.16.0.6 TCP 62 50994 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:50:51.196624 172.16.0.6 172.16.8.192 TCP 60 [TCP Dup ACK 103469#1] 7775 → 50735 [ACK] Seq=154 Ack=358 Win=65000 Len=0 2022-08-16 00:50:51.198210 172.16.0.6 172.16.8.192 TCP 62 7775 → 50994 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1000 SACK_PERM=1 2022-08-16 00:50:51.198705 172.16.8.192 172.16.0.6 TCP 60 50994 → 7775 [ACK] Seq=1 Ack=1 Win=64240 Len=0 2022-08-16 00:51:27.753353 172.16.8.192 172.16.0.6 TCP 1054 50994 → 7775 [ACK] Seq=1 Ack=1 Win=64240 Len=1000 [TCP segment of a reassembled PDU] 2022-08-16 00:51:27.753356 172.16.8.192 172.16.0.6 HL7 129 OUL (R22) 2022-08-16 00:51:27.766776 172.16.0.6 172.16.8.192 TCP 60 7775 → 50994 [ACK] Seq=1 Ack=1076 Win=65000 Len=0 2022-08-16 00:55:55.699673 172.16.8.192 172.16.0.6 HL7 411 QBP (Q11) 2022-08-16 00:55:55.767430 172.16.0.6 172.16.8.192 TCP 60 7775 → 50994 [ACK] Seq=1 Ack=1433 Win=64643 Len=0 2022-08-16 00:56:01.040494 172.16.8.192 172.16.0.6 HL7 411 QBP (Q11) 2022-08-16 00:56:01.111248 172.16.0.6 172.16.8.192 TCP 60 7775 → 50994 [ACK] Seq=1 Ack=1790 Win=64286 Len=0 2022-08-16 00:56:01.212335 172.16.0.6 172.16.8.192 TCP 60 7775 → 50994 [RST, ACK] Seq=1 Ack=1790 Win=0 Len=0 2022-08-16 00:56:01.213560 172.16.8.192 172.16.0.6 TCP 62 51183 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:56:01.227610 172.16.0.6 172.16.8.192 TCP 60 7775 → 51183 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-16 00:56:01.735444 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 51183 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:56:01.749267 172.16.0.6 172.16.8.192 TCP 60 7775 → 51183 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-16 00:56:02.251055 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 51183 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:56:02.264965 172.16.0.6 172.16.8.192 TCP 60 7775 → 51183 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-16 00:56:02.766448 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 51183 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:56:02.780270 172.16.0.6 172.16.8.192 TCP 60 7775 → 51183 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-16 00:56:03.283052 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 51183 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:56:03.295855 172.16.0.6 172.16.8.192 TCP 60 7775 → 51183 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-16 00:56:03.296815 172.16.8.192 172.16.0.6 TCP 62 51185 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:56:03.310273 172.16.0.6 172.16.8.192 TCP 60 7775 → 51185 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-16 00:56:03.823598 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 51185 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:56:03.836632 172.16.0.6 172.16.8.192 TCP 60 7775 → 51185 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-16 00:56:04.372031 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 51185 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:56:04.385746 172.16.0.6 172.16.8.192 TCP 60 7775 → 51185 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-16 00:56:04.892353 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 51185 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:56:04.905661 172.16.0.6 172.16.8.192 TCP 60 7775 → 51185 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-16 00:56:05.411908 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 51185 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:56:05.425396 172.16.0.6 172.16.8.192 TCP 60 7775 → 51185 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-16 00:56:08.315217 172.16.8.192 172.16.0.6 TCP 62 51201 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:56:08.329278 172.16.0.6 172.16.8.192 TCP 60 7775 → 51201 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-16 00:56:08.845293 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 51201 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:56:08.859193 172.16.0.6 172.16.8.192 TCP 60 7775 → 51201 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-16 00:56:09.370552 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 51201 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:56:09.384510 172.16.0.6 172.16.8.192 TCP 60 7775 → 51201 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-16 00:56:09.895866 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 51201 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:56:09.909628 172.16.0.6 172.16.8.192 TCP 60 7775 → 51201 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-16 00:56:10.410868 172.16.8.192 172.16.0.6 TCP 62 [TCP Retransmission] [TCP Port numbers reused] 51201 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:56:10.425065 172.16.0.6 172.16.8.192 TCP 60 7775 → 51201 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-16 00:56:15.435023 172.16.8.192 172.16.0.6 TCP 62 51210 → 7775 [SYN] Seq=0 Win=64240 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:56:15.449111 172.16.0.6 172.16.8.192 TCP 62 7775 → 51210 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1000 SACK_PERM=1 2022-08-16 00:56:15.449724 172.16.8.192 172.16.0.6 TCP 60 51210 → 7775 [ACK] Seq=1 Ack=1 Win=64240 Len=0 2022-08-16 00:56:15.485626 172.16.8.192 172.16.0.6 TCP 1054 51210 → 7775 [ACK] Seq=1 Ack=1 Win=64240 Len=1000 [TCP segment of a reassembled PDU] 2022-08-16 00:56:15.485626 172.16.8.192 172.16.0.6 HL7 121 OUL (R22) 2022-08-16 00:56:15.499006 172.16.0.6 172.16.8.192 TCP 60 7775 → 51210 [ACK] Seq=1 Ack=1068 Win=65000 Len=0 2022-08-16 00:56:15.549263 172.16.0.6 172.16.8.192 TCP 60 7775 → 51210 [PSH, ACK] Seq=1 Ack=1068 Win=65000 Len=1 [TCP segment of a reassembled PDU] 2022-08-16 00:56:15.549396 172.16.0.6 172.16.8.192 TCP 164 7775 → 51210 [PSH, ACK] Seq=2 Ack=1068 Win=65000 Len=110 [TCP segment of a reassembled PDU] 2022-08-16 00:56:15.549397 172.16.0.6 172.16.8.192 TCP 94 7775 → 51210 [PSH, ACK] Seq=112 Ack=1068 Win=65000 Len=40 [TCP segment of a reassembled PDU] 2022-08-16 00:56:15.549397 172.16.0.6 172.16.8.192 HL7 60 ACK (R22) 2022-08-16 00:56:15.550618 172.16.8.192 172.16.0.6 TCP 60 51210 → 7775 [ACK] Seq=1068 Ack=154 Win=64087 Len=0 2022-08-16 00:58:45.708703 172.16.8.192 172.16.0.6 HL7 411 QBP (Q11) 2022-08-16 00:58:45.723379 172.16.0.6 172.16.8.192 TCP 60 7775 → 51210 [PSH, ACK] Seq=154 Ack=1425 Win=64643 Len=1 [TCP segment of a reassembled PDU] 2022-08-16 00:58:45.723380 172.16.0.6 172.16.8.192 TCP 164 7775 → 51210 [PSH, ACK] Seq=155 Ack=1425 Win=64643 Len=110 [TCP segment of a reassembled PDU] 2022-08-16 00:58:45.723380 172.16.0.6 172.16.8.192 TCP 94 7775 → 51210 [PSH, ACK] Seq=265 Ack=1425 Win=64643 Len=40 [TCP segment of a reassembled PDU] 2022-08-16 00:58:45.723381 172.16.0.6 172.16.8.192 HL7 60 ACK (R22) 2022-08-16 00:58:45.723524 172.16.8.192 172.16.0.6 TCP 60 51210 → 7775 [ACK] Seq=1425 Ack=307 Win=65000 Len=0 2022-08-16 00:58:50.721580 172.16.8.192 172.16.0.6 HL7 410 QBP (Q11) 2022-08-16 00:58:50.735087 172.16.0.6 172.16.8.192 TCP 60 7775 → 51210 [PSH, ACK] Seq=307 Ack=1781 Win=64287 Len=1 [TCP segment of a reassembled PDU] 2022-08-16 00:58:50.735090 172.16.0.6 172.16.8.192 TCP 164 7775 → 51210 [PSH, ACK] Seq=308 Ack=1781 Win=64287 Len=110 [TCP segment of a reassembled PDU] 2022-08-16 00:58:50.735262 172.16.0.6 172.16.8.192 TCP 94 7775 → 51210 [PSH, ACK] Seq=418 Ack=1781 Win=64287 Len=40 [TCP segment of a reassembled PDU] 2022-08-16 00:58:50.735265 172.16.0.6 172.16.8.192 HL7 60 ACK (R22) 2022-08-16 00:58:50.735266 172.16.8.192 172.16.0.6 TCP 60 51210 → 7775 [ACK] Seq=1781 Ack=418 Win=64889 Len=0 2022-08-16 00:58:50.735430 172.16.8.192 172.16.0.6 TCP 60 51210 → 7775 [ACK] Seq=1781 Ack=460 Win=64847 Len=0 2022-08-16 00:58:56.171817 172.16.8.192 172.16.0.6 HL7 411 QBP (Q11) 2022-08-16 00:58:56.185122 172.16.0.6 172.16.8.192 TCP 60 7775 → 51210 [PSH, ACK] Seq=460 Ack=2138 Win=65000 Len=1 [TCP segment of a reassembled PDU] 2022-08-16 00:58:56.185122 172.16.0.6 172.16.8.192 TCP 164 7775 → 51210 [PSH, ACK] Seq=461 Ack=2138 Win=65000 Len=110 [TCP segment of a reassembled PDU] 2022-08-16 00:58:56.185213 172.16.0.6 172.16.8.192 TCP 94 7775 → 51210 [PSH, ACK] Seq=571 Ack=2138 Win=65000 Len=40 [TCP segment of a reassembled PDU] 2022-08-16 00:58:56.185213 172.16.0.6 172.16.8.192 HL7 60 ACK (R22) 2022-08-16 00:58:56.185293 172.16.8.192 172.16.0.6 TCP 60 51210 → 7775 [ACK] Seq=2138 Ack=571 Win=64736 Len=0 2022-08-16 00:58:56.185434 172.16.8.192 172.16.0.6 TCP 60 51210 → 7775 [ACK] Seq=2138 Ack=613 Win=64694 Len=0 2022-08-16 00:59:01.350780 172.16.8.192 172.16.0.6 HL7 410 QBP (Q11) 2022-08-16 00:59:01.365228 172.16.0.6 172.16.8.192 TCP 60 7775 → 51210 [PSH, ACK] Seq=613 Ack=2494 Win=64644 Len=1 [TCP segment of a reassembled PDU] 2022-08-16 00:59:01.365229 172.16.0.6 172.16.8.192 TCP 164 7775 → 51210 [PSH, ACK] Seq=614 Ack=2494 Win=64644 Len=110 [TCP segment of a reassembled PDU] 2022-08-16 00:59:01.365230 172.16.0.6 172.16.8.192 TCP 94 7775 → 51210 [PSH, ACK] Seq=724 Ack=2494 Win=64644 Len=40 [TCP segment of a reassembled PDU]
Findings on port 8850: 2022-08-15 19:53:48.592928 172.16.0.6 172.16.8.192 TCP 60 60628 → 8850 [PSH, ACK] Seq=1 Ack=1 Win=65000 Len=1 [TCP segment of a reassembled PDU] 2022-08-15 19:53:48.593138 172.16.0.6 172.16.8.192 TCP 179 60628 → 8850 [PSH, ACK] Seq=2 Ack=1 Win=65000 Len=125 [TCP segment of a reassembled PDU] 2022-08-15 19:53:48.593139 172.16.0.6 172.16.8.192 TCP 95 60628 → 8850 [PSH, ACK] Seq=127 Ack=1 Win=65000 Len=41 [TCP segment of a reassembled PDU] 2022-08-15 19:53:48.593139 172.16.0.6 172.16.8.192 TCP 63 60628 → 8850 [PSH, ACK] Seq=168 Ack=1 Win=65000 Len=9 [TCP segment of a reassembled PDU] 2022-08-15 19:53:48.593139 172.16.0.6 172.16.8.192 TCP 103 60628 → 8850 [PSH, ACK] Seq=177 Ack=1 Win=65000 Len=49 [TCP segment of a reassembled PDU] 2022-08-15 19:53:48.593140 172.16.0.6 172.16.8.192 TCP 76 60628 → 8850 [PSH, ACK] Seq=226 Ack=1 Win=65000 Len=22 [TCP segment of a reassembled PDU] 2022-08-15 19:53:48.593140 172.16.0.6 172.16.8.192 TCP 86 60628 → 8850 [PSH, ACK] Seq=248 Ack=1 Win=65000 Len=32 [TCP segment of a reassembled PDU] 2022-08-15 19:53:48.593140 172.16.0.6 172.16.8.192 TCP 77 60628 → 8850 [PSH, ACK] Seq=280 Ack=1 Win=65000 Len=23 [TCP segment of a reassembled PDU] 2022-08-15 19:53:48.593141 172.16.0.6 172.16.8.192 TCP 89 60628 → 8850 [PSH, ACK] Seq=303 Ack=1 Win=65000 Len=35 [TCP segment of a reassembled PDU] 2022-08-15 19:53:48.593141 172.16.0.6 172.16.8.192 TCP 73 60628 → 8850 [PSH, ACK] Seq=338 Ack=1 Win=65000 Len=19 [TCP segment of a reassembled PDU] 2022-08-15 19:53:48.593141 172.16.0.6 172.16.8.192 TCP 60 60628 → 8850 [PSH, ACK] Seq=357 Ack=1 Win=65000 Len=2 2022-08-15 19:53:48.600873 172.16.8.192 172.16.0.6 TCP 60 8850 → 60628 [ACK] Seq=1 Ack=248 Win=64753 Len=0 2022-08-15 19:53:48.600874 172.16.8.192 172.16.0.6 TCP 60 8850 → 60628 [ACK] Seq=1 Ack=303 Win=64698 Len=0 2022-08-15 19:53:48.600967 172.16.8.192 172.16.0.6 TCP 60 8850 → 60628 [ACK] Seq=1 Ack=357 Win=64644 Len=0 2022-08-15 19:53:48.644006 172.16.8.192 172.16.0.6 TCP 60 8850 → 60628 [ACK] Seq=1 Ack=359 Win=64642 Len=0 2022-08-15 19:53:48.663819 172.16.8.192 172.16.0.6 HL7 406 ORL (O34) 2022-08-15 19:53:48.730316 172.16.0.6 172.16.8.192 TCP 60 60628 → 8850 [ACK] Seq=359 Ack=353 Win=64648 Len=0 2022-08-15 20:27:08.709578 172.16.0.6 172.16.8.192 TCP 60 60628 → 8850 [FIN, ACK] Seq=359 Ack=353 Win=64648 Len=0 2022-08-15 20:27:09.006530 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 60628 → 8850 [FIN, ACK] Seq=359 Ack=353 Win=64648 Len=0 2022-08-15 20:27:09.615711 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 60628 → 8850 [FIN, ACK] Seq=359 Ack=353 Win=64648 Len=0 2022-08-15 20:27:10.818772 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 60628 → 8850 [FIN, ACK] Seq=359 Ack=353 Win=64648 Len=0 2022-08-15 20:27:13.225246 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 60628 → 8850 [FIN, ACK] Seq=359 Ack=353 Win=64648 Len=0 2022-08-15 20:27:18.038112 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 60628 → 8850 [FIN, ACK] Seq=359 Ack=353 Win=64648 Len=0 2022-08-15 20:27:18.722034 172.16.0.6 172.16.8.192 TCP 66 60279 → 8850 [SYN, ECN, CWR] Seq=0 Win=8192 Len=0 MSS=1000 WS=256 SACK_PERM=1 2022-08-15 20:27:18.727649 172.16.8.192 172.16.0.6 TCP 62 8850 → 60279 [SYN, ACK] Seq=0 Ack=1 Win=65000 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 20:27:18.741106 172.16.0.6 172.16.8.192 TCP 60 60279 → 8850 [ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 20:27:18.742140 192.168.1.106 172.16.0.6 TCP 60 8850 → 60628 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 20:27:27.647289 172.16.0.6 172.16.8.192 TCP 60 60628 → 8850 [RST, ACK] Seq=360 Ack=353 Win=0 Len=0 2022-08-15 21:00:18.818339 172.16.0.6 172.16.8.192 TCP 60 60279 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:00:19.114862 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 60279 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:00:19.723705 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 60279 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:00:20.942672 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 60279 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:00:23.349003 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 60279 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:00:28.161415 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 60279 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:00:28.819769 172.16.0.6 172.16.8.192 TCP 66 56657 → 8850 [SYN, ECN, CWR] Seq=0 Win=8192 Len=0 MSS=1000 WS=256 SACK_PERM=1 2022-08-15 21:00:28.822481 172.16.8.192 172.16.0.6 TCP 62 8850 → 56657 [SYN, ACK] Seq=0 Ack=1 Win=65000 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:00:28.836106 172.16.0.6 172.16.8.192 TCP 60 56657 → 8850 [ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:00:28.837129 192.168.1.106 172.16.0.6 TCP 60 8850 → 60279 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:00:37.771138 172.16.0.6 172.16.8.192 TCP 60 60279 → 8850 [RST, ACK] Seq=2 Ack=1 Win=0 Len=0 2022-08-15 21:20:38.887180 172.16.0.6 172.16.8.192 TCP 60 56657 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:20:39.199205 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 56657 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:20:39.808433 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 56657 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:20:41.011735 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 56657 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:20:43.417919 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 56657 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:20:48.230431 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 56657 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:20:48.888563 172.16.0.6 172.16.8.192 TCP 66 64340 → 8850 [SYN, ECN, CWR] Seq=0 Win=8192 Len=0 MSS=1000 WS=256 SACK_PERM=1 2022-08-15 21:20:48.902002 172.16.8.192 172.16.0.6 TCP 62 8850 → 64340 [SYN, ACK] Seq=0 Ack=1 Win=65000 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:20:48.915483 172.16.0.6 172.16.8.192 TCP 60 64340 → 8850 [ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:20:48.916444 192.168.1.106 172.16.0.6 TCP 60 8850 → 56657 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:20:57.839930 172.16.0.6 172.16.8.192 TCP 60 56657 → 8850 [RST, ACK] Seq=2 Ack=1 Win=0 Len=0 2022-08-15 21:40:59.004248 172.16.0.6 172.16.8.192 TCP 60 64340 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:40:59.316220 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 64340 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:40:59.925539 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 64340 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:41:01.128667 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 64340 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:41:03.535019 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 64340 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:41:08.347473 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 64340 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:41:09.005889 172.16.0.6 172.16.8.192 TCP 66 55801 → 8850 [SYN, ECN, CWR] Seq=0 Win=8192 Len=0 MSS=1000 WS=256 SACK_PERM=1 2022-08-15 21:41:09.006734 172.16.8.192 172.16.0.6 TCP 62 8850 → 55801 [SYN, ACK] Seq=0 Ack=1 Win=65000 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 21:41:09.020011 172.16.0.6 172.16.8.192 TCP 60 55801 → 8850 [ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 21:41:09.021043 192.168.1.106 172.16.0.6 TCP 60 8850 → 64340 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 21:41:17.957083 172.16.0.6 172.16.8.192 TCP 60 64340 → 8850 [RST, ACK] Seq=2 Ack=1 Win=0 Len=0 2022-08-15 22:01:19.115156 172.16.0.6 172.16.8.192 TCP 60 55801 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:01:19.408867 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 55801 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:01:20.018265 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 55801 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:01:21.221207 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 55801 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:01:23.627369 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 55801 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:01:28.424554 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 55801 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:01:29.114444 172.16.0.6 172.16.8.192 TCP 66 63394 → 8850 [SYN, ECN, CWR] Seq=0 Win=8192 Len=0 MSS=1000 WS=256 SACK_PERM=1 2022-08-15 22:01:29.122214 172.16.8.192 172.16.0.6 TCP 62 8850 → 63394 [SYN, ACK] Seq=0 Ack=1 Win=65000 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 22:01:29.135721 172.16.0.6 172.16.8.192 TCP 60 63394 → 8850 [ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:01:29.136711 192.168.1.106 172.16.0.6 TCP 60 8850 → 55801 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 22:01:38.018518 172.16.0.6 172.16.8.192 TCP 60 55801 → 8850 [RST, ACK] Seq=2 Ack=1 Win=0 Len=0 2022-08-15 22:21:39.215358 172.16.0.6 172.16.8.192 TCP 60 63394 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:21:39.527423 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 63394 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:21:40.136569 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 63394 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:21:41.339870 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 63394 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:21:43.746075 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 63394 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:21:48.558681 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 63394 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:21:49.217419 172.16.0.6 172.16.8.192 TCP 66 55429 → 8850 [SYN, ECN, CWR] Seq=0 Win=8192 Len=0 MSS=1000 WS=256 SACK_PERM=1 2022-08-15 22:21:49.222374 172.16.8.192 172.16.0.6 TCP 62 8850 → 55429 [SYN, ACK] Seq=0 Ack=1 Win=65000 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 22:21:49.235757 172.16.0.6 172.16.8.192 TCP 60 55429 → 8850 [ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:21:49.236806 192.168.1.106 172.16.0.6 TCP 60 8850 → 63394 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 22:21:58.168213 172.16.0.6 172.16.8.192 TCP 60 63394 → 8850 [RST, ACK] Seq=2 Ack=1 Win=0 Len=0 2022-08-15 22:41:59.291072 172.16.0.6 172.16.8.192 TCP 60 55429 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:41:59.603069 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 55429 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:42:00.212572 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 55429 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:42:01.431097 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 55429 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:42:03.837273 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 55429 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:42:08.650100 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 55429 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:42:09.292665 172.16.0.6 172.16.8.192 TCP 66 62899 → 8850 [SYN, ECN, CWR] Seq=0 Win=8192 Len=0 MSS=1000 WS=256 SACK_PERM=1 2022-08-15 22:42:09.302240 172.16.8.192 172.16.0.6 TCP 62 8850 → 62899 [SYN, ACK] Seq=0 Ack=1 Win=65000 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 22:42:09.315607 172.16.0.6 172.16.8.192 TCP 60 62899 → 8850 [ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 22:42:09.316463 192.168.1.106 172.16.0.6 TCP 60 8850 → 55429 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 22:42:18.259588 172.16.0.6 172.16.8.192 TCP 60 55429 → 8850 [RST, ACK] Seq=2 Ack=1 Win=0 Len=0 2022-08-15 23:02:19.385495 172.16.0.6 172.16.8.192 TCP 60 62899 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:02:19.697905 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 62899 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:02:20.306926 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 62899 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:02:21.510229 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 62899 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:02:23.916347 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 62899 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:02:28.713232 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 62899 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:02:29.386901 172.16.0.6 172.16.8.192 TCP 66 54107 → 8850 [SYN, ECN, CWR] Seq=0 Win=8192 Len=0 MSS=1000 WS=256 SACK_PERM=1 2022-08-15 23:02:29.387574 172.16.8.192 172.16.0.6 TCP 62 8850 → 54107 [SYN, ACK] Seq=0 Ack=1 Win=65000 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 23:02:29.400705 172.16.0.6 172.16.8.192 TCP 60 54107 → 8850 [ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:02:29.401653 192.168.1.106 172.16.0.6 TCP 60 8850 → 62899 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 23:02:38.307335 172.16.0.6 172.16.8.192 TCP 60 62899 → 8850 [RST, ACK] Seq=2 Ack=1 Win=0 Len=0 2022-08-15 23:22:39.451376 172.16.0.6 172.16.8.192 TCP 60 54107 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:22:39.747781 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 54107 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:22:40.356844 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 54107 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:22:41.560363 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 54107 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:22:43.966254 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 54107 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:22:48.779009 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 54107 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:22:49.453044 172.16.0.6 172.16.8.192 TCP 66 61828 → 8850 [SYN, ECN, CWR] Seq=0 Win=8192 Len=0 MSS=1000 WS=256 SACK_PERM=1 2022-08-15 23:22:49.453710 172.16.8.192 172.16.0.6 TCP 62 8850 → 61828 [SYN, ACK] Seq=0 Ack=1 Win=65000 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 23:22:49.466845 172.16.0.6 172.16.8.192 TCP 60 61828 → 8850 [ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:22:49.467775 192.168.1.106 172.16.0.6 TCP 60 8850 → 54107 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 23:22:58.388547 172.16.0.6 172.16.8.192 TCP 60 54107 → 8850 [RST, ACK] Seq=2 Ack=1 Win=0 Len=0 2022-08-15 23:42:59.515373 172.16.0.6 172.16.8.192 TCP 60 61828 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:42:59.812080 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 61828 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:43:00.421076 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 61828 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:43:01.624202 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 61828 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:43:04.030650 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 61828 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:43:08.850290 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 61828 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:43:09.517479 172.16.0.6 172.16.8.192 TCP 66 52766 → 8850 [SYN, ECN, CWR] Seq=0 Win=8192 Len=0 MSS=1000 WS=256 SACK_PERM=1 2022-08-15 23:43:09.522472 172.16.8.192 172.16.0.6 TCP 62 8850 → 52766 [SYN, ACK] Seq=0 Ack=1 Win=65000 Len=0 MSS=1460 SACK_PERM=1 2022-08-15 23:43:09.535618 172.16.0.6 172.16.8.192 TCP 60 52766 → 8850 [ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-15 23:43:09.536689 192.168.1.106 172.16.0.6 TCP 60 8850 → 61828 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-15 23:43:18.452750 172.16.0.6 172.16.8.192 TCP 60 61828 → 8850 [RST, ACK] Seq=2 Ack=1 Win=0 Len=0 2022-08-16 00:03:19.578087 172.16.0.6 172.16.8.192 TCP 60 52766 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-16 00:03:19.890548 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 52766 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-16 00:03:20.499742 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 52766 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-16 00:03:21.702779 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 52766 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-16 00:03:24.109092 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 52766 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-16 00:03:28.921765 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 52766 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-16 00:03:29.580200 172.16.0.6 172.16.8.192 TCP 66 60292 → 8850 [SYN, ECN, CWR] Seq=0 Win=8192 Len=0 MSS=1000 WS=256 SACK_PERM=1 2022-08-16 00:03:29.580873 172.16.8.192 172.16.0.6 TCP 62 8850 → 60292 [SYN, ACK] Seq=0 Ack=1 Win=65000 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:03:29.594060 172.16.0.6 172.16.8.192 TCP 60 60292 → 8850 [ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-16 00:03:29.595650 192.168.1.106 172.16.0.6 TCP 60 8850 → 52766 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-16 00:03:38.531327 172.16.0.6 172.16.8.192 TCP 60 52766 → 8850 [RST, ACK] Seq=2 Ack=1 Win=0 Len=0 2022-08-16 00:23:39.668889 172.16.0.6 172.16.8.192 TCP 60 60292 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-16 00:23:39.965750 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 60292 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-16 00:23:40.574774 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 60292 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-16 00:23:41.777936 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 60292 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-16 00:23:44.184516 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 60292 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-16 00:23:48.981180 172.16.0.6 172.16.8.192 TCP 60 [TCP Retransmission] 60292 → 8850 [FIN, ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-16 00:23:49.670549 172.16.0.6 172.16.8.192 TCP 66 51204 → 8850 [SYN, ECN, CWR] Seq=0 Win=8192 Len=0 MSS=1000 WS=256 SACK_PERM=1 2022-08-16 00:23:49.672509 172.16.8.192 172.16.0.6 TCP 62 8850 → 51204 [SYN, ACK] Seq=0 Ack=1 Win=65000 Len=0 MSS=1460 SACK_PERM=1 2022-08-16 00:23:49.685521 172.16.0.6 172.16.8.192 TCP 60 51204 → 8850 [ACK] Seq=1 Ack=1 Win=65000 Len=0 2022-08-16 00:23:49.686543 192.168.1.106 172.16.0.6 TCP 60 8850 → 60292 [RST, ACK] Seq=1 Ack=1 Win=0 Len=0 2022-08-16 00:23:58.590827 172.16.0.6 172.16.8.192 TCP 60 60292 → 8850 [RST, ACK] Seq=2 Ack=1 Win=0 Len=0 2022-08-16 00:42:39.729193 172.16.0.6 172.16.8.192 TCP 60 51204 → 8850 [PSH, ACK] Seq=1 Ack=1 Win=65000 Len=1 [TCP segment of a reassembled PDU] 2022-08-16 00:42:39.729344 172.16.0.6 172.16.8.192 TCP 179 51204 → 8850 [PSH, ACK] Seq=2 Ack=1 Win=65000 Len=125 [TCP segment of a reassembled PDU] 2022-08-16 00:42:39.729345 172.16.0.6 172.16.8.192 TCP 112 51204 → 8850 [PSH, ACK] Seq=127 Ack=1 Win=65000 Len=58 [TCP segment of a reassembled PDU] 2022-08-16 00:42:39.729346 172.16.0.6 172.16.8.192 TCP 63 51204 → 8850 [PSH, ACK] Seq=185 Ack=1 Win=65000 Len=9 [TCP segment of a reassembled PDU] 2022-08-16 00:42:39.729347 172.16.0.6 172.16.8.192 TCP 104 51204 → 8850 [PSH, ACK] Seq=194 Ack=1 Win=65000 Len=50 [TCP segment of a reassembled PDU] 2022-08-16 00:42:39.729348 172.16.0.6 172.16.8.192 TCP 76 51204 → 8850 [PSH, ACK] Seq=244 Ack=1 Win=65000 Len=22 [TCP segment of a reassembled PDU] 2022-08-16 00:42:39.729348 172.16.0.6 172.16.8.192 TCP 86 51204 → 8850 [PSH, ACK] Seq=266 Ack=1 Win=65000 Len=32 [TCP segment of a reassembled PDU] 2022-08-16 00:42:39.729349 172.16.0.6 172.16.8.192 TCP 77 51204 → 8850 [PSH, ACK] Seq=298 Ack=1 Win=65000 Len=23 [TCP segment of a reassembled PDU] 2022-08-16 00:42:39.729350 172.16.0.6 172.16.8.192 TCP 91 51204 → 8850 [PSH, ACK] Seq=321 Ack=1 Win=65000 Len=37 [TCP segment of a reassembled PDU] 2022-08-16 00:42:39.729351 172.16.0.6 172.16.8.192 TCP 75 51204 → 8850 [PSH, ACK] Seq=358 Ack=1 Win=65000 Len=21 [TCP segment of a reassembled PDU] 2022-08-16 00:42:39.729351 172.16.0.6 172.16.8.192 TCP 60 51204 → 8850 [PSH, ACK] Seq=379 Ack=1 Win=65000 Len=2 2022-08-16 00:42:39.730024 172.16.8.192 172.16.0.6 TCP 60 8850 → 51204 [ACK] Seq=1 Ack=127 Win=64874 Len=0 2022-08-16 00:42:39.730072 172.16.8.192 172.16.0.6 TCP 60 8850 → 51204 [ACK] Seq=1 Ack=194 Win=64807 Len=0 2022-08-16 00:42:39.730138 172.16.8.192 172.16.0.6 TCP 60 8850 → 51204 [ACK] Seq=1 Ack=266 Win=64735 Len=0 2022-08-16 00:42:39.730253 172.16.8.192 172.16.0.6 TCP 60 8850 → 51204 [ACK] Seq=1 Ack=379 Win=64622 Len=0
Question: on port 8850, why Siemens keeps resetting the connection [RST, ACK] from 20.27.09 to 00.23.58? on port 7775, why LIS keeps [FIN,ACK] starting from 21.10.22 onwards?
